The following form will enable us to determine the scope and requirements of your Security Vulnerability Assessment Request. Please review the Terms of Service as you must agree to these before any analysis of your systems will take place.
Note that no scans will be initiated against your systems until the outline of our assessment plan is confirmed as acceptable to you.
Assessment Methodology
The full assessment from HackerTarget.com involves a number of steps:
- Manual review of your website if you are running web services to get an overview of the target.
- Service enumeration, using Nmap a port scan will be conducted against your IP to determine what services are open and available for manual testing
- OpenVas vulnerability scan is performed. This will confirm listening services and check those against a database of exploitable services. To see if you are running any services that are mis-configured or vulnerable to exploits.
- Nikto will be used to check your web server(s) for mis-configurations and exploitable web applications
- SQL injection testing tools SQLiX and Sqlmap will be used to test any possible injection points, that could lead to access to your operating system or data.
- Results are reviewed and any irregularities are checked manually to confirm if the vulnerability is present or if it is a false positive.
- A report is compiled including recommended remediation for any issues found, before being sent through to your designated email address.
- Estimated consulting time: 4 hours
Note that this assessment is the next level up from automated scanning and is designed to provide you with recommendations for securing your server against the majority of attackers.
However if you feel your data is critical or you are an organisation that may be under targeted attack by focused intruders it is recommended that a more comprehensive assessment be undertaken – one extended assessment option is our Organizational Assessment. This involves a thorough investigation of your organizational footprint and external services.
- Manual open source intelligence gathering using dns, search engines, google hacking and other methods will allow us to simulate a targeted attack against your organization.
- Using the data gathered from the open source intelligence gathering phase we will do a thorough assessment against your external servers, services and web sites. This will usually involve all of the steps in the assessment methodology for a single server assemnt.
- Advanced Persistent Threat’s can be defended against using the report that we supply as part of this assessment.
- Estimated Consulting Time: 12 hours
No matter what your requirements we are happy to offer an obligation free quote. Fill out the form below with as many details as possible and we will provide a recommended solution.
