Advanced Penetration Testing: Hacking the World's Most Secure Networks - Brossura

Allsopp, Wil

Brossura

ISBN 10: 1119367689 ISBN 13: 9781119367680

Casa editrice: Wiley, 2017

This is an in-depth guide to targeting and compromising high security environments. It will cover discovering and creating attack vectors, moving unseen through a target enterprise, establishing robust command and control, a 'shopping list' and exfiltrating data – even from organizations without a direct connection to the Internet. It goes beyond the basic game of low-level hackers attacking systems with a list of known vulnerabilities and the defenders preventing those hacks but running an equally well-known list of defensive scans. These techniques are not taught in any certification test preparation course instead they are the techniques being used by professional hackers and nation-states that organizations need to develop new skills to defend.

The book covers:

• Creating an initial compromise including the social engineering pretext methods used in targeted attacks
• Establishing a beachhead in a compromised system leaving a command and control structure in place for long term access
• The best most reliable methods for escalating privilege
• Performing internal reconnaissance on networks, operating systems, and trust structures
• Expanding the control structure using harvested credentials to infiltrate additional portions of the target organization IT infrastructure

Custom coding examples are showing using VBA (an old but reliable method), Windows Scripting Host, C, Java, JavaScript, Flash, and more. You'll also see how to use standard libraries to simplify the task of hopping between operating systems with your attack and how to use scanning tools such as MetaSpolit to your benefit to bypass common defensive measures.

L'autore:

Wil Allsopp is an IT security expert with 20 years experience, specializing in red team engagements, penetration testing, vulnerability assessment, security audits, secure source code review, social engineering, and advanced persistent threats. He has performed ethical hacking and penetration testing for numerous Fortune 100 companies.

Dalla quarta di copertina:

HOW TO ESTABLISH AN IMPENETRABLE LINE OF DEFENSE USING EVERYTHING IN THE PROFESSIONAL HACKER'S BAG OF TRICKS

Typical penetration testing is highly formulaic and involves little more than time-limited network and application security audits. If they are to have any hope of defending their assets against attacks by today's highly motivated professional hackers, high-value targets will have to do a better job of hardening their IT infrastructures. And that can only be achieved by security analysts and engineers fully versed in the professional hacker's manual of dirty tricks and penetration techniques.

Written by a top security expert who has performed hacking and penetration testing for Fortune 100 companies worldwide, Advanced Penetration Testing: Hacking the World's Most Secure Networks schools you in advanced techniques for targeting and compromising high-security environments that aren't taught in any certification prep or covered by common defense scanners. Author Wil Allsopp goes well beyond Kali linux and Metasploit to provide a complex, highly realistic attack simulation. Taking a multidisciplinary approach combining social engineering, programming, and vulnerability exploits, he teaches you how to:

• Discover and create attack vectors
• Move unseen through a target enterprise and reconnoiter networks, operating systems, and test structures
• Employ social engineering strategies to create an initial compromise
• Establish a beachhead and leave a robust command-and-control structure in place
• Use advanced data exfiltration techniques?even against targets without direct Internet connections
• Utilize advanced methods for escalating privilege
• Infiltrate deep into networks and operating systems using harvested credentials
• Create custom code using VBA, Windows® Scripting Host, C, Java®, JavaScript®, Flash, and more