Internal Security Testing

By -
Security testing with hackers view is very important to understand the security challenges. External PT/Security is important, but internal security testing is also important to check if the network gets compromised, then what can be maximum impact in system.

Lets go straight to internal security testing checklist

  1. Gather Information and Footprinting exercise
  2. Do network assessments
  3. Scan for ports and services
  4. Find out dangerous services running
  5. Perform credential VA to find critical challenges
  6. Scan for malwares and trojans using specific plugin ids
  7. Identify password related challenges in VA
  8. Specially search scan results to find root credentials, admin credentials, blank passwords, passwords never expire, default passwords
  9. Find out where audit trails not enabled
  10. Specially target DB servers for password violations
  11. Try password cracking using any dictionary  or hybrid attacks and if allowed go for brute force attacks
  12. Do firewall analysis to check for ports allowed
  13.  Check for access to application server and see if you can get access to code level analysis
  14. If access granted to application code, try to drop code for vulnerable jqueries or css
  15. Try to trace web servers and check for certificate errors
  16. Map exploits through google hack database or exploit database to find out available exploits for vulnerabilities
  17. Create a map of vulnerabilities and exploits and how it will be exploited along with missing controls


Above points can help you identify maximum security loop holes in system and give complete insight of security challenges in business.

Keep coming back for more vulnerability insights.

Comments

Post a Comment

Popular posts from this blog

Payment Gateway Security Testing Checklist

By -
Below given are some of the possible testing scenarios, which may prove to be useful in performing payment gateway testing. Whether all the types of payment options available through the payment gateway are selectable or not.  Whether each payment option is showing its specification and requirements after being selected by the user.What happens, after the failure of the payment process or if the session ends.  To check, if the payment gateway is allowing to enter data in the blank fields of the card number, card name, expiry date and CVV number.  To examine, how the payment gateway system behaves or responds, after leaving one or more fields, blank such as leaving CVV number field, blank, etc.  Whether the user is being redirected to the application page, after the successful completion of the payment process.  Applying language change, during the payment process. Checking successful integration of
Read more

Network Security VAPT Checklist

By -
Network Security VAPT Checklist Lets talk about the scope first. If you are given a 500 machines to perform VAPT, then here is your scope. Single machine can have 65535 ports open. Any single port can deploy any service software from the world. For example FTP can be run on smartftp, pureftpd etc. Any single FTP software version (for example pureftpd 1.3.3a) can have number of vulnerabilities available. So if you multiply all of these, then it is impossible for any auditor to go ahead and probe all ports manually and find services manually. Even if he/she is able to do it, it is impossible to check all vulnerabilities that are pertaining to a single port of a single machine. Hence we have to rely on scanners such as nexpose, nessus, openvas, coreimpact etc. Here are some quick tools and test cases that one can perform on commonly found ports in the network pentest. Ø   Identify live hosts ·          Ping ·          Hping ·          Nmap Ø   Identify OS type ·
Read more

How to dump Database using Sqlmap

By -
Image
Database Dump using SQLMap Find out the parameter of application that is vulnerable to SQL injection . Vulnerable Parameter  : “User ID” Enter ‘ and then click on Submit button. will get the SQL Error. Now Intercept the Request in burp. Copy the incepted request and save it in sqlmap installed directory. Open CMD and go to the directory where SQL map is installed (C:/sqlmap) and type sqlmap.py –r sqlinjection (filename) –-dbs and then enter. (dbs is used for dump database name). Then type Y and enter. Type N and enter, it display all the database . Now we have to find out the table in database. Type sqlmap.py –r sqlinjection –D dvwa(database name) –tables.     In the above snap we got the table name in dvwa database. Then we have find out the column name. type sqlmap.py –r sqlinjection –d dvwa –T users –column. Now we are going to dump the userid and password from column. Type sqlmap.py –r sqlinje
Read more