Microsoft® Windows® 2000 Security Handbook

Getting Prepared for a Penetration Test

Because Windows 2000 is comparatively new, the armies of crackers on the Internet have not had long to batter upon its fortifications. This is not so good for penetration testing because we attempt to emulate them. Although there are no tried and true ways of overcoming Windows 2000 security as of yet, some techniques work well against most systems on the network today. The following list takes you through the steps a penetration test should take.

• Generating an attack plan—Outline the steps for creating a successful penetration test plan and get it through management.

• Scouting the site—Here is the first actual penetration testing, scanning the network to get data to look for vulnerabilities.

• Evaluating findings—Take ...