In this chapter, we discussed the process of testing a flat and internal network. We discovered that this means we do not have filters or layers that we have to traverse to attack the target. While this is a good thing, we also discussed that these machines would have a number of protection in place. We also reviewed the role a Vulnerability Scanner plays with respect to internal testing.

Following the introduction to the different host-based protection, we looked at them in more detail and in some cases, attempted a number of different techniques to bypass the different protection on the host that we might encounter. Specifically, we looked at the host firewall and the UAC settings and their impact on the testing results.

When we had looked at the host firewall and UAC, we moved on and briefly looked at the additional endpoint protections that could challenge our testing.

Finally, we closed the chapter by looking at the challenges that the EMET tool might present for our testing.

This...