Pentesting: External Penetration Testing

Your systems exterior is much like your armor – it protects you from attacks and keeps what is inside safe. It ought to be strong and steadfast. Test your system and see if it will defend you against hackers. Prevention is always better than the cure.

This is the traditional “hacking” from a distance. This exercise is similar to, but more sophisticated then an experienced hacker would use to penetrate your network. Whether it is to access your entire network through a VPN and/or potentially bring down your key mission critical network systems. Time can vary depending on the number of targets.

Results are presented in a user friendly report with recommendations on how to address the issues. This may include, but not be limited to:

Internal Penetration Testing

Think of the Great Wall of China, built to keep out the enemy, yet infiltrated by bribing the guard at the gate. The lack of strength in your internal policies can bring your whole defense down, after all a system is as strong as its weakest link. Find yours and fix it.

This testing will determine whether the company is following strict security controls to ensure their data, including credit card information, and payroll details, are safe from unauthorized internal staff. Turbo PC Fix will ensure your data is protected from unauthorized use.

We present the results in a user friendly report with recommendations on how to address the issues. This includes, but is not limited to:

• Server Security Configurations (Microsoft, Solaris, Linux, Mainframe)
• Router Configurations
• Use of Clear Text Protocols
• User Authentication
• Database Security
• Policies, Standards and Guidelines
• Network Security

Web Server Assurance Assessment

Cyber graffiti is just as annoying and time consuming as the real thing. Your website is your ‘shop front’ it ought to be kept clean and safe from defacement and unauthorized access.

Turbo PC Fix will verify your web server presence is of the highest security level to help protect your web server and supporting Infrastructure. The most common forms of attack are defacement of a website and attacks into the internal network.
Some recent examples of web server integrity being compromised include:

• • Vladimir Levin, Head of a Russian hacking gang, hacked into Citibank and stole $10million US from Citibank.
  • The New York Times web site was disconnected as hackers took control of  their website and displayed insults and offensive pictures.
  • Data Processors International, a company responsible for processing credit card transactions for MasterCard, Visa and American Express, have estimated that hackers have gained access to as many as 8 million Credit Card accounts.
  • Department of Justice and Correction Services South Australia website hacked and defaced by a hacking group to prove they could get in, ‘e-tagging’ as it’s known.

Social Engineering

How far would somebody have to go to gain access to your information? Do you leave passwords on post-it notes or sensitive documents lying around? There is no use in having the most powerful and secure door and then hiding the key under the door mat. Test your company’s security polices in a very direct way.

Social engineering is the knowledge and prediction of how a person will think and react. All care is taken to ensure that reputations and privacy are dealt with carefully to minimize any potential embarrassment. This exercise focuses on the positives of the attack and action taken. These can be used to train staff effectively. This method receives excellent results and increases staff morale.