12 Common Vulnerabilities Found During Penetration Testing

In this ebook, we aim to assist you in making a business case for penetration testing and educate you about the types of vulnerabilities that may unknowingly be present on your network. Furthermore, we provide guidance on how to prepare your team for the results your penetration tester may uncover.

The report is divided into two parts. Part 1 covers the most common administrative security vulnerabilities such as unpatched internal systems, legacy systems, use of default credentials, inappropriate privileges, phishing, weak password policy, unlocked workstations, and poor physical security.

In Part 2, we delve deeper into technical vulnerabilities such as null session SMB, turned off SMB signing and LLMNR poisoning/relaying, SQL injection, and cross-site scripting (XSS).

Download eBook