Practical Penetration Test Training 10

1
ABOUT US

• SECURIUM FOX offers cyber security consultancy
  services with its expert and experienced team. We
  are providing consulting services to prevent
  cyber attacks, data leak and to ensure that our
  customers are ready and safe against cyber
  attacks, with more than 15 years of
  experience.In addition to pentests and
  consulting services, SECURIUM FOX prepares its
  customers and field enthusiasts for real life
  scenarios by providing trainings in the lab
  environment which was prepared by themselves,
  with its young, dynamic and constantly following
  team.Everytime that hackers are in our lives,
  there are always risks that we can face with a
  cyber attack. Over the years cyber security has
  become a critical precaution for all
  organizations and companies after the effects and
  number of attacks. SECURIUM FOX tests the weak
  points of customers for possible attacks and
  provides consulting services to eliminate these
  weak points.SECURIUM FOX team also offers
  support for the development of our country in
  this field by supporting free events being
  organized as a volunteer by the Octosec team.

2

• PENETRATION TESTING AND TRAINING

3
Penetration Testing

• Penetration Testing is the process of
  intentionally hacking and attacking your own
  network, web applications and organization, for
  the purpose of checking how secure your assets
  really are.Attackers have no regard to your
  organization's internal policies, the
  trustworthiness of your employees, or the
  expertise of your technical staff. Only one fact
  matters to them are you vulnerable?
• It is in an organization's best interest,
  economically, and for the sake of reputation, to
  answer that question before the attackers do

4
We perform two models of penetration tests

• Black Box Penetration Testing
• A Black Box Penetration Test is a real hacking
  attack simulation, where Cyberkov security
  experts carry out their attacks like actual
  hackers do, without any prior or internal
  knowledge of the target.
• Through these attacks, the Cyberkov experts try
  to identify and exploit any weakness in any layer
  (web applications, operating systems, network
  devices, e-mail..etc), and attempt to pivot
  further into the target organization.
• Cyberkov penetration tests are skill-based and
  depth-focused, with no reliance on automated
  tools and checklists. Contact Cyberkov and see
  your organization through the eyes of hackers.

5
White Box Penetration Testing

• A White Box Penetration Test is a cooperative
  security test performed with prior knowledge of
  the infrastructure, its underlying logic, and
  access to some credentials. The technical staff
  of the organization provide the Cyberkov security
  experts with the insight knowledge they need to
  thoroughly test every element of the target
  network guaranteeing no systems, functionality
  or subnets are left untouched.
• The more context our experts are provided the
  more complete its final result will be.
• Allow our trusted security experts to take a look
  at your organization from the inside and tell you
  how secure it is at its core.

6
External Penetration Testing

• An External Penetration Test is performed
  strictly remotely, with no internal access
  provided to the Cyberkov security experts. The
  goal of this test is to simulate the majority of
  attacks coming from the internet.
• The focus of this test is primarily the
  internet-facing assets of the organization, for
  example Web applications, web servers, network
  endpoints, VPN, e-mail servers. This test also
  helps an organization learn what information
  (public or private) can be gained about it from
  the outside.

7
Internal Penetration Testing

• An Internal Penetration Test is performed from
  within the premises of the target organization,
  usually to simulate threats from guests entering
  its physical boundaries (including wireless
  range), an employee with a malicious intent, or
  simply to discover the extent of damage an
  external hacker can do once he gains access to
  one of the internal machines.
• An Internal Penetration Test focuses on
  workstations, internal applications, access
  controls, domains, and internal documents. This
  test is useful to determine what sensitive
  information might be stolen from the inside.

8
Penetration Test Steps

• - Reconnaissance Collection of information about
  staff, systems, applications and others.
• - Mapping Mapping of information gained through
  reconnaissance into a full picture, as well as
  development of attack scenarios.
• - Discovery Discovering security vulnerabilities
  and weakness in any layer included in the test
  scope.
• - Exploitation Verification of weaknesses by
  exploiting them to gain access and determine the
  full extent of possible damage, as well as
  pivoting further inside.

9
Deliverables

• Upon completion of the security test, a detailed
  report is sent to the client, including the
  following
• - Executive Summary Summary of the purpose of
  this test, as well as as brief explanation of the
  threats facing the organization from a business
  perspective.
• - Findings A detailed, technical explanation of
  the findings of the tests, with steps and proofs
  of the findings.
• - Conclusion Recommendations This section
  provides final recommendations and summary of the
  issues found in the security test.

10
You can always contact with SECURIUM FOX. You can
contact us through our email addresses or by
using the contact form on the side.

• INFO
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,
• Gurunanak Nagar,Patamata,Vijyawada,
• Andhra Pradesh -520010
• 9652038194
• 08666678997
• info_at_securiumfoxtechnologies.com

11

• info_at_securiumfoxtechnologies.com
• Andhra Pradesh Office
• 91 8666678997,91 91652038194
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,Gurunanak Nagar,Patamata,Vijaya
  wada,
• info_at_securiumfoxtechnologies.com
• UK Office
• 44 2030263164
• Velevate, Kemp House, 152 - 160,City Road,EC1V
  2NX
• London
• info_at_securiumfoxtechnologies.com
• Tamil Nadu Office
• 91 9566884661
• Kailash Nagar, Nagar, Tiruchirappalli, Tamil Nadu
  620019
• info_at_securiumfoxtechnologies.com

• Noida Office
• 91 (120) 4291672, 91 9319918771
• A-25, Block A,
• Second Floor,Sector - 3,
• Noida, India
• info_at_securiumfoxtechnologies.com
• USA Office
• 1 [phone]
• 33 West,17th Street,
• New York,
• NY-10011, USA
• info_at_securiumfoxtechnologies.com
• Dubai Office
• 971 545391952
• Al Ansari Exchange, Ansar Gallery - Karama
  Branch, Hamsah-A Building - 3 A St - Dubai -
  United Arab Emirates