Manual vs. Automated Penetration Testing: What You Need to Know
Both methods have their advantages and disadvantages, and choosing the right one depends on several factors.
top of page
Internal Penetration Testing
Testing your perimeter goes without saying...
but good penetration testers understand both the value and the methods behind internal testing. This is testing behind the firewall or in other words authenticated internal network testing. Not only is this a best practice supported by the NIST, ISO 27001, PCI and other frameworks, but it is critical for finding vulnerabilities that a hacker would find once inside your perimeter.
200
DAYS
The average hacker dwells in a network for approximately
200 days. Making hacking difficult and eliminating attack vectors heightens your chance of a hack survival. This pushes the attackers to targets where there is low hanging fruit, and away from you!
Sample Report Excerpt
At-a-Glance Definitions:
-
External Testing – Testing publicly visible or available IP addresses to find and exploit vulnerabilities which may lead to critical access or data breach
-
Internal Testing – Testing behind the firewall or authenticated into target LAN/WAN segments in order to test internal/private IP addresses or assets, with the objective of gaining root access or access to critical data
-
SSID Testing – WiFi testing of one or more locations and all SSID’s to find vulnerabilities of bad passwords, outdated encryption/authentication protocols, with the objective of gaining critical access to servers, data, assets
To learn more about finding a pen tester, check out this article:
Internal and SSID Testing
Webcheck engineers offer options for internal and SSID testing, from shipping and installing specially configured boxes in an easy process, to downloading a VM from a secure location. We will consult with you after engagement to discuss your testing preferences and make the testing process suited to your environment.
bottom of page