Penetration Test Report (TCM_Security): TCMS Demo Corp Security Assessment Findings Report

DEMO CORP
Security Assessment Findings Report
Business Confidential
Date: March 9th, 2021
Project: DC-001
Version 1.0
DEMO CORP
BUSINESS CONFIDENTIAL
Page 1 of 38
Copyright © TCM Security (tcm-sec.com)
Table of Contents
Table of Contents ..................................................................................................................................................... 2
Confidentiality Statement ........................................................................................................................................ 4
Disclaimer ................................................................................................................................................................. 4
Contact Information .................................................................................................................................................. 4
Assessment Overview ............................................................................................................................................... 5
Assessment Components ........................................................................................................................................ 5
Internal Penetration Test ....................................................................................................................... 5
Finding Severity Ratings ........................................................................................................................................... 6
Risk Factors .............................................................................................................................................................. 6
Likelihood ................................................................................................................................................ 6
Impact ...................................................................................................................................................... 6
Scope ......................................................................................................................................................................... 7
Scope Exclusions .................................................................................................................................... 7
Client Allowances .................................................................................................................................... 7
Executive Summary .................................................................................................................................................. 8
Scoping and Time Limitations ................................................................................................................ 8
Testing Summary .................................................................................................................................... 8
Tester Notes and Recommendations .................................................................................................... 9
Key Strengths and Weaknesses .......................................................................................................... 10
Vulnerability Summary & Report Card ................................................................................................................... 11
Internal Penetration Test Findings ...................................................................................................... 11
Technical Findings .................................................................................................................................................. 13
Internal Penetration Test Findings ...................................................................................................... 13
Finding IPT-001: Insufficient LLMNR Configuration (Critical) ....................................................................... 13
Finding IPT-002: Security Misconfiguration – Local Admin Password Reuse (Critical) .............................. 14
Finding IPT-003: Security Misconfiguration – WDigest (Critical) .................................................................. 15
Finding IPT-004: Insufficient Hardening – Token Impersonation (Critical) .................................................. 16
Finding IPT-005: Insufficient Password Complexity (Critical) ....................................................................... 17
Finding IPT-006: Security Misconfiguration – IPv6 (Critical) ........................................................................ 18
Finding IPT-007: Insufficient Hardening – SMB Signing Disabled (Critical) ................................................ 19
Finding IPT-008: Insufficient Patch Management – Software (Critical) ....................................................... 20
Finding IPT-009: Insufficient Patch Management – Operating Systems (Critical) ...................................... 21
Finding IPT-010: Insufficient Patching – MS08-067 - ECLIPSEDWING/NETAPI (Critical) ........................... 22
Finding IPT-011: Insufficient Patching – MS12-020 – Remote Desktop RCE (Critical) ............................. 23
Finding IPT-012: Insufficient Patching – MS17-010 - EternalBlue (Critical) ............................................... 24
Finding IPT-013: Insufficient Patching – CVE-2019-0708 - BlueKeep (Critical) ......................................... 25
Finding IPT-014: Insufficient Privileged Account Management – Kerberoasting (High) ............................. 26
DEMO CORP
BUSINESS CONFIDENTIAL
Page 2 of 38
Copyright © TCM Security (tcm-sec.com)
Finding IPT-015: Security Misconfiguration – GPP Credentials (High) ........................................................ 27
Finding IPT-016: Insufficient Authentication - VNC (High) ............................................................................ 28
Finding IPT-017: Default Credentials on Web Services (High) ..................................................................... 29
Finding IPT-018: Insufficient Hardening – Listable Directories (High) ......................................................... 30
Finding IPT-019: Unauthenticated SMB Share Access (Moderate) ............................................................. 31
Finding IPT-020: Insufficient Patch Management – SMBv1 (Moderate) ..................................................... 32
Finding IPT-021: IPMI Hash Disclosure (Moderate) ...................................................................................... 33
Finding IPT-022: Insufficient SNMP Community String Complexity (Moderate) .......................................... 34
Finding IPT-023: Insufficient Data in Transit Encryption - Telnet (Moderate) .............................................. 35
Finding IPT-024: Insufficient Terminal Services Configuration (Moderate) ................................................. 36
Finding IPT-025: Steps to Domain Admin (Informational) ............................................................................ 37
Additional Scans and Reports .............................................................................................................. 37
DEMO CORP
BUSINESS CONFIDENTIAL
Page 3 of 38
Copyright © TCM Security (tcm-sec.com)
Confidentiality Statement
This document is the exclusive property of Demo Corp and TCM Security (TCMS). This document
contains proprietary and confidential information. Duplication, redistribution, or use, in whole or in
part, in any form, requires consent of both Demo Corp and TCMS.
Demo Corp may share this document with auditors under non-disclosure agreements to demonstrate
penetration test requirement compliance.
Disclaimer
A penetration test is considered a snapshot in time. The findings and recommendations reflect the
information gathered during the assessment and not any changes or modifications made outside of
that period.
Time-limite