Penetration Testing mailing list archives

Help - Can I do an external pen-test in this network?


From: to.tushar () yahoo com
Date: 7 Mar 2008 06:52:00 -0000

Hi,
 
I have just completed my classes of Penetration Testing and have been asked to do a project.
I have an option to do either external or internal pen test.

I can do an internal pen-test in one organization I've got, however, I am not sure how I can do an external pen-test in 
this scenario. The following is the network. Please tell me if I can do an external pentest in this case and where can 
I start.
 
Internet -> router / modem provided by ISP (only static IP in organization)-> Switch -> about 100 systems in internal 
network (pvt IPs).
Webserver & mails are hosted on public server. 
 
Ping: success
Tried nmap: Host seems down. If it is really up, but blocking our ping probes, try -P0 (we are scanning a router here, 
so it won't work)

Is there anyway I can get into this organization by doing an external pen-test. This is a small company into s/w 
development and uses only messengers to communicate with the outside world / clients etc. No major servers inside 
organization and none with pub IP address.
 
If you need any more info, please lemme know.
 
Regards,
Tushar

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: