The perfect introduction to pen testing for all IT professionals and students
· Clearly explains key concepts, terminology, challenges, tools, and skills
· Covers the latest penetration testing standards from NSA, PCI, and NIST
Welcome to today’s most useful and practical introduction to penetration testing. Chuck Easttom brings together up-to-the-minute coverage of all the concepts, terminology, challenges, and skills you’ll need to be effective.
Drawing on decades of experience in cybersecurity and related IT fields, Easttom integrates theory and practice, covering the entire penetration testing life cycle from planning to reporting.
You’ll gain practical experience through a start-to-finish sample project relying on free open source tools. Throughout, quizzes, projects, and review sections deepen your understanding and help you apply what you’ve learned.
Including essential pen testing standards from NSA, PCI, and NIST, Penetration Testing Fundamentals will help you protect your assets–and expand your career options.
LEARN HOW TO
· Understand what pen testing is and how it’s used
· Meet modern standards for comprehensive and effective testing
· Review cryptography essentials every pen tester must know
· Perform reconnaissance with Nmap, Google searches, and ShodanHq
· Use malware as part of your pen testing toolkit
· Test for vulnerabilities in Windows shares, scripts, WMI, and the Registry
· Pen test websites and web communication
· Recognize SQL injection and cross-site scripting attacks
· Scan for vulnerabilities with OWASP ZAP, Vega, Nessus, and MBSA
· Identify Linux vulnerabilities and password cracks
· Use Kali Linux for advanced pen testing
· Apply general hacking technique ssuch as fake Wi-Fi hotspots and social engineering
· Systematically test your environment with Metasploit
· Write or customize sophisticated Metasploit exploits
Chuck Easttom has many years of practical experience in all aspects of IT. He holds a Doctor of Science in CyberSecurity, a Ph.D. in Technology, and 3 masters degrees(including 1 in applied computer science and 1 in systems engineering). He has authored 30 computer science books ( so far) and is an inventor with fifteen computer science patents, and numerous research papers on topics such as digital forensics, cyber warfare,engineering processes,cryptography, and other areas.
He was a subject matter expert for CompTIA in the creation of their Security+, Linux+,and Server+certification tests and on the Job Task Analysis team for CEH v8. He created the OSForensics certification test and course. He currently holds over 55 IT certifications (A+,Network+, iNet+, Linux+,Server+,MCP, MCAD, MCSA, MCSE, MCDBA,MCTS,MCITP, CEH, CHFI, CISSP, CCFP, ISSAP,and more).
Dr. Easttom is frequently a speaker on computer science related topics,often specifically on computer security and related subjects. In the past he has been a speaker at: Hacker Halted, TakedownCon, Secure World, ISC2 Security Congress, Harvard Computer Society, Columbia University ACM chapter, University of Texasat Dallas ACM Chapter, Southern Methodist University Research Colloquium, Hakon India, Defcon, Enfuse, to name a few. He has spoken on the history of viruses, cryptographic back doors,cryptanalysis, cyber warfare and terrorism, the details of the cryptographic algorithms,quantum computing, engineering processes, forensic report writing, and other computer science and security topics. He is also a Distinguished Speaker of the ACM, as well as a Senior Member of the ACM and a Senior Member of the IEEE and a member of INCOSE and IACR.
