I have an Azure website and a client who wants to use my site but needs to perform ethical hacking on it in order to decide if it's secure enough for them. They've asked me this to send them this:
The network configuration to have visibility and connection or traffic to the target IP, i.e., IP/mask/Gateway/DNS. If the web server is accessed via VPN, the client and connection credentials
I thought the IP is enough (and they don't need me for it as they can look it up) - what am I missing? I don't want to give them sensitive data.