CAMPUS VILSHOFEN

A pentest (short for penetration test) is a targeted security assessment in which our experts identify vulnerabilities in a computer system, network or application and, depending on the agreement, may also exploit them. The aim is to find security vulnerabilities before attackers can do so.

Penetration tests come in various forms. These may, for example, cover a single system, a specific (web) application or a larger scope of systems.

Generally, a distinction is made between tests of internal and external infrastructure. When conducting a penetration test on internal infrastructure, additional aspects can be examined, such as SMB shares or Active Directory.

An undetected data breach costs companies an average of 4.88 million dollars. If your data falls into the wrong hands, we can intervene at an early stage.

Cybercriminals operate in secret – on illegal platforms and on the dark web. This is where stolen data is traded, attacks are planned and vulnerabilities are discussed.

Our monitoring service covers the clearnet, the darknet and other relevant digital channels. It analyses billions of data points and detects leaked corporate information, compromised login credentials, exposed API keys and vulnerabilities in your digital infrastructure.

In a free initial consultation, including a demonstration, we’ll show you exactly how Darknet Monitoring protects your business.

As your Managed Service Provider, we take care of the complete implementation, configuration and ongoing operation of the Darknet Monitoring platform.

• Seamless integration into your IT security infrastructure
• Continuous 24/7 monitoring (analysis carried out during our business hours)
• Regular threat reports, including recommendations for action
• Incident response support in the event of critical findings
• Half-yearly coverage reviews to ensure your monitoring is optimally configured

To assess how aware your staff are of the risks of phishing, we offer phishing simulations.

You can choose from three test packages of varying durations. In phishing campaigns lasting three to four days, we test your employees’ reactions to fake emails. Content can be selected from prepared templates and different scenarios. 

Should employees interact – for example, by clicking on links or entering login details – they will be redirected to a warning page.

Analyses can be carried out either after each campaign or at the end of the overall duration. The following parameters are taken into account:

• Email open rate
• Number of link clicks
• Entry of login details
• Activation of macros in documents sent
• Percentage analysis based on all recipients

The security audit of a web application is designed to identify potential vulnerabilities and security gaps in a website and its underlying code.

A combination of penetration testing and secure code review ensures a comprehensive security assessment that not only takes external threats into account but also uncovers internal vulnerabilities in the application logic and code.

Security auditors use various methods for this purpose, including automated scans and manual testing. By simulating attack scenarios – such as SQL injections or cross-site scripting (XSS) – they test whether an attacker could gain access to confidential data or take control of the system.

Whilst a penetration test aims to identify vulnerabilities through active attacks, a secure code review focuses on an in-depth analysis of the source code. This process enables the identification of potential security vulnerabilities rooted in the programming itself. 

Design decisions, data validation methods, authentication systems and other critical elements are examined. This ensures that the application has been developed in a robust and secure manner from the outset. 

A final report contains recommendations for rectifying the vulnerabilities found and for improving the overall security of the web application.

SMB shares enable access to and sharing of files and services within a local network. This allows user accounts to access a shared drive, or various programmes to access a printer. However, potentially confidential or sensitive information is often stored without proper controls.

An SMB share check includes, amongst other things, a search for sensitive data and an analysis of the associated access permissions. Furthermore, it assesses whether inappropriate access rights exist and whether these could enable attackers to access sensitive data.

The test aims to identify weaknesses in access control and data security and to provide the organisation with appropriate recommendations.

This check assesses whether appropriate security measures have been put in place in the event that a company-owned device with access to the corporate network is lost or stolen.

It checks whether unauthorised access to sensitive information is prevented and whether the system is able to respond appropriately to the loss of the device.

A password audit provides valuable insights into an organisation’s password security. It involves cracking the hashes of all user accounts in Active Directory (the central repository for all network users) and analysing them statistically.

(Hashing is a method of storing passwords. Each password is represented by a unique string of characters, known as a hash value. Even if unauthorised parties obtain this value, they cannot reconstruct the password.)

By cracking hashes, security auditors can identify weak passwords – and thereby weaknesses in password choice in general.

One method is the so-called brute-force attack, in which we attempt to reconstruct the hash value by simply trying out different combinations. The simpler a password is, the quicker it can be cracked.

Statistical analysis in password audits

Statistical analysis reveals patterns and trends in password choice, which can serve as a basis for improved password policies and user training. 

This process helps the organisation to implement more robust security measures and strengthen the integrity of Active Directory.