Short and to the point practical hands-on type of book
Quick starting point to get someone right into penetration testing
Quick, guided tours of important security tools
Focus on remediation strategies and not just breaking things
Ric Messier, MS, GCIH, GSEC, CEH, CISSP is the program director for Cyber Security, Computer Forensics and Digital Investigations and the Economic Crime Investigation bachelors' degree programs, as well as the Digital Forensic Science master's degree program at Champlain College.
Messier has been involved in the networking and security arena since the early 1980s. He has worked at large Internet service providers and small software companies developing knowledge and experience about a range of topics related to networking and security. Messier has also been involved on incident response teams and has been consulted on forensic investigations for large companies.
An established expert in the field and author, Messier has published several articles for Hackin9 Magazine, has developed number of video training titles with O'Reilly Media and has written a number of books on information security.
Learn how to break systems, networks, and software in order to determine where the bad guys might get in. Once the holes have been determined, this short book discusses how they can be fixed. Until they have been located, they are exposures to your organization. By reading Penetration Testing Basics, you'll gain the foundations of a simple methodology used to perform penetration testing on systems and networks for which you are responsible.
What You Will Learn
- Identify security vulnerabilities
- Use some of the top security tools to identify holes
- Read reports from testing tools
- Spot and negate common attacks
- Identify common Web-based attacks and exposures as well as recommendations for closing those holes
Who This Book Is For
Anyone who has some familiarity with computers and an interest in information security and penetration testing.
|
While there are other books on this topic, this particular book will be focused and direct, which will allow someone interested in this topic to get started immediately. While there is a focus on foundations, the objective of the book will be to get people immediately working on performing penetration testing. All of the foundational components will be explained in place with a focus on hands-on, practical experience rather than using the practical experience as an afterthought.
1. What Is Penetration Testing?
Information Security
Penetration Testing vs Security Assessments
Who does Penetration Testing
2. Digging for Information
Google Hacking
Social Networking
Job Sites
Technical sources (e.g., regional Internet registries)
3. What´s Open?
Port scanning
Banner grabbing
4. Vulnerabilities
Scanning for vulnerabilities
Nessus vs Nexpose vs OpenVAS
Fuzzing
5. Exploitation
Using Metasploit
Exploit Database
6. Breaking Web Sites
Common Vulnerabilities<
Web Scanning
7. Reporting
Penetration testing is the act of attempting to break into systems, networks, and software in order to determine where the bad guys might get in. By reading this book, you'll gain the foundations of a simple methodology used to perform penetration testing on systems and networks for which you are responsible.
Penetration Testing Basics explains:
- How to identify security vulnerabilities
- How to use some of the top security tools in order to identify holes
- How to read reports from testing tools
- Common vulnerability types and attacks
- Common Web-based attacks and exposures as well as recommendations for closing those holes
"This volume is easy to read and quite pedagogical, which is maybe its greatest strength, together with putting together some examples and preparing the reader for them. Therefore, it is strongly recommended to chief information officers and IT operations and network operations directors, to ensure in-house information security processes are comprehensive enough. Next, it is also strongly recommended as a supplementary practice-oriented textbook for students in computer and information security, to guide them along in their perfection of this art.” (L.-F. Pau, Computing Reviews, April, 2017)
While there are other books on this topic, this particular book will be focused and direct, which will allow someone interested in this topic to get started immediately. While there is a focus on foundations, the objective of the book will be to get people immediately working on performing penetration testing. All of the foundational components will be explained in place with a focus on hands-on, practical experience rather than using the practical experience as an afterthought.
Learn how to break systems, networks, and software in order to determine where the bad guys might get in. Once the holes have been determined, this short book discusses how they can be fixed. Until they have been located, they are exposures to your organization. By reading
Penetration Testing Basics, you'll gain the foundations of a simple methodology used to perform penetration testing on systems and networks for which you are responsible.
