Penetration Testing
Internal Network Penetration Test
We test whether an attacker with internal network access could reach domain administrator rights and critical servers. We present the vulnerabilities and configuration errors enabling this, ranked by importance.
What it is
An internal network penetration test measures what an attacker with access to the corporate network could do. This access may come from a compromised computer or a network point in a meeting room. Servers, Active Directory, and network services are examined for vulnerabilities and misconfigurations. Findings are combined to show actual paths to critical systems.
Scope
- Vulnerabilities and missing patches on servers, clients, and network devices
- Active Directory configuration, permission, and delegation errors
- Credential exposure risks via network protocols
- Passwords exposed in file shares and scripts
- Access to management interfaces, databases, and backup systems
- Internal testing of network separation
The need
When organizations need it
- When the internal penetration test required by PCI DSS at least every 12 months and after significant changes is due.
- After a merger, a new domain trust, or a major infrastructure change.
- When management asks how far a ransomware attack could spread in the internal network.
Method
How we work
-
Starting point
We determine whether the test starts from a network point or a standard user account.
-
Discovery and analysis
We map systems, services, and Active Directory relationships on the network.
-
Manual testing
We verify vulnerabilities in a controlled manner and show the chains that lead to critical systems.
-
Report and retest
We prioritize fixes that block attack paths earliest and retest after they are applied.
Outcome
What you have at the end
You see the paths to administrator rights and critical servers on your internal network, and the vulnerabilities that enable them. Fixes are ordered, starting with the change that blocks the most paths.
Frequently asked questions
Will the test affect our network or production?
Steps that could cause disruption are approved in advance and performed in time windows agreed with you. Denial-of-service testing is out of scope.
Can it be done remotely?
Yes. It can be performed from a test device or virtual machine placed on your network. If physical access is needed, we work on site.
Should Active Directory be reviewed separately?
The internal network test covers attack paths through Active Directory. For a detailed review of the entire configuration, our Active Directory Security service can also be performed.
Penetration Testing
Other services in this area
Let's talk about this service.
Tell us briefly what you need. We will agree on the scope and timing together in the first meeting.
Schedule a Meeting