Skip to content

Internal Penetration Testing

Most security plans focus on keeping attackers out. But what happens if one gets in? A CoNetrix Internal Penetration Test shows you what an attacker could reach once they’re inside your network, so you can put controls where they matter most.

SEC-InternalPenTest

Assume the Breach, Know Your Risk

We start from the point where an attacker already has access to your internal network, then work the way they would. Automated scanning finds the weak spots, and a trained penetration tester goes after them to see how far each one leads. You see which systems are vulnerable and what paths an attacker could take to get more access.

That shows you where to add protection and what to fix first. It also covers threats that edge controls can’t, like a malicious employee or vendor. Findings are sorted by risk and come with recommendations and a personal review with a security expert. After the test, you can call us with questions about findings or upcoming exams.

Service Features

An Internal Penetration Test is performed remotely, using a CoNetrix system connected to your internal network. It works differently from an audit or vulnerability assessment, which check your controls from the inside with administrative access. The penetration test takes the attacker’s side, so it pairs well with either one by showing how serious the issues they find really are. If you want a more focused option, Internal Penetration Test Essentials combines a vulnerability assessment with a limited penetration test. Engagements can be adjusted to fit your size and complexity.

Request More Information Back to Penetration Testing Services

  • Remote testing using the CoNetrix ToolBox connected to your internal network

  • Automated vulnerability scanning

  • Attempted exploitation of discovered vulnerabilities by a trained penetration tester

  • Checks for default and common credentials

  • Kerberos abuse attacks and passive packet inspection

  • Search for passwords stored in Active Directory Group Policy preference files

  • Review of Active Directory permissions and relationships to find privilege escalation paths

  • Findings sorted by risk, with recommendations and free findings management software