What You Will Learn- Identify security vulnerabilities
- Use some of the top security tools to identify holes
- Read reports from testing tools
- Spot and negate common attacks
- Identify common Web-based attacks and exposures as well as recommendations for closing those holes
Who This Book Is ForAnyone who has some familiarity with computers and an interest in information security and penetration testing.
1. What Is Penetration Testing?.- 2. Digging for Information.- 3. What's Open?.- 4. Vulnerabilities.- 5. Exploitation.- 6. Breaking Web Sites.- 7. Reporting.
"This volume is easy to read and quite pedagogical, which is maybe its greatest strength, together with putting together some examples and preparing the reader for them. Therefore, it is strongly recommended to chief information officers and IT operations and network operations directors, to ensure in-house information security processes are comprehensive enough. Next, it is also strongly recommended as a supplementary practice-oriented textbook for students in computer and information security, to guide them along in their perfection of this art." (L.-F. Pau, Computing Reviews, April, 2017)
Ric Messier, MS, GCIH, GSEC, CEH, CISSP is the program director for Cyber Security, Computer Forensics and Digital Investigations and the Economic Crime Investigation bachelors' degree programs, as well as the Digital Forensic Science master's degree program at Champlain College.
Messier has been involved in the networking and security arena since the early 1980s. He has worked at large Internet service providers and small software companies developing knowledge and experience about a range of topics related to networking and security. Messier has also been involved on incident response teams and has been consulted on forensic investigations for large companies.
An established expert in the field and author, Messier has published several articles for Hackin9 Magazine, has developed number of video training titles with O'Reilly Media and has written a number of books on information security.
Über den Autor
Ric Messier, MS, GCIH, GSEC, CEH, CISSP is the program director for Cyber Security, Computer Forensics and Digital Investigations and the Economic Crime Investigation bachelors' degree programs, as well as the Digital Forensic Science master's degree program at Champlain College.
Messier has been involved in the networking and security arena since the early 1980s. He has worked at large Internet service providers and small software companies developing knowledge and experience about a range of topics related to networking and security. Messier has also been involved on incident response teams and has been consulted on forensic investigations for large companies.
An established expert in the field and author, Messier has published several articles for Hackin9 Magazine, has developed number of video training titles with O'Reilly Media and has written a number of books on information security.
Inhaltsverzeichnis
1. What Is Penetration Testing?
Information Security
Penetration Testing vs Security Assessments
Who does Penetration Testing
2. Digging for Information
Google Hacking
Social Networking
Job Sites
Technical sources (e.g., regional Internet registries)
3. What's Open?
Port scanning
Banner grabbing
4. Vulnerabilities
Scanning for vulnerabilities
Nessus vs Nexpose vs OpenVAS
Fuzzing
5. Exploitation
Using Metasploit
Exploit Database
6. Breaking Web Sites
Common Vulnerabilities<
Web Scanning
7. Reporting
Klappentext
Learn how to break systems, networks, and software in order to determine where the bad guys might get in. Once the holes have been determined, this short book discusses how they can be fixed. Until they have been located, they are exposures to your organization. By reading Penetration Testing Basics, you'll gain the foundations of a simple methodology used to perform penetration testing on systems and networks for which you are responsible.
rn
What You Will Learn
Identify security vulnerabilitiesrnUse some of the top security tools to identify holesrnRead reports from testing toolsrnSpot and negate common attacksrnIdentify common Web-based attacks and exposures as well as recommendations for closing those holesrnrn
Who This Book Is For
rn
Anyone who has some familiarity with computers and an interest in information security and penetration testing.
rn
rn
While there are other books on this topic, this particular book will be focused and direct, which will allow someone interested in this topic to get started immediately. While there is a focus on foundations, the objective of the book will be to get people immediately working on performing penetration testing. All of the foundational components will be explained in place with a focus on hands-on, practical experience rather than using the practical experience as an afterthought. rn
rn
