having no information about the system or environment when performing a penetration test
testers have no knowledge of environment, just like an attacker
attacker has no knowledge of the network environment (external attack)