Xm Cyber Ltd.

Igal Gofman

Ronen Segal

Yaron Shani

Carrying out a penetration testing campaign in a networked system by a penetration testing system, for determining a way for an attacker to compromise the networked system, comprises determining that the attacker can obtain user credentials of a first user, determining that when using the user credentials the first user has access rights to a first network node of the networked system, determining that a second network node of the networked system is compromisable by the attacker during the penetration testing campaign, determining that the first network node was accessed from the second network node, and based on the foregoing, determining that the first network node is compromisable by the attacker during the penetration testing campaign, and determining the way for the attacker to compromise the networked system which includes a step of compromising the first network node using the user credentials of the first user.

Validating the use of user credentials in a penetration testing campaign

Methods and systems for carrying out a simulated penetration testing campaign of a networked system for identifying a specific way for an attacker to compromise a networked system, where the specific way includes a step of poisoning the specific network node by the specific network node receiving a poisoned email body, or a poisoned email attachment, which includes malicious code.

Growing community of inventors

Rosh-Ha′ayin, Israel

Igal Gofman