Collect public information (OSINT) on a target organization from various sources, taking into account all users of the organization's IS in order to detect human vulnerabilities in the IS
Scanning information systems with vulnerability detection tools (NMAP, NESSUS or KALI) to detect technical vulnerabilities in the IS
Perform intrusion tests by applying the most efficient methods on the different vulnerabilities detected in order to evaluate the risks incurred by the organization and to propose remediation options
Conduct social engineering intrusion tests to assess the organization's human vulnerabilities and provide appropriate and inclusive recommendations.
Document the causes of vulnerability and damage by producing an accessible intrusion report to inform business departments of the threats and risks faced by the organization.
Propose prioritized and adapted remediations to close IS security gaps in order to perpetuate the organization's security system
Evaluation : Professional situation "Intrusion test"
Assessment topic: Production of a report on a complete penetration test on a real or semi-real infrastructure (technological laboratory) with the aim of detecting flaws and proposing remedies, including a remote or face-to-face presentation to an assessor (business and technical expert). The assessor will ask questions to the candidate in order to verify his/her level of mastery of an intrusion test and the associated remediations.
Deliverable: An intrusion report including documentation of the infrastructure vulnerabilities and a suggested remediation for each vulnerability.