Halton W., Weaver B., Ansari J.A., Kotipalli S.R., Imran M.A. - Penetration Testing: A Survival Guide

Penetration Testing: A Survival Guide

Год издания: 2017
Автор: Halton W., Weaver B., Ansari J.A., Kotipalli S.R., Imran M.A.
Издательство: Packt Publishing
ISBN: 9781787287839
Язык: Английский
Формат: PDF/EPUB
Качество: Издательский макет или текст (eBook)
Интерактивное оглавление: Да
Количество страниц: 1045
Описание: The need for penetration testers has grown well over what the IT industry ever anticipated. Running just a vulnerability scanner is no longer an effective method to determine whether a business is truly secure. This learning path will help you develop the most effective penetration testing skills to protect your Windows, web applications, and Android devices.
The first module focuses on the Windows platform, which is one of the most common OSes, and managing its security spawned the discipline of IT security. Kali Linux is the premier platform for testing and maintaining Windows security. Employs the most advanced tools and techniques to reproduce the methods used by sophisticated hackers. In this module first,you’ll be introduced to Kali's top ten tools and other useful reporting tools. Then, you will find your way around your target network and determine known vulnerabilities so you can exploit a system remotely. You’ll not only learn to penetrate in the machine, but will also learn to work with Windows privilege escalations.
The second module will help you get to grips with the tools used in Kali Linux 2.0 that relate to web application hacking. You will get to know about scripting and input validation flaws, AJAX, and security issues related to AJAX. You will also use an automated technique called fuzzing so you can identify flaws in a web application. Finally, you’ll understand the web application vulnerabilities and the ways they can be exploited.
In the last module, you’ll get started with Android security. Android, being the platform with the largest consumer base, is the obvious primary target for attackers. You’ll begin this journey with the absolute basics and will then slowly gear up to the concepts of Android rooting, application security assessments, malware, infecting APK files, and fuzzing. You’ll gain the skills necessary to perform Android application vulnerability assessments and to create an Android pentesting lab.
This Learning Path is a blend of content from the following Packt products:- Kali Linux 2: Windows Penetration Testing by Wolf Halton and Bo Weaver
- Web Penetration Testing with Kali Linux, Second Edition by Juned Ahmed Ansari
- Hacking Android by Srinivasa Rao Kotipalli and Mohammed A. Imran

Примеры страниц

Оглавление
Table of Contents

1: Sharpening the Saw

2: Information Gathering and Vulnerability Assessment

3: Exploitation Tools (Pwnage)

4: Web Application Exploitation

5: Sniffing and Spoofing

6: Password Attacks

7: Windows Privilege Escalation

8: Maintaining Remote Access

9: Reverse Engineering and Stress Testing

10: Forensics

11: Introduction to Penetration Testing and Web Applications

12: Setting up Your Lab with Kali Linux

13: Reconnaissance and Profiling the Web Server

14: Major Flaws in Web Applications

15: Attacking the Server Using Injection-based Flaws

16: Exploiting Clients Using XSS and CSRF Flaws

17: Attacking SSL-based Websites

18: Exploiting the Client Using Attack Frameworks

19: AJAX and Web Services - Security Issues

20: Fuzzing Web Applications

21: Setting Up the Lab

22: Android Rooting

23: Fundamental Building Blocks of Android Apps

24: Overview of Attacking Android Apps

25: Data Storage and Its Security

26: Server-Side Attacks

27: Client-Side Attacks - Static Analysis Techniques

28: Client-Side Attacks - Dynamic Analysis Techniques

29: Android Malware

30: Attacks on Android Devices