{"id":210,"date":"2009-10-27T11:35:19","date_gmt":"2009-10-27T17:35:19","guid":{"rendered":"http:\/\/www.jedge.com\/wordpress\/?page_id=210"},"modified":"2011-08-15T11:15:49","modified_gmt":"2011-08-15T17:15:49","slug":"technical-assessment-plans","status":"publish","type":"page","link":"https:\/\/www.jedge.com\/wordpress\/technical-assessment-plans\/","title":{"rendered":"Technical Assessment Plans"},"content":{"rendered":"

This page will provide links to Technical Assessment Plans that I have created that can be used to conduct assessments using the tools and utilities that a penetration tester would use.\u00a0 The assessment plans are structured in a way to help with the documentation of evidence for inclusion in a workpaper process.\u00a0 The plans provide helpful information on how to install, configure, and use the tools to obtain the evidence needed for an engagement.\u00a0 This page will continue to grow and improve as I document the methods I used when conducting audit engagements as a penetration tester.<\/p>\n

External Fingerprinting Worksheet<\/a> – Use standard Windows and Linux commands and freely download-able utilities to gather information about a target.<\/p>\n

Windows Enumeration Worksheet<\/a> – Use standard Windows commands and freely download-able utilities to enumerate the machines, users, and groups in a networked Windows Domain environment.<\/p>\n

Windows Password Assessment Worksheet<\/a> – Use open source and freely download-able utilities to assess the password strength in a networked Windows Domain environment.\u00a0 Password testing includes password policy assessment, password hash extraction, and online and offline dictionary attacks.<\/p>\n

SNMP Assessment Worksheet<\/a> – Use open source and freely download-able utilities to assess the SNMP protocol.\u00a0 This is for auditors that do not have access to or cannot afford the Solarwinds toolset.\u00a0 This is version 0.1 of the document and I plan on making updates and add new tools in the future.<\/p>\n","protected":false},"excerpt":{"rendered":"

This page will provide links to Technical Assessment Plans that I have created that can be used to conduct assessments using the tools and utilities that a penetration tester would use.\u00a0 The assessment plans are structured in a way to help with the documentation of evidence for inclusion in a workpaper process.\u00a0 The plans provide […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"class_list":["post-210","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.jedge.com\/wordpress\/wp-json\/wp\/v2\/pages\/210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jedge.com\/wordpress\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.jedge.com\/wordpress\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.jedge.com\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jedge.com\/wordpress\/wp-json\/wp\/v2\/comments?post=210"}],"version-history":[{"count":5,"href":"https:\/\/www.jedge.com\/wordpress\/wp-json\/wp\/v2\/pages\/210\/revisions"}],"predecessor-version":[{"id":421,"href":"https:\/\/www.jedge.com\/wordpress\/wp-json\/wp\/v2\/pages\/210\/revisions\/421"}],"wp:attachment":[{"href":"https:\/\/www.jedge.com\/wordpress\/wp-json\/wp\/v2\/media?parent=210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}