Host-Based Pentesting

NetSPI » PTaaS » Network » Host Based

NetSPI’s performs a deep dive review of baseline workstation and server images used to deploy systems to the corporate environment. In addition to Host-Based we also offer virtual desktop & application testing.

Schedule a Test

Host-Based Penetration Testing Benefits

NetSPI’s host-based penetration testing reduces organizational risk and improves network security. Standard network penetration testing engagements may not provide comprehensive insights into the vulnerabilities that exist in your baseline workstation, server images, Citrix / VMware deployed desktops and applications.

Host-Based Testing Variations

During host-based penetration tests, NetSPI tests system drive encryption, group policy configurations, patch levels, service configurations, user and group roles, third party software configurations, and more. It also includes a review of the systems and applications for common and known vulnerabilities. Host-Based testing can be conducted against physical hardware, virtual machines, virtual desktops, and most Windows, Linux, z/OS, and MacOS variations.

“”

Our flexible, scalable solutions adapt to your organization’s size, complexity, and as well as specialized testing projects at smaller scale.

Virtual Desktop Citrix / VMware

Identify vulnerabilities that provide unauthorized access to the operating system through desktops published via virtualization platforms. NetSPI reviews the system configurations that could be used to escalate privileges, pivot into internal environments, or exfiltrate sensitive data.

Virtual Application Breakout Testing

During virtual application penetration testing, NetSPI identifies the risks specific to applications published through virtualization platforms along with traditional application testing to help ensure that your company is staying safe while trying to adapt to evolving business needs.

Host-Based Resources

Ransomware

Healthcare’s Guide to Ryuk Ransomware: Advice for Prevention and Remediation

Making its debut in 2018, the Ryuk ransomware strand has wreaked havoc on hundreds of businesses and is responsible for one-third of all ransomware attacks that took place in 2020.

Learn More

Cloud Pentesting

Azure File Shares for Pentesters

Explore Azure file shares for pentesting in this informative post. Learn how to set up a file share service and create new file shares in your Azure subscription.

Learn More

Red Teaming

CVE-2025-23009 & CVE-2025-23010: Elevating Privileges with SonicWall NetExtender

NetSPI discovered multiple arbitrary SYSTEM file delete vulnerabilities in SonicWall NetExtender for Windows. Learn how NetSPI discovered and leveraged these for local privilege escalation.

Learn More