Please enable JavaScript.
Coggle requires JavaScript to display documents.
Gray-Box Assessment aligned with NIST SP 800-115, PTES - Coggle Diagram
Gray-Box Assessment
aligned with NIST SP 800-115, PTES
Overview
Definition
Objectives
Scope
Business Goals
Assessment Deliverables
Rules of Engagement
Assessment Methodology
Planning
Scope Definition
Asset Identification
Target Classification
Stakeholder Identification
Rules of Engagement
Legal Authorization
Risk Assessment
Information Gathering
Partial Network Knowledge
Architecture Review
Application Documentation
API Documentation
Source Code Review
Credentials Review
User Roles
Active Directory Information
Cloud Environment Information
Existing Security Controls
Threat Modeling
Business Logic Analysis
Data Flow Analysis
Trust Boundaries
Attack Surface Analysis
Threat Actors
Attack Vectors
MITRE ATT&CK Mapping
STRIDE Analysis
Vulnerability Assessment
Network Vulnerability Assessment
Web Application Assessment
API Assessment
Mobile Application Assessment
Desktop Application Assessment
Cloud Security Assessment
Wireless Security Assessment
Active Directory Assessment
Container Security Assessment
Kubernetes Assessment
Database Assessment
Operating System Assessment
Middleware Assessment
Third-Party Components
Configuration Review
Patch Verification
Exploitation
Authentication Bypass
Authorization Testing
Privilege Escalation
Command Injection
SQL Injection
Cross-Site Scripting
Cross-Site Request Forgery
XML External Entity
Server-Side Request Forgery
Remote Code Execution
File Upload Vulnerabilities
File Inclusion
Directory Traversal
Insecure Deserialization
Business Logic Exploitation
API Abuse
Session Hijacking
Token Manipulation
Password Attacks
Credential Stuffing
Lateral Movement
Post Exploitation
Sensitive Data Access
Data Exfiltration Simulation
Privilege Persistence
Credential Harvesting
Active Directory Enumeration
Trust Relationship Analysis
Domain Escalation
Cloud Resource Enumeration
Secret Discovery
Impact Assessment
Reporting
Executive Summary
Technical Findings
Risk Ratings
CVSS Scoring
Business Impact
Proof of Concept
Screenshots
Evidence Collection
MITRE ATT&CK Mapping
OWASP Mapping
Remediation Recommendations
Validation Steps
Lessons Learned
Remediation Validation
Patch Verification
Configuration Verification
Re-Testing
Risk Reduction Validation
Final Report
Knowledge Level
User Credentials
Standard User Access
VPN Access
Internal Documentation
Network Diagram
System Architecture
Partial Source Code
API Documentation
Limited Administrative Information
Assessment Targets
External Infrastructure
Internal Infrastructure
Web Applications
APIs
Mobile Applications
Desktop Applications
Cloud Infrastructure
Containers
Kubernetes
Active Directory
Identity Providers
Email Infrastructure
Database Servers
DNS Infrastructure
Web Servers
Application Servers
Reverse Proxies
Load Balancers
Firewalls
WAF
VPN Gateways
Wireless Networks
IoT Devices
SCADA ICS
Authentication Testing
Password Policy Review
Password Spraying
Credential Reuse
Multi-Factor Authentication Validation
Session Management
Account Lockout
Single Sign-On
OAuth
SAML
JWT Security
API Authentication
Kerberos
NTLM
Authorization Testing
Role-Based Access Control
Attribute-Based Access Control
Horizontal Privilege Escalation
Vertical Privilege Escalation
Insecure Direct Object Reference
Forced Browsing
Access Token Validation
API Authorization
File Permission Review
Web Application Security
OWASP Top 10
Authentication
Session Management
Input Validation
Output Encoding
Business Logic Testing
File Upload Testing
Security Headers
TLS Configuration
Cookie Security
API Security
GraphQL Security
WebSocket Security
API Security
REST APIs
SOAP APIs
GraphQL APIs
Authentication Testing
Authorization Testing
Rate Limiting
Input Validation
Mass Assignment
Object Level Authorization
Token Security
API Gateway Review
Infrastructure Security
Network Segmentation
Firewall Rules
Routing Review
VLAN Security
DNS Security
DHCP Security
SSH Security
Remote Management
Service Enumeration
Banner Grabbing
Patch Levels
Active Directory Security
Domain Enumeration
User Enumeration
Group Enumeration
Group Policy Review
Trust Relationships
Kerberoasting
AS-REP Roasting
Delegation Review
ACL Review
LAPS Review
BloodHound Analysis
Cloud Security
AWS
IAM
EC2
S3
VPC
Security Groups
CloudTrail
CloudWatch
Secrets Manager
Azure
Entra ID
Virtual Machines
Storage Accounts
NSG
Key Vault
Google Cloud
IAM
Compute Engine
Cloud Storage
Firewall Rules
Container Security
Docker
Kubernetes
Container Images
Image Scanning
Secrets Management
RBAC
Admission Controllers
Network Policies
Pod Security
Database Security
MySQL
PostgreSQL
Microsoft SQL Server
Oracle
MongoDB
Redis
Database Permissions
SQL Injection
Encryption
Backup Security
Wireless Security
WPA2
WPA3
Rogue Access Points
Evil Twin
Wireless Segmentation
Guest Networks
Social Engineering Validation
Phishing Simulation
Vishing
Smishing
USB Drop
Physical Access Validation
Security Standards
OWASP Web Security Testing Guide
OWASP Top 10
PTES
NIST SP 800-115
NIST Cybersecurity Framework
MITRE ATT&CK
CIS Controls
ISO 27001
PCI DSS
SOC 2
HIPAA
Security Tools
Nmap
Nessus
Qualys
OpenVAS
Burp Suite
OWASP ZAP
Nikto
Metasploit
sqlmap
BloodHound
CrackMapExec
Impacket
Hydra
John the Ripper
Hashcat
Gobuster
ffuf
Wireshark
tcpdump
Netcat
Amass
Subfinder
Trivy
ScoutSuite
Prowler
Pacu
kube-bench
kube-hunter
Risk Analysis
Critical
High
Medium
Low
Informational
CVSS Base Score
Likelihood
Business Impact
Technical Impact
Risk Acceptance
Deliverables
Executive Report
Technical Report
Vulnerability Matrix
Risk Register
Evidence Repository
Screenshots
Proof of Concept
Attack Path Diagram
MITRE ATT&CK Mapping
OWASP Mapping
Remediation Roadmap
Retest Report
Final Assessment Report