Index

A

• Access Control List (ACL)
  • about / The execution of file inclusion attacks
• Access Control Lists (ACL)
  • about / The Scapy library for Python
• Access Points (AP)
  • about / Layer 2 in wireless networks
• accounts, and services
  • linkage, finding / Understanding the link between accounts and services
• ACK scans
  • executing / Executing ACK scans
• Active Directory (AD) / Defining the online credential attack
• Address Resolution Protocol (ARP)
  • about / Understanding how systems communicate
• Address Space Layer Randomization (ASLR)
  • about / Understanding protection mechanisms
• Advanced Encryption Standard (AES) / Veil
• American Registry of Internet Numbers (ARIN) / Intelligence gathering
• American Standard Code for Information Interchange (ASCII)
  • about / Understanding basic buffer overflow
• Application Program Interfaces (APIs) / Creating a multiprocessing script in Python
• arguments
  • about / Arguments and options
• arithmetic operators
  • about / Arithmetic operators
• assessment methodologies
  • about / Assessment methodologies
  • Open Source Security Testing Methodology Manual (OSSTMM) / Assessment methodologies
  • Open Web Application Security Project (OWASP) / Assessment methodologies
  • National Institute of Standards and Technology (NIST) / Assessment methodologies
• assessor script
  • about / Your first assessor script
  • reference link / Your first assessor script
• assignment operators
  • about / Assignment operators
• attack path
  • identifying / Identifying the attack path
• automatic pivot
  • reference link / Understanding the Nmap Grepable output

B

• backdoors
  • reference link / Exploiting the hosts through RFI
• backup filenames
  • determining / Determining the backup filenames
• backup files
  • downloading, from TFTP server / Downloading backup files from a TFTP server
• basic buffer overflow
  • about / Understanding basic buffer overflow
• basic buffer overflow exploit
  • writing / Writing a basic buffer overflow exploit
• Basic Service Set (BSS)
  • about / Layer 2 in wireless networks
• Basic Service Set Identifiers (BSSIDs)
  • about / Layer 2 in wireless networks
• Bourne-again Shell (BASH)
  • about / Understanding the difference between interpreted and compiled languages
• break condition
  • about / The break condition
• built-in functions
  • about / Reserved words, keywords, and built-in functions
  • reference link / Reserved words, keywords, and built-in functions
• Burp Suite / Burp Suite
  • URL / Credential attacks with Burp Suite
  • inboxes, cracking with / Cracking inboxes with Burp Suite

C

• Centrify
  • about / Understanding the link between accounts and services
• Cewl / Cewl
• chaining, of exploits
  • about / Understanding the chaining of exploits
  • checking for weak, default, or known passwords / Checking for weak, default, or known passwords
  • root access, gaining to system / Gaining root access to the system
  • cracking, of Linux hashes / Understanding the cracking of Linux hashes
  • testing, for synchronization of account credentials / Testing for the synchronization of account credentials
• Cisco MD5 Hashes
  • cracking / Cracking Cisco MD5 hashes
• classes
  • about / Classes
• Classes Inter Domain Routing (CIDR) / Automating the exploit train with Python
• Classless Inter-Domain Routing (CIDR)
  • about / Inputting the target ranges for Nmap
• Classless Inter-domain Routing (CIDR)
  • about / Determining the backup filenames
• clear-text protocols
  • about / Clear-text protocols
• code
  • commenting / How to comment your code
• combined UDP and TCP scans
  • executing / Executing combined UDP and TCP scans
• Command-line Injection (CLI)
  • about / Gaining access through websites
• Command-line Interface (CLI)
  • about / Converting string and number variables
  / Creating a multiprocessing script in Python
• Command-line interface (CLI)
  • about / Inputting the target ranges for Nmap
• Command Line Interface (CLI) / Veil
• comment
  • about / How to comment your code
• Compact Disk (CD) / Ophcrack
• comparison operators
  • about / Comparison operators
• compiled languages
  • about / Understanding the difference between interpreted and compiled languages
• compound statements
  • about / Compound statements
  • if statements / The if statements
• conditional handlers
  • about / Conditional handlers
• constructors
  • about / Understanding default values and constructors
• Content Delivery Networks (CDN)
  • about / Identifying live applications versus open ports, Web applications
• credential attack
  • types / The types of credential attacks
• credential attack, types
  • online credential attack / Defining the online credential attack
  • offline credential attack / Defining the offline credential attack
• credential attacks, with Burp Suite / Credential attacks with Burp Suite
• Cross-site Scripting (XSS)
  • about / Credential attacks with Burp Suite
• Crystal Box testing / White Box Testing
• CVE-2010-1146
  • about / Gaining root access to the system
• CVE Details
  • URL / Gaining root access to the system

