Sample Report: Internal Network and Active Directory Pentest
33 pages · German or English · PDF
Starting point: an attacker knows the password of a single employee account, for example after a phishing email. How far do they get in the network of the fictional Eulach Metallbau AG, and how fast? Starting from a standard account without special rights, we gained full control of the Active Directory domain within 32 minutes. The report documents the attack path and nine findings, each with proof, risk rating and concrete remediation.
