Advanced Penetration Testing for Highly-Secured Environments: The Ultimate Security Guide - Couverture souple

Allen, Lee

Couverture souple

ISBN 10 : 1849517746 ISBN 13 : 9781849517744

Editeur : Packt Publishing, 2012

Synopsis

Employ the most advanced pentesting techniques and tools to build highly-secured systems and environments

About This Book

• Learn how to build your own pentesting lab environment to practice advanced techniques
• Customize your own scripts, and learn methods to exploit 32-bit and 64-bit programs
• Explore a vast variety of stealth techniques to bypass a number of protections when penetration testing

Who This Book Is For

This book is for anyone who wants to improve their skills in penetration testing. As it follows a step-by-step approach, anyone from a novice to an experienced security tester can learn effective techniques to deal with highly secured environments.

Whether you are brand new or a seasoned expert, this book will provide you with the skills you need to successfully create, customize, and plan an advanced penetration test.

What You Will Learn

• A step-by-step methodology to identify and penetrate secured environments
• Get to know the process to test network services across enterprise architecture when defences are in place
• Grasp different web application testing methods and how to identify web application protections that are deployed
• Understand a variety of concepts to exploit software
• Gain proven post-exploitation techniques to exfiltrate data from the target
• Get to grips with various stealth techniques to remain undetected and defeat the latest defences
• Be the first to find out the latest methods to bypass firewalls
• Follow proven approaches to record and save the data from tests for analysis

In Detail

The defences continue to improve and become more and more common, but this book will provide you with a number or proven techniques to defeat the latest defences on the networks. The methods and techniques contained will provide you with a powerful arsenal of best practices to increase your penetration testing successes.

The processes and methodology will provide you techniques that will enable you to be successful, and the step by step instructions of information gathering and intelligence will allow you to gather the required information on the targets you are testing. The exploitation and post-exploitation sections will supply you with the tools you would need to go as far as the scope of work will allow you. The challenges at the end of each chapter are designed to challenge you and provide real-world situations that will hone and perfect your penetration testing skills. You will start with a review of several well respected penetration testing methodologies, and following this you will learn a step-by-step methodology of professional security testing, including stealth, methods of evasion, and obfuscation to perform your tests and not be detected!

The final challenge will allow you to create your own complex layered architecture with defences and protections in place, and provide the ultimate testing range for you to practice the methods shown throughout the book. The challenge is as close to an actual penetration test assignment as you can get!

Style and approach

The book follows the standard penetration testing stages from start to finish with step-by-step examples. The book thoroughly covers penetration test expectations, proper scoping and planning, as well as enumeration and foot printing

A propos du livre

Présentation de l'éditeur

Learn to perform professional penetration testing for highly-secured environments with this intensive hands-on guide.

Overview

• Learn how to perform an efficient, organized, and effective penetration test from start to finish
• Gain hands-on penetration testing experience by building and testing a virtual lab environment that includes commonly found security measures such as IDS and firewalls
• Take the challenge and perform a virtual penetration test against a fictional corporation from start to finish and then verify your results by walking through step-by-step solutions

In Detail

The internet security field has grown by leaps and bounds over the last decade. Everyday more people around the globe gain access to the internet and not all of them with good intentions. The need for penetration testers has grown now that the security industryhas had time to mature. Simply running a vulnerability scanner is a thing of the past and is no longer an effective method of determining a business's true security posture. Learn effective penetration testing skills so that you can effectively meet and manage the rapidly changing security needs of your company.

Advanced Penetration Testing for Highly-Secured Environments will teach you how to efficiently and effectively ensure the security posture of environments that have been secured using IDS/IPS, firewalls, network segmentation, hardened system configurations and more. The stages of a penetration test are clearly defined and addressed using step-by-step instructions that you can follow on your own virtual lab.

The book follows the standard penetration testing stages from start to finish with step-by-step examples. The book thoroughly covers penetration test expectations, proper scoping and planning, as well as enumeration and footprinting. You'll learn how to clean up and compile proof of concept, exploit code from the web, advanced web application testing techniques, client side attacks, post exploitation strategies, detection avoidance methods, generation of well defined reports and metrics, and setting up a penetration testing virtual lab that mimics a secured environment. The book closes by issuing a challenge to your skills and ability to perform a full penetration test against a fictional corporation; followed by a detailed walk through of the solution.

Advanced Penetration Testing for Highly-Secured Environments is packed with detailed examples that reinforce enumeration, exploitation, post-exploitation, reporting skills and more. This book will provide the hands-on experience necessary to systematically ensure the security posture for any environment, regardless of how many security controls are in place.

What you will learn from this book

• Detailed step-by-step guidance on managing testing results and writing clearly organized and effective penetration testing reports
• Properly scope your penetration test to avoid catastrophe
• Understand in detail how the testing process works from start to finish, not just how to use specific tools
• Use advanced techniques to bypass security controls and remain hidden while testing
• Create a segmented virtual network with several targets, IDS and firewall
• Generate testing reports and statistics
• Advanced web application testing and exploitation
• Perform an efficient, organized, and effective penetration test from start to finish

Biographie de l'auteur

Lee Allen

Lee Allen is currently the Vulnerability Management Program Lead for one of the Fortune 500. Amongst many other responsibilities, he performs security assessments and penetration testing.

Lee is very passionate and driven about the subject of penetration testing and security research. His journey into the exciting world of security began back in the 80's while visiting BBS's with his trusty Commodore 64 and a room carpeted with 5 ¼ inch floppy disks. Throughout the years, he has continued his attempts at remaining up to date with the latest and greatest in the security industry and the community. He has several industry certifications including the OSWP and has been working in the IT industry for over 15 years. His hobbies include validating and reviewing proof of concept exploit code, programming, security research, attending security conferences, discussing technology, writing, and skiing.

He lives in Ohio with wife Kellie and their 6 children Heather, Kristina, Natalie, Mason, Alyssa, and Seth.

Détails de l'édition

• Éditeur: Packt Publishing
• Date d'édition: 2012
• Langue: anglais
• ISBN 10: 1849517746
• ISBN 13: 9781849517744
• Reliure: Broché
• Nombre de pages: 414
• Coordonnées du fabricant: non disponible
• Personne responsable: non disponible