Penetration Testing Fundamentals

A Hands-On Guide to Reliable Security Audits

Häftad, Engelska, 2018

1 199 kr

Beställningsvara. Skickas inom 7-10 vardagar. Fri frakt för medlemmar vid köp för minst 249 kr.

The perfect introduction to pen testing for all IT professionals and students Welcome to the most useful and practical introduction to penetration testing. Chuck Easttom brings together up-to-the-minute coverage of all the concepts, terminology, challenges, and skills you'll need to be effective. Drawing on decades of experience in cybersecurity and related IT fields, Easttom integrates theory and practice, covering the entire penetration testing life cycle from planning to reporting. You'll gain practical experience through a start-to-finish sample project relying on free open source tools. Throughout, quizzes, projects, and review sections deepen your understanding and help you apply what you've learned. Essential pen testing standards from NSA, PCI, and NIST, Penetration Testing Fundamentals will help you protect your assets–and expand your career options. Learn how to: Understand what pen testing is and how it's used Meet modern standards for comprehensive and effective testing Review cryptography essentials every pen tester must know Perform reconnaissance with Nmap, Google searches, and ShodanHq Use malware as part of your pen testing toolkit Test for vulnerabilities in Windows shares, scripts, WMI, and the Registry Pen test websites and web communication Recognise SQL injection and cross-site scripting attacks Scan for vulnerabilities with OWASP ZAP, Vega, Nessus, and MBSA Identify Linux vulnerabilities and password cracks Use Kali Linux for advanced pen testing Apply general hacking technique ssuch as fake Wi-Fi hotspots and social engineering Systematically test your environment with Metasploit Write or customise sophisticated Metasploit exploits

Produktinformation

Utgivningsdatum2018-06-29
Mått180 x 230 x 20 mm
Vikt724 g
FormatHäftad
SpråkEngelska
Antal sidor448
Upplaga1
FörlagPearson Education
ISBN9780789759375

Tillhör följande kategorier

Nätverk och kommunikation inom Data och IT

Chuck Easttom has been in the IT industry for well over 25 years and cybersecurity for over 15. He has over 40 industry certifications, and has authored 24 other books. He is also an inventor with 13 patents. Chuck is a frequent speaker at various security conferences including Defcon, ISC2 Security Congress, Secure World, and many others. He also has authored a number of papers on security-related topics including malware development, penetration testing, and hacking techniques. He also has hands-on experience consulting on cyber security issues and conducting penetration tests.

