Infrastructure penetration tests

Internal and external penetration tests

Concerning security, we divide infrastructure penetration tests into two main parts:

• Internal - in-house penetration tests simulate an attacker who had gained access to the in-house network. It can be either a hacker or a rogue employee who wants to cause damage, but the risk of such a situation happening is very real and can have a very serious impact.
• External - These tests will provide the client with a detailed overview of what vulnerabilities there are in the part of the infrastructure available on the Internet.

I am interested in penetration tests

What happens during penetration testing?

We can summarize the steps into the following points:

• Pre-engagement Interactions
• Intelligence Gathering
• Threat Modeling
• Vulnerability Analysis
• Exploitation
• Post Exploitation
• Reporting

I am interested in penetration tests

We will reveal all errors

Which elements do we target (different for internal/external tests)?

• Routers
• Switches
• Servers
• Terminals

As part of penetration tests, we investigate the feature availability, the OS installed, active services, their versions, and configuration errors. This way we are able to detect errors that could be abused by real attackers when attacking your company.