I have some issues regarding the concept of black, grey and white hat.
Where and in what penetration testing methodology I can find the black, grey or white hat concept definition?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
White - A hacker who is hacking for profit with permission in order to test a system (This is called a penetration tester).
Grey - A hacker who works as a penetration tester but also as a illegal hacker.
Black - A hacker hacking illegally for any reason which can include all kinds of motives such as political, profit, revenge and so on...
White - A tester has a deep understanding of the source code and the system and tries to build tailored tests to test the system
Grey - Almost same as white except the tester has less knowledge of the system and mixes black and white testing together.
Black - A tester will test the application as if he has no knowledge of application using all the normal testing techniques without diving into it deeper.
Notice: When speaking about "some_color box penetration testing" it is not common to do a grey box testing.