D

• Damn Vulnerable Web Application (DVWA)
  • about / Identifying hidden files and directories with Python
• Data Breach Investigation Report (DBIR) / Threat modeling
• Data Execution Prevention (DEP)
  • about / Understanding protection mechanisms
• data structures
  • about / Python variables
• default values
  • about / Understanding default values and constructors
• Demilitarized Zone (DMZ)
  • about / User Datagram Protocol (UDP) services
• Denial of Service (DoS)
  • about / Executing SYN scans, Understanding basic buffer overflow
• dictionary variables
  • about / Dictionary variables
• dirtester.py script
  • reference link / Identifying hidden files and directories with Python
• Distribution System (DS)
  • about / Layer 2 in wireless networks
• Domain Administrator (DA)
  • about / Understanding the new age of service exploitation
• Domain Name Service (DNS)
  • about / Domain Name Service (DNS), Understanding how to parse XML files for reports
• Double Blind tests / Double Blind Testing
• dynamically typed languages
  • about / Understanding dynamically typed languages
• Dynamic Link Libraries (DLL) / Understanding the stack and the heap
• dynamic typed languages
  • impact on functions / The impact of dynamically typed languages on functions on functions

E

• elements
  • about / Understanding how to parse XML files for reports
• encrypted remote access services
  • about / Encrypted remote access services
• endianness
  • about / Understanding memory addresses and endianness
• Engagement Letter (EL) / Pre-engagement interactions
• Enterprise Service Set (ESS)
  • about / Layer 2 in wireless networks
• Enterprise SSID (ESSID)
  • about / Layer 2 in wireless networks
• environmental variables
  • about / Environmental variables and PATH
  • references / Environmental variables and PATH
• ephemeral port range
  • about / Understanding how systems communicate
• errors
  • identifying / Developing scripts and identifying errors
• escalate
  • about / Gaining root access to the system
• Ethernet frame architecture
  • about / The Ethernet frame architecture
  • layer 2 in Ethernet networks / Layer 2 in Ethernet networks
  • layer 2 in wireless networks / Layer 2 in wireless networks
• etree library
  • about / Understanding how to parse XML files for reports
  • reference link / Understanding how to parse XML files for reports
• Excel spreadsheets
  • generating, with Python script / Creating a Python script to generate Excel spreadsheets
• exploitation
  • about / Understanding the new age of service exploitation
• exploit scripts
  • about / Understanding other exploit scripts
  • standalones, exploiting by execution / Exploiting standalone binaries by executing scripts
  • systems, exploiting by TCP service / Exploiting systems by TCP service
  • systems, exploiting by UDP service / Exploiting systems by UDP service
• exploit train
  • automating, with Python / Automating the exploit train with Python
• expoloit-db
  • reference link / Gaining root access to the system
• extended attributes (xattr)
  • about / Gaining root access to the system
• eXtensible Markup Language (XML) / Automating the exploit train with Python
• EyeWitness
  • about / Identifying live applications versus open ports

F

• fgdump / pwdump and fgdump
• file inclusion attacks
  • executing / The execution of file inclusion attacks, Verifying an RFI vulnerability
• File Transfer Protocol (FTP)
  • about / Understanding how systems communicate, Clear-text protocols
• for loop
  • about / The for loop
  • break condition / The break condition
• Full Disk Encryption (FDE) / Ophcrack
• Fully Qualified Domain Name (FQDN)
  • about / Your first assessor script
• Fully Qualified Domain Names (FQDN)
  • about / Domain Name Service (DNS)
• functions
  • about / Functions, Functions
  • curly brackets / Curly brackets
• funkandwagnalls/pythonpentest, GitHub
  • URL / Automating the exploit train with Python

