Penetration Testing
By Passionate Certified Cyber Security Professionals
CREST Certified Penetration Testing Team
XCELIT offers certified Enterprise Grade Cyber Security Services of the highest quality possible, for clients Globally.
XCELIT’s Accredited Penetration Testing Team is managed by leaders who know that when it comes to Penetration testing that abilities matter the most. Through XCELIT, you tap into real world experience for real results.
Talk to us today!
Our Engineers
are certified:
Penetration Testing Services
Penetration Testing Menu
- Web Application Penetration Testing
- Black Box Penetration Testing
- White Box Penetration Test
- Grey Box Penetration Testing
- Open Box Penetration Testing
- Closed Box Penetration Testing
- Internal Network Penetration Testing
- External Network Penetration Testing
- Cloud Security Penetration Testing
- Red Teaming
- Purple Teaming
- Android App Penetration Testing
- iOS Application Penetration Testing
- Active Directory Penetration Testing
- API Services Penetration Testing
- Desktop Application Penetration testing
- Compromise Audit
- Cyber Security Controls Audit
- Cyber Security Gap Assessment
- Firewall Audit
- GDPR Penetration Testing
- IoT Penetration Testing
- Load/Stress Testing
- MPLS Security Audit
- Network Resiliency Audit
- PCI DSS Security Audit
- Secure Code Review
- Secure Software Development
- Social Engineering & Phishing
Web Application Penetration Testing
Web Application Penetration Testing
Web applications are the most attractive targets for hackers because they are easy to reach and programmers, even when they have several years of experience are often unintentionally writing vulnerable, easy to exploit, code.
Manual Web Application Penetration Testing is essential when searching for vulnerabilities.
Automated tools simply cannot discover all the flaws.
XCELIT’s Web Application Penetration Testing team runs both manual and automated Manual Web Application Penetration Testing on any assignment.
The goal of Web Application Penetration testing is to identify and repair web application security flaws.
Conducting a Web Application Penetration Test protects customer loyalty and company image. Web Application Penetration testing helps an organization avoid data incidents that may put the company’s reputation and reliability at stake.
Web Application Penetration Testing protects the integrity of assets in case of existing malicious code hidden. Our Web Application Penetration Testing team experts can investigate line by line the code of the applications in order to detect code vulnerabilities or backdoors.
Web Application Penetration Testing involves methodological series of steps aimed at gathering information about the target system, finding vulnerabilities or faults in them, researching for exploits that will succeed against those faults or vulnerabilities and compromise the web application.
In our testing we include everything:
– Injections: SQL, XSS, CSRF
– Authentication tests and Session Management
– Sensitive Data Exposure checks
– Broken Access Control
– Security Misconfigurations and Security Misconfigurations
Our Web Application Penetration testing process
Scoping – tell us what you need, or we can send you a scoping sheet for completion.
Attacking – our Web Application Penetration Testing Team attack your applications to discover vulnerabilities.
Reporting – We present all the weaknesses and vulnerabilities identified during the Web Application Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to Web Application Penetration Testing is best for you
Our Web application Penetration Testing service is based on PTES, NIST and OWASP standards combined with over 10 years experience per certified security engineer, setting us apart from any other Web Application Penetration Testing team you may come across.
Black Box Penetration Testing
Black Box Penetration Testing
Black Box Penetration testing may also be known as:
– Single Blind Penetration Test
– Closed Box Penetration test
A Black Box Penetration Test is one where the hacker is given no background information besides the name of the target company.
This type of Penetration Test provides the Penetration Tester with exactly the same kind of information that a Threat Actor May have. It is important during a Black Box Penetration Test that no one within the organisation is aware that the test is being undertaken (outside of those that arrange the test) so as to simulate real world experiences.
A Black Box Penetration Test can therefore be used to test the effectiveness of a Blue Team (the team charged with protecting the network).
A reasonable amount of time is needed for a Black Box Penetration Test, think 30 plus days of activity, so as to really test what the Penetration Tester may be able to achieve as they run through increasingly complex attack methods.
Why undertake Black Box Penetration Testing?
– Black Box Penetration Testing allows for the quick identification of functional specification errors.
– Black Box Penetration Testing is unbiased as the designer and Penetration Tester work independently.
– Black Box Penetration Testing takes place using only information widely available or available to a user.
– Black Box Penetration Testing identifies gaps in both the system and general user interfaces that may otherwise be hidden
– Black Box Penetration Testing simulates the behaviour of a user who does not know the internal structure of the program, which is exactly as an external Threat Actor would experience.
Our Black Box Penetration Testing process
Scoping – confirm that you want the Black Box Penetration Test.
Attacking – our Black Box Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the Black Box Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all vulnerabilities, we retest to verify for you, for Free.
Why our approach to Black Box Penetration Testing is best for you
Our Black Box Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Black Box Penetration Testing team you may come across.
White Box Penetration Test
White Box Penetration Test
White Box Penetration Testing may also be referred to as:
– Crystal Box Penetration Testing
– Oblique Box Penetration Testing
– Clear Box Penetration Testing
– Transparent Box Penetration Testing
– Open Box Penetration testing
In an White Box Penetration Test, the Penetration Tester is provided some information ahead of time regarding the target company’s security info.
The degree of information shared is dependent on the clients needs and can include full network and system information, including network maps and login credentials.
In a White Box Penetration Test the aim is to expose the systems details under the test, and can be used to reveal what a Threat Actor may gain access to, or how visible they are to defences once they have breached the network.
In many cases, the Blue Team (the Team Charged with protecting the network) are advised to not stop the penetration test if observed. In other cases, the Blue Team are not warned of the White Box Penetration Test.
The Penetration Tester does not deliberately damage the network in any way, but rather exposes weaknesses that may be exploited by a Threat Actor, so these weaknesses may be remediated.
Sharing full network and system information with the tester, including network maps and login credentials helps to save time and reduce the overall cost of an engagement.
When to undertake a White Box Penetration test
White Box Penetration Testing is normally undertaken during software development, or web application development, before releasing the finished product. White Box Penetration Testing at this stage allows weaknesses and vulnerabilities to be fixed before release.
Many organisations choose to undertake a White Box Penetration Testing annually, or on another predefined schedule. Software and Web Application changes are a common reason for instigating a White Box Penetration Test. If your organisation is undertaking regular White Box Penetration Testing XCELIT recommends our subscription model to save cost.
