Vulnerability scanning

•   Network perimeter
  * Number of external network perimeter IP addresses to scan

  * Number of internal network perimeter IP addresses to scan
•   Web applications
  * What is the total number of WEB services in the testing scope? *A WEB service should be understood as any HTTP \ HTTPS accessible site \ portal \ service \ interface \ application that has its own separate and unique business logic.
•   According to PCI DSS (ASV scan)
  * Number of IP addresses for ASV scanning

Penetration test

•   External network perimeter
  * What is the total number of external, publicly available IP addresses included in the testing scope? *We recommend to include in the scope of the project only “live” addresses for an overall cost reduction

  * Which testing model is more preferable: white, black or gray box?

  •   The white box is a testing model whereby auditors are provided with full information about the systems under test and full access to them. (Applicable, if there are documentation and the client is ready to provide consultants with access to their systems)
  •   A black box is an imitation of an attacker who does not have any information about the systems under test, but only has access to the network. In this version of the test, an additional stage of intelligence is added, the time and cost of testing increase somewhat.
  •   The gray box is an imitation of an attacker (an insider or a partner who has remote access to the local network), who has partial information and access to the systems under test. Most often, a list of internal IP addresses and open TCP \ UDP ports and \ or a test account in the system with minimal rights are provided.
  • This field is required.
•   Internal network
  * What is the total number of external, publicly available IP addresses included in the testing scope? *We recommend to include in the scope of the project only “live” addresses for an overall cost reduction

  * Variant of the test (you need to choose one):

  •   only the physical presence of auditors on the site (you must specify the address)
  •   VPN provisioning is possible for remote testing
  •   it is possible to place the equipment of auditors (mini-server) on the site with remote auditor access to it
  • This field is required.
•   Web application
  * What is the total number of WEB services in the testing scope? *A WEB service should be understood as any HTTP \ HTTPS accessible site \ portal \ service \ interface \ application that has its own separate and unique business logic.

  Specify URLs of Web-applications (if applicable)

  Briefly describe the purpose and functionality of each application - (if possible)

  * Which testing model is more preferable: white, black or gray box?

  •   The white box is a testing model whereby auditors are provided with full information about the systems under test and full access to them. (Applicable, if there are documentation and the client is ready to provide consultants with access to their systems)
  •   A black box is an imitation of an attacker who does not have any information about the systems under test, but only has access to the network. In this version of the test, an additional stage of intelligence is added, the time and cost of testing increase somewhat.
  •   The gray box is an imitation of an attacker who has partial information and access to the systems under test.
  • This field is required.
•   Internet-Bank application
  Specify the URL of the application (if applicable)
•   Mobile application \ API
  Name and address of the application if it is published

  * Brief description of the application.

  * Platforms to Test

  •   Android
  •   IOS
  •   Windows
  • This field is required.
•   SCADA
  * Describe the purpose of SCADA

  * City of equipment placement
•   Employee testing by social engineering methods
  * Do you need to check the reaction of employees to the methods of obtaining information by phone (voice phishing)?

  •   Calling as many employees as possible until the relevant units prevent the attack. (statistical approach)
  •   Spot calls 5 - 10 selected employees with an attempt to hide the fact of development of the attack from the information security unit and an attempt to further develop the attack on internal resources
  •   No
  • This field is required.

  * Do you need to check the reaction of employees to the methods of obtaining information using fake emails (phishing)? *for example, it could be a forged letter on behalf of the company's CIO, sent to internal employees with a request to enter logins / passwords on a fake corporate mail site.

  •   Yes
  •   No
  • This field is required.
•   Wireless networks
  * How many access points are in test scope? * the assessment includes the following attacks - an attempt to guess a password for networks, an attempt to go beyond the open guest network and evil twin attack

  * List the cities in which access points are located.
•   Code analysis for standard vulnerabilities
  * Brief description of the application.

  * Used programming languages and technologies

  Number of lines of code

  Physical penetration test

Additional services

•   Analysis of the configurations of information security systems in accordance with the best practices
  * Total number of systems for analysis (network equipment, servers, software, databases)

  Brief system description
•   Network Architecture Security Analysis
  * Is there detailed documentation describing the network architecture and network security principles?

  •   Yes
  •   No
  • This field is required.

  * City where the network infrastructure is located
•   Analysis of basic information security processes relative to the system under test
•   DDoS Attack Security Analysis
•   Application load testing\performance testing
  Name and address of the application if it is published

  * Application Brief description