Penetration Testing Fundamentals: A Hands-On Guide to Reliable Security Audits, 1st edition

William Easttom

eTextbook

per month

Anytime, anywhere learning with the Pearson+ app
Easy-to-use search, navigation and notebook
Simpler studying with flashcards

Print

$64.00

A print text (hardcover or paperback)
Free shipping
Also available for purchase as an ebook from all major ebook resellers, including InformIT.com

uCertify

from$125.00

Includes the full Pearson e-text, pre- and post-assessments, quizzes, videos, and more
Provides hands-on skills to bridge conceptual knowledge and real-world application
Powerful student management tools yet easy to implement, customize, and manage

Leading security expert, researcher, instructor, and author Chuck Easttom II has brought together all the essential knowledge in a single comprehensive guide that covers the entire penetration testing lifecycle. Easttom integrates concepts, terminology, challenges, and theory, and walks you through every step, from planning to effective post-test reporting. He presents a start-to-finish sample project relying on free open source tools, as well as quizzes, labs, and review sections throughout. Penetration Testing Fundamentals is also the only book to cover pentesting standards from NSA, PCI, and NIST.

The first expert one-volume guide to pentesting concepts, terminology, issues, theory, standards -- and above all, practical skills
Covers the entire penetration testing project lifecycle
Includes a sample start-to-finish pentest project using free open source tools
Contains quizzes, labs, and review sections to build mastery and support any pentesting course
Recommended text for the Pearson IT Cybersecurity Curriculum course on Penetration Testing

Introduction

Chapter 1: Introduction to Penetration Testing

What Is Penetration Testing?

Audits

Vulnerability Scans

Penetration Tests

The Hybrid Test

Terminology

Methodologies

Nature of the Test

Approaches

Ethical Issues

Everything Is Confidential

Keep in Your Lane

If You Break It, You Bought It

Legal Issues

Computer Fraud and Abuse Act (CFAA): 18 U.S. Code § 1030

Unlawful Access to Stored Communications: 18 U.S. Code § 2701

Identity Theft Enforcement and Restitution Act

Fraud and Related Activity in Connection with Access Devices: 18 U.S. Code § 1029

State Laws

International Laws

Certifications

CEH

GPEN

OSCP

Mile2

CISSP

PPT

This Book and Certifications

Careers in Penetration Testing

Security Administrators

Commercial Penetration Testing

Government/National Defense

Law Enforcement

Building Your Skillset

Summary

Test Your Skills

Chapter 2: Standards

PCI DSS

The Actual Test

NIST 800-115

Planning

Execution

Post-Execution

National Security Agency InfoSec Assessment Methodology (NSA-IAM)

PTES

CREST (UK)

A Synthesis (Putting Standards Together into a Single Unified Approach)