White Box Penetration Testing Considerations
One of the criticisms of an White Box Penetration Test is that sharing of information with the Penetration Testing team results in the Penetration testers not moving through the network in a way that Threat Actors would not. This, however, tends to be minimal when considering closing of weaknesses and vulnerabilities, and a combination of White Box Penetration testing and Black Box Penetration testing can be used over time, closing this gap.
The main advantage of a White Box Penetration Test is that it takes significantly less time than a Black Box Penetration Test, saving cost.
Our White Box Penetration Testing process
Scoping – confirm that you want the White Box Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our White Box Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the White Box Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to White Box Penetration Testing is best for you
Our White Box Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other White Box Penetration Testing team you may come across.
Grey Box Penetration Testing
Grey Box Penetration Testing
As the name implies, Grey Box Penetration Testing falls somewhere between White and Black Box Penetration testing.
In a Grey Box Penetration Test, the Penetration tester is provided some of the access and knowledge that a user has, including, depending on scope, elevated privileges, but not full access. An organisation will share with the Grey Box Penetration Tester some knowledge of the network’s internals, which may include design and architecture documentation.
Grey Box Penetration Testing is faster than Black Box Penetration Testing. With access to design and architecture information, as well as having network access, Penetration Testers can better focus their efforts and provide more in-depth analysis. This is particularly true in comparison to a Black Box Penetration test, where a Penetration tester may never find a weakness or vulnerability that provides them access to the network.
Why undertake a Grey Box Penetration Test?
A Grey Box Penetration Test has many of the advantages of a Black Box Penetration test, without the cost. A Grey Box Penetration test is intended to be a more focused and efficient assessment of a network’s security than a Black Box Penetration Test.
Time is saved as Penetration Testers have an understanding of design and architecture and some network access, meaning they don’t have to spend time discovering this information. Having internal access also means that the Penetration Testers do not have to breach the hardened perimeter and can simulate an attacker who has gained access to the network.
Grey Box Penetration Testing process
Scoping – confirm that you want the Grey Box Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our Grey Box Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the Grey Box Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to Grey Box Penetration Testing is best for you
Our Grey Box Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Grey Box Penetration Testing team you may come across.
Open Box Penetration Testing
Open Box Penetration Testing
Open Box Penetration Testing may also be referred to as:
– Crystal Box Penetration Testing
– Oblique Box Penetration Testing
– Clear Box Penetration Testing
– Transparent Box Penetration Testing
– White Box Penetration testing
In an Open Box Penetration Test, the Penetration Tester is provided some information ahead of time regarding the target company’s security info.
The degree of information shared is dependent on the clients needs and can include full network and system information, including network maps and login credentials.
In an Open Box Penetration Test the aim is to expose the systems details under the test, and can be used to reveal what a Threat Actor may gain access to, or how visible they are to defences once they have breached the network.
In many cases, the Blue Team (the team charged with protecting the network) are advised to not stop the penetration test if observed. In other cases, the Blue Team are not warned of the Open Box Penetration Test.
The Penetration Tester does not (at least deliberately) damage the network in any way, but rather exposes weaknesses that may be exploited by a Threat Actor, so these weaknesses may be remediated.
Sharing full network and system information with the tester, including network maps and login credentials helps to save time and reduce the overall cost of an engagement.
When to undertake a Open Box Penetration test
Open Box Penetration Testing is normally undertaken during software development, or web application development, before releasing the finished product. Open Box Penetration Testing at this stage allows weaknesses and vulnerabilities to be fixed before release.
Many organisations choose to undertake a Open Box Penetration Testing annually, or on another predefined schedule. Software and Web Application changes are a common reason for instigating an Open Box Penetration Test. If your organisation is undertaking regular Open Box Penetration Testing XCELIT recommends our subscription model to save cost.
Open Box Penetration Testing Considerations
One of the criticisms of an Open Box Penetration Test is that sharing of information with the Penetration Testing team results in the Penetration testers not moving through the network in a way that Threat Actors would not. This, however, tends to be minimal when considering closing of weaknesses and vulnerabilities, and a combination of Closed Box Penetration testing and Open Box Penetration testing can be used over time, closing this gap.
The main advantage of an Open Box Penetration Test is that it takes significantly less time than a Closed Box Penetration Test, saving cost.
Our Open Box Penetration Testing process
Scoping – confirm that you want the Open Box Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our Open Box Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the Open Box Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to Open Box Penetration Testing is best for you
Our Open Box Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Open Box Penetration Testing team you may come across.
Closed Box Penetration Testing
Closed Box Penetration Testing
Closed Box Penetration testing may also be known as:
– Single Blind Penetration Test
– Black Box Penetration test
A Closed Box Penetration Test is one where the hacker is given no background information besides the name of the target company.
This type of Penetration Test provides the Penetration Tester with exactly the same kind of information that a Threat Actor May have. It is important during a Closed Box Penetration Test that no one within the organisation is aware that the test is being undertaken (outside of those that arrange the test) so as to simulate real world experiences.
A Closed Box Penetration Test can therefore be used to test the effectiveness of a Blue Team (the team charged with protecting the network).
A reasonable amount of time is needed for a Closed Box Penetration Test, think 30 plus days of activity, so as to really test what the Penetration Tester may be able to achieve as they run through increasingly complex attack methods.
Why undertake Closed Box Penetration Testing?
– Closed Box Penetration Testing allows for the quick identification of functional specification errors.
– Closed Box Penetration Testing is unbiased as the designer and Penetration Tester work independently.
– Closed Box Penetration Testing takes place using only information widely available or available to a user.
– Closed Box Penetration Testing identifies gaps in both the system and general user interfaces that may otherwise be hidden.
– Closed Box Penetration Testing simulates the behaviour of a user who does not know the internal structure of the program, which is exactly as an external Threat Actor would experience.
Our Closed Box Penetration testing process
Scoping – confirm that you want the Closed Box Penetration Test.
Attacking – our Closed Box Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the Closed Box Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all vulnerabilities, we retest to verify for you, for Free.
Why our approach to Closed Box Penetration Testing is best for you
Our Closed Box Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Closed Box Penetration Testing team you may come across.
Internal Network Penetration Testing
Internal Network Penetration Testing
In an Internal Network Penetration Test, the ethical hacker performs the test from the company’s internal network.
Internal Network Penetration Testing works from the premise that the Cyber Threat Actor already has access to your network.
This kind of test is useful in determining how much damage a disgruntled employee, ex-employee with legacy access, or a Cyber Threat Actor could potentially cause from behind the company’s firewall.
