Professional Penetration Testing: Creating and Learning in a Hacking Lab, Third Edition walks the reader through the entire process of setting up and running a pen test lab. Penetration testing—the act of testing a computer network to find security vulnerabilities before they are maliciously exploited—is a crucial component of information security in any organization. Chapters cover planning, metrics, and methodologies, the details of running a pen test, including identifying and verifying vulnerabilities, and archiving, reporting and management practices. The material presented will be useful to beginners through advanced practitioners.
Here, author Thomas Wilhelm has delivered penetration testing training to countless security professionals, and now through the pages of this book, the reader can benefit from his years of experience as a professional penetration tester and educator. After reading this book, the reader will be able to create a personal penetration test lab that can deal with real-world vulnerability scenarios. "...this is a detailed and thorough examination of both the technicalities and the business of pen-testing, and an excellent starting point for anyone getting into the field." –Network Security
1. Chapter 1. Introduction - p. 1 2. Chapter 2. Ethics and hacking - p. 21 3. Chapter 3. Picking your pentesting focus - p. 49 4. Chapter 4. Setting up your labs - p. 77 5. Chapter 5. The Cyber Kill Chain - p. 113 6. Chapter 6. Reconnaissance - p. 169 7. Chapter 7. Weaponization - p. 209 8. Chapter 8. Delivery - p. 235 9. Chapter 9. Exploitation - p. 257 10. Chapter 10. Installation - p. 301 11. Chapter 11. Command and Control - p. 321 12. Chapter 12. Actions on Objectives - p. 359 13. Chapter 13. Targeting the network - p. 387 14. Chapter 14. Web application attack techniques - p. 401 15. Chapter 15. Cloud testing - p. 447 16. Chapter 16. Reporting results - p. 471 17. Chapter 17. Hacking as a career - p. 491 18. Index - p. 511
Professional Penetration Testing: Creating and Learning in a Hacking Lab, Third Edition walks the reader through the entire process of setting up and running a pen test lab. Penetration testing—the act of testing a computer network to find security vulnerabilities before they are maliciously exploited—is a crucial component of information security in any organization. Chapters cover planning, metrics, and methodologies, the details of running a pen test, including identifying and verifying vulnerabilities, and archiving, reporting and management practices. The material presented will be useful to beginners through advanced practitioners.
Here, author Thomas Wilhelm has delivered penetration testing training to countless security professionals, and now through the pages of this book, the reader can benefit from his years of experience as a professional penetration tester and educator. After reading this book, the reader will be able to create a personal penetration test lab that can deal with real-world vulnerability scenarios. "...this is a detailed and thorough examination of both the technicalities and the business of pen-testing, and an excellent starting point for anyone getting into the field." –Network Security
1. Chapter 1. Introduction - p. 1 2. Chapter 2. Ethics and hacking - p. 21 3. Chapter 3. Picking your pentesting focus - p. 49 4. Chapter 4. Setting up your labs - p. 77 5. Chapter 5. The Cyber Kill Chain - p. 113 6. Chapter 6. Reconnaissance - p. 169 7. Chapter 7. Weaponization - p. 209 8. Chapter 8. Delivery - p. 235 9. Chapter 9. Exploitation - p. 257 10. Chapter 10. Installation - p. 301 11. Chapter 11. Command and Control - p. 321 12. Chapter 12. Actions on Objectives - p. 359 13. Chapter 13. Targeting the network - p. 387 14. Chapter 14. Web application attack techniques - p. 401 15. Chapter 15. Cloud testing - p. 447 16. Chapter 16. Reporting results - p. 471 17. Chapter 17. Hacking as a career - p. 491 18. Index - p. 511
