Book Image

Advanced Infrastructure Penetration Testing

Book Image

Advanced Infrastructure Penetration Testing

Overview of this book

It has always been difficult to gain hands-on experience and a comprehensive understanding of advanced penetration testing techniques and vulnerability assessment and management. This book will be your one-stop solution to compromising complex network devices and modern operating systems. This book provides you with advanced penetration testing techniques that will help you exploit databases, web and application servers, switches or routers, Docker, VLAN, VoIP, and VPN. With this book, you will explore exploitation abilities such as offensive PowerShell tools and techniques, CI servers, database exploitation, Active Directory delegation, kernel exploits, cron jobs, VLAN hopping, and Docker breakouts. Moving on, this book will not only walk you through managing vulnerabilities, but will also teach you how to ensure endpoint protection. Toward the end of this book, you will also discover post-exploitation tips, tools, and methodologies to help your organization build an intelligent security system. By the end of this book, you will have mastered the skills and methodologies needed to breach infrastructures and provide complete endpoint protection for your system.

Preface

Who this book is for

What this book covers

To get the most out of this book

Free Chapter

Introduction to Advanced Infrastructure Penetration Testing

Introduction to Advanced Infrastructure Penetration Testing

Information security overview

Hacking concepts and phases

Penetration testing overview

Pentesting standards and guidance

Penetration testing steps

Penetration testing limitations and challenges

Pentesting maturity and scoring model

Advanced Linux Exploitation

Advanced Linux Exploitation

Security models

Security controls

Linux attack vectors

Linux kernel exploitation

Buffer overflow prevention techniques

Linux hardening

Corporate Network and Database Exploitation

Corporate Network and Database Exploitation

Networking fundamentals

Open Systems Interconnection model

In-depth network scanning

Services enumeration

Sniffing attacks

Software-Defined Network penetration testing

Attacks on database servers

Active Directory Exploitation

Active Directory Exploitation

Active Directory

Kerberos authentication

Lightweight Directory Access Protocol

PowerShell and Active Directory

Active Directory attacks

Docker Exploitation

Docker Exploitation

Docker fundamentals

Docker exploitation

Docker bench security

Docker vulnerability static analysis with Clair

Building a penetration testing laboratory

Exploiting Git and Continuous Integration Servers

Exploiting Git and Continuous Integration Servers

Software development methodologies

Continuous integration

Continuous integration with GitHub and Jenkins

Continuous integration attacks

Continuous integration server penetration testing

Metasploit and PowerShell for Post-Exploitation

Metasploit and PowerShell for Post-Exploitation

Dissecting Metasploit Framework

Bypassing antivirus with the Veil-Framework

Writing your own Metasploit module

Metasploit Persistence scripts

Weaponized PowerShell with Metasploit

Defending against PowerShell attacks

VLAN Exploitation

VLAN Exploitation

Switching in networking

Spanning Tree Protocol attacks

VoIP Exploitation

VoIP Exploitation

VoIP fundamentals

VoIP exploitation

VoLTE Exploitation

Insecure VPN Exploitation

Insecure VPN Exploitation

Hash functions and message integrity

Cryptographic attacks

VPN fundamentals

Routing and Router Vulnerabilities

Routing and Router Vulnerabilities

Routing fundamentals

Exploiting routing protocols

Exploiting routers

Internet of Things Exploitation

Internet of Things Exploitation

The IoT ecosystem

IoT attack surfaces

Other Books You May Enjoy

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

5 star

0

4 star

0

3 star

0

2 star

0

1 star

0

VLAN attacks

VLAN is a logical grouping of networking devices in the same broadcast domain. This logical separation is very beneficial in many cases. For example, if we have different geological locations, using VLANS could be a great way to group networking devices, even if they are in different places, but they act like one broadcast domain. This diagram illustrates a classic switching architecture; there is a specific switch for every specific enterprise department:

The following diagram illustrates the beneficial results of implementing VLANs. We can configure a switch for many different departments:

Switching operations occur in layer 2, but when we use VLANs, we need a router (layer 3) to make VLANs communicate with each other via an operation named interVLAN routing. VLAN trunking is needed to interconnect switches by tagging each frame with a VLAN ID, which is a number...