Building Virtual Pentesting Labs for Advanced Penetration Testing, Second Edition - Softcover

Cardwell, Kevin

Softcover

ISBN 10: 1785883496 ISBN 13: 9781785883491

Publisher: Packt Publishing, 2016

Synopsis

Key Features

• Learn a systematic process for professional security and penetration testing
• Explore and build intricate architectures that allow you to emulate an enterprise network
• Examine and perform research to identify the latest vulnerabilities and, build a lab and test them!
• Learn methods to bypass common enterprise defenses and leverage them to test the most secure environments.

Book Description

In this book you will be introduced to a proven professional security and penetration testing methodology that has trained thousands of professional testers. Your experience from reading this book will prepare you for participation in professional security testing teams, both as a red team and a blue team member. Within the book you will learn how to take advantage of the power of virtualisation to build a multi-layer enterprise architecture and then deploy targets to test inside it. Additionally, you will learn a systematic process for discovering vulnerabilities and then a way to test these on your own private network. By practising the techniques throughout the book, you will be able to hone and enhance your skills in professional security and penetration testing.

Building Virtual Pentesting Labs for Advanced Penetration Testing will teach you the process of how to build your own labs and a proven process to test these labs that is currently used in Industry by global penetration testing teams. You will start with an introduction to professional security testing and deciding where pen testing fits; then you will be introduced to proven leading Industry testing methodologies.

Once the introduction has completed, you will start building the machines; once you have built them you will learn how to build and test layered architectures. After you have mastered the layers you will plan specific attacks based on the platforms you are going up against. The book will show you a process for discovering new vulnerabilities for systems and networks, and how to apply these to your developed range and discover what the vulnerability means to your potential clients.

Building Virtual Pentesting Labs for Advanced Penetration Testing uses extensive labs and illustrations to take you from the beginning (building and attacking an enterprise architecture) to methods to bypass and avoid common enterprise architecture defences.

What you will learn

• Proven security testing and penetration testing techniques
• How to build multi-layered complex architectures to test the latest network designs
• Applying a professional testing methodology
• Determining whether there are filters between you and the target and how to penetrate them
• How to deploy and then find weaknesses in common firewall architectures.
• Advanced techniques to deploy against hardened environments
• Methods to circumvent endpoint protection controls

About the Author

Kevin Cardwell currently works as a freelance consultant and provides consulting services for companies throughout the world. He developed the Strategy and Training Development Plan for the first Government CERT in the country of Oman and developed the team to man the first Commercial Security Operations Center there. He has worked extensively with banks and financial institutions throughout Middle East, Africa, Europe, and the UK. He currently provides consultancy to Commercial companies, governments, major banks, and financial institutions across the globe. He is author of Backtrack: Testing Wireless Network Security, Building Virtual Pen Testing Lab for Advanced Penetration Testing First Edition, and Advanced Penetration Testing of Highly Secured Environments 2nd Edition.

About this title

About the Author

Kevin Cardwell Kevin Cardwell is currently working as a freelance consultant and provides consulting services for companies throughout the world, and he also works as an advisor to numerous government entities within the USA, the Middle East, Africa, Asia, and the UK. He is an instructor, technical editor, and author for computer forensics and hacking courses. He is the author of the Center for Advanced Security and Training (CAST), Advanced Network Defense, and Advanced Penetration Testing courses. He is technical editor of the Learning Tree Course Penetration Testing Techniques and Computer Forensics courses. He has presented at the Black Hat USA, Hacker Halted, ISSA, and TakeDownCon conferences as well as many others. He has chaired the Cybercrime and Cyber Defense Summit in Oman and was the executive chairman of the Oil and Gas Cyber Defense Summit. He is the author of Building Virtual Pen testing Labs for Advanced Penetration Testing, 1st Edition, Advanced Penetration Testing for Highly Secured Environments, Second Edition, and Backtrack: Testing Wireless Network Security. He holds a bachelor of science degree in computer science from National University in California and a master’s degree in software engineering from the Southern Methodist University (SMU) in Texas. He developed the strategy and training development plan for the first Government CERT in the country of Oman that recently was rated as the top CERT for the Middle East. He serves as a professional training consultant to the Oman Information Technology Authority, and he developed the team to man the first Commercial Security Operations Center in the country of Oman. He has worked extensively with banks and financial institutions throughout the Middle East, Europe, and the UK in the planning of a robust and secure architecture and implementing requirements to meet compliance. He currently provides consultancy to Commercial companies, governments,

Edition details

• Publisher: Packt Publishing
• Publication date: 2016
• ISBN 10: 1785883496
• ISBN 13: 9781785883491
• Binding: Paperback
• Language: English
• Edition number: 2
• Number of pages: 524