An Internal Network Penetration Test generally takes two broad forms:
Black Box – where little or no information is provided to the Penetration Testing Team.
White Box – where the organisation discloses some information to the Penetration Testing Team.
An Internal Penetration Test is useful for determining what assets are at risk and how they may be compromised. Areas of weakness can then be patched before a real-world Cyber Threat Actor finds this weakness and exploits it.
A key requirement for an Internal Network Penetration Test is to relax security measures to allow the Penetration testing Team some latitude in finding weaknesses. Doing so, allows more weaknesses and therefore more opportunities for patching and countermeasures to be put in place, thereby improving security against real world Cyber Threat Actors.
Our Internal Network Penetration Testing process
Scoping – confirm that you want the Internal Network Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our Internal Network Penetration Testing team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the Internal Network Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to Internal Network Penetration Testing is best for you
Our Internal Network Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Penetration Testing team you may come across.
External Network Penetration Testing
External Network Penetration Testing
An External Network Penetration Test researches and attempts to exploit vulnerabilities that could be used by an external Cyber Threat Actor to gain access to your organisations network.
The advantage of an External Network Penetration Test is that your organisation can test the security of your internet facing apps, websites, servers and network perimeter before a Cyber Threat Actor does.
In an External Network Penetration Test, the Penetration Testing team always begins their simulation of a Cyber Threat Attack from outside the organisation and from there seek access to internal networks and systems. The External Network Penetration Testing team will simulate:
– Actions that would be taken by an external Cyber Threat Actor.
– Seek vulnerabilities at the perimeter of your organisations cyber defences.
– Attempt to exploit vulnerabilities on compromised endpoint devices.
– Seek to gain access through web applications.
– May undertake social networking and other simulated Cyber Threat Actor attacks on personnel.
Benefits of External Network Penetration Testing
The real benefit of an External Network Penetration Test is that any weaknesses and exploits found can be used to lower the risk of an external Cyber Threat Actors actions against your organisation.
Other benefits include:
Become IT Security Compliant – IT Security Compliance regulations and guidelines require an organisation to conduct security testing to identify vulnerabilities.
Know the vulnerabilities before a real-world Cyber Threat Actor attack – an External Network Penetration Test lowers the gap between what is known and what remains hidden from the awareness of the stakeholders.
Insight into your cyber security posture – an External Network Penetration Test helps reveal how secure your organization is as well as how comprehensive is your cyber security strategy is.
Discover data leaks from your company – as part of an External Network Penetration Test, we will report back to you the hidden information on the internet about security breaches or data leaks from your company.
Our External Network Penetration Testing process
Scoping – confirm that you want the External Network Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our External Network Penetration Testing team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the External Network Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to External Network Penetration Testing is best for you
Our External Network Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Penetration Testing team you may come across.
Cloud Security Penetration Testing
Cloud Security Penetration Testing
Cloud Services are bringing new advantages and opportunities for business expansion and growth. The migration of applications and data to a public cloud brings many benefits, but at the same time comes with risk of security breaches or other security vulnerabilities.
What is often not well understood is that Cloud Services comes under a shared user responsibility model. The company using the service, be that AWS, Azure or Google are responsible for the security of their own network.
The use of cloud services, configuration and set-up all introduce potential vulnerabilities, which is why the onus for security in this regard is on the user.
A Cloud Security Penetration Test / Assessment will reduce the risk associated with cloud computing.
We aim to provide our clients with a full and efficient assessment of the cloud systems that will result in identifying and reducing the possible risks.
During the assessment we will use advanced techniques and methodologies to make sure that your cloud system is fully aligned with the newest and safest security architecture.
Our Cloud Security Penetration Testing process
Scoping – confirm that you want the Cloud Security Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our Cloud Security Penetration Testing team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the Cloud Security Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to Cloud Security Penetration Testing is best for you
Our Cloud Security Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Cloud Security Penetration Testing team you may come across.
Red Teaming
Red Teaming Penetration Testing
Uncover vulnerabilities into your network, web applications, physical infrastructure and employees, with the most realistic hacking exercise
What is Red Teaming Penetration Testing?
Red Teaming Penetration Testing, goes beyond standard Penetration Testing. Red Teaming provides a no limit test based upon activities that a Threat Actor may undertake.
The Red Team is your adversary, just as you may face in the real world.
Companies undertake Read Teaming Assessments because Read Teaming offers the most realistic attack simulations against the organization and as a result provides results that provide greater insights into the effectiveness of your entire information security program.
The techniques our red team use vary from penetration testing on external infrastructure, web apps, phishing attempts aimed at employees and social engineering to impersonating employees with the goal of obtaining admin access.
Red Teaming places your organization’s security team as close to a real security incident as possible, accurately testing incident response.
Benefits of Red Teaming Penetration Testing
Identify software and human vulnerabilities – Red Teaming tries to find and fix vulnerabilities in all areas of your organizations: applications and employees.
Offers the most realistic state of risk for your organization – Due to real life hacking scenarios on all areas of your organization
Improve Cyber Security Program – Our team will work closely with your engineers to fix the vulnerabilities and improve the information security program
Red Teaming Penetration Testing exercise coverage
– Use of OSINT to discover IP Ranges and FQDNs
– Survey network topology and identify active nodes.
– Identify open ports and running services.
– Identify publicly used cloud services that may contain sensitive information
– Use of intelligence services to search for sensitive information
– Identify points of entry that could be abused to access the environment
– Review web applications to identify vulnerabilities
– Identify network infrastructure components that may have vulnerabilities
– Testing of network infrastructure services (DNS, e-mail, etc)
– Gaining foothold into systems
– Testing of externally hosted web-applications
– Use of exploits
– Use of obtained privileged access to conduct unauthorized changes
– Assess the effectiveness of preventive and detective controls placed in the environment,
– Conduct social engineering attacks: Information Gathering, Obtaining Credentials, Obtaining Access
Our Penetration Testing process
Penetration Testing – Web Applications, Mobile, Network, WIFI, Routers, Printers etc.
Employee Testing – Phishing attack, Social Engineering, Pretesting, Public information discovery.
Physical Access – XCELIT offers Red Teaming with or without Physical Access Testing. Physical Access Testing of Buildings, Offices, Physical Controls, Video Cameras, Access Controls adds significantly to cost depending on your location(s) and can be arranged if needed.
Reporting – We present all the weaknesses and vulnerabilities identified during the Cloud Security Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free. Physical retesting requirements may incur a charge.
