Internal Infrastructure Penetration Testing

Internal Infrastructure Penetration Testing is acontrolled assessment of your internal network, systems and services from aninternal attacker’s perspective. It identifies vulnerabilities andmisconfigurations that could allow lateral movement, privilege escalation orcompromise of critical systems.

External infrastructure testing simulates aninternet-based attacker targeting public-facing systems. Internalinfrastructure testing simulates an attacker who already has access to theinternal network, such as through a compromised workstation, rogue device orinsider threat.

No. Blacklock’s internal infrastructuremethodology is designed to test from an unauthenticated internal userperspective. Domain or user credentials are only used where specifically agreedduring scoping.

Testing covers open ports, vulnerable services,outdated patches, default credentials, insecure protocols, weak configurations,poor segmentation, password hash exposure, local privilege escalation, lateralmovement and domain compromise paths.

Yes, where Active Directory is in scope. Blacklock canassess domain information exposure, trust relationships, privilege escalationpaths, credential exposure and attack paths that could lead to domainadministrator compromise.

Testing is performed in a controlled manner with agreedscope and testing windows. Potentially disruptive actions are discussed beforeexecution, and testing can be adjusted to meet operational requirements.

Blacklock typically requires network access from anagreed internal LAN segment, test host or controlled access method. Additionalinformation such as IP ranges, VLANs, server zones and critical asset lists maybe requested during scoping.

Blacklock uses a private internal agent to remotelyconnect to the local network.

The duration depends on the number of subnets, VLANs,systems, services and domain complexity. A standard internal assessmenttypically takes several days to two weeks, while larger environments mayrequire additional time.