Internal pentest for a pharmacy

A pharmacy ordered an internal pentest of their computer network. White-box mode was chosen.

The project included the following major phases:

– Web Application Security Analysis. Conducting a comprehensive security analysis of the web applications used by the company.
– Penetration Testing. Conducting a pentest to identify vulnerabilities and testing them for exploitability.
– Preparing a report and recommendations. Developing a detailed report describing all identified vulnerabilities and providing recommendations for remediation.

The project was completed with the conclusion that penetration was possible, and the customer’s information security level was low. The customer received the risk assessment results, information about the vulnerabilities, and recommendations on how to remediate them and harden the IT infrastructure.