Black–Box Testing:
Penetration test without prior knowledge; simulates a real attacker.
Gray–Box Testing:
Penetration test with partial knowledge.
White–Box Testing:
Penetration test with full access to applications and systems. Simulates a malicious insider who has knowledge of the target systems and may have basic credentials.