Let's think about this for a moment
The CIA Triad is the constant frame used whenever security gets discussed — Confidentiality (only authorized users can view the data), Integrity (protecting data from unauthorized modification), and Availability (making sure legitimate users can access the system when they need it). Understanding the attacker's perspective (offensive security/pentesting) is what helps the defender (blue team) understand how to defend better — 'know how the attack works, and you'll know how to build the defense' is the principle we'll follow throughout this whole tutorial.
Let's connect it to a real scenario
Think of a bank vault — Confidentiality means only authorized staff can hold the vault key, Integrity means nobody can change the amount of money inside without authorization, and Availability means customers can withdraw money during bank hours — an attacker is trying to break one of these three (stealing the key, altering the data, or bringing the system down).
Let's look at an example together
CIA Triad
==========
Confidentiality — only authorized people can read the data
Integrity — only authorized people can modify the data
Availability — legitimate users can access it when they need to
An attack usually targets ONE of these three.Be able to explain the CIA Triad with examples.Try it in 5 minutes
For a Facebook account, write one example scenario each for how Confidentiality, Integrity, and Availability could be violated.
A quick word of caution
Only practice every tool/technique in this tutorial on your own lab (Basic lesson 4) or on a system where you have written authorization — scanning/testing a system without permission is a crime in most countries and carries legal liability.