In this project, you have been hired to conduct a penetration test on a network operated by Green Clothing, a small retail company. Green Clothing has been increasingly concerned about the state of its computer systems in recent months due to the spread of malware. Cardholder data is collected during the payment of purchases by swiping or keying the card using the point of sale (POS) terminal. The information is then sent to a local server at each store before being sent out to the processor. No cardholder data is transmitted between stores or back to corporate. After receiving a confirmation from the processor, cardholder data is purged from the POS server. Corporate has a persistent VPN connection to each of the store locations to allow for the administration of networked resources, accessing CCTV recordings, and checking inventory. Green Clothing company is looking to conduct a penetration test and for a proposal to be presented to them with the methods and procedure on how the pen test will be executed.
State which processes and techniques you will use to conduct a penetration test on the Green Clothing Company including the following:
Scope
Internal
External
Reconnaissance
Passive
Active
Scanning
Network footprinting
OS/Device fingerprinting
Vulnerability
Gaining Access
Offline
Online
Maintaining Access
Clearing Tracks
In this project, you have been hired to conduct a penetration test on a network
April 5, 2024