In a black box penetration test, no information is provided to the tester. In this instance, the pen tester follows an unprivileged attacker’s approach, from initial access and execution to exploitation. This scenario can be seen as the most authentic, demonstrating how an adversary with no inside knowledge would target and compromise an organization.