IntroductionChapter 1: Introduction to Penetration TestingWhat Is Penetration Testing?AuditsVulnerability ScansPenetration TestsThe Hybrid TestTerminologyMethodologiesNature of the TestApproachesEthical IssuesEverything Is ConfidentialKeep in Your LaneIf You Break It, You Bought ItLegal IssuesComputer Fraud and Abuse Act (CFAA): 18 U.S. Code § 1030Unlawful Access to Stored Communications: 18 U.S. Code § 2701Identity Theft Enforcement and Restitution ActFraud and Related Activity in Connection with Access Devices: 18 U.S. Code § 1029State LawsInternational LawsCertificationsCEHGPENOSCPMile2CISSPPPTThis Book and CertificationsCareers in Penetration TestingSecurity AdministratorsCommercial Penetration TestingGovernment/National DefenseLaw EnforcementBuilding Your SkillsetSummaryTest Your SkillsChapter 2: StandardsPCI DSSThe Actual TestNIST 800-115PlanningExecutionPost-ExecutionNational Security Agency InfoSec Assessment Methodology (NSA-IAM)PTESCREST (UK)A Synthesis (Putting Standards Together into a Single Unified Approach)Pre-EngagementThe Actual TestReportingRelated StandardsOWASPOther StandardsISO 27002NIST 800-12, Revision 1NIST 800-14SummaryTest Your SkillsChapter 3: CryptographyCryptography BasicsHistory of EncryptionThe Caesar CipherAtbashMulti-Alphabet SubstitutionRail FenceModern MethodsSymmetric EncryptionModification of Symmetric MethodsPractical ApplicationsPublic Key (Asymmetric) EncryptionDigital SignaturesHashingMD5SHARIPEMDWindows HashingMAC and HMACRainbow TablesPass the HashPassword CrackersSteganographyHistorical SteganographyMethods and ToolsCryptanalysisFrequency AnalysisModern MethodsPractical ApplicationLearning MoreSummaryTest Your SkillsChapter 4: ReconnaissancePassive Scanning TechniquesNetcraftBuiltWithArchive.orgShodanSocial MediaGoogle SearchingActive Scanning TechniquesPort ScanningEnumerationWiresharkMaltegoOther OSINT ToolsOSINT WebsiteAlexaWeb Master TipsSummaryTest Your SkillsChapter 5: MalwareVirusesHow a Virus SpreadsTypes of VirusesVirus ExamplesTrojan HorsesOther Forms of MalwareRootkitMalicious Web-Based CodeLogic BombsCreating MalwareLevels of Malware Writing SkillGUI ToolsSimple Script VirusesCreating a Trojan HorseAltering Existing VirusesSummaryTest Your SkillsChapter 6: Hacking WindowsWindows DetailsWindows HistoryThe Boot ProcessImportant Windows FilesWindows LogsThe RegistryVolume Shadow CopyWindows Password HashingWindows Hacking TechniquesPass the HashchntpwNet User ScriptLogin as SystemFind the AdminWindows Scriptingnet usersnet viewnet sharenet servicenetshellWindows Password CrackingOffline NT Registry EditorLCPpwdumpophcrackJohn the RipperDetecting Malware in WindowsCain and AbelSummaryTest Your SkillsChapter 7: Web HackingWeb TechnologySpecific Attacks on WebsitesSQL Script InjectionXSSOther Web AttacksToolsBurp SuiteBeEFSummaryTest Your SkillsChapter 8: Vulnerability ScanningVulnerabilitiesCVENISTOWASPPacket CapturetcpdumpWiresharkNetwork ScannersLanHelperWireless Scanners/CrackersAircrackGeneral ScannersMBSANessusNexposeSAINTWeb Application ScannersOWASP ZAPVegaCyber Threat IntelligenceThreatcrowd.orgPhishtankInternet Storm CenterOSINTSummaryTest Your SkillsChapter 9: Introduction to LinuxLinux HistoryLinux Commandsls Commandcd CommandPipe Outputfinger Commandgrep Commandps Commandpstree Commandtop Commandkill CommandBasic File and Directory Commandschown Commandchmod Commandbg Commandfg Commanduseradd Commanduserdel Commandusermod Commandusers Commandwho CommandDirectories/root/bin/sbin/etc/dev/boot/usr/var/procGraphical User InterfaceGNOMEKDESummaryTest Your SkillsChapter 10: Linux HackingMore on the Linux OSsysfsCrondShell CommandsLinux FirewallIptablesiptables ConfigurationSyslogSyslogdScriptingLinux PasswordsLinux Hacking TricksBoot HackBackspace HackSummaryTest Your SkillsChapter 11: Introduction to Kali LinuxKali Linux HistoryKali BasicsKali Toolsrecon-ngDmitrySpartaJohn the RipperHashcatmacchangerGhost PhisherSummaryTest Your SkillsChapter 12: General Hacking TechniquesWi-Fi TestingCreate a HotspotUsing Kali as a HotspotTesting the WAP AdministrationOther Wi-Fi IssuesSocial EngineeringDoSWell-known DoS AttacksToolsSummaryTest Your SkillsChapter 13: Introduction to MetasploitBackground on MetasploitGetting Started with MetasploitBasic Usage of msfconsoleBasic CommandsSearchingScanning with MetasploitSMB ScannerSQL Server ScanSSH Server ScanAnonymous FTP ServersFTP ServerHow to Use ExploitsExploit ExamplesCascading Style SheetsFile Format ExploitRemote Desktop ExploitMore ExploitsCommon ErrorPost ExploitsGet Logged-on UsersCheck VMEnumerate ApplicationsGoing Deeper into the TargetSummaryTest Your SkillsChapter 14: More with MetasploitMeterpreter and Post ExploitsARPNETSTATPSNavigationDownload and UploadDesktopsCamerasKey LoggerOther InformationmsfvenomMore Metasploit AttacksFormatting All DrivesAttacking Windows Server 2008 R2Attacking Windows via OfficeAttacking LinuxAttacking via the WebAnother Linux AttackLinux Post ExploitsSummaryTest Your SkillsChapter 15: Introduction to Scripting with RubyGetting StartedBasic Ruby ScriptingA First ScriptSyntaxObject-Oriented ProgrammingSummaryTest Your SkillsChapter 16: Write Your Own Metasploit Exploits with RubyThe APIGetting StartedExamine an Existing ExploitExtending Existing ExploitsWriting Your First ExploitSummaryTest Your SkillsChapter 17: General Hacking KnowledgeConferencesDark WebCertification and TrainingCyber Warfare and TerrorismNation State ActorsSummaryTest Your SkillsChapter 18: Additional Pen Testing TopicsWireless Pen Testing802.11InfraredBluetoothOther Forms of WirelessWi-Fi HackingMainframe and SCADASCADA BasicsMainframesMobile Pen TestingCellular TerminologyBluetooth AttacksBluetooth/Phone ToolsSummaryTest Your SkillsChapter 19: A Sample Pen Test ProjectPen Test OutlinePre-Test ActivitiesExternalInternalOptional ItemsReport OutlineSummaryAppendix A: Answers to Chapter Multiple Choice Questions9780789759375 TOC 2/13/2018