CompTIA PenTest+ Study Guide

ABOUT THE AUTHORS Mike Chapple, PhD, is Teaching Professor of Information Technology, Analytics, and Operations at Notre Dame’s Mendoza College of Business. He is a bestselling author of over 50 books and serves as the Academic Director of the University’s Master of Science in Business Analytics program. He holds multiple additional certifications, including the CISSP (Certified Information Systems Security Professional), CySA+ (CompTIA Cybersecurity Analyst), CIPP/US (Certified Information Privacy Professional), CompTIA PenTest+, and CompTIA Security+. Mike provides cybersecurity certification resources at his website, CertMike.com. Robert Shimonski, CASP+, CySA+, PenTest+, Security+, is a technology executive specializing in healthcare IT for one of the largest health systems in America. Rob is considered a leading expert in prepping others to achieve certification success. David Seidl is Vice President for Information Technology and Chief Information Officer at Miami University. He has served in a variety of technical and information security roles.

• Introduction xxixAssessment Test xlChapter 1 Penetration Testing 1Chapter 2 Planning and Scoping Penetration Tests 21Chapter 3 Information Gathering 57Chapter 4 Vulnerability Scanning 113Chapter 5 Analyzing Vulnerability Scans 151Chapter 6 Exploit and Pivot 193Chapter 7 Exploiting Network Vulnerabilities 253Chapter 8 Exploiting Physical and Social Vulnerabilities 299Chapter 9 Exploiting Application Vulnerabilities 329Chapter 10 Exploiting Host Vulnerabilities 379Chapter 11 Reporting and Communication 443Chapter 12 Scripting for Penetration Testing 471Appendix A Answers to Review Questions 515Appendix B Solution to Lab Exercise 539Index 541