Professional Penetration Testing: Volume 1: Creating and Learning in a Hacking Lab - Softcover

Wilhelm MSc ISSMP CISSP SCSECA And SCNA, Thomas

Softcover

ISBN 10: 1597494259 ISBN 13: 9781597494250

Publisher: Syngress, 2009

Synopsis

Professional Penetration Testing: Creating and Operating a Formal Hacking Lab examines all aspects of professional penetration testing, from project management to team building, metrics, risk management, training, reporting, information gathering, vulnerability identification, vulnerability exploitation, privilege escalation, and test-data archival methods. It also discusses how to maintain access and cover one's tracks. It includes two video courses to teach readers fundamental and intermediate information-system penetration testing techniques, and to explain how to create and operate a formal hacking lab.

The book is divided into three parts. Part 1 focuses on the professionals who are members of a penetration test team, the skills required to be an effective team member, and the ways to create a PenTest lab. Part 2 looks at the activities involved in a penetration test and how to run a PenTest to improve the overall security posture of the client. Part 3 discusses the creation of a final report for the client, cleaning up the lab for the next penetration test, and identifying the training needs of penetration-test team members. This book will benefit both experienced and novice penetration test practitioners.

• Find out how to turn hacking and pen testing skills into a professional career
• Understand how to conduct controlled attacks on a network through real-world examples of vulnerable and exploitable servers
• Master project management skills necessary for running a formal penetration test and setting up a professional ethical hacking business
• Discover metrics and reporting methodologies that provide experience crucial to a professional penetration tester

About this title

About the Author

Thomas Wilhelm has been involved in Information Security since 1990, where he served in the U.S. Army for 8 years as a Signals Intelligence Analyst / Russian Linguist / Cryptanalyst. A speaker at security conferences across the United States, including DefCon, HOPE, and CSI, he has been employed by Fortune 100 companies to conduct risk assessments, participate and lead in external and internal penetration testing efforts, and manage Information Systems Security projects.Thomas is also an Information Technology Doctoral student who holds Masters degrees in both Computer Science and Management. Additionally, he dedicates some of his time as an Associate Professor at Colorado Technical University (NSACAE certified) and has contributed to multiple publications, including both magazines and books. Thomas currently performs security training courses for both civilian and government personnel through HackingDojo.com, and maintains the following security certifications: ISSMP, CISSP, SCSECA, SCNA, SCSA, IEM/IAM.

From the Back Cover

Save yourself some money! This complete classroom-in-a-book on penetration testing provides material that can cost upwards of $1,000 for a fraction of the price!

Thomas Wilhelm has delivered pen testing training to countless security professionals and now through the pages of this book you can benefit from his years of experience as a professional penetration tester and educator. After reading this book you will be able to create a personal penetration test lab that can deal with real-world vulnerability scenarios.

Penetration testing is the act of testing a network to find security vulnerabilities before they are exploited by phishers, digital piracy groups, and countless other organized or individual malicious hackers. The material presented will be useful to beginners all the way through to advanced practitioners.

• Find out how to turn hacking and pen testing skills into a professional career
• Understand how to conduct controlled attacks on a network through real-world examples of vulnerable and exploitable servers
• Master project management skills necessary for running a formal penetration test and setting up a professional ethical hacking business
• Discover metrics and reporting methodologies that provide experience crucial to a professional penetration tester

Edition details

• Publisher: Syngress
• Publication date: 2009
• Language: English
• ISBN 10: 1597494259
• ISBN 13: 9781597494250
• Binding: Paperback
• Edition number: 1
• Number of pages: 528