The default configuration of OpenVPN will not allow the clients (A-B) to see each other on the network. To allow that, you have to enable client-to-client directive and enable your both subnets (Auditee and Auditor) to see each others networks. To do so, follow these instruction. After finishing the installation and testing it, the auditor will pass the .ovpn file to the person at the auditee's site through a trusted way, and provide instructions on how to install and connect to the server. After connecting A and B to C, the auditor will be able to start the network and device assessment at the other end. Note: In case the VPN is censored in A or B's countries, or in both, you can followthese instructions on how to bypass the censorship by using pluggable transports. Recommendation ROUTER ATTACKS Covered in full in Vulnerability Scanning and Analysis Find the router(s) (route works well for this) Test using default passwords Check for upgrades / un-patched vulnerabilities and backdoors Investigate potentially valuable data (logs, connected users) WIRELESS RANGE MAPPING Covered in full in Network Discovery This component consists of wireless scanning and wireless signal mapping. It is useful for organizations with offices in shared spaces/buildings/apartment complexes or near locations where an adversary could easily "listen" to network traffic. In conjuction with Monitoring Open Wireless Traffic exercise, it can also identify devices using that network. It is useful to do this in parallel with Office Mapping to build a more comprehensive view of the information assets of the organization. Identify and verify the network(s) belonging to the organization Create a map or photos indicating the range of each relevant wireless access point. MONITOR OPEN WIRELESS TRAFFIC Page 67 of 240