Managed Security Services
External Penetration Tests
Find the weaknesses in your perimeter before an attacker does.
What is an external penetration test?
An external “black-box” penetration test mimics the actions of a real threat actor by attempting to exploit weaknesses in network security in a controlled scenario. It examines external IT systems for weaknesses or vulnerabilities that could be used to disrupt the confidentiality, availability or integrity of the network, so your organisation can address each one. Almost every external resource will be under attack – typically exposed services include email, web, VPN, cloud authentication and cloud storage.
The objective is to harden the perimeter of your environment (firewall, VPN, website and so on) as well as any external services exposed to the internet, such as cloud infrastructure and DMZ services like email. This type of test is typically accompanied by an internal security configuration audit of the network security devices protecting your perimeter.
Our approach
For black-box penetration testing, MIST starts with methodologies based on the Penetration Testing Execution Standard (PTES), summarised in the following steps.
1. Intelligence gathering
MIST gathers as much information about the targets as possible, including identifying the devices, services and applications in use and discovering valid potential user accounts.
2. Vulnerability analysis
Once all systems and applications are identified, MIST analyses misconfigurations, design flaws and other weaknesses found.
3. Exploitation
MIST attempts to manually exploit weaknesses or vulnerabilities identified in in-scope servers or web applications, with the objective of breaching them from a black-box perspective (no credentials or knowledge of the systems).
4. Post-exploitation
After gaining access to a compromised device or application, we attempt to establish full control, determine its usefulness for further attacks and, optionally, move laterally further into the network.
5. Reporting
We describe all discovered attack vectors along with their severity (based on complexity, probability, user interaction and so on) and possible remediation steps.
All testing by MIST is performed by a human using a blend of automated and manual procedures. We don’t simply “scan and patch”.
Reporting and deliverables
Penetration testing reports
Following any testing, a full detailed report is made available. It outlines the testing methods used, the findings, any proof-of-concept code for successful exploits, and remediation steps and suggestions.
Exploit proof-of-concept development
In the event of a successful exploit, breach or compromise, MIST documents the testing methodology used, records all gathered evidence, and develops proof-of-concept exploits for repeatable testing.
Targeted remediation retest
Testing may reveal areas of weakness that require reconfiguration, patching or replacement. MIST will retest these areas once remediation is complete. Retesting scope, timing and pricing are agreed as part of the engagement.
MIST offers penetration testing as a service for PCI DSS, HIPAA and SOC 2 audits. Choosing the right penetration testing partner gives your organisation continuity, lower costs and an expert partner familiar with your environment and applications.
Let’s talk
Ready to take the pressure off your IT?
Our Australian-based team is ready to help. Call 0488 687 777 or email sales@mist-integration.com.au and we’ll get back to you as quickly as possible.