G

• general purpose registers
  • about / Understanding general purpose registers
  • EAX / The EAX
  • EBX / The EBX
  • ECX / The ECX
  • EDX / The EDX
• gevent
  • reference link / Creating a multithreaded script in Python
• Global Interpreter Lock (GIL)
  • about / Creating a multithreaded script in Python
  • URL / Creating a multithreaded script in Python
• Globally Unique Identifier (GUID) / Gaining root access to the system
• global variables
  • about / Global and local variables
• Google Hacking Database (GHDB) / Intelligence gathering
• Graphical User Interface (GUI) / Metasploit, Understanding the Nmap Grepable output
• Graphics Processing Unit (GPU) / oclHashcat
• Grey Box format / Grey Box Testing

H

• HackTop
  • about / Understanding the difference between interpreted and compiled languages
• Hardware Access Layer (HAL)
  • about / Kernel
• heterogeneous environment
  • about / Understanding the difference between interpreted and compiled languages
• hidden files, and directories
  • identifying, with Python / Identifying hidden files and directories with Python
• Host Intrusion Prevention System (HIPS)
  • about / Testing for the synchronization of account credentials
• Host Intrusion Prevention Systems (HIPS)
  • about / Understanding the process environment block
• hosts
  • exploiting, through RFI / Exploiting the hosts through RFI
• HPing
  • about / Understanding Nmap
• httplib2 library / Understanding when to use specific libraries
• httplib2 script
  • reference link / Understanding when to use specific libraries
• Hydra / Hydra
• Hypertext Preprocessor (PHP)
  • about / The execution of file inclusion attacks
• HyperText Transfer Protocol Secure (HTTPS)
  • about / Testing for the synchronization of account credentials

I

• if statements
  • about / The if statements
• Immunity
  • about / Understanding immunity
• imports
  • about / Modules and imports
• inboxes
  • cracking, with Burp Suite / Cracking inboxes with Burp Suite
• Incident Response (IR)
  • about / Executing TCP full connection scans
• Incognito / Mimikatz and Incognito
• indentation
  • about / Indentation
• Industrial Control Systems (ICS)
  • about / The Scapy library for Python
• industry-standard tools
  • building / Building industry-standard tools
• Information Technology (IT)
  • about / Executing the different scan types
• Input/Output (I/O) / Creating a multiprocessing script in Python
• instance names
  • about / Variables and instance names
• interactive interpreter
  • versus script / A Python interactive interpreter versus a script
• interface details
  • determining, with netifaces library / Determining your interface details with the netifaces library
• Internet Control Message Protocol (ICMP)
  • about / Understanding how systems communicate, Verifying an RFI vulnerability
• Internet Protocol (IP) / Pre-engagement interactions
  • about / Identifying live applications versus open ports, Domain Name Service (DNS), Understanding how to parse XML files for reports, Creating a multithreaded script in Python
• Internet Protocol version 4 (IPv4) / Creating a Python script to parse an Nmap XML
• Internet Security Association and Key Management Protocol (ISAKMP)
  • about / Virtual Private Networks (VPNs)
• Internet Service Provider (ISP)
  • about / Executing the different scan types, Executing TCP full connection scans
• Internet Service Providers (ISP)
  • about / Domain Name Service (DNS)
• interpreted code
  • about / Understanding the difference between interpreted and compiled languages
• interpreted language
  • about / Understanding the difference between interpreted and compiled languages
• intruder attacks
  • reference link / Credential attacks with Burp Suite
• Intrusion Detection Systems (IDS) / An overview of penetration testing
• Intrusion Prevention System (IPS) / Metasploit
• Intrusion Protection Systems (IPS) / An overview of penetration testing
• IP Packet architecture
  • about / The IP packet architecture
• IP version 6 (IPv6) / Creating a Python script to parse an Nmap XML

J

• John the Ripper (JtR)
  • about / John the Ripper
  • used, for cracking Windows passwords / Cracking Windows passwords with John

K

• kernel
  • about / Kernel
• keywords
  • about / Reserved words, keywords, and built-in functions
  • reference link / Reserved words, keywords, and built-in functions
  • For / Reserved words, keywords, and built-in functions
  • Def / Reserved words, keywords, and built-in functions
  • If / Reserved words, keywords, and built-in functions
  • Elif / Reserved words, keywords, and built-in functions
  • Import / Reserved words, keywords, and built-in functions
  • Print / Reserved words, keywords, and built-in functions
  • Try / Reserved words, keywords, and built-in functions
• Korn Shell (KSH)
  • about / Understanding the difference between interpreted and compiled languages

