Networks and Infrastructure

Know what an intruder reaches inside.

External and internal network testing with manual exploitation. We show what an attacker reaches from the internet, a guest port or one compromised host.

From one port to the domain.

Five steps from the first open service to the retest.

  1. Find the exposure

    Every reachable service is enumerated and fingerprinted, inside and out.

  2. Get a foothold

    Exposed services and weak credentials are exploited by hand, never assumed.

  3. Move laterally

    Credential abuse, segmentation gaps and wireless carry us toward the crown jewels.

  4. Show the blast radius

    Each path is chained and proven, with the evidence for every step.

  5. Retest the fixes

    The findings you close are re-run until the path is gone.

What this engagement covers

When you need it

  • For an annual baseline
  • After a merger
  • After perimeter changes

What we test

  • Exposed services
  • Active Directory and credential abuse
  • Segmentation
  • Wireless
  • Lateral movement

What you get

  • Exploited findings with proof
  • Chained paths
  • An executive summary
  • A retest of fixed findings

How it runs

  • Duration: Most Assess engagements run two to four weeks from kickoff to readout.
  • What we need from you: A named decision owner, a White Cell contact and agreed test windows for the external, guest-port and internal positions.

Standards

  • PTES
  • MITRE ATT&CK

Frequently Asked Questions

External, internal or both?
Both. We show what an attacker reaches from the internet, from a guest port and from one compromised host inside.
Do you exploit what you find?
Yes. Findings are exploited by hand and reported with proof, then chained into the paths an intruder would take.
Is wireless included?
Yes. Wireless sits alongside exposed services, Active Directory and credential abuse, segmentation and lateral movement in what we test.

How We Work

Eight steps from the first call to the closure letter. Every engagement follows them.

  1. Scoping call
  2. Rules of engagement
  3. Threat model
  4. Execution
  5. Analysis
  6. Readout
  7. Remediation support
  8. Retest
Read the full lifecycle

Ready to scope an engagement?

Tell us the asset and the decision the test should inform.

Scope a call