Recommending remediation options

Within a penetration test report, you will need to give recommendations on how to secure the findings that were discovered. It's important to understand how the vulnerabilities can be remediated, as opposed to only knowing how to exploit them.

Let's consider a few of the attacks that were performed throughout this book and the remediation activities that can be recommended.

Information gathering

During the information gathering phase, we looked at how we can gather information on our target using publicly accessible sources (OSINT). It's inevitable that an organization will post information publicly. The key to protecting from information exposure (such as metadata in documents...