Why our approach to Read Teaming is best for you
Our Red Team has over 10 years’ experience per certified security engineer, setting us apart from any other Red Team you may come across.
Purple Teaming
Purple Teaming
A purple team will integrate both the Blue Team Strategy of defence, and also include the risks and vulnerabilities gathered from the Red Team.
What is Purple Teaming?
In cybersecurity, a purple team is doing both the role of the Red Team and Blue Team. The Red Team simulated the Threat Actor, and the Blue Team is the defence.
The process involves going through both of these scenarios gathering the relevant information from each.
In a Purple Teaming exercise the Red Team and Blue Team work together in such way that the end result is more refined and provides a deeper understanding of the company’s security.
Our Purple Teaming process
Scoping – confirm that you want a Purple Teaming exercise and what to include in the scope.
Attacking – our Penetration Testing team undertake tasks as a Threat Actor would, refer Red Teaming for more specific details.
Reporting – We present all the weaknesses and vulnerabilities identified during the Cloud Security Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to Purple Teaming is best for you
Our Purple Team has over 10 years’ experience per certified security engineer, setting us apart from any other Purple Team you may come across.
Android App Penetration Testing
Android App Penetration Testing
The Android application attack surface consists of all components of the application, including the supportive material necessary to release the app and to support its functioning.
– Mobile App Authentication Architectures
– Network Communication
– Data Storage on Android
– Cryptographic APIs
– Local Authentication on Android
– Network APIs
– Android Platform APIs
– Code Quality and Build Settings for Android Apps
– Tampering and Reverse Engineering on Android
– Android Anti-Reversing Defenses
Our Android App Penetration Testing Methodology
XCELIT’s approach to Android App Penetration Testing includes reviewing how application reacts against common input attacks, server-side controls, data communication paths and client-related issues.
Static Testing
Search for sensitive information disclosures & decompile to source code
Analyzing Config files: reveals URL, Server credentials, Cryptographic keys, Hard coded passwords
Reverse Engineering: Using reversing tools, Device Binding, Impede Comprehension, Impede Dynamic Analysis and Tampering
Dynamic Testing
Attempt to inject and bypass authentication controls & review data communications functionality
Input Validation: Injection, Malicious Input acceptance, Command Injection, Buffer Overflow, File Upload, Business logic validations, Error handling/ Info Leakage, Session management, Log tampering
Server side Testing
Vulnerabilities specific to web servers: Directory Traversal, Command injection, Remote code execution, SQL injection, Sensitive file exposure, Web server misconfiguration exploitation
API/Webservices testing: authorization, IDOR, Injections and exploits, API business logic bypass like skipping payments, API misconfigurations
Identify potential for denial of service (DOS) attacks
Our Android App Penetration Testing process
Scoping – confirm that you want the Android App Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our Android App Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the Android App Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to Android App Penetration Testing is best for you
Our Android App Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Android App Penetration Testing team you may come across.
iOS Application Penetration Testing
iOS Penetration Testing
Securing mobile applications is more important than ever.
What to Expect in our iOS Penetration Testing Service
The iOS application attack surface consists of all components of the application, including the supportive material necessary to release the app and to support its functioning.
– Mobile App Authentication Architectures
– Network Communication
– Data Storage on iOS
– Cryptographic APIs
– Local Authentication on iOS
– Network APIs
– iOS Platform APIs
– Code Quality and Build Settings for iOS Apps
– Tampering and Reverse Engineering on iOS
– iOS Anti-Reversing Defences
Our Methodology for iOS Penetration Testing
Our approach to iOS Penetration testing includes reviewing how application reacts against common input attacks, server-side controls, data communication paths and client-related issues.
Static Testing
Search for sensitive information disclosures & decompile to source code.
Analysing Config files: reveals URL, Server credentials, Cryptographic keys, Hard coded passwords.
Reverse Engineering: Using reversing tools, Device Binding, Impede Comprehension, Impede Dynamic Analysis and Tampering.
Dynamic Testing
Attempt to inject and bypass authentication controls & review data communications functionality.
Input Validation: Injection, Malicious Input acceptance, Command Injection.
Buffer Overflow, File Upload, Business logic validations, Error handling/ Info Leakage, Session management, Log tampering.
Server side Testing
Vulnerabilities specific to web servers: Directory Traversal, Command injection, Remote code execution, SQL injection, Sensitive file exposure, Web server miss configuration exploitation.
API/Webservices testing: authorization, IDOR, Injections and exploits, API business logic bypass like skipping payments, API misconfigurations.
Identify potential for denial of service (DOS) attacks.
Our IOS Application Penetration Testing process
Scoping – confirm that you want the IOS Application Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our IOS Application Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the IOS Application Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to IOS Application Penetration Testing is best for you
Our IOS Application Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other IOS Application Penetration Testing team you may come across.
Active Directory Penetration Testing
Active Directory Penetration Testing
An Active Directory Penetration Test can show weaknesses and vulnerabilities that a Threat Actor may exploit. The goal of any Penetration Test is to identify any possible attack vector an adversary would use in order to compromise a network.
Used by more than 90% of Fortune 1000 companies, and many other organisations, Active Directories are logically a target for Threat Actors.
Our Active Directory Penetration Testers will try a number of different methods to gain access, as you would expect of a Threat Actor.
XCELIT’s Crest Certified Penetration Testing performs Manual Penetration Testing and may also deploy Automated Penetration testing in some circumstances.
Our Active Directory Penetration Testing process
Scoping – confirm that you want the Active Directory Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our Active Directory Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the Active Directory Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to Active Directory Penetration Testing is best for you
Our Active Directory Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Penetration Testing team you may come across.
API Services Penetration Testing
API Services Penetration Testing
Within Businesses it is common to find Application Programming Interfaces (APIs) that connect services and transfer data between them.
APIs are used for connection to third party applications from where it can extract information providing an avenue for data movement between services and then back to the internet.
XCELIT provides API Services Penetration Testing / Auditing to check if the API is exposed.
If the API is exposed or hacked the results could cause a major impact on the data being transferred. API breaches may lead to exposure of sensitive data like credit cards, medical, personal data or even tracking of your location.
Our API Services Penetration Testing process
Scoping – confirm that you want the API Services Penetration Test. A scoping sheet can be provided for relevant information sharing.
Attacking – our API Services Penetration Testing Team undertake tasks as a Threat Actor would.
Reporting – We present all the weaknesses and vulnerabilities identified during the API Services Penetration Test and recommendations on how to fix the weaknesses and vulnerabilities found.
