Business Logic:

Every organization requires a penetration tester to identify the loopholes in their network, which hackers can attack and take advantage of The penetration testers and ethical hackers secure their networks and web applications from Black Hat Hackers. These penetration tests are usually done by someone who has very little or no prior knowledge of the network to expose the blind spots that could have been missed by the developer of the organization. The penetration testers are given responsibility to perform penetration testing and hand over network reports to the client if the application or network can be hacked

.

Consideration/Scenario:

A web development company configured its network with many devices and started working on website development. They hired you as a penetration tester, and you need to perform penetration testing on all their clientàsystems and websites. To test the systems’ security, you must verify the system by creating a virus/trojans and injecting it into the system.

This will help you analyze how the system is getting affected by the virus. After these tests are completed, you also need to ensure that the information transferred through email by the organizationàemployees is safe. For that purpose, you need to perform data encryption and steganography techniques to hide the information.

Make a report of all the tests and share it with the administrator to take further actions.

To start with the testing, we need to gather information about the website. To do so, perform the below tasks:

Information Gathering on Websites Gather information about Instagram (website). After information gathering, we need to test the companyàsecurity network as well. To do so, we will test their local system and its operating system (operating system). So, we need to perform enumeration and penetration testing on the company system.

Enumeration and Penetration Testing on System

Enumerate usernames from the local system using the Hyena tool and check the availability of a shared folder.

Test the Windows 10 security using

ProRAT (or msfvenom) and get access to the key logs. Delete the files from desktop or C drive and execute the commands to create a new folder on the desktop and upload any file from your system.

Now, after testing the system/network, we must test the antivirus in their system.

To do so, we will create a virus and inject it into their system to determine/exploit its vulnerabilities.