Network Penetration Testing

Overview

A network test should answer two questions: what is reachable from outside, and what happens once someone is inside. We answer both.

External testing enumerates your internet-facing estate, including the hosts nobody remembers deploying, and tests exposed services for misconfiguration, weak authentication and known-vulnerable software. Internal testing starts from an assumed foothold and pursues privilege escalation, credential exposure and lateral movement to show what an attacker could reach from a single compromised workstation or service account.

Testing is bounded by the agreed rules of engagement. Denial-of-service and destructive techniques are excluded unless explicitly authorised in writing.

Methodology

How the engagement runs from start to finish.

1. Scoping, rules of engagement and written authorisation
2. Host, service and version enumeration
3. Authenticated and unauthenticated vulnerability discovery
4. Manual verification and controlled exploitation
5. Privilege escalation and lateral movement where in scope
6. Segmentation and egress testing
7. Evidence collection, risk validation and CVSS scoring
8. Reporting, debrief and retest