pentester knows nothing about systems under attack  &"blind&"
no knowledge of the system, tester is operating as if they were an outside attacker
attacker has no knowledge of the network environment (external attack)