Desarrollo de un toolkit de pruebas de intrusión basado en OSSTMM

Abstract

The current Project is developing a Toolkit for Penetration Testing through formal security procedures based on the methodology OSSTMM Version 3. The audited systems comprise a perimeter network, whose devices are defined by the methodology “Cisco Safe” module "Internet de la Empresa". These devices are based on safety recommendations identified by this methodology. Project development begins with an analysis of requirements, then determines the design and implementation of both the penetration testing Toolkit as the Perimeter network and finally the results and their analysis are documented. The development of penetration testing Toolkit considers the phases defined by the OSSTMM methodology, starting with the induction phase to understand the requirements of the audit, the scope and limitations, the phase of interaction that determines the scope by interacting with the objectives, the research phase that reveals the way of working of the assets, control settings and services, to end the intervention phase that validates the availability and consistency of the systems when they were exposed to prolonged outages.