# Glosario — Ciberseguridad Ofensiva: Pensar como Atacante

Términos que el curso usa y que el examen puede pedir.

| Término | Definición en una línea |
|---|---|
| **Alcance (scope)** | Contractual definition of what can and cannot be tested. No scope, no test. |
| **OSINT** | Open Source INTelligence: public information without touching the target. |
| **Footprinting pasivo** | Recon that does not send packets to the target's infrastructure. |
| **Google dork** | Advanced search operators that expose indexed information. |
| **Falso amigo de seguridad** | An open service that looks legitimate but expands the attack surface. |
| **OWASP Top 10** | Community consensus on the 10 most critical web application risks. |
| **Inyección SQL** | Untrusted input becomes executable code against the DB. |
| **Broken Access Control** | The server trusts client-side restrictions; users reach what isn't theirs. |
| **XSS** | Injection of scripts executed in the victim's browser. |
| **SSRF** | The server is tricked into making requests on the attacker's behalf. |
| **CVSS** | Common Vulnerability Scoring System: severity from 0 to 10. |
| **Regla de compromiso** | Rules of engagement: windows, intensity, contacts, stop conditions. |
| **Escalada de privilegios** | Moving from initial access to higher permissions. |
| **Pivot** | Using a compromised machine as a bridge to reach others. |
| **Exfiltración** | Illegitimate extraction of data from the target. |
| **Informe ético** | Finding + severity + reproduction + remediation. The deliverable of the course. |

> Regla de estudio: si no sabes explicarlo en una frase a alguien de fuera, aún no lo sabes.