Lion Cipher Lab
Handle sensitive data found during a penetration test
- Penetration Testing / Red Team
- Intermediate
- ~45 min
- Free · no account required
Why it matters
The scope of a penetration test describes the systems you may test. It cannot describe everything you will find on them. Testers regularly come across spreadsheets of personal data on open shares, live passwords in configuration files, data that belongs to a different company, and sometimes clear signs that a real attacker got there first. What you do next matters as much as any technical skill. Copy the personal data 'as evidence' and you have created a second copy of it, on your laptop, outside the client's controls. Use a credential beyond what the rules allow and you may be acting without…
What you'll learn
- data minimization: prove a finding with the least data possible
- recognizing personal data and its sensitivity
- stop-and-notify rules, and when they apply
- recognizing signs of a prior compromise and protecting the evidence
- handling third-party data that is outside your authorization
- redacting evidence for reports
- storing, transmitting and destroying engagement data
Steps in this lab
- Four principles for anything you did not expect to find
- Write your data-handling protocol
- The five discoveries
- Answer key: S1 to S3
- Answer key: S4 and S5
- Make the protocol part of every engagement