REMOTE PENETRATION TESTING

OVERVIEW

For internal penetration testing, an onsite consultant is not always required for the full duration of an engagement.

The Krypsys GHOST appliance provides an alternative where testing can be delivered remotely, giving our consultants secure access to the customer network while avoiding the additional travel and accommodation costs associated with onsite delivery.

GHOST is a dedicated appliance prepared by Krypsys specifically for remote security assessments. It provides the network presence required for the engagement; the testing itself remains consultant-led and is carried out in the same controlled manner as an onsite test.

The appliance is configured before being shipped to the customer. Once connected to the designated network, it establishes an encrypted outbound connection back to the Krypsys testing environment. This avoids the need to expose an Internet-facing management service or create inbound firewall rules specifically for the engagement.

Before testing begins, we confirm the network location, addressing requirements, systems in scope and rules of engagement with the customer. The appliance is then positioned so that our consultants can reach the internal services required for the test.

TYPICAL USES

Typical uses include

• Internal infrastructure penetration testing
• Active Directory testing
• Internal network service assessment
• Privilege escalation and lateral movement testing
• Internal vulnerability validation
• Network segmentation testing
• Authentication and access-control testing
• Assessment of systems not accessible from the Internet
• Testing across remote offices or distributed locations

Where a standard user account forms part of the scope, this can also be used to assess what an authenticated but non-privileged user could achieve within the internal environment.

The appliance is used solely to provide controlled remote access for the authorised security test. It does not operate as an unattended vulnerability scanner and does not change the scope, authorisation or rules of engagement applying to the work.

Remote delivery is particularly useful where there is no specific requirement for a consultant to be physically onsite. It can provide a more cost-effective option by reducing travel time, accommodation and related expenses while retaining the same consultant-led approach.

It can also be useful for organisations with multiple offices, geographically distributed networks or remote sites, and for repeat or follow-up work where another onsite visit would add unnecessary cost.

At the end of the engagement, the appliance is disconnected from the network and returned to Krypsys. Reporting is provided in the same format as an onsite penetration test, including validated findings, evidence, risk ratings and remediation advice.