Internal Network

An Internal Network Penetration Test is executed from the following perspectives: an attacker has gained access to your local network or an employee with restricted access permissions.

When performing an Internal Network Penetration Test, our consultants will attempt to escalate privileges to Domain Administrator level and gain access to all systems and devices as agreed to prior to testing.

An internal network penetration test assesses the current state of internal IT systems, and/or other network connected devices. This form of pentest simulates an attack from the client’s own network. An internal penetration test will illustrate the threats that organizations are exposed to, from a malicious insider’s perspective or from an external attacker who bypassed perimeter security. The main objective is to gain unauthorized access to the network and potentially access confidential information on internal systems.

Key processes of internal penetration testing

• Enumeration and mapping
  Begin with port scanning and vulnerability scanning to map the internal network and to identify potentially vulnerable assets. The consultant will target assets which have weaker security controls, vulnerabilities, or are improperly configured.
• Vulnerability Exploitation
  The consultant will try and exploit the identified vulnerabilities. This could allow the consultant access to asset(s). Depending on the level of access, the consultant will try and gain further access via;
• Privilege Escalation
  The consultant will try to gain maximum level of access on the compromised asset(s).
• Lateral Movement
  The consultant will try and compromise other assets on the network and spread through the network via the initial compromised asset. Therefore, increasing the likelihood of becoming domain administrator.
• Completely compromised network infrastructure
  The ultimate goal for the consultant, giving them access to as much business-critical information as possible.