Common Pentest Findings

Insufficient Authentication Controls

Weak Password Policy

Insufficient Patching

Default Credentials

Insufficient Encryption

Information Disclosure

Username Enumeration

Default Web Pages

Open Mail Relays:

How to Test for Open Mail Relays - Black Hills Information SecurityBlack Hills Information Security

IKE Aggressive Mode

Unexpected Perimeter Services

Ex: RDP, Telnet, FTP, ...

Insufficient Traffic Blocking

Undetected Malicious Activity