having no information about the system or environment when performing a penetration test
pentester knows nothing about systems under attack  &"blind&"
attacker has no knowledge of the network environment (external attack)