INTERNAL PENETRATION TESTING

Approach

Our Internal Penetration Tests are conducted from the perspective of an internal, malicious insider. We methodically follow the following steps:

Scoping: Our testing experts will engage in discovery activities, such as identifying internal penetration test security needs and requirements, existing SLAs, risks potential vulnerability exposures and defining the scope. Other aspects succh complexity, tailoring possibilities and threat intelligence focus will also analyzed.

Reconnaissance: We will conduct reconnaissance & Footprinting to gather intelligence about your internal network environment and identify all external network assets belonging to your company. This will be followed up by scanning & enumeration to discover services and applications and map externally visible services to their associated vulnerabilities.

Exploitation: During this phase we will perform the actual attacks and compromise internal network targets such as internal web apps, email and file server services, and intranet websites or portals. We will also conduct a access & exfiltration test to extract sensitive data belonging to your company, such as personal information, source code, internal methods/procedures, credit card numbers, etc., and thus demonstrate the impact of an actual attack.

Remediation Verification: Our testers will perform a follow-up assessment to ensure that the exploitation phase’s remediation and mitigation steps have been accurately implemented. This also enables the testers to confirm that the customer’s security posture is aligned with industry best practices.br>

Delivery: Cleanup, document analysis, report creation and report presentation to stakeholders to easily benchmark security level of each process based on the results of penetration tests and implementation of countermeasures if requested by the customer.