Targeting vulnerable service applications

Vulnerable services are one of the worst things that can be part of your environment and one of the easiest, but not always the cheapest, things to fix. As applications get older, so does the code used to build the application, and while time advances, so do the vulnerabilities of the older application. Unfortunately, while simply patching or updating old software sounds easy, it's actually quite expensive and time-consuming. Updating an application can take copious amounts of time and bring down the service the application uses to function. This means a loss in revenue and usability.

In this next scenario, we will see the real damage produced by a vulnerable application on a network with AWS.

The scenario – discovering and attacking any low-hanging fruit

In this scenario, the client has requested a pentest for what they suspect to be a vulnerable application. This application is currently being hosted within its AWS...