Study Notes / Practical Network Penetration Tester (PNPT) by TCM Security / Report Writing & Client Presentation / Common Pentest Findings (External Testing)

Common Pentest Findings (External Testing)

Insufficient Authentication Controls

Weak Password Policy

Insufficient Patching

Default Credentials

Insufficient Encryption (The Most by far)

Information Disclosure

Username Enumeration

Default Web Pages

Open Mail Relays

IKE Aggressive Mode

Unexpected Perimeter Services

Insufficient Traffic Blocking

Undetected Malicious Activity

Historical Account Compromises

Reader ratings (none yet)

Ratings come from verified buyers only.