Hacking Scenario | Analyzing Typical Attack Scenarios on Corporate NetworksArticle Contents:
⏺Perimeter Penetration:
1. Zero-day is possible:
Scenario 1. Credential Brute Force;
Scenario 2. Web Vulnerability Exploitation;
Scenario 3. Exploitation of Known Vulnerabilities;
Scenario 4. Social Engineering;
Scenario 5. Public Data;
Scenario 6. Sandbox Exit;
⏺Gaining Control of the Corporate Information System:
Scenario 1. Domain Account Brute Force;
Scenario 2. Network and Data Link Protocol Attacks;
Scenario 3. SMB Relay Attack;
Scenario 4. Process Memory Reading;
Scenario 5. Group Policies;
Scenario 6. Kerberos Golden Ticket;
Scenario 7. Pass the hash and pass the ticket. Two-factor authentication attack.
This article is a collection of typical attack scenarios used in company penetration tests and allowing for gaining control of the customer's network in 80% of cases.
