Remote Penetration Testing Made Easy Our Experience with TeamViewer
Rating: 9 out of 10
IncentivizedUse Cases and Deployment Scope
I use TeamViewer primarilty to support our infrastructure VAPT engagement for multiple clients. As part of the assessment process, I need secure and remotr access to the clients' internal network to perform IP scans and other activities. TeamViewer enables us to access without the need for complex VPN setups. This helps me overcome the challenge of physically accessing client environment, allowing me to conduct thorough assessment regardless of geographic location.
Pros
- TeamViewer allows us to quickly connect to client machines without the need to configure firewalls or setup VPN.
- TeamViewer support a wide range of operating systems like windows, Linux or macOS etc. This flexibility is crucial when scanning diverse environment during VAPT engagements.
- TeamViewer provides end-to-end encryption, two-factor authentication and session logging which align with our compliance and security requirements.
Cons
- During long assessment TeamViewer sometimes times out due to inactivity, which can disrupt automation tasks or batch scanning activities. Customizable timeout setting.
- Role-based access controls would improve security, especially when client want to restrict what tester can access.
- Improved adaptive streaming or a low-bandwidth mode optimized for command-line tasks would help mitigate these issues like some client locations with unstable or low-bandwidth internet connections.
Likelihood to Recommend
A client doesn't have a VPN or secure remote access setup but I need to perform internal IP scanning and enumeration like 1) Quick remote desktop access. 2) No firewall reconfiguration needed. 3) Secure and encrypted session for accessing tools like Nmap, Nessus or manual testing. Allows shared sessions where both parties can interact. Chat feature and session recording help maintain transparency and documentation.
Vetted Review
1 year of experience