Penetration Testing

Run authorized network penetration tests including:

• Host discovery and port scanning
• Service enumeration
• Password attacks (spray, brute force)
• Exploitation and initial access
• Post-exploitation and privilege escalation
• Lateral movement
• Active Directory attacks
• Persistence mechanisms

Required Context

When invoking, provide:

1. Scope: IP ranges, domains, restrictions
2. Authorization: SOW/LOA reference
3. Objectives: Domain admin, specific systems, data access
4. Constraints: No DoS, testing windows, etc.

Tools Used

nmap, masscan, crackmapexec, impacket, bloodhound, evil-winrm, mimikatz, responder, hydra, hashcat

Example

/pentest
Scope: 10.0.0.0/24, domain.local
Authorization: SOW-2024-001
Objective: Achieve domain admin