Reader challenge
by Kevin Cardwell, Lee Allen
Advanced Penetration Testing for Highly-Secured Environments - Second Edition
- Advanced Penetration Testing for Highly-Secured Environments Second Edition
- Table of Contents
- Advanced Penetration Testing for Highly-Secured Environments Second Edition
- Credits
- About the Authors
- About the Reviewer
- www.PacktPub.com
- Preface
- 1. Penetration Testing Essentials
- 2. Preparing a Test Environment
- 3. Assessment Planning
- 4. Intelligence Gathering
- 5. Network Service Attacks
- Configuring and testing our lab clients
- Angry IP Scanner
- Nmap – getting to know you
- SNMP – a goldmine of information just waiting to be discovered
- Network baselines with scanPBNJ
- Enumeration avoidance techniques
- Reader challenge
- Summary
- 6. Exploitation
- Exploitation – why bother?
- Manual exploitation
- Getting files to and from victim machines
- Passwords – something you know…
- Metasploit – learn it and love it
- Reader challenge
- Summary
- 7. Web Application Attacks
- 8. Exploitation Concepts
- 9. Post-Exploitation
- Rules of Engagement
- Data gathering, network analysis, and pillaging
- Linux
- Putting this information to use
- Enumeration
- Exploitation
- We are connected, now what?
- Which tools are available on the remote system?
- Finding network information
- Determine connections
- Checking installed packages
- Package repositories
- Programs and services that run at startup
- Searching for information
- History files and logs
- Configurations, settings, and other files
- Users and credentials
- Moving the files
- Microsoft Windows™ post-exploitation
- Pivoting
- Reader challenge
- Summary
- 10. Stealth Techniques
- 11. Data Gathering and Reporting
- 12. Penetration Testing Challenge
- Index
For this section, review the information from the chapter, and try and expand on the topics; this will allow you to increase your knowledge on different topics. To stimulate your thinking:
- Conduct an assessment. Use the Kioptrix machine as your target of interest and perform a fully documented test.
- After you have completed your report take a step back and picture yourself as a business owner who receives this report as your output. Does your work allow for remediation of any issues that were found? Did you provide enough cross-reference material so that the document can stand on its own after the initial consultation has been completed?
- Take a look at Chapter 3, Assessment Planning and see if you can set up an HTML template that enables you to easily import your detail data into your final report. Once something like this has been automated, it has the potential to save a significant amount of time!
These challenges are designed to provide you with practice in what some consider the most boring part of testing; but in reality, it showcases your capabilities to the client. Enjoy!
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.