House of Cards

A penetration test against a large multinational showed how seemingly low-risk issues (directory indexing exposing files, default/admin usernames with weak passwords, unprotected credential stores and unencrypted mailboxes) were chained to gain administrative access, harvest internal credentials, pivot across the network, and monitor remediation efforts—demonstrating that minor misconfigurations can lead to complete compromise when basic security hygiene is absent.