CYBERSECTRUST | Pentesting Modules & Offensive Capabilities

EXTERNAL PENETRATION TEST

EXT-SEC_REV_1.1

AVERAGE CRITICALITY

CRITICAL

OBJECTIVE & ANALYSIS

Evaluates the resilience of your public perimeter (exposed to the Internet) against remote attack attempts. We target software flaws and misconfigurations on your entry gateways.

CONTROL SCOPE

Asset discovery & mapping (OSINT)
Tactical port scanning & WAF evasion
Data leak & compromised credentials harvesting
Exploitation of obsolete exposed services

ATTACK VECTOR TELEMETRY

Active Threat Level 92%

Coverage Depth 85%

INTERNAL PENTEST / VPN ACCESS

INT-SEC_REV_1.0

AVERAGE CRITICALITY

HIGH

OBJECTIVE & ANALYSIS

Simulates an attacker with physical access inside your offices (LAN/Wi-Fi connection) or remote access (compromised VPN access). Targets Active Directory infrastructure, sensitive file shares, and privilege escalation.

CONTROL SCOPE

Active Directory audit (Kerberoasting, Bloodhound)
VPN network reconnaissance & MFA bypass
Local privilege escalation & lateral movement
Network segregation analysis (VLAN segregation)

ATTACK VECTOR TELEMETRY

Active Threat Level 96%

Coverage Depth 90%

MOBILE PENETRATION TEST (APK & IOS)

MOB-SEC_REV_1.3

AVERAGE CRITICALITY

HIGH

OBJECTIVE & ANALYSIS

Comprehensive analysis of Android (APK) and iOS (IPA) mobile applications. We evaluate reverse engineering resistance, local data storage security, and the robustness of communication exchanges with your servers.

CONTROL SCOPE

Reverse engineering & decompilation (Disassembly)
SSL Pinning bypass & Root/Jailbreak detection
Local secrets storage audit (Keychain/Keystore)
Hot memory manipulation (Dynamic instrumentation)

ATTACK VECTOR TELEMETRY

Active Threat Level 88%

Coverage Depth 95%

WEB APPLICATION PENETRATION TEST

WEB-SEC_REV_2.0

AVERAGE CRITICALITY

HIGH

OBJECTIVE & ANALYSIS

Evaluates the security of your web applications and client portals by targeting business logic flaws, authentication defects, and complex authorization bypasses based on the OWASP Top 10 framework.

CONTROL SCOPE

Complex injections (SQL, NoSQL, Commands, SSRF, XSS)
Authentication & session logic bypasses
Insecure direct object references (IDOR)
Sensitive data exposure & misconfiguration

ATTACK VECTOR TELEMETRY

Active Threat Level 95%

Coverage Depth 92%

API PENETRATION TEST (REST / GRAPHQL)

API-SEC_REV_1.2

AVERAGE CRITICALITY

CRITICAL

OBJECTIVE & ANALYSIS

Specific audits for modern backends exposing REST, GraphQL or gRPC endpoints. This pentest assesses the security of token systems (JWT, OAuth), schema injections, and API rate-limiting evasion.

CONTROL SCOPE

Property-level authorization validation (BOLA/BFLA)
JWT dictionary attacks & tampering
GraphQL query pollution & abusive introspection
Rate limiter evasion & application DoS

ATTACK VECTOR TELEMETRY

Active Threat Level 94%

Coverage Depth 88%

OUR PENTESTING MODULES

EXTERNAL PENETRATION TEST

OBJECTIVE & ANALYSIS

CONTROL SCOPE

ATTACK VECTOR TELEMETRY

INTERNAL PENTEST / VPN ACCESS

OBJECTIVE & ANALYSIS

CONTROL SCOPE

ATTACK VECTOR TELEMETRY

MOBILE PENETRATION TEST (APK & IOS)

OBJECTIVE & ANALYSIS

CONTROL SCOPE

ATTACK VECTOR TELEMETRY

WEB APPLICATION PENETRATION TEST

OBJECTIVE & ANALYSIS

CONTROL SCOPE

ATTACK VECTOR TELEMETRY

API PENETRATION TEST (REST / GRAPHQL)

OBJECTIVE & ANALYSIS

CONTROL SCOPE

ATTACK VECTOR TELEMETRY