Download Penetration Testing - Procedures & Methodologies

1-22
Chapter 1
• Reversing all file and settings manipulations done during the test
• Reversing all changes in privileges and user settings
• Removing all tools and exploits from the tested systems
• Restoring the network to the pretest stage by removing shares and connections
• Mapping the network state
• Documenting and capturing all logs registered during the test
• Analyzing all results and presenting them to the organization
It is important that the penetration tester document all activities and record all observations
and results so that the test can be repeated and verified for the given security posture of the
organization.
For the organization to quantify the security risk in business terms, it is essential that the tester identify critical systems and critical resources, and map the threats to these.
Chapter Summary
■
Adopting a methodology while performing a penetration test is advisable.
■
The methodology should be open, flexible, and applicable at a broad level.
■
Each test is unique, and attack strategies need to be carefully planned.
■
The basic difference in the approaches of vulnerability testing and penetration testing makes it impractical to rely on checklists and templates alone in the latter context.
■
Passive research is normally carried out during the start of an external penetration test and provides
information on the configuration of the organization’s systems by using public-domain sources.
■
Penetration tests can be announced or unannounced.
■
Gray-box penetration testing examines the scope of access by insiders within the organization’s network.
■
Penetration tests have three phases: pre-attack, attack, and post-attack.
■
Social engineering is the use of influence and persuasion to mislead people for the purpose of
gathering information.