The infrastructure pentest, in six parts:
1 - Intelligence Gathering
2 - Vulnerability Analysis
3 - Exploitation
4 - Post Exploitation
5 - Reporting
6 - Configuration Review
0/n
1. Intelligence Gathering:
Technical steps to perform during the information gathering phase of an organization and figuring out the attack-surface area.
Full breakdown: bitvijays.github.io/LFF-IPS-P1-IntelligenceGathering.html
2. Vulnerability Analysis:
Exploring different services running on different ports of a machine by utilizing metasploit-fu, nmap or other tools.
Full breakdown: bitvijays.github.io/LFF-IPS-P2-VulnerabilityAnalysis.html
3. Exploitation:
Enumeration methods that can be used after compromising a domain user credentials and Remote code execution methods after compromising administrative credentials.
Full breakdown: bitvijays.github.io/LFF-IPS-P3-Exploitation.html
4. Post Exploitation:
Different methods to gather credentials after getting an administrative remote shell. Also, performing post-exploitation to leave high-impact to C-Level executives is also covered in this section.
Full breakdown: bitvijays.github.io/LFF-IPS-P4-PostExploitation.html
5. Reporting:
Open-source ways to automate report writing after a successful Pentest.
Full breakdown: bitvijays.github.io/LFF-IPS-P5-Reporting.html
6. Configuration Review:
Methods to perform configuration review for the switches, routers, firewall and endpoint devices.
Full breakdown: bitvijays.github.io/LFF-IPS-P6-ConfigurationReview.html
Thanks Vijay Kumar!
Like, retweet and follow me @cristivlad25 for more.
#pentesting #infosec #cybersecurity