White Box Pentest (WBP)

If static application security testing (source code review) is integrated with gray box penetration it is labelled as white box pentesting.

In gray box testing, pentester may have a partial understanding of the application. They login

Offensive Security Certified Professional (OSCP) CREST Practitioner Security Analyst (CPSA) CREST Practitioner Security Analyst (CPSA)

Black box penetration is conducted from outside -- the by a pentester -- with zero