Published by Pearson IT Certification (July 6, 2021) © 2018
Price Reduced From: $80.00
Details
Access Details
Features
Currently unavailable
Introduction
Chapter 1: Introduction to Penetration Testing
What Is Penetration Testing?
   Audits
   Vulnerability Scans
   Penetration Tests
   The Hybrid Test
Terminology
Methodologies
   Nature of the Test
   Approaches
Ethical Issues
   Everything Is Confidential
   Keep in Your Lane
   If You Break It, You Bought It
Legal Issues
   Computer Fraud and Abuse Act (CFAA): 18 U.S. Code § 1030
   Unlawful Access to Stored Communications: 18 U.S. Code § 2701
   Identity Theft Enforcement and Restitution Act
   Fraud and Related Activity in Connection with Access Devices: 18 U.S. Code § 1029
   State Laws
   International Laws
Certifications
   CEH
   GPEN
   OSCP
   Mile2
   CISSP
   PPT
   This Book and Certifications
Careers in Penetration Testing
   Security Administrators
   Commercial Penetration Testing
   Government/National Defense
   Law Enforcement
Building Your Skillset
Summary
Test Your Skills
Chapter 2: Standards
PCI DSS
   The Actual Test
NIST 800-115
   Planning
   Execution
   Post-Execution
National Security Agency InfoSec Assessment Methodology (NSA-IAM)
PTES
CREST (UK)
A Synthesis (Putting Standards Together into a Single Unified Approach)
   Pre-Engagement
   The Actual Test
   Reporting
Related Standards
   OWASP
Other Standards
   ISO 27002
   NIST 800-12, Revision 1
   NIST 800-14
Summary
Test Your Skills
Chapter 3: Cryptography
Cryptography Basics
History of Encryption
   The Caesar Cipher
   Atbash
   Multi-Alphabet Substitution
   Rail Fence
Modern Methods
   Symmetric Encryption
   Modification of Symmetric Methods
   Practical Applications
Public Key (Asymmetric) Encryption
Digital Signatures
Hashing
   MD5
   SHA
   RIPEMD
   Windows Hashing
MAC and HMAC
   Rainbow Tables
   Pass the Hash
Password Crackers
Steganography
   Historical Steganography
   Methods and Tools
Cryptanalysis
   Frequency Analysis
   Modern Methods
   Practical Application
Learning More
Summary
Test Your Skills
Chapter 4: Reconnaissance
Passive Scanning Techniques
   Netcraft
   BuiltWith
   Archive.org
   Shodan
   Social Media
   Google Searching
Active Scanning Techniques
   Port Scanning
   Enumeration
Wireshark
Maltego
Other OSINT Tools
   OSINT Website
   Alexa
   Web Master Tips
Summary
Test Your Skills
Chapter 5: Malware
Viruses
   How a Virus Spreads
   Types of Viruses
   Virus Examples
Trojan Horses
Other Forms of Malware
   Rootkit
   Malicious Web-Based Code
   Logic Bombs
Creating Malware
   Levels of Malware Writing Skill
   GUI Tools
   Simple Script Viruses
   Creating a Trojan Horse
   Altering Existing Viruses
Summary
Test Your Skills
Chapter 6: Hacking Windows
Windows Details
   Windows History
   The Boot Process
   Important Windows Files
   Windows Logs
   The Registry
   Volume Shadow Copy
Windows Password Hashing
Windows Hacking Techniques
   Pass the Hash
   chntpw
   Net User Script
   Login as System
   Find the Admin
Windows Scripting
   net users
   net view
   net share
   net service
   netshell
Windows Password Cracking
   Offline NT Registry Editor
   LCP
   pwdump
   ophcrack
   John the Ripper
Detecting Malware in Windows
Cain and Abel
Summary
Test Your Skills
Chapter 7: Web Hacking
Web Technology
Specific Attacks on Websites
   SQL Script Injection
   XSS
   Other Web Attacks
Tools
   Burp Suite
   BeEF
Summary
Test Your Skills
Chapter 8: Vulnerability Scanning
Vulnerabilities
   CVE
   NIST
   OWASP
Packet Capture
   tcpdump
   Wireshark
Network Scanners
   LanHelper
Wireless Scanners/Crackers
   Aircrack
General Scanners
   MBSA
   Nessus
   Nexpose
   SAINT
Web Application Scanners
   OWASP ZAP
   Vega
Cyber Threat Intelligence
   Threatcrowd.org
   Phishtank
   Internet Storm Center
   OSINT
Summary
Test Your Skills
Chapter 9: Introduction to Linux
Linux History
Linux Commands
   ls Command
   cd Command
   Pipe Output
   finger Command
   grep Command
   ps Command
   pstree Command
   top Command
   kill Command
   Basic File and Directory Commands
   chown Command
   chmod Command
   bg Command
   fg Command
   useradd Command
   userdel Command
   usermod Command
   users Command
