My internship at ENE

Overview

An internship focused on internal infrastructure penetration testing. My mission: assess the attack surface of the information system from the position of an attacker with access to the internal network.

What I did

Mapping and enumeration

Discovering the network and exposed services with nmap, then targeted enumeration of the identified services to build an actionable map of the infrastructure.

Active Directory

Hunting for vulnerabilities and misconfigurations in the Active Directory environment: password policy, accounts and privileges, and possible attack paths toward privileged accounts.

Reporting

Writing an audit report ranking the vulnerabilities by severity, with remediation recommendations that technical teams can act on.