no knowledge of the system, tester is operating as if they were an outside attacker
pentester knows nothing about systems under attack  &"blind&"
outsider attack, attacker has no knowledge of the network environment