L

• Last In First Out (LIFO) structure / Understanding the stack and the heap
• libnmap
  • about / Understanding how to parse XML files for reports
  • reference link / Understanding how to parse XML files for reports
• Limited Liability Corporations (LLCs) / Pre-engagement interactions
• list variables
  • about / List variables
• live applications, versus open ports
  • identifying / Identifying live applications versus open ports
• Local Area Network (LAN) / Cracking Windows passwords with John
• Local Area Network Manager (LM)
  • about / Understanding the Nmap Grepable output, Testing for the synchronization of account credentials
• local exploits
  • purpose / Understanding the purpose of local exploits
• Local Link Multicast Name Request (LLMNR) / Responder
• local variables
  • about / Global and local variables
• logger library
  • about / Understanding logging within Python
  • reference link / Understanding logging within Python
• logging
  • within Python / Understanding logging within Python
• logical operators
  • about / Logical and membership operators
• loopback interfaces
  • reference link, for testing / The Scapy library for Python
• loops
  • about / Python loops
  • while loop / The while loop
  • for loop / The for loop

M

• mail services
  • about / Mail services
• Man-in-the-Middle (MitM) attacks
  • about / Layer 2 in Ethernet networks, Encrypted remote access services
• manual pivot
  • reference link / Understanding the Nmap Grepable output
• mechanize library / Understanding when to use specific libraries
• Media Access Control (MAC)
  • about / Your first assessor script, The Ethernet frame architecture
• membership operators
  • about / Logical and membership operators
• memory addresses
  • about / Understanding memory addresses and endianness
• Message Digest 5 (MD5) / Defining the offline credential attack
  • about / Gaining root access to the system
• Metasploit / Metasploit
• Metasploitable
  • about / Understanding the chaining of exploits
• Metasploit Framework's Remote Procedure Call (MSFRPC) / Nmap libraries for Python
• Metasploit modules
  • reversing / Reversing Metasploit modules
• Metasploit Professional
  • about / Understanding the Nmap Grepable output
• Metasploit Remote Procedure Call (MSFRPC)
  • about / Automating the exploit train with Python
• Microsoft-like color selection tool
  • reference link / Creating a Python script to generate Excel spreadsheets
• milworm.com
  • reference link / Gaining root access to the system
• Mimikatz / Mimikatz and Incognito
• modules
  • about / Modules and imports
• multiprocessing
  • versus multithreading / Understanding the difference between multithreading and multiprocessing
  • reference link / Creating a multiprocessing script in Python
• multiprocessing script
  • creating, in Python / Creating a multiprocessing script in Python
• multithreaded script
  • creating, in Python / Creating a multithreaded script in Python
• multithreading
  • versus multiprocessing / Understanding the difference between multithreading and multiprocessing

N

• Name Service (NB-NS) / Responder
• namespace
  • about / Understanding a namespace
• nested statement
  • about / Curly brackets
• Netcat
  • about / Netcat
  • URL / Netcat
• netifaces library
  • interface details, determining with / Determining your interface details with the netifaces library
• Network Basic Input Output System (NetBIOS) / Responder
• Network Mapper (Nmap) / NMAP
• New Technology LM (NTLM) / Cracking Windows passwords with John
  • about / Understanding the Nmap Grepable output, Testing for the synchronization of account credentials
• nmap
  • about / Understanding Nmap
  • target ranges, inputting for / Inputting the target ranges for Nmap
  • output types / Different output types
  • reference link / Determining the backup filenames
• Nmap Grepable output
  • about / Understanding the Nmap Grepable output
• nmap libraries, for Python
  • about / Nmap libraries for Python
• nmap port scanning techniques
  • reference link / Understanding how UDP works
• Nmap scans
  • efficiency feature / Being efficient with Nmap scans
• Nmap scripting engine
  • about / The Nmap scripting engine
• nmap scripts
  • references / The Nmap scripting engine
• Nmap XML
  • parsing, with Python script / Creating a Python script to parse an Nmap XML
• Nmap XML output
  • about / Understanding the Nmap XML output
• non penetration testing
  • Vulnerability Assessment (VA) / Vulnerability assessments
  • reverse engineering engagements / Reverse engineering engagements
  • hacking / Hacking
• No Operation (NOP) modules / Metasploit
• No Operations (NOPs)
  • about / Understanding the manipulation of the stack
• number variables
  • about / Number variables
  • converting / Converting string and number variables

