Penetration Test Report (Red Siege): RedSiege SampleReport

Sample Penetration Test
FINAL REPORT
Nakatomi Trading Corp
July 15, 1988
Project: 313371337
Document Version: 1.0
Table of Contents
Executive Summary .................................................................................................................................................................... 4
External Findings Summary ..................................................................................................................................................... 6
Internal Findings Summary ..................................................................................................................................................... 6
Web Application Findings Summary ................................................................................................................................... 6
Assumed Breach Findings Summary ................................................................................................................................... 7
Social Engineering Findings Summary ................................................................................................................................ 7
Findings Classifications ............................................................................................................................................................. 8
External Penetration Test Findings ....................................................................................................................................... 9
Critical Risk Findings ............................................................................................................................................................. 9
Finding-01 Weak Password Policy ...................................................................................................................... 9
High Risk Findings ................................................................................................................................................................ 11
Medium Risk Findings ......................................................................................................................................................... 11
Finding-02 Low Risk Findings Directory Indexing ........................................................................................... 11
Internal Penetration Test Findings ...................................................................................................................................... 13
Critical Risk Findings ........................................................................................................................................................... 13
High Risk Findings ............................................................................................................................................................... 13
Finding-03 LLMNR and NBNS Poisoning .........................................................................................................13
Medium Risk Findings ........................................................................................................................................................ 17
Finding-04 SMB Null Sessions Enabled ............................................................................................................. 17
Low Risk Findings ................................................................................................................................................................. 18
Web Application Findings ..................................................................................................................................................... 19
Critical Risk Findings ........................................................................................................................................................... 19
Finding-05 Unpatched Software ........................................................................................................................19
High Risk Findings ............................................................................................................................................................... 21
Finding-06 Cross-Site Scripting ..........................................................................................................................21
Medium Risk Findings ....................................................................................................................................................... 23
Finding-07 HSTS Not Enabled ........................................................................................................................... 23
Low Risk Findings ................................................................................................................................................................ 24
Assumed Breach Findings .....................................................................................................................................................25
Critical Risk Findings .......................................................................................................................................................... 25
High Risk Findings .............................................................................................................................................................. 25
Finding-08 Excessive Administrator Permissions ........................................................................................... 25
Medium Risk Findings ....................................................................................................................................................... 27
Page 2
Low Risk Findings ................................................................................................................................................................ 27
Informational Findings ...................................................................................................................................................... 27
Finding-09 PowerShell Version 2 Available ..................................................................................................... 27
Social Engineering Findings ..................................................................................................................................................29
Critical Risk Findings .......................................................................................................................................................... 29
Finding-10 Successful Pretext Call .................................................................................................................... 29
High Risk Findings .............................................................................................................................................................. 29
Medium Risk Findings ....................................................................................................................................................... 29
Low Risk Findings ................................................................................................................................................................ 29
External Penetration Test Methodology ...........................................................................................................................30
Internal Penetration Test Methodology ............................................................................................................................33
Web Application Penetration Test Methodology .......................................................................................................... 37
Assumed Breach Test Methodology ................................................................................................................................. 44
Soc