WestFin Red Team Engagement
Conducted reconnaissance, vulnerability assessments, and service enumeration across Windows, Linux, and pfSense systems using Kali Linux, Nmap, Nessus, Nikto, Gobuster, Burp Suite, and OWASP ZAP. Identified and exploited security weaknesses including anonymous SMB access, LDAP misconfigurations, exposed credentials, HTTP TRACE, and Zerologon (CVE-2020-1472) to demonstrate privilege escalation and lateral movement. Produced a comprehensive penetration testing report with evidence, business impact analysis, remediation recommendations, and defense-in-depth strategies.
Kali LinuxNmapNessusNiktoGobusterBurp SuiteOWASP ZAP