Name: Building Virtual Pentesting Labs for Advanced Penetration Testing（Second Edition）
Author: Kevin Cardwell
ISBN: 9781785884955

微信读书书城Building Virtual Pentesting Labs for Advanced Penetration Testing（Second Edition）

首页我的书架登录

翻译完成

切换

Building Virtual Pentesting Labs for Advanced Penetration Testing（Second Edition）

Kevin Cardwell

扉页
版权页
+书签
Credits
About the Author
Acknowledgments
About the Reviewer
www.PacktPub.com
eBooks, discount offers, and more
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Downloading the color images of this book
Errata
Piracy
Questions
Chapter 1. Introducing Penetration Testing
Security testing
An abstract testing methodology
Reporting
Myths and misconceptions about pen testing
Summary
Chapter 2. Choosing the Virtual Environment
Open source and free environments
Commercial environments
Image conversion
Converting from a physical to a virtual environment
Summary
Chapter 3. Planning a Range
Planning
Identifying vulnerabilities
Summary
Chapter 4. Identifying Range Architectures
Building the machines
Selecting network connections
Choosing range components
Readers challenge
Summary
Chapter 5. Identifying a Methodology
The OSSTMM
CHECK
NIST SP-800-115
Readers challenge
Summary
Chapter 6. Creating an External Attack Architecture
Configuring firewall architectures and establishing layered architectures
Readers challenge
Summary
Chapter 7. Assessment of Devices
Assessing routers
Evaluating switches
Attacking the firewall
Tricks to penetrate filters
Readers challenge
Summary
Chapter 8. Architecting an IDS/IPS Range
Deploying a network-based IDS
Security Incident and Event Management (SIEM)
Implementing the host-based IDS and endpoint security
Working with virtual switches
Evasion
Readers challenge
Summary
Chapter 9. Assessment of Web Servers and Web Applications
OWASP top ten attacks
Analysing web applications with Burp Suite
Penetrating web application firewalls
Tools
Readers challenge
Summary
Chapter 10. Testing Flat and Internal Networks
The role of vulnerability scanners
Dealing with host protection
Readers challenge
Summary
Chapter 11. Testing Servers
Common protocols and applications for servers
Database assessment
OS platform specifics
Readers challenge
Summary
Chapter 12. Exploring Client-Side Attack Vectors
Client-side attack methods
Readers challenge
Summary
Chapter 13. Building a Complete Cyber Range
Creating the layered architecture
Integrating decoys and honeypots
Attacking the cyber range
Recording the attack data for further training and analysis
Readers challenge
Summary

简介

版权

Building Virtual Pentesting Labs for Advanced Penetration Testing（Second Edition）