Practical Penetration Test Training 1

1
ABOUT US

• SECURIUM FOX offers cyber security consultancy
  services with its expert and experienced team. We
  are providing consulting services to prevent
  cyber attacks, data leak and to ensure that our
  customers are ready and safe against cyber
  attacks, with more than 15 years of
  experience.In addition to pentests and
  consulting services, SECURIUM FOX prepares its
  customers and field enthusiasts for real life
  scenarios by providing trainings in the lab
  environment which was prepared by themselves,
  with its young, dynamic and constantly following
  team.Everytime that hackers are in our lives,
  there are always risks that we can face with a
  cyber attack. Over the years cyber security has
  become a critical precaution for all
  organizations and companies after the effects and
  number of attacks. SECURIUM FOX tests the weak
  points of customers for possible attacks and
  provides consulting services to eliminate these
  weak points.SECURIUM FOX team also offers
  support for the development of our country in
  this field by supporting free events being
  organized as a volunteer by the Octosec team.

2

• PENETRATION TESTING AND TRAINING

3
PENETRATION TESTING

• WHAT IS PENETRATION TESTING
• A penetration test, also known as a pen test, is
  a simulated cyberattack against your computer
  system to check for exploitable vulnerabilities.
  In the context of web application security,
  penetration testing is commonly used to augment a
  web application firewall (WAF).
• Pen testing can involve the attempted breaching
  of any number of application systems, (e.g.,
  application protocol interfaces (APIs),
  frontend/backend servers) to uncover
  vulnerabilities, such as unsanitized inputs that
  are susceptible to code injection attacks.
• Insights provided by the penetration test can be
  used to fine-tune your WAF security policies and
  patch detected vulnerabilities.

4
PENETRATION TESTING STAGES

• The pen testing process can be broken down into
  five stages.

• 1. Planning and reconnaissance
• The first stage involves
• Defining the scope and goals of a test, including
  the systems to be addressed and the testing
  methods to be used.
• Gathering intelligence (e.g., network and domain
  names, mail server) to better understand how a
  target works and its potential vulnerabilities.

5
2. Scanning

• The next step is to understand how the target
  application will respond to various intrusion
  attempts. This is typically done using
• Static analysis Inspecting an applications
  code to estimate the way it behaves while
  running. These tools can scan the entirety of the
  code in a single pass.
• Dynamic analysis Inspecting an applications
  code in a running state. This is a more practical
  way of scanning, as it provides a real-time view
  into an applications performance.

6
4.Maintaining access

• The goal of this stage is to see if the
  vulnerability can be used to achieve a persistent
  presence in the exploited system long enough for
  a bad actor to gain in-depth access. The idea is
  to imitate advanced persistent threats, which
  often remain in a system for months in order to
  steal an organizations most sensitive data.

7
3.Gaining access

• This stage uses web application attacks, such as
  cross-site scripting, SQL injection and
  backdoors, to uncover a targets vulnerabilities.
  Testers then try and exploit these
  vulnerabilities, typically by escalating
  privileges, stealing data, intercepting traffic,
  etc., to understand the damage they can cause.

8
5.Analysis

• The results of the penetration test are then
  compiled into a report detailing
• Specific vulnerabilities that were exploited
• Sensitive data that was accessed
• The amount of time the pen tester was able to
  remain in the system undetected
• This information is analyzed by security
  personnel to help configure an enterprises WAF
  settings and other application security solutions
  to patch vulnerabilities and protect against
  future attacks.

9
You can always contact with SECURIUM FOX. You can
contact us through our email addresses or by
using the contact form on the side.

• INFO
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,
• Gurunanak Nagar,Patamata,Vijyawada,
• Andhra Pradesh -520010
• 9652038194
• 08666678997
• info_at_securiumfoxtechnologies.com

10

• info_at_securiumfoxtechnologies.com
• Andhra Pradesh Office
• 91 8666678997,91 91652038194
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,Gurunanak Nagar,Patamata,Vijaya
  wada,
• info_at_securiumfoxtechnologies.com
• UK Office
• 44 2030263164
• Velevate, Kemp House, 152 - 160,City Road,EC1V
  2NX
• London
• info_at_securiumfoxtechnologies.com
• Tamil Nadu Office
• 91 9566884661
• Kailash Nagar, Nagar, Tiruchirappalli, Tamil Nadu
  620019
• info_at_securiumfoxtechnologies.com

• Noida Office
• 91 (120) 4291672, 91 9319918771
• A-25, Block A,
• Second Floor,Sector - 3,
• Noida, India
• info_at_securiumfoxtechnologies.com
• USA Office
• 1 [phone]
• 33 West,17th Street,
• New York,
• NY-10011, USA
• info_at_securiumfoxtechnologies.com
• Dubai Office
• 971 545391952
• Al Ansari Exchange, Ansar Gallery - Karama
  Branch, Hamsah-A Building - 3 A St - Dubai -
  United Arab Emirates