Wireless networks are subject to vulnerabilities which cannot be easily identified via most audits or network vulnerability scanners – only testing by a pen tester can find them
Wireless networks are commonly overlooked within many organization’s security practices, which ultimately results in a rich attack surface
Organizations with publicly accessible wireless networks can validate that attackers connecting via these networks cannot reach non-public resources
Real-world attackers engage in practices such as wardriving to identify wireless networks which are vulnerable to specific wireless exploits
1. Setup: We’ll provide you with a device which you can plug into a power source within the proximity of your wireless network. Alternatively, we can provide you with a laptop for portability, or even have a pen tester on-site to perform a walkthrough.
2. Active Testing: Once we’re able to see nearby wireless networks, we’ll identify in-scope wireless networks and conduct manual testing against them. The form of testing depends on the type of network discovered and can range from evil twin attacks to exploits specific to access point brands.
3. Reporting: If access has been obtained to a non-public network, we’ll assign a severity aligned with overall business impact, provide remediation guidelines, and document repeatable steps to provide proof of exploitability.
Schellman does perform wireless network penetration testing—our Penetration Testing Team continues to grow and is currently comprised of individuals from different backgrounds including former developers, system administrators, and lifelong security professionals. Our team is incredibly experienced, and collectively holds the following professional certifications, among others:
Expect approximately one week for four or less wireless networks within the same vicinity as the Schellman-controlled device. For organizations which are seeking to test multiple wireless networks spread across multiple buildings or branches, expect up to three weeks.
Expect to pay no less than $13,000 for a wireless network pen test.
Ideally, yes, as these networks could be improperly segmented from your organization’s non-public internal network. Therefore, by having these pen tested, you would be able to identify if non-public services are reachable on these networks.