See exactly what you will receive.
A complete 40-page penetration test report for a fictionalized financial services client: executive summary, attack narrative, 13 findings with evidence and fixes, and our methodology.
What's inside
Executive summary
Key findings, what is working well, and remediation in priority order.
Scope and rules of engagement
External, internal and wireless scope, dates, standards and constraints.
Attack narrative
Nine phases showing how individual weaknesses chained into domain compromise.
Detailed findings
Severity, CVSS vector, affected hosts, evidence, impact and specific fixes.
Defensive wins
Controls that worked, such as EDR blocking SQL Server abuse within minutes.
Methodology and tooling
How the test was run and with what, so auditors can rely on it.
LLMNR/NBT-NS/mDNS Poisoning Enables Credential Interception
- Description
- Legacy name resolution protocols are enabled across the corporate LAN. When DNS lookups fail, any host on the segment can answer and intercept the authentication attempt. Hashes from 12 domain accounts were captured within 15 minutes.
- Impact
- An attacker on the network can passively harvest domain credentials, crack them offline or relay them in real time, without prior credentials and without generating authentication failures.
- Solution
- Disable LLMNR and mDNS by Group Policy and NBT-NS through DHCP options, require SMB signing on all domain members, and alert on poisoning activity.
- Mapped to
- MITRE ATT&CK T1557.001
Download the sample report
- 40 pages, PDF
- External, internal and wireless testing
- 13 findings: 4 critical, 4 high, 3 medium, 2 low
The client, addresses, hostnames and credentials are fictional. The methodology, attack chains and finding structure are the same as in our real deliverables.
Prefer a walkthrough?
Book a scoping call and we'll walk through the report together, then show you what yours would cover.
Book a call
Want This Report for Your Systems?
A 20-minute scoping call gets you a fixed-price quote for a test and a report like this one.
Book a Scoping Call