Network and Infrastructure
OVERVIEW
Network, Infrastructure & Wireless Penetration Testing
As attacks on secure networks have repeatedly shown, sophisticated hackers are likely to find existing weaknesses, after spending time and dedicated efforts. It is hence of the utmost importance that every organization takes proactive steps to identify vulnerabilities before hackers can exploit them. Network penetration testing employs ethical hacking and controlled-exploit tests to uncover flaws in your network and safeguard it against security attacks.
A network penetration test provides a big picture of your organization’s security effectiveness. The test applies to organizations of all sizes and age. While new organizations may not have established network security, mature organizations likely have large, multi-tiered networks with several overlooked elements, especially in the cloud environment. Both types of organizations, hence, are equally at risk of dangerous security attacks.
Network and Infrastructure penetration testing offer you insights to make informed decisions about the organization’s security. With increased security, your business is likely to gain the confidence of your clients, partners, and investors as they can now trust your organization with their digital assets.
Wireless networks are widespread in organizations, but they also represent potential entry points for cybercriminals. Given that they can be seen and attacked by anyone close to the premises, it is essential to assess the security of your Wireless infrastructure to detect and eliminate any loop holes before they are exploited by attackers.
What we offer
External Network Assessment
This assessment relates to your perimeter network which is likely attacked every day and whose smallest vulnerability may give way to a dangerous situation. External network penetration testing involves identifying risks related to infrastructure devices and servers accessible from the internet via regular traffic. This assessment tests the security of the routers, firewalls, Intrusion Detection Systems (IDS), web servers and other security appliances that route the traffic from the internet.
Internal Network Assessment
This assessment relates to your internal network. Intellisec Solutions’s security engineers approach the local area network as an attacker on the inside. We try to gain access to privileged company information and other sensitive digital assets. This effort entails using a variety of tools to expose user credentials and assess the damage that attackers could cause to both virtual and physical machines in the network environment. With a thoroughly secure internal network, you can rest assured that both internal and external threat actors (who would have breached the external perimeter) will not cause damage to your assets.
Also, to facilitate access to your internal networks by our testers, we suggest three methods:
- Local tests by moving to your facilities
- Remote access by VPN
- Remote access through a customized Virtual Machine we provide that you deploy on your internal networks. It provides us with remote access through an encrypted tunnel without you having to configure anything.
A unique aspect of Intellisec Solutions’s network security assessment is the combination of manual and automated application penetration testing. Several subtle security flaws are often not picked up by automated vulnerability scanners. It takes an experienced tester to understand the application context and explore how logic could be abused. Intellisec Solutions employs this approach to ensure that we deliver assessments that are more relevant to your user-base and individual security needs.
Wireless Penetration Testing
Intellisec Solutions’s security assessments can help you identify vulnerabilities and threats to your Wireless infrastructure, understand the damage they could cause, and how to remediate them. By using the same techniques as attackers, we highlight the strengths and weaknesses of your environments, so that you can lower your security risk and exposure.
Our Methodology
Our network and infrastructure testing methodology is well thought of and follows the following process.
1. Scoping
This phase involves establishing a comfortable connection with your organization and building an outline of the project at hand.
2. Information Gathering
At the onset, Intellisec Solutions collects all publicly available information on your corporation with the help of numerous OSINT (Open Source Intelligence) tools and techniques. This data is used to assess the current state of affairs and acts as a foundation for accurate risk assessment at later stages of our engagement. Intelligence on the following assets is typically gathering: External IP addresses,domains, data leaks, misconfigurations, Internet of things (IoT) systems.
3. Enumeration and Vulnerability Scanning
Enumeration and Vulnerability Scanning is an advanced and active information gathering phase, in which we leverage an array of automated tools and scripts to examine all possible attack vectors. This phase acts as the foundation on which the planning for the subsequent phases rests. Intelligence useful for the following steps is typically gathering: subdomains, directories, open ports, cloud services misconfigurations, known vulnerabilities.
4. Attack and Penetration
In this phase, the focus is on exploiting the discovered network vulnerabilities. Intellisec Solutions engineers work towards proving the existence of attack vectors while preserving the integrity of the network.
5. Reporting and Documentation
Reporting and documentation are critical aspects of any penetration testing because only well-organized testing can help the management in making data-driven decisions. In this regard, each report is customized to the specific scope of the assessment and risk as per your organization. Reports are comprehensive, with due technical details, but intuitive to read. Remediation strategy for each vulnerability is provided as well. Some of the elements of the reports are:
- An executive summary for the strategic direction:
- The Pentesting scope: to specify the target of the pentesting, including the scope (IP addresses and hosts), in a very detailed way. In general, it also contains what assets are meant to be tested and what is out of bounds.
- A background : that explains the purpose of the penetration testing and an explanation of some technical terms for the executives, if needed.After reading the background, the upper management, will have a clear understanding of the goal and the expected results of the penetration test.
- An overall position: to evaluate the effectiveness of the test by highlighting some security issues.
- Risk score: It is a general overview of risk ranking based on a predefined scoring system. Usually, we use the high/low scoring metrics or a numerical scale.
- Limitation: to highlight the limitations and the challenges faced during the pentest. limited scope of penetration testing with temporal-space boundaries make it a hard mission, especially when you are working in a production environment.
- Recommendation summary: The required steps and methods to remediate the security issues discussed in the previous sections.
- A Strategic roadmap: It indicates a detailed short to long-term roadmap to enhance the security posture of the organization.
- A walkthrough of technical risks
- Multiple options for vulnerability remediation
- The potential impact of each vulnerability
6.Remediation Testing
As an extra value-add, Intellisec Solutions offers remediation testing services. In this service, we revisit an assessment of your organization after exposed vulnerabilities have been patched. We retrace our previous test to ensure there are no gaps found in the re-test and remedies have been implemented. Any new vulnerabilities associated with the updates, such as misconfigurations in the network or flaws in a new software implementation, are identified too. We also update our initial report to reflect the improved state of the system.
Our Methodology For Wireless Penetration Testing
Intellisec Solutions’s security team leverages a wireless assessment methodology based on industry standards such as the Open Source Security Testing Methodology Manual (OSSTMM) and the Penetration Testing Execution Standard (PTES). It enables us to identify a broad range of weaknesses using methods such as:
- War driving, to detect rogue Access Points
- Tests of network segregation, for instance to detect if users of a guest WiFi network can access the corporate network
- Bypassing WLAN authentication, using techniques like MAC spoofing or Shared key guessing
- Cracking WLAN encryption, to see if Wireless traffic can be decrypted
- Testing for default and weak administrative credentials
- Review of Wireless protocols in use, to detect weak protocols
- Testing for advanced enterprise attacks (against 802.1x, EAP, LEAP, PEAP, EAP-TTLS…)
- Attacks against the WLAN infrastructure (Rogue devices, Evil Twin Aps, Man-in-The-Middle…)
- Testing for targeted attacks against Wireless integrity, confidentiality, availability and authentication
As a Wireless penetration test can cover different types of threats and attacks, we start all assessments with a scoping phase. Its goal is to establish with your team the testing required, the scope, goals and timeline.
Once the engagement is started, we first focus on reconnaissance to gather information on your organization’s environment. This allows us to create a testing plan composed of techniques and attacks to test for next.
Vulnerability discovery and exploitation are phases where we combine manual and automated testing to identify and exploit Wireless vulnerabilities such as those mentioned above.
A report is then drafted with details on all technical findings, risks, and prioritized remedial actions.
Testimonials
Previous
Next
We work with wide organizations across a range of industries.
Finance
Legal
Retail
Transport
Healthcare