Pre-Engagement

The Actual Test

Reporting

Related Standards

OWASP

Other Standards

ISO 27002

NIST 800-12, Revision 1

NIST 800-14

Summary

Test Your Skills

Chapter 3: Cryptography

Cryptography Basics

History of Encryption

The Caesar Cipher

Atbash

Multi-Alphabet Substitution

Rail Fence

Modern Methods

Symmetric Encryption

Modification of Symmetric Methods

Practical Applications

Public Key (Asymmetric) Encryption

Digital Signatures

Hashing

MD5

SHA

RIPEMD

Windows Hashing

MAC and HMAC

Rainbow Tables

Pass the Hash

Password Crackers

Steganography

Historical Steganography

Methods and Tools

Cryptanalysis

Frequency Analysis

Modern Methods

Practical Application

Learning More

Summary

Test Your Skills

Chapter 4: Reconnaissance

Passive Scanning Techniques

Netcraft

BuiltWith

Archive.org

Shodan

Social Media

Google Searching

Active Scanning Techniques

Port Scanning

Enumeration

Wireshark

Maltego

Other OSINT Tools

OSINT Website

Alexa

Web Master Tips

Summary

Test Your Skills

Chapter 5: Malware

Viruses

How a Virus Spreads

Types of Viruses

Virus Examples

Trojan Horses

Other Forms of Malware

Rootkit

Malicious Web-Based Code

Logic Bombs

Creating Malware

Levels of Malware Writing Skill

GUI Tools

Simple Script Viruses

Creating a Trojan Horse

Altering Existing Viruses

Summary

Test Your Skills

Chapter 6: Hacking Windows

Windows Details

Windows History

The Boot Process

Important Windows Files

Windows Logs

The Registry

Volume Shadow Copy

Windows Password Hashing

Windows Hacking Techniques

Pass the Hash

chntpw

Net User Script

Find the Admin

Windows Scripting

net users

net view

net share

net service

netshell

Windows Password Cracking

Offline NT Registry Editor

LCP

pwdump

ophcrack

John the Ripper

Detecting Malware in Windows

Cain and Abel

Summary

Test Your Skills

Chapter 7: Web Hacking

Web Technology

Specific Attacks on Websites

SQL Script Injection

XSS

Other Web Attacks

Tools

Burp Suite

BeEF

Summary

Test Your Skills

Chapter 8: Vulnerability Scanning

Vulnerabilities

CVE

NIST

OWASP

Packet Capture

tcpdump

Wireshark

Network Scanners

LanHelper

Wireless Scanners/Crackers

Aircrack

General Scanners

MBSA

Nessus

Nexpose

SAINT

Web Application Scanners

OWASP ZAP

Vega

Cyber Threat Intelligence

Threatcrowd.org

Phishtank

Internet Storm Center

OSINT

Summary

Test Your Skills

Chapter 9: Introduction to Linux

Linux History

Linux Commands

ls Command

cd Command

Pipe Output

finger Command

grep Command

ps Command

pstree Command

top Command

kill Command

Basic File and Directory Commands

chown Command

chmod Command

bg Command

fg Command

useradd Command

userdel Command

usermod Command

users Command

who Command

Directories

/root

/bin

/sbin

/etc

/dev

/boot

/usr

/var

/proc

Graphical User Interface

GNOME

KDE

Summary

Test Your Skills

Chapter 10: Linux Hacking

More on the Linux OS

sysfs

Crond

Shell Commands

Linux Firewall

Iptables

iptables Configuration

Syslog

Syslogd

Scripting

Linux Passwords

Linux Hacking Tricks

Boot Hack

Backspace Hack

Summary

Test Your Skills

Chapter 11: Introduction to Kali Linux

Kali Linux History

Kali Basics

Kali Tools

recon-ng

Dmitry

Sparta

John the Ripper

Hashcat

macchanger

Ghost Phisher

Summary

Test Your Skills

Chapter 12: General Hacking Techniques

Wi-Fi Testing

Create a Hotspot

Using Kali as a Hotspot

Testing the WAP Administration

Other Wi-Fi Issues

Social Engineering

DoS

Well-known DoS Attacks

Tools

Summary

Test Your Skills

Chapter 13: Introduction to Metasploit

Background on Metasploit

Getting Started with Metasploit

Basic Usage of msfconsole

Basic Commands

Searching

Scanning with Metasploit

SMB Scanner

SQL Server Scan

SSH Server Scan

Anonymous FTP Servers

FTP Server

How to Use Exploits

Exploit Examples

Cascading Style Sheets

File Format Exploit

Remote Desktop Exploit

More Exploits

Common Error

Post Exploits

Get Logged-on Users

Check VM

Enumerate Applications

Going Deeper into the Target

Summary

Test Your Skills

Chapter 14: More with Metasploit

Meterpreter and Post Exploits

ARP

NETSTAT

Navigation

Download and Upload

Desktops

Cameras

Key Logger

Other Information

msfvenom

More Metasploit Attacks

Formatting All Drives

Attacking Windows Server 2008 R2

Attacking Windows via Office

Attacking Linux

Attacking via the Web

Another Linux Attack

Linux Post Exploits

Summary

Test Your Skills

Chapter 15: Introduction to Scripting with Ruby

Getting Started

Basic Ruby Scripting

A First Script

Syntax

Object-Oriented Programming

Summary

Test Your Skills

Chapter 16: Write Your Own Metasploit Exploits with Ruby

The API

Getting Started

Examine an Existing Exploit

Extending Existing Exploits

Writing Your First Exploit

Summary

Test Your Skills

Chapter 17: General Hacking Knowledge

Conferences

Dark Web

Certification and Training

Cyber Warfare and Terrorism

Nation State Actors

Summary

Test Your Skills

Chapter 18: Additional Pen Testing Topics

Wireless Pen Testing

802.11

Infrared

Bluetooth

Other Forms of Wireless

Wi-Fi Hacking

Mainframe and SCADA

SCADA Basics

Mainframes

Mobile Pen Testing

Cellular Terminology

Bluetooth Attacks

Bluetooth/Phone Tools

Summary

Test Your Skills

Chapter 19: A Sample Pen Test Project

Pen Test Outline

Pre-Test Activities

External

Internal

Optional Items

Report Outline

Summary

Appendix A: Answers to Chapter Multiple Choice Questions

9780789759375 TOC 2/13/2018

Chuck Easttom has been in the IT industry for well over 25 years and cybersecurity for over 15. He has over 40 industry certifications, and has authored 24 other books. He is also an inventor with 13 patents. Chuck is a frequent speaker at various security conferences including Defcon, ISC2 Security Congress, Secure World, and many others. He also has authored a number of papers on security-related topics including malware development, penetration testing, and hacking techniques. He also has hands-on experience consulting on cyber security issues and conducting penetration tests.

Need help? Get in touch

Pearson+
All in one place. Pearson+ offers instant access to eTextbooks, videos and study tools in one intuitive interface. Students choose how they learn best with enhanced search, audio and flashcards. The Pearson+ app lets them read where life takes them, no wi-fi needed. Students can access Pearson+ through a subscription or their MyLab or Mastering course.

**uCertify**
The Pearson uCertify Courses and Labs combine Pearson's authorized and peer-reviewed content with uCertify's accessible, flexible, and scalable online learning platform. All Courses and Labs are mapped directly to Pearson texts to make integration into your current courses easy and convenient
The uCertify Courses are a foundational learning tool and come with the complete Pearson interactive e-text, pre- and post- assessments, quizzes, exercises, tests, instructional videos, and more. The uCertify Labs and Simulators provide hands-on skills and bridge the gap between conceptual knowledge and real-world application

Privacy and cookies

By watching, you agree Pearson can share your viewership data for marketing and analytics for one year, revocable by deleting your cookies.

Video transcript (PDF | 16KB)

Pearson eTextbook: What’s on the inside just might surprise you

They say you can’t judge a book by its cover. It’s the same with your students. Meet each one right where they are with an engaging, interactive, personalized learning experience that goes beyond the textbook to fit any schedule, any budget, and any lifestyle.

Penetration Testing Fundamentals: A Hands-On Guide to Reliable Security Audits, 1st edition

eTextbook

Print

uCertify

Pearson+

Pearson eTextbook: What’s on the inside just might surprise you

Digital Learning NOW

Explore

Products & Services

Support

Extend Your Learning

About us