Pour une mission de 3 semaines on est à la recherche d'un Penetration Tester.
Compétences exigées:
a. Réseau 3G/4G
b. Linux (probablement personnalisé) du modem-firewall
c. Technologie Web (interface web du modem/firewall)
d. Firewall (modem Scalance Siemens M876-4 (4g) / 874-3 (3g))
e. Hardware (modem Scalance Siemens M876-4 (4g) / 874-3 (3g))
f. Système de signalement (Contact de porte)
La mission est située à Gosselies. Notre client respecte les mesures gouvernementales en ce qui concerne le télétravail et le travail sur site. La présence sur site est de minimum 2 jours par semaine.
1. Fields of application
a. Installation of remote control in customer cabins
i. Locker (or box) with a contact signaling system (door opening/closing)
ii. Modem-Firewall (Scalance Siemens 876-4 or 874-3)
iii. RTU TBOX CPU32 (to be confirmed)
b. Access Point Identifier (APN)
i. rtu.ores.net
2. Scenarios
a. Opening of the Ores locker
i. Circumvention of the physical mechanism
ii. Tamper signaling protocol packets (report open/closed locker(s))
b. Work around and discover flaws in modem-firewall authentication systems (mainly Web technology)
c. Go up to the Proximus APN from the modem-firewall? Scalance 876-4 (4G) or 874-3 (3G)
i. Is it possible to go up to another customer cabin?
ii. Is it possible to go up to Ores cabins?
d. SIM card present in the modem-firewall
i. Theft of the SIM card? Are alerts generated? (Yes after 24 hours of inactivity)
ii. Authentication with APN? What is the authentication method (encrypted or not)?
IDBRRO25333
You are about to apply for the job "Penetration tester".