O

• Object-oriented (OO)
  • about / Python – the good and the bad
• oclHashcat / oclHashcat
• offline credential attack
  • defining / Defining the offline credential attack
• online credential attack
  • defining / Defining the online credential attack
• OO programming
  • about / Python – the good and the bad
• Open Source Intelligence (OSINT) / Black Box Testing, theHarvester and Recon-NG
• Open Systems Interconnect (OSI) model
  • about / Understanding how systems communicate
• Open Web Application Security Project's (OWASP) / Building industry-standard tools
• Operating System (OS) / Generating the usernames
• Operating Systems (OS)
  • about / Understanding the difference between multithreading and multiprocessing
• operating system scans
  • skipping / Skipping the operating system scans
• operators
  • about / Operators
  • reference link / Operators
  • comparison operators / Comparison operators
  • assignment operators / Assignment operators
  • arithmetic operators / Arithmetic operators
  • logical operators / Logical and membership operators
  • membership operators / Logical and membership operators
• Ophcrack / Ophcrack
• options
  • about / Arguments and options
• Outlook Web Access (OWA)
  • about / Cracking inboxes with Burp Suite

P

• Packet Capture (PCAP) / Verifying an RFI vulnerability
• Pass-the-Hash (PtH)
  • about / Understanding the Nmap Grepable output
• Pass-the-Hash (PtH) attack / An example engagement
• Pass-the-Hash attack (PtH)
  • about / Testing for the synchronization of account credentials
• PATH environmental variable
  • about / Environmental variables and PATH
• penetration testing
  • overview / An overview of penetration testing
  • Aabout / Understanding what penetration testing is not
  • tools / Penetration testing tools
• PeppingTom
  • about / Identifying live applications versus open ports
• perimeter scanning
  • limitations / Understanding the limitations of perimeter scanning
• Perl function
  • example / Curly brackets
• pivoting
  • about / Understanding the new age of service exploitation
• Point-to-Point Tunneling Protocol (PPTP)
  • about / Virtual Private Networks (VPNs)
• Portable Executable (PE) / Understanding the program image and dynamic-link libraries
• post exploitation modules, Metasploit
  • reference link / Understanding the Nmap Grepable output
• pre-engagement interactions, PTES
  • categories / Pre-engagement interactions
  • White Box testing / White Box Testing
  • Grey Box format / Grey Box Testing
  • Black Box / Black Box Testing
  • Double Blind tests / Double Blind Testing
• Pretty Good Privacy (PGP) / Pre-engagement interactions
• print function
  • about / Python – the good and the bad
• Process Environment Block (PEB)
  • about / Understanding the process environment block
• Process Execution (PSEXEC) attack
  • about / Understanding the Nmap Grepable output
• Process Identifier (PID)
  • about / Gaining root access to the system
• program image
  • about / Understanding the program image and dynamic-link libraries
  • PE header / Understanding the program image and dynamic-link libraries
  • .text / Understanding the program image and dynamic-link libraries
  • .rdata / Understanding the program image and dynamic-link libraries
  • .data / Understanding the program image and dynamic-link libraries
  • .rsrc / Understanding the program image and dynamic-link libraries
• prohibited
  • about / Reserved words, keywords, and built-in functions
• protection mechanisms
  • about / Understanding protection mechanisms
• pseudorandom number generator (PRNG) / John the Ripper
• psexec module
  • about / Testing for the synchronization of account credentials
• PTES
  • about / The penetration testing execution standard
  • pre-engagement interactions / Pre-engagement interactions
  • intelligence gathering / Intelligence gathering
  • threat modeling / Threat modeling
  • vulnerability analysis / Vulnerability analysis
  • exploitation / Exploitation
  • post exploitation / Post exploitation
  • reporting / Reporting
  • example engagement / An example engagement
• PtH
  • about / Understanding the Nmap Grepable output
• pwdump / pwdump and fgdump
• Python
  • about / Understanding the difference between interpreted and compiled languages
  • overview / Python – the good and the bad
  • exploit train, automating with / Automating the exploit train with Python
  • used, for identifying hidden files and directories / Identifying hidden files and directories with Python
  • using, for web assessments / Understanding when to use Python for web assessments
  • specific libraries, using / Understanding when to use specific libraries
  • multithreaded script, creating in / Creating a multithreaded script in Python
  • multiprocessing script, creating in / Creating a multiprocessing script in Python
• Python class
  • creating / Understanding how to create a Python class
• Python classes
  • reference link / Understanding how to create a Python class
• Python formatting
  • about / Python formatting
  • indentation / Indentation
• Pythonic
  • about / Python – the good and the bad
• Python multiprocessing
  • reference link / Creating a multiprocessing script in Python
• Python nmap library
  • URL / Nmap libraries for Python
• Python script
  • creating, for parsing Nmap XML / Creating a Python script to parse an Nmap XML
  • creating, for generating Excel spreadsheets / Creating a Python script to generate Excel spreadsheets
• Python script, GitHub page
  • reference link / Creating a Python script to parse an Nmap XML

