Attack and defense drill project of a government department

Based on the actual requirements and current status of the customer, Topsec has worked out the following solution from the perspective of attacker:

1) Collect Information.

Sort out the customer's assets exposed on the Internet, identify the boundaries and asset data, and provide effective support for the next attack.

2) Break through the boundary.

Break through the protection boundary of the target system by means of social work, fishing, and vulnerability utilization.

3) Expand the achievements.

Maintain the availability of border entrances through backdoors and other means, and use vulnerabilities to move laterally, thus expanding the achievements.

4) Review and summarize the process.

Discuss the problems in the attack and defense process, summarize the attack means and achievements of the attacker and monitoring and protection achievements of the defender, provide optimization suggestions in combination with the actual protection means, and consolidate the achievements of confrontation between the red and blue teams.