The Basics of Hacking and Penetration Testing

The Basics of Hacking and Penetration Testing
Author: Patrick Engebretson
Publisher: Elsevier
Total Pages: 223
Release: 2013-06-24
Genre: Computers
ISBN: 0124116418

The Basics of Hacking and Penetration Testing, Second Edition, serves as an introduction to the steps required to complete a penetration test or perform an ethical hack from beginning to end. The book teaches students how to properly utilize and interpret the results of the modern-day hacking tools required to complete a penetration test. It provides a simple and clean explanation of how to effectively utilize these tools, along with a four-step methodology for conducting a penetration test or hack, thus equipping students with the know-how required to jump start their careers and gain a better understanding of offensive security.Each chapter contains hands-on examples and exercises that are designed to teach learners how to interpret results and utilize those results in later phases. Tool coverage includes: Backtrack Linux, Google reconnaissance, MetaGooFil, dig, Nmap, Nessus, Metasploit, Fast Track Autopwn, Netcat, and Hacker Defender rootkit. This is complemented by PowerPoint slides for use in class.This book is an ideal resource for security consultants, beginning InfoSec professionals, and students. - Each chapter contains hands-on examples and exercises that are designed to teach you how to interpret the results and utilize those results in later phases - Written by an author who works in the field as a Penetration Tester and who teaches Offensive Security, Penetration Testing, and Ethical Hacking, and Exploitation classes at Dakota State University - Utilizes the Kali Linux distribution and focuses on the seminal tools required to complete a penetration test

Kali Linux Revealed

Kali Linux Revealed
Author: Raphaël Hertzog
Publisher:
Total Pages: 342
Release: 2017-06-05
Genre: Hackers
ISBN: 9780997615609

Whether you're a veteran or an absolute n00b, this is the best place to start with Kali Linux, the security professional's platform of choice, and a truly industrial-grade, and world-class operating system distribution-mature, secure, and enterprise-ready.

Violent Python

Violent Python
Author: TJ O'Connor
Publisher: Newnes
Total Pages: 289
Release: 2012-12-28
Genre: Computers
ISBN: 1597499641

Violent Python shows you how to move from a theoretical understanding of offensive computing concepts to a practical implementation. Instead of relying on another attacker's tools, this book will teach you to forge your own weapons using the Python programming language. This book demonstrates how to write Python scripts to automate large-scale network attacks, extract metadata, and investigate forensic artifacts. It also shows how to write code to intercept and analyze network traffic using Python, craft and spoof wireless frames to attack wireless and Bluetooth devices, and how to data-mine popular social media websites and evade modern anti-virus. - Demonstrates how to write Python scripts to automate large-scale network attacks, extract metadata, and investigate forensic artifacts - Write code to intercept and analyze network traffic using Python. Craft and spoof wireless frames to attack wireless and Bluetooth devices - Data-mine popular social media websites and evade modern anti-virus

How to Pass OSCP Series: Windows Privilege Escalation Step-By-Step Guide

How to Pass OSCP Series: Windows Privilege Escalation Step-By-Step Guide
Author: Alan Wang
Publisher:
Total Pages: 542
Release: 2020-11-13
Genre:
ISBN:

This book is the first of a series of How To Pass OSCP books and focus on techniques used in Windows Privilege Escalation. This is a step-by-step guide that walks you through the whole process of how to escalate privilege in Windows environment using many common techniques. We start by gathering as much information about the target as possible either manually or using automated scripts. Next, we search for misconfigured services or scheduled tasks, insufficient file permission on binaries or services, vulnerable kernel, vulnerable software running with high privileges, sensitive information stored on local files, credential saved in the memory, registry settings that always elevate privileges before executing a binary, hard-coded credential contained in the application configuration files, and many more. Table of Contents Introduction Section One: Windows Configuration Chapter 1: AlwaysInstallElevated Section Two: Domain Controller Chapter 2: Zerologon Section Three: Windows Service Chapter 3: Service - Insecure File Permission Chapter 4: Service - Unquoted Path Chapter 5: Service - Bin Path Chapter 6: Service - Registry Chapter 7: Service - DLL Hijacking Section Four: Scheduled Tasks Chapter 8: Scheduled Tasks Section Five: Windows Registry Chapter 9: Autorun Chapter 10: Startup Applications Section Six: Windows Kernel Chapter 11: Kernel - EternalBlue Chapter 12: Kernel - MS15-051 Chapter 13: Kernel - MS14-058 Section Seven: Potato Exploits Chapter 14: Juicy Potato Chapter 15: Rogue Potato Section Eight: Password Mining Chapter 16: Password Mining - Memory Chapter 17: Password Mining - Registry Chapter 18: Password Mining - SiteList Chapter 19: Password Mining - Unattended Chapter 20: Password Mining - Web.config Section Nine: UAC Bypass Chapter 21: User Account Control Bypass For more information, please visit http://www.howtopassoscp.com/.