Retesting – Once you have remediated all weaknesses and vulnerabilities, we retest to verify for you, for Free.
Why our approach to API Services Penetration Testing is best for you
Our API Services Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other API Services Penetration Testing team you may come across.
Desktop Application Penetration testing
Desktop Application Penetration Testing
Verify the security posture of your Desktop applications against real-world cyber-attacks and repair the vulnerabilities before any breach could happen.
Rich Desktop Application Pentest
.NET, C/C++, Microsoft Silverlight, Java applets and other types of desktop applications require thorough testing in order to be secured due to their size and the complexity of their technologies.
Using both our ethical hacking and software developers experience, we will provide clients the high-risk vulnerabilities in applications and optimum solutions to secure them.
Our Methodology for Desktop Application Penetration Testing
XCELIT’s approach to Desktop, Thick Client Assessments includes reviewing how the Desktop Application reacts against common input attacks, server-side controls, data communication paths and potential client-related issues.
Static Testing:
Search for sensitive information disclosures & decompile to source code where possible.
Analysing Config files – reveals URL, Server credentials, Cryptographic keys, Hard coded passwords
Reverse Engineering – Using reversing tools, executable file/ jar files can be decompiled which can be modified and repackaged.
Dynamic Testing:
Attempt to inject and bypass authentication controls & review data communications functionality
Input Validation – SQL Injection, Malicious Input acceptance, Command Injection, Buffer Overflow, File Upload, Business logic validations, Error handling/ Info Leakage, Session management and Log tampering.
Server-side Testing:
Identify potential for denial of service (DOS) attacks.
Vulnerabilities specific to web servers – Directory Traversal, Command injection, Remote code execution, SQL injection, Sensitive file exposure, Web server miss configuration exploitation.
API/Webservices testing – authorization, IDOR, Injections and exploits, API business logic bypass like skipping payments, API misconfigurations.
System Testing:
Review files, registry entries, memory for sensitive information.
Exfiltration of Sensitive data from memory – applications store username, tokens, passwords, encryption keys, unscripted sensitive data. Such information is important for compromising the application.
DLL High-jacking – replacing the actual DLLs with malicious file and bypass protection mechanism.
Why our approach for Desktop Application Penetration Testing is best for you
Our Desktop Application Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other Purple Team you may come across.
Compromise Audit
Compromise Audit
A Compromise Audit is used to identify an ongoing or past attack incident in your business environment.
Get a complete review of your organization’s infrastructure to identify any instances of compromise, undetected backdoors, unauthorized access, and any malicious activities.
Our Compromise Audit Methodology
Endpoint & Network Inspection – Our engineers will conduct a thorough inspection of targeted or vulnerable end-points present in you environment. Specifically we are seeking indicators of malicious actives, such as sensitive data unauthorised access and remote access.
Seek Indicators of Compromise – We apply our comprehensive library of indicators of compromise to evaluate network traffic, servers, workstations, laptops, and critical log data for evidence of current and past attacker activity.
Analyze evidence – Our team will perform an extensive analysis on all findings and will provide you (the client) with recommendations on how to stay safe. Our engineers will confirm initial findings to minimize false positives prior to reporting them.
Detailed Report – We provide a detailed report that summarizes the steps taken during the assessment, the major findings and their risks, and any appropriate recommendations for next steps.
Cyber Security Controls Audit
Cyber Security Controls Audit
How secure is your business?
A Cyber Security Controls Audit is a complex analysis made in order to control and investigate the level of security in a company and is designed test your Cyber Security strategy for effectiveness.
A Cyber Security Controls Audit is designed to answer many questions:
– Are there gaps in the Cyber Security strategy
– Is your company compliant with the newest regulations?
– Are the new technologies used in your company safe?
– Is your sensitive data at risk?
– Are there any potential vulnerabilities?
– Are your systems correctly configured to maintain effective security?
– Is your data encryption working properly?
Cyber Security Gap Assessment
Cyber Security Gap Assessment
A Cyber Security GAP Assessment will make sure that your security measures are meeting all the specific requirements in the industry that you’re active in.
Some industries have specific requirements and standards, it is essential to understand the industry’s best standards and apply them in order to be secure, compliant and gain customers trust, not to mention, build resilience against Threat Actors.
 |
Our Cyber Security Gap Assessment Methodology
We deploy a Cyber Security Gap Assessment methodology built from many years of proven experience, as well as constant vigilance and adaption of new international standards.
The Security Framework Standard
An industry-standard security framework is a benchmark of best practices that can measure and compare your security measures with the standards.
ISO/IEC-27002 standard is specific framework provides best practices for information security management, covering key security areas such as assessment, access control, physical security, and change management.
The ISO standard provides a good framework to compare your security policies and network controls.
We will help you get compliant with the international standards of security applied to you field or industry.
Evaluation of the People and Processes
Many risks related to security breaches are caused by human intervention, such as an employee clicking a phishing email without knowing it. Do you provide employee training to keep your organization aware of changing security threats? Are standard procedures and approvals required before implementing changes?
More importantly, if you encounter a problem, is there an exit procedure? How do you handle access rights for new employees and dismissals?
We help you understand exactly how people access your organization’s network and existing security control.
Data
The goal of data collection is to understand the effectiveness of your existing security procedures operating within the technical framework. In this step, your organizational controls will be compared with best practice standards (such as ISO 27002 and NIST 800-53) and related requirements. This allows you to see how your security process matches other processes that have proven successful.
To discover gaps and vulnerabilities within your organization, obtain samples of network equipment, servers, and applications. Data collection will help to fully understand your technical environment, the security measures that have been implemented, and your overall security effectiveness.
We will help you understand how processes and data are affecting your security.
Analyzing the Cyber Security Program
The last step is a detailed analysis of your safety procedures. Our engineers will correlate the findings and create your IT security profile, including strengths and weaknesses that need improvement. Armed with this information, we can make recommendations for a security plan tailored specifically for you company. A robust security plan should consider cyber risks, staffing, budget requirements, and a timetable for completing security improvements.
We will help you optimize your security measures and will recommend the best practices in order to be fully secured.
Firewall Audit
Firewall Assessment
The firewall is the first and main line of defense between the corporate network and the public.
New developments into the industry regulations require for companies to have specific configurations and apply certain standards when it comes to their network and firewalls.
A Firewall Audit will reveal potential vulnerabilities associated with risky rules in the firewall policies, also will bring insights into on how to follow industry regulations, best practices and secure policies to implement in the corporate environment.
