Yaksas CSC is a cybersecurity firm founded by Uday Mittal, who has over 6 years of experience in cybersecurity and holds several industry certifications. The firm follows the Penetration Testing Execution Standard methodology for all vulnerability assessments and penetration tests. Key deliverables include a detailed report with an executive summary, findings, recommendations, and technical details. Case studies describe engagements where the firm identified a vulnerability exposing customer data and prevented theft of payment information from an e-commerce site.

1. Vulnerability
Assessment &
Penetration Testing
Services
© ElliteDevs

2. © ElliteDevs
Contents
• About Yaksas CSC
• Why choose us?
• Our Methodology
• Key Deliverables
• Case Studies

3. © ElliteDevs
About Us
Who we are?
Yaksas CSC was founded by Uday Mittal. He has over 6 years of experience in dealing with
various issues related to cyber security and holds industry leading certifications such as OSCE,
OSCP, CISSP, CISA, CISM etc. He is actively working towards educating people on cyber security
risks and steps to mitigate them. His areas of interest include exploitation research, malware
analysis, red teaming, VAPT etc.
Linkedin Profile: https://www.linkedin.com/in/uday-mittal/

4. © ElliteDevs
About Us
Our Vision
“Create and contribute in an ecosystem where any advancement in the fields of Computer Science and
Information Technology continues to be, primarily, an enabler and encourages further development and
enhancement of the same.”
Our Mission
• Ensure the safety and security of people interacting with the Cyber World, in an ethical manner, either as a
part of their day to day activities or as a one time transaction.
• Ensure organizations, of any constitution, except those involved in illegal activities, stay safe and protected
from cyber crimes, of any nature, that may pose a threat to their employees and business operations.
• Contribute to the field of Cyber Security by committing ourselves to active research and sharing our results in
an ethical and professional manner.
• Encourage the advancement of Cyber Security profession by providing proper guidance to those who wish to
pursue it and committing ourselves to the continuous education and skill enhancement of our active
employees

5. © ElliteDevs
Why choose us?
We perform in-depth testing
of in-scope infrastructure
Our methodology is up to date
with latest attack vectors
We love what we do

6. © ElliteDevs
Our methodology - PTES
We follow the Penetration Testing Execution Standard (PTES) to execute all our vulnerability assessment and
penetration testing engagements. It is one of the standards recommended by the OWASP project.
1 3
2 4
5
6
7
PRE-ENGAGEMENT
INTERACTIONS
INFORMATION
GATHERING
THREAT
MODELING
EXPLOITATION
VULNERABILITY
ANALYSIS
POST EXPLOITATION
REPORT

7. © ElliteDevs
Key Deliverables
Upon completion of the engagement we will provide a detailed report with following structure
Engagement Report
Executive Summary
Background
Overall
Posture
Risk Ranking
/ Profile
General
Findings
Recommend
ation
Summary
Strategic
Roadmap
Technical Report
Introduction
Information
Gathering
Vulnerability
Assessment
Exploitation /
Vulnerability
Confirmation
Post
Exploitation
Risk /
Exposure
Detailed
Recommend
ations
Conclusion

8. © ElliteDevs
Case Studies
Protected customer database
A client, operating in finance sector, approached us to help them plan security for their online platform. After
scope finalization, we began testing their infrastructure. Soon enough, we found a vulnerability in their platform
that exposed their entire customer base. Given the critical nature of the vulnerability, we reported it immediately
and worked with client’s developer team to fix it.
Prevented theft of customer’s payment information
During a regular scan of the e-commerce portal, of one of our client in publishing industry, we identified that
certain key pages of their portal had been infected by a malware. The malware was designed to steal customer’s
payment information (credit / debit card details, internet banking information etc.). Upon informing the client of
the same, we worked with their hosting provider to identify the source and helped their tech team to restore the
infected pages and implemented measures to prevent further infection.

9. Thank you ☺
© ElliteDevs
https://yaksas.in
Yaksas CSC @yaksas443