Michelle Lewis

Overview
GlobalComm has hired you as an offensive security consultant. You have been
tasked with writing a penetrating test report against the standard image used for
desktops throughout the network. The Win7 VM is a representation of a typical
workstation that would be issued to an end user.
Rules of engagement
• The only computer that should targeted is Win-7
• Students must of preformed the lab preparation assignment before
continuing
Tasks and expectations
• Show proficiency of client-side attacks and techniques
• Write a response to the tasks and questions below
Technical Questions
For this lab report screenshots of every command is not needed, please use your
judgment when documenting this. Screenshots again should be used but limited. I
do not want 5 pages of screenshots; additionally use the cropping tool to tighten the
screenshots that are used.

Client-Side Assessment
The CTO of GlobalComm has requested an in-depth assessment of the standard
workstations issued to the employees of the organization. The premise of the attack
is to simulate the possible attacks, which could be targeted towards users with a
lack of security awareness. This would include clicking links, opening attachments
and entering credentials into fake websites.
Demonstrate the following attacks and explain how it could negatively impact an
organization.
• Steal User Credentials (Website Cloning)
• Malicious Link (Browser Based Attack)
• Two different malicious file attacks
• One Powershell Empire Attack
Analysis & Reflection
• Explain in-depth the attacks preformed
• Identify ways for GlobalComm to protect themselves in the future