A Firewall Audit is a point in time audit. We recommend Firewall as a Service, for ongoing management, which saves Your Sanity, Your Time and Your Money for ongoing Firewall Management needs.
Benefits of a Firewall Audit
 | Compliance Ready Industry standards into network and firewall security are complex requiring businesses to have specific configurations and rules in place. |  | Insightful Information Clients will understand their security at a much efficient and deeper level. Also, will know how to implement the best practices in the industry. |
 | Discover Vulnerabilities An audit will uncover possible vulnerabilities and risks that comes with the implemented firewall policies and rules. |  | Improve Overall Cyber Security Understanding the risks that could be exploited and implementing the security standards will dramatically improve the security. |
GDPR Penetration Testing
GDPR Penetration Testing
GDPR Penetration Testing is needed for GDPR Compliance, but equally helps companies mitigate the risks of data breaches such as insecure encryption of data, misconfigurations, and weak access management.
What is GDPR?
The General Data Protection Regulation or GDPR is a legal framework that sets guidelines for the collection and processing of personal information from individuals who live in the European Union (EU).
Any company that operates within the EU must comply with GDPR and ensure that sensitive data is well protected. Organizations are responsible for complying with Data Subjects Rights, security such as pseudonymisation, encryption, minimization or Notifying Supervisory Authorities of data breaches within 72 hours of breach discovery.
What is a GDPR Penetration Test?
A GDPR Penetration Test is a process in which our team will analyze and guide you through the regulations, with the end goal of meeting all GDPR compliance requirements to test, assess and evaluate the effectiveness of controls and processes.
It is important to also understand that a GDPR Penetration Test is about more than just compliance, the GDPR Penetration Test is an opportunity to mitigate the risks of data breaches such as insecure encryption of data, misconfigurations, and weak access management.
Our GDPR Penetration Testing Methodology
Identify the risks – The main focus of this step is to Scope and Assess
At this point we are analysing and identifying Personal Identifiable Information (PII) data touch points, understand PII data processing activities and consent management, assess the risk with PII data processing and access activities, establish consent, record keeping, retention policies and procedures in according to GDPR.
Solve the issues – the main focus of this step is to provide a report with all the vulnerabilities and risks that were identified in the identification phase with recommended next steps.
Stay safe – After the remediation of the issues, we can proceed with a re-test to make sure that everything is working in compliance to GDPR.
IoT Penetration Testing
IoT Penetration Testing
We uncover vulnerabilities in your Smart Devices and set out plans to fix them quickly.
Internet connected devices can expose entire infrastructure to external and internal cyber threats. To secure a network, it is imperative to secure IoT devices.
Our IoT Penetration Testing Methodology
Firmware Reverse Engineering
Reverse engineering firmware binaries
Binary exploitation
Encryption analysis
Bypass obfuscation techniques in use
Debugging binaries to gain sensitive info
Application Penetration Testing
Android, Cloud and Web vulnerability testing
Input Validation: SQL Injection, Malicious Input acceptance, Command Injection Buffer Overflow, File Upload, Business logic validations, Error handling/ Info Leakage, Session management, Log tampering
Data storage vulnerabilities
Server side Testing
Identify potential for denial of service (DOS) attacks
Vulnerabilities specific to web servers: Directory Traversal, Command injection, Remote code execution, SQL injection, Sensitive file exposure, Web server miss configuration exploitation
API/Webservices testing: authorization, IDOR, Injections and exploits, API business logic bypass like skipping payments, API misconfigurations
Radio communication reversing for proprietary protocols
Hardware based exploitation
Exfiltration of Sensitive data from memory: applications store username, tokens, passwords, encryption keys, unscripted sensitive data.
UART, JTAG, SWD ports exploitation
Flash memory chips to detect a possibility to dump firmware.
Logic bugs sniffing and bus tampering
External peripheral devices: headphones, antennas etc.
Why our approach to IoT Penetration Testing is best for you
Our IoT Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other IoT Penetration Testing team you may come across.
Load/Stress Testing
Load / Stress Testing
Realistic simulation of peak loads before go live.
We are cyber security engineers with expertise in software performance testing and we can help you identify performance issues before your customers do.
Stress Testing Service
Stress Testing can help verify the stability and reliability of a system.
Our research led approach differentiates us from common penetration testing approaches with an objective to determine a systems robustness and error handling under extremely heavy load conditions.
Our approach includes stress testing well beyond the normal expected operating point and to evaluate how a system works under extreme conditions, to ensure that a system will not crash under heavy load situations.
Under Stress Testing (also known as Endurance Testing) as per our approach, the Application Under Testing (AUT) is stressed for a short period of time to know its withstanding capacity. Our core focus is to determine the limit, at which the system or software or hardware breaks and whether the system demonstrates effective error management under extreme conditions.
Depending on the scale that we will need to run, we can create a master-slave architecture on the AWS and do the same type of tests, distributed, built on-demand, depending on the amount of traffic that we will do the simulation with.
Services that we have conducted so far, are related to Application Layer simulations (simulation normal user different actions with different thresholds of users, different times, spikes etc.) or Volumetric attacks where we simulated with a specific nr of users/visitors decided together with the client (calculating the bandwidth that we will want to achieve).
Type of tests, all of them in conjunction with different agents operating under a master:
– Slowloris attack (different methods and headers)
– HTTP POST/GET flood
– UDP flood
– SSL/TLS renegotiation technique
Focus during Stress Testing
– To accommodate such abnormal traffic spikes.
– To check whether the system works under abnormal conditions.
– Displaying appropriate error message when the system is under stress.
– System failure under extreme conditions.
– It is better to be prepared for extreme conditions by executing Stress Testing.
Goal of Stress Testing
When Stress Testing our goal is to analyse the behaviour of the system after a failure.
For stress testing to be successful, the tested system should display an appropriate error message while it is under extreme conditions.
When undertaking Stress Testing, sometimes, massive data sets are used which may get lost during Stress Testing. Our Stress Testers check parameters to ensure they don’t lose security-related data while under stress testing.
The main purpose of stress testing is to check how fast system recovers after failure.
Load Testing Vs Stress Testing
 |
| Load Testing | Stress Testing | |||
| Load Testing is designed to test the system behaviour under normal workload conditions, and it is just testing or simulating with the actual workload. Load testing does not break the system. | Stress testing is to test the system behaviour under extreme conditions and is carried out till the system failure. Stress testing tries to break the system by testing with overwhelming data or resources. |
Methodologies and Best Practices
We follow different approach’s while performing Stress testing depending on the goal(s) to be achieved as set by the client at commencement of project.
