Vulnerability Assessment Project Scope Document

Project Scope
- Denial-of-service testing
- Configuration audits
- War dialing
IP Addresses
- List of IP addresses to be tested
- Specific IP addresses targeted for point scans
- Chosen by client
- Chosen by the test team

Configuration Audit
- Number of SysLog Servers:

Windows Server
- Number of servers:
- Percentage of servers to be tested:
- Number of workstations:
- Percentage of workstations to be tested:
- Number of domain controllers:

Unix Server
- Number of servers:
- Percentage of servers to be tested:
- Number of workstations:
- Percentage of workstations to be tested:

Firewalls
- Boundary firewall(s) type:
- Number of boundary firewall(s):
- Internal firewall(s) type:
- Number of internal firewall(s):

Cryptographic Analysis
- Examine the design of the following cryptosystems (PKI system or IPSec)
- Password Cracking SMB capture passwords:
- Retrieve from domain controller:
- Brute-force standard alphabet:
- Brute-force all characters:

Application Examination
- Examine the source code of the following applications for vulnerabilities
- War Dialing