Pen-Testing Labs

Before conducting any pen-testing exercises, ensure you have proper authorisation and permission to perform such activities on the target network or systems. Additionally, always comply with applicable laws and regulations regarding penetration testing and network security testing.

DDoS Attack

Analyse network traffic patterns to detect sudden spikes in traffic or abnormal behaviour indicative of DoS attacks.

MitM Attack

Look for suspicious ARP or DNS responses, unexpected SSL certificates, or irregular traffic patterns indicating a MitM attack.

MitB Attack

To simulate and analyse network traffic to detect Man-in-the-Browser (MitB) attacks by capturing, analysing, and identifying suspicious activities within a network.

http traffic

Capture and analyse HTTP/HTTPS traffic to detect insecure communication, potential injection attacks, or sensitive information leakage.

Pen-Testing 1

To perform a simulated penetration test using Wireshark to capture, analyse, and identify potential security threats within a local network.

Pen-Testing 2

To simulate a network penetration testing exercise using Wireshark to capture, analyse, and identify potentially malicious traffic on a local network.

DNS Spoofing

To simulate a DNS spoofing attack using Wireshark to capture, analyse, and identify DNS-related security vulnerabilities within a local network.

SQL Injection

Monitor SQL traffic to identify potential SQL injection attempts by analysing abnormal SQL queries or error messages.

DNS Tunnelling

To simulate and analyse network traffic to detect DNS tunnelling by capturing, analysing, and identifying anomalous DNS requests and responses within a network.

Cross-Site Script(XSS)

Analyse web traffic to detect potential XSS attacks by inspecting JavaScript payloads or unexpected behavior in HTTP responses.

Brute Force Attack

Monitor network traffic for multiple failed login attempts or unusual authentication patterns indicating a brute force attack.

Session Hijacking

Monitor network traffic for suspicious session IDs or unexpected session manipulation attempts indicating session hijacking attacks.

VoIP Traffic

Capture and analyse Voice over IP (VoIP) traffic to detect potential VoIP-specific attacks or vulnerabilities.

Phishing Attack

Capture and analyse email or web traffic related to phishing attacks to identify phishing URLs, malicious attachments, or spoofed domains.

Data Exfiltration

Monitor network traffic for large data transfers, unusual protocols, or unauthorized access patterns indicating potential data exfiltration attempts.

Network Sniffing

Assess the effectiveness of network segmentation, encryption, or intrusion detection/prevention systems against network sniffing attacks.

Malicious File

Capture and analyse traffic associated with file downloads to identify potentially malicious files or payloads.

Password Cracking

Analyse authentication traffic to detect brute force attempts or password cracking activities.

Wireless Security

Analyse authentication traffic to detect brute force attempts or password cracking activities.

Packet Injection

Perform packet injection tests to assess network security controls and analyze how the network handles injected packets.

Port Scanning

Use Wireshark to identify port scanning activities by analysing TCP SYN packets and abnormal connection attempts.

Malware Traffic

Capture and analyse traffic generated by malware-infected hosts to identify communication with command and control servers or data exfiltration attempts.