Performance Modelling and performance testing on scaled environments are very useful and provide very good analysis of potential performance issues. However, network testing to actual volumes provides the highest level of risk mitigation when verifying the capacity and performance requirements of a system.
The most reliable and risk adverse approach is to load test to the most realistic concurrent volumes.
Distributed Stress Testing
In this image the server can connect with 2 clients (Client 1 and Client 2), but it cannot send or receive a signal from Client 3 & 4.
In distributed client-server systems, testing is done across all clients from the server.
The role of server under stress testing is to distribute a set of stress tests to all stress clients and track on the status of the client. After the client contacts the server, the server adds the name of the client and starts sending data for testing.
Meanwhile, client machines send a signal or heartbeat that it is connected with the server.
If the server does not receive any signal from the client machine, it needs to be investigated further and debugged.
Application Stress Testing
During Application Stress Testing we concentrate on finding defects related to data locking and blocking, network issues and performance bottlenecks in an application.
Transactional Stress Testing
Transactional Stress Testing is focused on stress testing on one or more transactions between two or more applications. It is used for fine-tuning & optimizing the system.
Systemic Stress Testing
Systemic Stress Testing is deployed for integrated stress testing which can be tested across multiple systems running on the same server. It is used to find defects where one application data blocks another application.
Exploratory Stress Testing
Exploratory Stress Testing is a scenario used to test the system with unusual parameters or conditions that are unlikely to occur in a real scenario. Exploratory Stress Testing is used to find defects in unexpected scenarios such as:
– A large number of users logged at the same time
– If a virus scanner started in all machines simultaneously
– If Database has gone offline when it is accessed from a website
– When a large volume of data is inserted to the database simultaneously
Load Testing Networks
Where a system can support testing to actual volumes we have a performance testing service to meet your requirements.
This service also offers a comprehensive security validation by testing your system while it is experiencing peak load and while some of that load is attacking traffic.
Our Stress Testing Methodology
Our Stress Testing process follows a 6-step plan:
Planning the Stress Test – In this step we gather system data, analyse the system and define the stress test goals
Create Automation Scripts – In this step we create the Stress Test automation scripts and generate the test data for the stress scenarios.
Script Execution – In this step we run the Stress Test automation scripts and store the stress results.
Results Analysis – In this step we analyse the Stress Test results and identify bottlenecks.
Tweaking and Optimization – In this step we fine-tune the system, change configurations and optimize code with the goal of meeting desired benchmarks.
Rerun the entire cycle – In this step we run the entire cycle to determine that changes made have produced desired results. It is not unusual to have to 3 to 4 cycles of the Stress Test process to achieve the performance goals
Tools we use for Stress Testing
LoadRunner
LoadRunner from HP is a widely-used Load Testing tool. Load Test Results shaped by LoadRunner are considered as a benchmark.
Jmeter
Jmeter is an Open-Source testing tool. Jmeter is a pure Java application for stress and Performance Testing. Jmeter is intended to cover types of tests like load, functional, stress, etc. It needs JDK 5 or higher to function.
Stress Tester
Stress Tester provides extensive analysis of web application performance.
Neo load
Neo load is a popular tool available in the market to test the web and Mobile applications. Neo load can simulate thousands of users in order to evaluate the application performance under load and analyse response times. Neo load also supports Cloud-integrated-performance, load and stress testing.
Metrics for Stress Testing
Metrics help in evaluate a system’s performance and are generally studied at the end of Stress Test.
Metrics commonly deployed by XCELIT for Stress Testing are:
Measuring Scalability & Performance
Pages per Second – Measures how many pages have been requested per second. –
Throughput – Basic Metric – Response data size per second.
Rounds – Number of times test scenarios have been planned versus the number of times a client has executed
Application Response
Hit time – Average time to retrieve an image or a page.
Time to the first byte – Time is taken to return the first byte of data or information.
Page Time – Time is taken to retrieve all the information in a page.
Failures
Failed Connections – Number of failed connections refused by the client (weak signal).
Failed Rounds – Number of rounds it that failed. (Rounds – Number of times test scenarios have been planned versus the number of times a client has executed).
Failed Hits – Number of failed attempts by the system (broken links or unseen images).
Summary of our Stress Testing Service
Our Stress Testing service provides a comprehensive concurrent user simulation of user and system traffic. Stress Testing can be conducted while concurrently generating threats and attacking traffic at high loads. We can scale user behaviour to enormous maximum volumes based on your requirements. This service allows us to measure the transaction response time and service availability of your end users during periods of the highest levels of traffic.
Load testing under real world loads allows us to isolate and resolve problems before your customer encounters them. Our load testing service includes all the hardware and software to generate unlimited user loads in a realistic controlled load test.
MPLS Security Audit
MPLS Security Audit
Your Multi-Protocol Label Switching (MPLS) Infrastructure may not be as secure as you believe, misconfigurations may leave you exposed, and a security audit can help ensure your MPLS Infrastructure is working as expected.
Multi-protocol label switching (MPLS), is an established networking technology which has powered enterprise networks for decades. Unlike other network protocols that route traffic based on source a destination address. MPLS routes traffic based on predetermined “lables”. Businesses use MPLS to connect remote branch offices that require access to data or applications that reside in the organizations data center or company headquarters.
While cloud based services are moving to SD-WAN. MPLS will continue to have a role connecting specific point-to-point locations, like large regional offices, retail facilities with point of sale systems, regional manufacturing facilities, and multiple data centers.
XCELIT can provide MPLS Security Audit’s to ensure your MPLS Infrastructure is configured correctly.
Network Resiliency Audit
Network Resiliency Audit
A Network Resiliency Audit focuses on the current network diagram of the organization’s data center, data recovery sites, and offices. The Network Resiliency Audit is designed to help organizations better organize their network equipment and will provide advice regarding best practices.
A Network Resiliency Audit will help strengthen your network in terms of security, and maximize the use of network components, network equipment, firewalls and more.
Key Steps in a Network Resiliency Audit
1. Planning
2. Identify Entry Points
3. Identify Perimeter Devices on the network
4. Identify Weak Links in the Design & Architecture
5. Perform a detailed checking
6. Delivery of report/recommendations
PCI DSS Security Audit
PCI DSS Penetration Testing
Regularly test the security of network infrastructure and applications for PCI Compliance.
