serate-actual / CNCS-Capstone

Senior Capstone project for Champlain College's Computer Networking and Cybersecurity B.S. program
0 stars 0 forks source link

Link with Leahy Center for pen test #20

Closed serate-actual closed 2 years ago

serate-actual commented 2 years ago

Currently talking with joe williams - we are figuring out the RoE etc.

I will meet on the 26th with Dylan Navarro and get a walkthrough of the test.

serate-actual commented 2 years ago

Met on the 26th and cleared various entry methods with Dylan. Emailed Joe et al to get the info percolating from dylan to joe. Started the discussion on RoE

serate-actual commented 2 years ago

Potentially LCDI is out of scope - the doors may be out of scope due to physical plant not approving it. I have a few different methods I could use

  1. Do a physical pen test & not involve the doors (social engineering etc?)
  2. Do a physical vulnerability assessment & return a report?
serate-actual commented 2 years ago

Currently we are taking a step back from this side of the project and letting Eastman deal with Leahy/Champlain/et al. If we have extreme issues, we can step back and retarget our project. Options:

  1. Get a different client
  2. Develop more tools for my kit
  3. Develop a "pen test lab"
  4. Develop a Vuln Assessment Framework
  5. Develop a OSINT Physical framework
serate-actual commented 2 years ago

Keep updates below Scott Stevens & we should be good Client has okayed test if scope SOLELY to Leahy Center doors

serate-actual commented 2 years ago

Scope out the doors

  1. Main leahy center door
  2. Backroom door
  3. Backroom office door
  4. Side room
  5. The backroom office door
serate-actual commented 2 years ago

Revalidated scope with Joe Williams and Scott Stevens

serate-actual commented 2 years ago

Currently working on the Scoping / Roe doc