Internal Vulnerability Assessment and Penetration Test

As remote workforces, wireless networks and VPN deployments become ever more common, the classic definition of “internal network” has changed. Though business networks are often secure on the outside-inside, a different story is told. The reality of the internal threat, however is real. This attack could be a disgruntled employee or an unknown entity who manages to gain unauthorized access through your VPN or wireless network.

Our internal penetration test is designed to reveal exactly what an unauthorized entity can access, ion the event that they can penetrate your internal network. GRSee works with you to define what is important to your organization and target areas that present the greatest risk, while causing the least possible disruption to your environment.

Application Penetration Testing

GRSee’s Application Penetration Test is an ethical attack simulation that is intended to expose the effectiveness of an application’s security controls by highlighting risks posed by actual exploitable vulnerabilities. The Penetration Test model is built around a manual testing process. This process is more comprehensive than generic responses, false positive findings and lack of depth provided by automated application assessment tools.

Top vulnerabilities identified by GRSee’s application penetration testing include:

  • Input Validation
  • Buffer Overflow
  • Cross Site Scripting
  • URL Manipulation
  • SQL Injection
  • Hidden Variable Manipulation
  • Cookie Modification
  • Authentication Bypass
  • Code Execution
  • Other Common Software Attacks

All test results provide a detailed deliverable, which includes both tactical and strategic recommendations.

By taking advantage GRSee’s proven methods; you will be able to reveal actual exploitable vulnerabilities within an application.