   who Command
Directories
   /root
   /bin
   /sbin
   /etc
   /dev
   /boot
   /usr
   /var
   /proc
Graphical User Interface
   GNOME
   KDE
Summary
Test Your Skills
Chapter 10: Linux Hacking
More on the Linux OS
   sysfs
   Crond
   Shell Commands
Linux Firewall
   Iptables
   iptables Configuration
   Syslog
Syslogd
Scripting
Linux Passwords
Linux Hacking Tricks
   Boot Hack
   Backspace Hack
Summary
Test Your Skills
Chapter 11: Introduction to Kali Linux
Kali Linux History
Kali Basics
Kali Tools
   recon-ng
   Dmitry
   Sparta
   John the Ripper
   Hashcat
   macchanger
   Ghost Phisher
Summary
Test Your Skills
Chapter 12: General Hacking Techniques
Wi-Fi Testing
   Create a Hotspot
   Using Kali as a Hotspot
   Testing the WAP Administration
   Other Wi-Fi Issues
Social Engineering
DoS
   Well-known DoS Attacks
   Tools
Summary
Test Your Skills
Chapter 13: Introduction to Metasploit
Background on Metasploit
Getting Started with Metasploit
Basic Usage of msfconsole
   Basic Commands
   Searching
Scanning with Metasploit
   SMB Scanner
   SQL Server Scan
   SSH Server Scan
   Anonymous FTP Servers
   FTP Server
How to Use Exploits
Exploit Examples
   Cascading Style Sheets
   File Format Exploit
   Remote Desktop Exploit
   More Exploits
   Common Error
Post Exploits
   Get Logged-on Users
   Check VM
   Enumerate Applications
   Going Deeper into the Target
Summary
Test Your Skills
Chapter 14: More with Metasploit
Meterpreter and Post Exploits
   ARP
   NETSTAT
   PS
   Navigation
   Download and Upload
   Desktops
   Cameras
   Key Logger
   Other Information
msfvenom
More Metasploit Attacks
   Formatting All Drives
   Attacking Windows Server 2008 R2
   Attacking Windows via Office
   Attacking Linux
   Attacking via the Web
   Another Linux Attack
   Linux Post Exploits
Summary
Test Your Skills
Chapter 15: Introduction to Scripting with Ruby
Getting Started
Basic Ruby Scripting
   A First Script
   Syntax
   Object-Oriented Programming
Summary
Test Your Skills
Chapter 16: Write Your Own Metasploit Exploits with Ruby
The API
Getting Started
Examine an Existing Exploit
Extending Existing Exploits
Writing Your First Exploit
Summary
Test Your Skills
Chapter 17: General Hacking Knowledge
Conferences
Dark Web
Certification and Training
Cyber Warfare and Terrorism
Nation State Actors
Summary
Test Your Skills
Chapter 18: Additional Pen Testing Topics
Wireless Pen Testing
   802.11
   Infrared
   Bluetooth
   Other Forms of Wireless
   Wi-Fi Hacking
Mainframe and SCADA
   SCADA Basics
   Mainframes
Mobile Pen Testing
   Cellular Terminology
   Bluetooth Attacks
   Bluetooth/Phone Tools
Summary
Test Your Skills
Chapter 19: A Sample Pen Test Project
Pen Test Outline
   Pre-Test Activities
   External
   Internal
   Optional Items
Report Outline
Summary
Appendix A: Answers to Chapter Multiple Choice Questions
Â
9780789759375Â Â Â Â TOCÂ Â 2/13/2018
Â
This publication contains markup to enable structural navigation and compatibility with assistive technologies. Images in the publication MAY NOT be fully described, which is a barrier to those who rely on alternative text descriptions. The publication supports text reflow and contains no content hazards known to cause adverse physical reactions.
Need help? Get in touch
All in one place. Pearson+ offers instant access to eTextbooks, videos and study tools in one intuitive interface. Students choose how they learn best with enhanced search, audio and flashcards. The Pearson+ app lets them read where life takes them, no wi-fi needed. Students can access Pearson+ through a subscription or their MyLab or Mastering course.
The Pearson uCertify Courses and Labs combine Pearson's authorized and peer-reviewed content with uCertify's accessible, flexible, and scalable online learning platform. All Courses and Labs are mapped directly to Pearson texts to make integration into your current courses easy and convenient
The uCertify Courses are a foundational learning tool and come with the complete Pearson interactive e-text, pre- and post- assessments, quizzes, exercises, tests, instructional videos, and more. The uCertify Labs and Simulators provide hands-on skills and bridge the gap between conceptual knowledge and real-world application