Pen Testing / Internal Network
Internal network
penetration testing.
Assumed-breach simulation against your internal estate. Active Directory abuse, lateral movement, credential harvesting, privilege escalation, and domain-dominance pathing — mapped to MITRE ATT&CK.
An on-network engagement that starts where most attackers eventually arrive: inside. We’re handed a standard user (or no credentials at all), placed on a representative subnet, and tasked with reaching crown-jewel assets — domain admin, finance systems, source-code repositories, whatever you care about most.
Your perimeter is not your last line of defense — it’s your first. Once an attacker has phished a single user, the inside of your network is what stops them. Or doesn’t. We tell you which one, with receipts.
Every technique mapped — discovery, credential access, lateral movement, persistence, exfiltration.
Tests defense-in-depth, not just perimeter posture. Aligned with modern threat actor TTPs.
Includes a focused Active Directory configuration review — Kerberoasting, AS-REP, ACL abuse, GPO weaknesses.
How we run the engagement.
Network reconnaissance
Subnet mapping, service discovery, share enumeration, broadcast-protocol abuse (LLMNR / NBT-NS / mDNS).
Credential access
Kerberoasting, AS-REP roasting, NTLM relay, password spray — controlled and logged.
Lateral movement & privilege escalation
PsExec, WMI, WinRM, DCSync, ACL abuse — every step documented.
Objective achievement & reporting
Path to domain dominance, blast radius, and a defensible remediation roadmap.
What lands on your desk.
Ready to scope this engagement?
Tell us the target, the rules of engagement, and what you need to prove. We’ll come back with a scope, a timeline, and a sample report.