Blog Data Security

Varonis Seven Part Guide to Penetration Testing

Our sprawling pen-testing series has taken on a life of its own!  For your convenience and blog reading pleasure, we’ve assembled all the links to this six seven part series below....
Michael Buckbee
1 min read
Last updated October 14, 2022

Contents

    Our sprawling pen-testing series has taken on a life of its own!  For your convenience and blog reading pleasure, we’ve assembled all the links to this six seven part series below.

    Read consecutively, or since they’re mostly self-contained posts, skip ahead to the topics that appeal to you.

    Part 1: Risky Business

    Part 2: Rats!

    Part 3: Rats & Reverse Shells

    Part 4: Making a Lateral Move

    Part 5: Hash Dumping & Cracking

    Part 6: Passing the Hash

    Part 7: Exfiltration and Conclusions

    By the way, if you just want a list of good pen testing tools for newbies, check out this post.

     

    What should I do now?

    Below are three ways you can continue your journey to reduce data risk at your company:

    1

    Schedule a demo with us to see Varonis in action. We'll personalize the session to your org's data security needs and answer any questions.

    2

    See a sample of our Data Risk Assessment and learn the risks that could be lingering in your environment. Varonis' DRA is completely free and offers a clear path to automated remediation.

    3

    Follow us on LinkedIn, YouTube, and X (Twitter) for bite-sized insights on all things data security, including DSPM, threat detection, AI security, and more.

    Michael Buckbee
    Michael Buckbee Michael has worked as a sysadmin and software developer for Silicon Valley startups, the US Navy, and everything in between.

    Try Varonis free.

    Get a detailed data risk report based on your company’s data.
    Deploys in minutes.
    Get started View sample

    Keep reading

    Varonis tackles hundreds of use cases, making it the ultimate platform to stop data breaches and ensure compliance.

    penetration-testing-explained,-part-vii:-exfiltration-and-conclusions
    Penetration Testing Explained, Part VII: Exfiltration and Conclusions
    penetration-testing-explained,-part-vii:-exfiltration-and-conclusions
    Michael Buckbee
    March 3, 2016
    In this series of posts, I covered ideas to get you started using basic testing software to find security vulnerabilities. There are more advanced tools, such as Metasploit, which lets...
    penetration-testing-explained,-part-v:-hash-dumping-and-cracking
    Penetration Testing Explained, Part V: Hash Dumping and Cracking
    penetration-testing-explained,-part-v:-hash-dumping-and-cracking
    Michael Buckbee
    December 2, 2015
    In the previous post in this series, I guessed a local password and then tried various ways to move laterally within my mythical Acme network. But what happens if you can’t...
    penetration-testing-explained,-part-vi:-passing-the-hash
    Penetration Testing Explained, Part VI: Passing the Hash
    penetration-testing-explained,-part-vi:-passing-the-hash
    Michael Buckbee
    January 6, 2016
    We’re now at a point in this series where we’ve exhausted all our standard tricks to steal credentials — guessing passwords, or brute force attacks on the hash itself.  What’s...
    penetration-testing-explained,-part-iii:-playing-with-rats-and-reverse-shells
    Penetration Testing Explained, Part III: Playing with RATs and Reverse Shells
    penetration-testing-explained,-part-iii:-playing-with-rats-and-reverse-shells
    Michael Buckbee
    October 8, 2015
    Last week I broke into a Windows 2008 server and inserted a remote access trojan or RAT. Don’t call security, I did this in a contained environment within virtual machines....