Penetration Testing
The Power to Secure
Your Website Are MORE Vulnerable Than You Think !
Utilizing a penetration testing approach, this service unveils vulnerabilities that could exist in your information system, creating real-world attack scenarios in a controlled and professional fashion. From the information gathering to the exploitation of the findings Core Security selects the attack path as a real attacker would do.
Why Needs Penetration Testing?
- Holistic testing approach, just like a real attacker
- Evaluate existing security control in a proactive way
- Identify, manage & mitigate cybersecurity risk
- Weaknesses you didn’t know where there
Type of Penetration Testing
Web Application Penetration Testing
Examine the overall security and potential risks including Injection, Broken authentication, Cross-site scripting (XSS), Broken access control.
Network Penetration Testing
Exploit the vulnerabilities within the network and network devices including Firewall, Network switch, Wireless access point, IoT devices.
System Penetration Testing
Identify the system vulnerabilities and exploit the it for the system such as Windows server/client, Linux, etc.
Wireless Network Penetration Testing
Identify wireless network’s vulnerabilities and exploit it. Examine the authentication and encryption options used on the WLAN. Perform rogue AP analysis, etc.
Common Type of attack – Man-in-the-Middle (MITM) Attacks
MITM attack is common attack that allow attacker to eavesdrop the communication between two targets (e.g. server-to-client, client-to-server). This attack takes place between two victims and “listen” the conversation, hence the name “man-in-the-middle”.
The scenario simulates the client submitting login credentials to server. Once the attacker eavesdropped the communication, What will be happened?
Login
The attacker get:
Why IBSL?
Our tests are performed by experienced penetration testing specialists who have a wealth of knowledge in diverse IT disciplines including policy, design, implementation and development.
IBSL’s professional specialist holds different certification.
