Pen Test Attack Plan

The target organization from your Passive Footprinting Report in Week 1 has hired your company to
conduct a penetration (pen) test. You will present your client an explanation of how you will prepare and
execute the attack as part of the pen test.
Explain the techniques and tools you will use to do all of the following:
• Identify services the network provides
• Identify operating systems
• Identify initial targets
• Complete a vulnerability assessment
• Gain access to the network
• Escalate privileges
• Cover tracks

Pen Test Attack Plan

Identifying Services, Operating Systems and Target

The penetration test involves executing a simulation of a cyberattack that is carried out on a network to find security flaws.

Testing for penetration is typically utilized as a complement to an application firewall to guarantee the security of web-based applications. Exploiting various types of infrastructure used by applications (such as APIs, front and back-end servers) is a crucial aspect of penetration testing. It examines security vulnerabilities for example, insecure user input, which could result in an attack using code injection.

Before initiating an attack I’d look for the weakest target and then learn the best way to exploit it. The first victim of an organization could be anyone from the highest management to office employees. If you’ve identified a potential person to target then you must find an entry point which I could gain access. The most common methods are the use of online tools accessible to the public to look through Netflix’s network for possible entry points. Once the vulnerabilities are identified in the target network the next step of the attack is to get access to the system and later escalate. In order for these attacks to be successful it is nearly always needed to ensure that hackers are granted access to the entire system. With access to networks, I can penetrate all the secure regions of your company’s most valuable information.