Book Image

CompTIA PenTest+ Study Guide

By : Mike Chapple, David Seidl
Book Image

CompTIA PenTest+ Study Guide

By: Mike Chapple, David Seidl

Overview of this book

The CompTIA PenTest+ Study Guide: Exam PT0-001 offers comprehensive preparation for the newest intermediate cybersecurity certification exam. With expert coverage of Exam PT0-001 objectives, this book is your ideal companion throughout all stages of study; whether you’re just embarking on your certification journey or finalizing preparations for the big day, this invaluable resource helps you solidify your understanding of essential skills and concepts. The book shows how to perform security assessments on desktops, mobile devices, cloud, IoT, as well as industrial and embedded systems. You'll learn how to identify security weaknesses and manage system vulnerabilities. As you progress, you'll learn methods to ensure that existing cybersecurity practices, configurations, and policies conform with current best practices. You'll assess your knowledge by simulating cyber attacks to pinpoint security weaknesses in operating systems, networks, and applications. By the end of the book, you'll have all the resources you need to prepare for the exam - identify what you already know, learn what you don’t know, and face the exam with full confidence.

Related Content you might be interested in

Current Title:

Small book image
CompTIA PenTest+ Study Guide
Mike Chapple | David Seidl
Oct, 2018 | 503 pages
No titles found
Table of Contents (21 chapters)
Free Chapter
1
Acknowledgments
Acknowledgments
2
About the Authors
About the Authors
3
Introduction
Introduction
4
Assessment Test
Assessment Test
5
Answers to Assessment Test
Answers to Assessment Test
6
Chapter 1 Penetration Testing
Chapter 1 Penetration Testing
What Is Penetration Testing?
Reasons for Penetration Testing
Who Performs Penetration Tests?
The CompTIA Penetration Testing Process
The Cyber Kill Chain
Tools of the Trade
Summary
Exam Essentials
Lab Exercises
Review Questions
7
Chapter 2 Planning and Scoping Penetration Tests
Chapter 2 Planning and Scoping Penetration Tests
Scoping and Planning Engagements
Key Legal Concepts for Penetration Tests
Understanding Compliance-Based Assessments
Summary
Exam Essentials
Lab Exercises
Review Questions
8
Chapter 3 Information Gathering
Chapter 3 Information Gathering
Footprinting and Enumeration
Active Reconnaissance and Enumeration
Information Gathering and Defenses
Summary
Exam Essentials
Lab Exercises
Review Questions
9
Chapter 4 Vulnerability Scanning
Chapter 4 Vulnerability Scanning
Identifying Vulnerability Management Requirements
Configuring and Executing Vulnerability Scans
Software Security Testing
Developing a Remediation Workflow
Overcoming Barriers to Vulnerability Scanning
Summary
Exam Essentials
Lab Exercises
Review Questions
10
Chapter 5 Analyzing Vulnerability Scans
Chapter 5 Analyzing Vulnerability Scans
Reviewing and Interpreting Scan Reports
Validating Scan Results
Common Vulnerabilities
Summary
Exam Essentials
Lab Exercises
Review Questions
11
Chapter 6 Exploit and Pivot
Chapter 6 Exploit and Pivot
Exploits and Attacks
Exploitation Toolkits
Exploit Specifics
Leveraging Exploits
Persistence and Evasion
Pivoting
Covering Your Tracks
Summary
Exam Essentials
Lab Exercises
Review Questions
12
Chapter 7 Exploiting Network Vulnerabilities
Chapter 7 Exploiting Network Vulnerabilities
Conducting Network Exploits
Exploiting Windows Services
Exploiting Common Services
Wireless Exploits
Summary
Exam Essentials
Lab Exercises
Review Questions
13
Chapter 8 Exploiting Physical and Social Vulnerabilities
Chapter 8 Exploiting Physical and Social Vulnerabilities
Physical Facility Penetration Testing
Social Engineering
Summary
Exam Essentials
Lab Exercises
Review Questions
14
Chapter 9 Exploiting Application Vulnerabilities
Chapter 9 Exploiting Application Vulnerabilities
Exploiting Injection Vulnerabilities
Exploiting Authentication Vulnerabilities
Exploiting Authorization Vulnerabilities
Exploiting Web Application Vulnerabilities
Unsecure Coding Practices
Application Testing Tools
Summary
Exam Essentials
Lab Exercises
Review Questions
15
Chapter 10 Exploiting Host Vulnerabilities
Chapter 10 Exploiting Host Vulnerabilities
Attacking Hosts
Remote Access
Attacking Virtual Machines and Containers
Physical Device Security
Attacking Mobile Devices
Credential Attacks
Summary
Exam Essentials
Lab Exercises
Review Questions
16
Chapter 11 Scripting for Penetration Testing
Chapter 11 Scripting for Penetration Testing
Scripting and Penetration Testing
Variables, Arrays, and Substitutions
Comparison Operations
String Operations
Flow Control
Input and Output (I/O)
Error Handling
Summary
Exam Essentials
Lab Exercises
Review Questions
17
Chapter 12 Reporting and Communication
Chapter 12 Reporting and Communication
The Importance of Communication
Recommending Mitigation Strategies
Writing a Penetration Testing Report
Wrapping Up the Engagement
Summary
Exam Essentials
Lab Exercises
Review Questions
18
Index
Index
19
Advert
Advert
20
End User License Agreement
End User License Agreement
Appendix Answers to Review Questions
Chapter 1: Penetration Testing
Chapter 2: Planning and Scoping Penetration Tests
Chapter 3: Information Gathering
Chapter 4: Vulnerability Scanning
Chapter 5: Analyzing Vulnerability Scans
Chapter 6: Exploit and Pivot
Chapter 7: Exploiting Network Vulnerabilities
Chapter 8: Exploiting Physical and Social Vulnerabilities
Chapter 9: Exploiting Application Vulnerabilities
Chapter 10: Exploiting Host Vulnerabilities
Chapter 11: Script for Penetration Testing
Chapter 12: Reporting and Communication

Exploiting Windows Services

Windows remains the most popular desktop operating system in the world, and most businesses have a significant number of Windows servers, desktops, and laptops. That makes Windows a particularly attractive target. Fortunately for penetration testers, many of the most commonly available Windows services are useful candidates for exploitation.

NetBIOS Name Resolution Exploits

One of the most commonly targeted services in a Windows network is NetBIOS. NetBIOS is commonly used for file sharing, but many other services rely on the protocol as well.

NETBIOS Name Services

When Windows systems need to resolve the IP address for a hostname, they use three lookup methods in the following order:

  1. The Local host file found at C:\Windows\System32\drivers\etc\hosts
  2. DNS, first via local cache and then via the DNS server
  3. The NetBIOS name service (NBNS), first via Link Local Multicast Name Resolution (LLMNR) queries and then via NetBIOS Name Service (NetBIOS-NS) queries
...
Previous Section
End of Section 3
Next Section