What is a PCI DSS Penetration Test?
PCI DSS Penetration Tests are regular security assessments designed to identify and help fix vulnerabilities of external or internal network and applications.
PCI requirements demand from organizations to perform security audits of network infrastructure and applications at least annually, in order to remain compliant.
Our PCI DSS Penetration Testing Methodology
PCI DSS Penetration Testing is designed to cover network infrastructure and applications from both outside and inside an organisation’s network.
The methodology is based on the PTES standard and OWASP (for web applications) and includes:
– Segmentation
– Host Discovery
– Service Scanning and discovery
– Scan for Vulnerabilities
– Manual and automated exploitation
– Post-exploitation & network privilege escalation
– NAS and file servers takeover
– SMB/Net-Bios exploitation
– Credentials memory dump
– Sniffing, spoofing and relaying
– DNS vulnerability exploitation and exfiltration
Why our approach to PCI DSS Penetration Testing is best for you
Our PCI DSS Penetration Testing team has over 10 years’ experience per certified security engineer, setting us apart from any other PCI DSS Penetration Testing team you may come across.
Secure Code Review
Secure Code Review
Detect and remediate coding flaws before they become serious Cyber Security risks.
Secure Code Review is probably the single-most effective technique for identifying security flaws. When used together with automated tools and manual penetration testing, code Secure Code Review can significantly increase the cost effectiveness of any application security verification effort.
Our Secure Code Review Methodology
Our team uses multiple code review techniques
Automated Tool Based
In this approach, the secure code review is done using different open source/commercial tools. Tools are useful in analyzing large codebase. They can quickly identify potential insecure pieces of code in the codebase, which may then be analyzed by the security analyst.
Manual White Box Analysis
In this technique, a thorough code review is performed over the whole code. Logical flaws may be identified which may not be possible using automated tools, such as business logic problems and authorization problems.
Secure Code Review Checklist
| – Design – Configuration – Secure Transmission – Authentication and User Management – Authorization – Data Validation – Application Output | – Session Management – Input Validation – Cryptography – Exception Handling – Auditing and Logging – General Components – Business logic |
How our Secure Code Review process works
Scoping – Establish what needs to be tested ensuring the right approach is implemented.
Code Review – Our secure code developers review your code seeking vulnerabilities.
Reporting – We will present all the findings and solutions to fix them.
Why our approach to Secure Code Review is best for you
Our Secure Code Review team has over 10 years’ experience per certified security engineer, setting us apart from any other Secure Code Review team you may come across.
Secure Software Development
Secure Software Development
Integrate Cyber Security into your software product development.
Our team of Cyber Security engineers have expertise in software product development, and can be augmented into your team to ensure Secure Software Development. Inject our real-world Ethical Hacking expertise into your project to reduce risks from real-world Threat Actors.
Social Engineering & Phishing
Social Engineering & Phishing
What is Social Engineering? Social engineering is the term used for a broad range of malicious activities accomplished through human interactions. It uses psychological manipulation to trick users into making security mistakes or giving away sensitive information.
Social Engineering techniques are: Phishing, Vishing, Impersonation, Pretexting, Spear Phishing.
Unlike automated platforms, our Social Engineering & Phishing completed by our Penetration Testing team is undertaken by certified experts.
 |
We Track and Report Social Engineering & Phishing Results
 |
...
One Time
For clients that are interested in a
one-time collaboration
one-time collaboration
- Choose any services you need
- A Certified Engineer will perform the services
- All vulnerabilities will be offered in our vulnerability management platform and report
- Support will be offered to fix the vulnerabilities
- Retesting the vulnerabilities is offered for free
Contact Now
Subscription
For clients that are interested in
long term collaboration
long term collaboration
- Choose any services you need
- A Certified Engineer will perform the services
- You will receive access to our vulnerability management platform
- Support will be offered to fix the vulnerabilities
- Free retesting
- Any service will be available for you to request as much as needed per month
- Substantial Discount will be offered
- Real-Time collaboration with the security team
Contact Now
Request a Free Quote
Let's Talk
Penetration Testing Questions
What is Penetration Testing?
A penetration test may also be known as Pentesting, a Pentest, or ethical hacking, is an authorized simulated cyber-attack on a computer system or network.
Penetration Testing is used to evaluate the security of the system; this is not to be confused with a vulnerability assessment which evaluates if the system is susceptible to any known vulnerabilities, assigns severity levels to those vulnerabilities, and recommends remediation or mitigation, if and whenever needed.
The primary objective of a Pentest is to identify exploitable vulnerabilities before Threat Actors are able to discover and exploit them.
Penetration testing reveals real-world opportunities for hackers to compromise your applications in ways that allow unauthorized access to sensitive data or even system take-overs for malicious purposes.
XCELIT’s Security Penetration Testing services are based on a systematic approach to vulnerability detection and reporting. Our advanced methodology includes:
Scoping – Working closely with the client to identify what assets need to have a stronger security
Intelligence Gathering – We discover all the sensitive information offered by the targeted assets that can be used by a hacker to understand and execute further attacks
Active scanning and pentesting – From industry-standard approaches, cutting edge tools and manual inspections – our comprehensive methods strive to discover all classes of vulnerabilities
Reporting, Re-adjusting & Re-testing – The vulnerabilities discovered are classified by risk and reported to the client in an easy-to-understand manner. We then discuss together discuss the best remediation approach.
Do I need a Penetration Test?
If you have valuable IP, Records and Data that you want to keep isolated from Threat Actors a Penetration test is a value asset in your tool kit to use to evaluate your Cyber Security Posture.
There are a number of Penetration tests that can be performed based on your needs. For example, XCELIT can undertake Penetration tests to assess your Web Applications, what harm can be done once a firewall is breached, and even what hard can be done if someone has no knowledge of your organisation.
A Penetration Test can be used to identify the weaknesses that may exist within your existing Cyber Security Systems, or otherwise validate your Cyber Security Systems. We have even used Penetration testing to justify spend on network hardening and solution deployment.
Your day-to-day activities may allow weaknesses to have developed over time. For this reason, Penetration Tests are highly recommended, and many standards e.g., ISO27001, call for annual Penetration testing.
Uncertain? Try a once of Penetration test with XCELIT and assess for yourself. You will be surprised.
How to choose a Penetration Testing Provider
Problem solved!
XCELIT has built a Certified, Expert, Efficient and Affordable Penetration Testing Team.
Contact Us