System and method for remotely conducting a security assessment and analysis of a network

A system for performing a security audit and remote penetration testing of a target network, the target network including a communication link, the system comprising:

• a) a device deployed onsite behind a firewall at the target network configured to maintain an encrypted backdoor and configured to be capable of establishing a connection to the target network through the communication link, the device being preconfigured by a tester to initiate reverse tunneling and to establish a persistent secure tunnel bypassing the firewall over the Internet using a covert channel initiated by the device;
• and
• b) a receiving computer located at a remote offsite location outside the firewall connected to the device through the persistent secure tunnel bypassing the firewall established by the device over the Internet;
• wherein the device is deployed onsite at the target network and the receiving computer is located at the remote offsite location outside the firewall,
• wherein the device is configured to include a stealth mode that comprises no listening ports or ping replies and wherein the device acts as a network layer-two transparent bridge such that the device supports 802.1X network access control protocol bypass, and wherein the device comprises software that simulates an attack on the target network.