CompTIA PenTest+ Study Guide by Mike Chapple & David Seidl

Author:Mike Chapple & David Seidl [Chapple, Mike & Seidl, David]
Language: eng
Format: epub, azw3
ISBN: 9781119504245
Publisher: Wiley
Published: 2018-10-11T14:30:00+00:00

Scenario Part 1: Onsite Assessment

After your successful remote penetration test of MCDS, LLC, the firm has asked you to perform an onsite assessment of its network security. MCDS operates a facility with over 500 employees in your area, with four office buildings spread across a small corporate campus. You must determine how to gain access to its network and then pivot to gain credentials that are useful in its infrastructure. From your previous data gathering, you know that MCDS runs an infrastructure that uses both a Windows 2012 Active Directory domain and quite a few Linux servers that provide web and other services both internally and externally.

As you read this chapter, consider how you would answer the following questions:

How would you gain access to the MCDS wired network if it uses a NAC scheme based on a MAC address?

What would you do differently if the NAC system used a client-based approach?

MCDS uses an 802.11n network, with an open guest network called MCDS_GUEST and a WPA-2 Enterprise network that authenticates via RADIUS to Active Directory for its own internal users. How would you gather information about these networks and the systems that use them?

What attacks could you use against the wired network once you gain access?

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.