Spider Sec Ltd offers External Network Penetration Testing services which are designed to provide assurances that your Internet facing infrastructure has been designed and configured in line with industry best security practices.
What is External Network Penetration Testing?
An External Network Penetration Testing identifies and addresses vulnerabilities which may be present in an organisations external-facing servers, workstations, mails servers, virtual environments and network devices.
Brief Overview of a standard Test:
Key Benefits Of A External Network Penetration Test?
Using our skills in offensive security we will simulate a genuine attack on your external infrastructure. During the test, we will ensure there are no common or publicly known vulnerabilities in the target system at the time of the test. Alongside this, our consultant will also perform checks to ensure your external infrastructure is following best security practice.
A External Network Penetration Test will help our clients:
Our consultants are all certified with at least Check Team Member or OSCP certificate. We follow the industry-standard OSSTMM methodology. Alongside this, we use our own in-house methodologies which have been tried and tested during our own careers.
Penetration Testing Engagement Process
Registration Magic Version 188.8.131.52 (Multiple XSS Vulnerabilities) Background After discovering two new WordPress Plugin vulnerabilities on a recent web application penetration test (which were authenticated and difficult to weaponise) I decided to go in search for some higher ticket WordPress Plugin vulnerabilities in my spare time. I started downloading registration form and forum building plugins, […]Read More
Registration Magic Version 184.108.40.206 Authenticated Blind SQL Injection in URL Background If you still haven’t read the preface to this discovery please take a look here. Technical Details Authenticated SQL Injection in Form_id field The form_id field takes input from a number of in the front end and processes it on […]Read More
Calculated Fields Form WP Plugin (Version <= 1.0.353) Multiple Authenticated Stored XSS Background The Calculated Fields Form plugin through 1.0.353 for WordPress suffers from multiple Stored XSS vulnerabilities present in the input forms. These Calculated Fields Form vulnerabilities were discovered during a web application penetration test by a Spider Sec Ltd Consultant. Technical Details An […]Read More
Chained Quiz WP Plugin Unauthenticated Reflected XSS (Version 220.127.116.11) Background During a web application penetration testing engagement, we discovered our client was using the Chained Quiz Plugin to serve quizzes on the front-end of their site. A quick analysis using WPscan uncovered several historic Chained Quiz Vulnerabilities which had been disclosed in previous versions. As […]Read More