Assessments - DKM Security

Application & Network Testing

Identify OWASP Top 10 vulnerabilities and other critical security issues:

Systematic testing and exploitation of all exposed attack surfaces:

External and internal network testing
Service enumeration and vulnerability scanning
Privilege escalation and lateral movement
Network segmentation and access control analysis
Custom tooling alongside Bloodhound, Nessus, NetExec and other industry standards

Security evaluation of iOS and Android applications covering OWASP MAS, including static and dynamic analysis:

Specialized testing for AWS environments, including cloud platform-specific attack vectors:

IAM policy and permission analysis
S3 bucket security and access control review
EC2 instance and container security assessment
Lambda function security testing
Auth testing using Cognito and other AWS services
Custom tooling alongside Prowler, Steampipe, Pacu, ScoutSuite and other industry standards

Specialized testing for Azure environments, including cloud platform-specific attack vectors:

Entra ID and Azure RBAC security review
Storage account and blob security analysis
Virtual machine and container security testing
Azure Key Vault security assessment
Resource group and subscription analysis
Custom tooling alongside AzureHound, ROADTools, Steampipe and other industry standards

Advanced campaigns to test detection and response capabilities against sophisticated threats:

Custom exploit development and AV/EDR bypasses
Persistent threat and lateral movement testing
Includes all other assessment types, with a focus on stealth
Blue team engagement and training
Custom tooling, exploits and command-and-control (C2) platforms for signature evasion

Phishing, vishing, and onsite assessments to evaluate human security factors:

Evaluation of wireless security including WiFi, Bluetooth, and IoT devices:

WiFi network assessment (WPA/WPA2/WPA3, rogue APs, evil twin)
Wireless segmentation and guest network validation
Bluetooth Low Energy (BLE) and IoT device testing
Credential capture and MitM testing
Custom tooling alongside hcxtools, Aircrack-ng, Kismet and other industry standards

Physical penetration testing and security assessments to evaluate physical security controls and access systems:

Physical access control testing
Tailgating and piggybacking assessment
Lock picking and bypass techniques
Surveillance and reconnaissance
Custom tooling alongside Flipper Zero, Hak5 hardware and other industry standards

Request Assessment