Penetration Testing

Penetration Testing
Author: Georgia Weidman
Publisher: No Starch Press
Total Pages: 531
Release: 2014-06-14
Genre: Computers
ISBN: 1593275641

Penetration testers simulate cyber attacks to find security weaknesses in networks, operating systems, and applications. Information security experts worldwide use penetration techniques to evaluate enterprise defenses. In Penetration Testing, security expert, researcher, and trainer Georgia Weidman introduces you to the core skills and techniques that every pentester needs. Using a virtual machine–based lab that includes Kali Linux and vulnerable operating systems, you’ll run through a series of practical lessons with tools like Wireshark, Nmap, and Burp Suite. As you follow along with the labs and launch attacks, you’ll experience the key stages of an actual assessment—including information gathering, finding exploitable vulnerabilities, gaining access to systems, post exploitation, and more. Learn how to: –Crack passwords and wireless network keys with brute-forcing and wordlists –Test web applications for vulnerabilities –Use the Metasploit Framework to launch exploits and write your own Metasploit modules –Automate social-engineering attacks –Bypass antivirus software –Turn access to one machine into total control of the enterprise in the post exploitation phase You’ll even explore writing your own exploits. Then it’s on to mobile hacking—Weidman’s particular area of research—with her tool, the Smartphone Pentest Framework. With its collection of hands-on lessons that cover key tools and strategies, Penetration Testing is the introduction that every aspiring hacker needs.

CISSP Study Guide

CISSP Study Guide
Author: Eric Conrad
Publisher: Syngress
Total Pages: 624
Release: 2015-12-08
Genre: Computers
ISBN: 0128028203

CISSP Study Guide, Third Edition provides readers with information on the CISSP certification, the most prestigious, globally-recognized, vendor-neutral exam for information security professionals. With over 100,000 professionals certified worldwide, and many more joining their ranks, this new third edition presents everything a reader needs to know on the newest version of the exam's Common Body of Knowledge. The eight domains are covered completely and as concisely as possible, allowing users to ace the exam. Each domain has its own chapter that includes a specially-designed pedagogy to help users pass the exam, including clearly-stated exam objectives, unique terms and definitions, exam warnings, "learning by example" modules, hands-on exercises, and chapter ending questions. Provides the most complete and effective study guide to prepare users for passing the CISSP exam, giving them exactly what they need to pass the test Authored by Eric Conrad who has prepared hundreds of professionals for passing the CISSP exam through SANS, a popular and well-known organization for information security professionals Covers all of the new information in the Common Body of Knowledge updated in January 2015, and also provides two exams, tiered end-of-chapter questions for a gradual learning curve, and a complete self-test appendix

Cybersecurity - Attack and Defense Strategies

Cybersecurity - Attack and Defense Strategies
Author: Yuri Diogenes
Publisher: Packt Publishing Ltd
Total Pages: 368
Release: 2018-01-30
Genre: Computers
ISBN: 178847385X

Key Features Gain a clear understanding of the attack methods, and patterns to recognize abnormal behavior within your organization with Blue Team tactics Learn to unique techniques to gather exploitation intelligence, identify risk and demonstrate impact with Red Team and Blue Team strategies A practical guide that will give you hands-on experience to mitigate risks and prevent attackers from infiltrating your system Book DescriptionThe book will start talking about the security posture before moving to Red Team tactics, where you will learn the basic syntax for the Windows and Linux tools that are commonly used to perform the necessary operations. You will also gain hands-on experience of using new Red Team techniques with powerful tools such as python and PowerShell, which will enable you to discover vulnerabilities in your system and how to exploit them. Moving on, you will learn how a system is usually compromised by adversaries, and how they hack user's identity, and the various tools used by the Red Team to find vulnerabilities in a system. In the next section, you will learn about the defense strategies followed by the Blue Team to enhance the overall security of a system. You will also learn about an in-depth strategy to ensure that there are security controls in each network layer, and how you can carry out the recovery process of a compromised system. Finally, you will learn how to create a vulnerability management strategy and the different techniques for manual log analysis.What you will learn Learn the importance of having a solid foundation for your security posture Understand the attack strategy using cyber security kill chain Learn how to enhance your defense strategy by improving your security policies, hardening your network, implementing active sensors, and leveraging threat intelligence Learn how to perform an incident investigation Get an in-depth understanding of the recovery process Understand continuous security monitoring and how to implement a vulnerability management strategy Learn how to perform log analysis to identify suspicious activities Who this book is for This book aims at IT professional who want to venture the IT security domain. IT pentester, Security consultants, and ethical hackers will also find this course useful. Prior knowledge of penetration testing would be beneficial.

Network Intrusion Detection

Network Intrusion Detection
Author: Stephen Northcutt
Publisher: Sams Publishing
Total Pages: 84
Release: 2002
Genre: Computers
ISBN: 9780735712652

This book is a training aid and reference for intrusion detection analysts. While the authors refer to research and theory, they focus their attention on providing practical information. New to this edition is coverage of packet dissection, IP datagram fields, forensics, and snort filters.

A Basic Guide to Exporting

A Basic Guide to Exporting
Author: Jason Katzman
Publisher: Skyhorse Publishing Inc.
Total Pages: 397
Release: 2011-03-23
Genre: Business & Economics
ISBN: 1616081112

Here is practical advice for anyone who wants to build their business by selling overseas. The International Trade Administration covers key topics such as marketing, legal issues, customs, and more. With real-life examples and a full index, A Basic Guide to Exporting provides expert advice and practical solutions to meet all of your exporting needs.