Network Infrastructure PenTest
Publicada el 2026-07-17
Descripción de la oferta
Our internal security team needs an external, red-team style penetration test focused exclusively on the network infrastructure. I want you to simulate real-world attacks against three key components—our firewalls, routers & switches, and enterprise-grade wireless networks—to see how quickly and effectively our blue team detects, contains, and responds. Scope • Engage the perimeter and internal segments behind our firewalls. • Enumerate and exploit misconfigurations on Cisco-class routers and layer-3 switches. • Probe the corporate and guest Wi-Fi environments, including roaming vulnerabilities and weak encryption scenarios. Primary objective The engagement is not just about finding vulnerabilities; the bigger aim is to pressure-test our incident-response playbook. Throughout the exercise you will coordinate with a single point of contact for rules of engagement and safety words, then launch attacks without tipping off the responders. I expect time-stamped logs of every action so we can replay the event afterward. Deliverables • Pre-engagement test plan and ROE outline • Live attack window (agreed schedule) with continuous time-sync logging • Comprehensive final report detailing: – Attack paths and exploited weaknesses – How and when each activity should have been detected – Recommendations for tooling, alerting, and process improvements • Post-mortem call to walk our team through the findings and answer technical questions Acceptance criteria All findings must be reproducible and mapped to MITRE ATT&CK techniques; proof-of-concept code or packet captures should accompany critical issues. Preferred toolset is up to you—Kali Linux, Nmap, Metasploit, Wireshark, and other standard offensive security frameworks are all acceptable provided no commercial license constraints are introduced. The engagement will be fully remote using VPN access we provide, and must comply with local laws and our internal change-control policy. Let’s agree on the dates and you can start crafting the attack plan right away.
Skills
Fuente original: freelancer