Looking at traffic patterns
by Kevin Cardwell, Lee Allen
Advanced Penetration Testing for Highly-Secured Environments - Second Edition
- Advanced Penetration Testing for Highly-Secured Environments Second Edition
- Table of Contents
- Advanced Penetration Testing for Highly-Secured Environments Second Edition
- Credits
- About the Authors
- About the Reviewer
- www.PacktPub.com
- Preface
- 1. Penetration Testing Essentials
- 2. Preparing a Test Environment
- 3. Assessment Planning
- 4. Intelligence Gathering
- 5. Network Service Attacks
- Configuring and testing our lab clients
- Angry IP Scanner
- Nmap – getting to know you
- SNMP – a goldmine of information just waiting to be discovered
- Network baselines with scanPBNJ
- Enumeration avoidance techniques
- Reader challenge
- Summary
- 6. Exploitation
- Exploitation – why bother?
- Manual exploitation
- Getting files to and from victim machines
- Passwords – something you know…
- Metasploit – learn it and love it
- Reader challenge
- Summary
- 7. Web Application Attacks
- 8. Exploitation Concepts
- 9. Post-Exploitation
- Rules of Engagement
- Data gathering, network analysis, and pillaging
- Linux
- Putting this information to use
- Enumeration
- Exploitation
- We are connected, now what?
- Which tools are available on the remote system?
- Finding network information
- Determine connections
- Checking installed packages
- Package repositories
- Programs and services that run at startup
- Searching for information
- History files and logs
- Configurations, settings, and other files
- Users and credentials
- Moving the files
- Microsoft Windows™ post-exploitation
- Pivoting
- Reader challenge
- Summary
- 10. Stealth Techniques
- 11. Data Gathering and Reporting
- 12. Penetration Testing Challenge
- Index
Network sniffing can be a huge time-saver. It is more difficult to use remote Windows machines to perform this task for you as the network card needs to be in promiscuous mode, but it can be done. Ideally, you will find a Unix or Linux host that can be turned into a listening station with little to no effort.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.