Methods and systems for providing a framework to test the security of computing system over a network

摘要

A security tool can utilize a vulnerability in a computing system or credentials for the computing system to gain access to the computing system. Once access is gained, the security tool can deliver an agent to the computing system. The agent can execute, detected or undetected, on the computing system in order to establish a network link between the computing system and the security tool. Once established, the security tool creates a virtual network interface on the computing system on which it is running and instructs the agent to relay network traffic between the virtual network interface of the computing system executing the security tool and the existing network interfaces of computing system executing the agent.

主权项

1. A method for security testing, comprising:
identifying, by a source computing system, a target computing system in a network to execute an agent; wherein the agent executes on the target computing system without installing software on the target computing system and provides a virtual network connection to the source computing system; providing the agent to the target computing system for execution on the target computing system; performing, by the source computing system, a security test on the target computing system utilizing the virtual network connection established by the agent executing on the target computing system; and routing network communications from an additional computing system through the virtual network connection, wherein the routing causes the additional computing system to appear as a computing system on the network of the target computing system.