Weak, reused, or compromised passwords can allow attackers to gain initial access to the internal network, user accounts, or critical systems.

Misconfigured systems and permissions can allow attackers to increase their level of access and obtain administrative or other privileged permissions.

We assess whether an attacker who has compromised one device or account can move between other systems and progressively expand their access across the network.

Misconfigured firewalls, routers, network services, or access rules can expose systems and services to unauthorized users.

Inadequate separation between network segments can allow attackers to access systems that should not be reachable from a compromised part of the network.

Legacy protocols, weak authentication, or misconfigured internal services can provide additional opportunities to compromise infrastructure or expand an attack.

Weaknesses in Active Directory configuration, Kerberos, delegation, or account management can lead to the compromise of domain accounts and, in severe cases, the entire domain.

A combination of vulnerabilities and misconfigured permissions can allow attackers to access servers, databases, and other critical systems within the organization.

Insecure Wi-Fi configurations, weak authentication, or access point misconfigurations can allow unauthorized users to connect to the corporate network.

Weak authentication, misconfiguration, or insufficiently protected VPN accounts can allow attackers to gain remote access to internal infrastructure.

Misconfigured network rules can allow communication between network segments that should be isolated from each other for security reasons.

Misconfigured permissions, delegation, or relationships between accounts and groups can allow attackers to escalate privileges and potentially gain access to privileged domain accounts.

Internal services unintentionally exposed to the internet can provide attackers with an entry point into the infrastructure and expose systems that should not be publicly accessible.