Advanced Penetration Testing for Highly-Secured Environments

by Lee Allen, Kevin Cardwell

Employ the most advanced pentesting techniques and tools to build highly-secured systems and environments About This Book Learn how to build your own pentesting lab environment to practice advanced techniques Customize your own scripts, and learn methods to exploit 32-bit and 64-bit programs Explore a vast variety of stealth techniques to bypass a number of protections when penetration testing Who This Book Is For This book is for anyone who wants to improve their skills in penetration testing. As it follows a step-by-step approach, anyone from a novice to an experienced security tester can learn effective techniques to deal with highly secured environments. Whether you are brand new or a seasoned expert, this book will provide you with the skills you need to successfully create, customize, and plan an advanced penetration test. What You Will Learn A step-by-step methodology to identify and penetrate secured environments Get to know the process to test network services across enterprise architecture when defences are in place Grasp different web application testing methods and how to identify web application protections that are deployed Understand a variety of concepts to exploit software Gain proven post-exploitation techniques to exfiltrate data from the target Get to grips with various stealth techniques to remain undetected and defeat the latest defences Be the first to find out the latest methods to bypass firewalls Follow proven approaches to record and save the data from tests for analysis In Detail The defences continue to improve and become more and more common, but this book will provide you with a number or proven techniques to defeat the latest defences on the networks. The methods and techniques contained will provide you with a powerful arsenal of best practices to increase your penetration testing successes. The processes and methodology will provide you techniques that will enable you to be successful, and the step by step instructions of information gathering and intelligence will allow you to gather the required information on the targets you are testing. The exploitation and post-exploitation sections will supply you with the tools you would need to go as far as the scope of work will allow you. The challenges at the end of each chapter are designed to challenge you and provide real-world situations that will hone and perfect your penetration testing skills. You will start with a review of several well respected penetration testing methodologies, and following this you will learn a step-by-step methodology of professional security testing, including stealth, methods of evasion, and obfuscation to perform your tests and not be detected! The final challenge will allow you to create your own complex layered architecture with defences and protections in place, and provide the ultimate testing range for you to practice the methods shown throughout the book. The challenge is as close to an actual penetration test assignment as you can get! Style and approach The book follows the standard penetration testing stages from start to finish with step-by-step examples. The book thoroughly covers penetration test expectations, proper scoping and planning, as well as enumeration and foot printing"

Genres: Hackers, Technical, Reference

428 pages, Kindle Edition

First published May 16, 2012

About the author

Librarian Note: There is more than one author in the Goodreads database with this name.

Reviews

[Warren · Rating 5 out of 5]

This book is pretty good for learning more about the nuts and bolts of pen-testing (like if you do security for a company and don't actually get to do the sexier pentest stuff.

Covers how to set up your own virtual lab, getting as complex as you need (including firewalls and all other fun stuff.)

If your spouse or SO is into security too, this is a great book for "together" projects.

Yep, I'm a dork.

[David A Engel · Rating 4 out of 5]

Very good book for beginners. I'm not sure why it uses "Advanced" in the title. I'm not very experienced with pen-testing myself, but I thought the outline and guidance given on the step by step recommended processes to pen-testing were explained well, but appeared to be simple examples of vulnerabilities that are already well known, and therefore not likely to be seen in a "Highly-Secured Environment". The clear explanations given were sufficient to help somebody interested in pen-testing to get started, and build a good foundation. The title, in my opinion, is a bit mis-leading. You'll be walked through vulnerabilities and examples of older operating systems, but good luck using this book to actually penetrate a highly secure environment. But you will have a good push to head in that direction. Overall it's a book and I'd recommend it. The reading for some of these types of books can be overly complicated and dry, but this one was not like that.

[Carl · Rating 4 out of 5]

Covers a lot of territory very well...

[Ahmed Sultan · Rating 4 out of 5]

I started reading the book as advised from friend before starting OSCP Certification ,
it's really cool , contain amazing info and scenarios
the reason i didn't give it 5 stars is the lake of IDS evasion and also the very less post exploitation techniques
But the book is really great and highly recommended for infosec guys

[Beck Frost · Rating 4 out of 5]

Very technical with all the command line items in current applications to do specific functions.

The three sections I enjoyed the most were:
1) NMap - excellent coverage of the applications and all the command line combinations that can be used.
2) Web Site scraping - I was very interested in the section on how to detect load balancers in NMap.
3) Sample Pen Test Report.

[F · Rating 4 out of 5]

İ spend tow day's to read this book from cover to cover and its was really so exeited to read and i really recommend every pentester to read this book .. İt open ur eyes for eveything and its easy to reconized and understand all the information inside of it ;)

[Martin · Rating 3 out of 5]

Bastante útil sobre el cómo y con qué documentar.

[Constantine · Rating 4 out of 5]

As a complete novice in this field I must say, I've learned a lot! It covers many things from rules of engagement to penetration itself. After reading this one should take time to think about security of one's system and how easy it could be to penetrate it.

[Delhi Irc]

Location: GG5 IRC
Accession No: DL030057