| News | Articles | Exploits | Advisory |
Today’s Internet security threats, cyber-attacks and intrusions can be eliminated by proper implementation of a variety of traditional point solutions like firewalls, antivirus systems, Intrusion Detection Systems (IDS), security packages, and especially by a good security policy.
HackTrack™ presents a portfolio of products and services tailored to meet everyday Internet security needs. HackTrack™ introduces a variety of products made not only by benchmark security companies, but also its own products, and especially its own customized solutions that were proven by a variety of successful deployments and implementations. The HackTrack™ team considers the most recent security threats and intrusions through an ongoing R&D process.
HackTrack™ offers following security products:
HackTrack™ offers following security services:
In scope of this service, HackTrack™ team provides an Internet connection security testing, which also includes all services provided by Internet such as Mail Server, WWW Server. Among others, HackTrack™ team also tests a resistance of anti-virus protection against Internet malware.
HackTrack™ offers the following Penetration Tests:
1. External Penetration Test (EPT)
External Penetration Test screens a level of system security to external attacks. External Penetration Test execution is in accordance with the following methodology approaches:
2. Internal Penetration Test (IPT)
Internal Penetration Test evaluates system security to unauthorized operations within the system. The HackTrack™ team simulates users, connected to Intranet, who attempt an unauthorized access to confidential information either intentionally (for instance: obtaining corporate data with an intention to sale them to competitors), or unintentionally (for instance: due to errors in IS implementation). This simulation tests internal security mechanisms of organization.
3. Complex Penetration Test (CPT)
Complex Penetration Test is a combination of Internal and External Penetration Tests.
4. Social Engineering Test (SET)
Social Engineering Test evaluates a security breaches caused by human beings’ failures. Any company with firewalls, authentication processes, network monitoring software, and VPNs are vulnerable to an attack, especially if employees unwittingly give away critical information in an email and by answering questions over the phone with someone they do not know.
The output of each Penetration Test concludes a Closure Report with the following content:
Security Audit is a complex survey and classification of a customer’s security level including weak point detection and security leaks. The HackTrack™ team carries out audits in cooperation with audited company. On the contrary to the Penetration Test, this audit is not carried out from the intruder’s point of view; rather, it evaluates other factors such as the Presence of Security Policy, Standards, and Crisis Plans.
Each Security Audit results in a Survey Report that describes a security level and its detected inefficiency. A part of the audit could also serve as a proposal of suggested solutions for inefficiency elimination. The HackTrack™ Security Audit procedures are in agreement with the internationally accepted standards and methodologies, particularly with the British security standard BS 7799:1999 (ISO 17799) and technical report CSN ISO/IEC TR 13335 Information Technology -- Directives for IT security practices according to the COBIT standard.
In scope of this service, HackTrack™ offers execution of the following audits:
This service is particularly beneficial to the small size companies that do not find it economical to have an experienced in-house administrator. Security Subscription includes a remote monitoring, administration of server security conditions, and client’s software installation in accordance with contract conditions. The standard part of this service includes patches implementation as well. In addition, the client has access to an on-line system that provides a complete survey of all performed interventions. Also, a client can consult entire security related issues through this on-line system with the HackTrack™ security experts.
Communication between client and the HackTrack™ team is secured by SSL and PGP technology. Client is notified about all new facts via automatics e-mail alert system.
HackTrack™ offers Security Subscription for the following Operation Systems:
and for the following companies:
And others know software Total Commander, WinRar, WinSCP, Skype, Apache, PHP, Adobe Acrobat, Pspad Flash plugin, Firefox, Opera, FlashGet, TheBat, Gaim, MSN, ICQ, MiRC, Netscape Terminal Services Client, putty, PGSQL, 7Pack,WinZip, WinHEx,Cpu-z, InfanViewer, Foobar2000,Miranda
In scope of this service, and according to client’s request, HackTrack™ offers:
HackTrack™ highly recommends combining of IT Systems Security service with Penetration Test or Security Audit services that detect strong and weak points of customers’ security systems. Test or audit results help to apply better security measures according to the customers’ needs.
IT systems security is such a broad issue that the HackTrack™ team could not cover here all HackTrack™ available professional security services and expertise. HackTrack™ team offers the implementation of custom solutions; therefore, do not hesitate to contact us with your request for specific information.
This service includes procedures leading to a system recovery after hackers and malware attacks. The success of such procedures mainly depends on “backup” methods that were used by clients prior to the attacks.
The HackTrack™ team is capable of system resetting and its functionalities recovery from available “backup” sources by utilizing proprietary tools. In addition, the HackTrack™ team provides a data recovery from HD, portable CD, floppy discs, and other “backup” devices. Indeed, this service offers the recovery of data attacked by malware.