R

• Recon-NG / theHarvester and Recon-NG
• registers
  • about / Getting started with registers
  • general purpose registers / Understanding general purpose registers
  • special purpose registers / Understanding special purpose registers
• Reiser File System (ReiserFS)
  • about / Gaining root access to the system
• Remote and Local File Inclusion (RFI/LFI)
  • about / Gaining access through websites
• Remote Code Execution (RCE)
  • about / Assignment operators, Understanding basic buffer overflow
• Remote Desktop Protocol (RDP)
  • about / Encrypted remote access services
• remote file inclusion
  • references / The execution of file inclusion attacks
• reports
  • XML files, parsing for / Understanding how to parse XML files for reports
• request-based script
  • reference link / Understanding when to use specific libraries
• Request For Comment (RFC) / Creating a Python script to parse an Nmap XML
• Request for Proposal (RFP) / Pre-engagement interactions
• request library / Understanding when to use specific libraries
• reserved words
  • about / Reserved words, keywords, and built-in functions
• Responder / Responder
• Return-Oriented Programming (ROP) chaining
  • about / Understanding protection mechanisms
• RFI
  • hosts, exploring through / Exploiting the hosts through RFI
• RFI vulnerability
  • verifying / Verifying an RFI vulnerability

S

• scan types
  • executing / Executing the different scan types
  • TCP connection scan, executing / Executing TCP full connection scans, Executing ACK scans
  • SYN scans, executing / Executing SYN scans
  • ACK scans, executing / Executing ACK scans
  • UDP scans, executing / Executing UDP scans
• Scapy library, for Python
  • about / The Scapy library for Python
• script
  • versus interactive interpreter / A Python interactive interpreter versus a script
  • about / The first Python script
  • developing / Developing scripts and identifying errors
• Secure Copy (SCP) / Gaining root access to the system
• Secure Hashing Algorithm 1 (SHA-1) / Defining the offline credential attack
• Secure Shell (SSH) / Hydra
  • about / Nmap libraries for Python, Checking for weak, default, or known passwords, Encrypted remote access services
• Security Accounts Manager (SAM)
  • about / Testing for the synchronization of account credentials
• Security by obscurity
  • about / Understanding how systems communicate
• Security Identifier (SID) / An example engagement
• Server Message Block (SMB) / An example engagement
  • about / Understanding the Nmap Grepable output, Testing for the synchronization of account credentials, The execution of file inclusion attacks
• service exploitation
  • about / Understanding the new age of service exploitation
• Service Pack (SP) / Understanding the program image and dynamic-link libraries
• Service Set Identifier (SSID)
  • about / Layer 2 in wireless networks
• Set User Identifier (SUID) / Gaining root access to the system
• shared memory
  • reference link / Creating a multiprocessing script in Python
• simple-requests
  • reference link / Creating a multithreaded script in Python
• Simple Mail Transfer Protocol (SMTP) / Identifying the target
• Simple Network Management Protocol (SNMP)
  • about / User Datagram Protocol (UDP) services
• SMBexec / SMBexec
• SMTP VRFY script
  • used, for testing users / Testing for users using SMTP VRFY
  • creating / Creating the SMTP VRFY script
  • URL / Creating the SMTP VRFY script
• special purpose registers
  • about / Understanding special purpose registers
  • EBP / The EBP
  • EDI / The EDI
  • EIP / The EIP
  • ESP / The ESP
• SpiderLabs msfrpc library
  • reference link / Automating the exploit train with Python
• SQLi lists, for common injection types
  • reference link / Being efficient during web assessments
• sqlmap
  • about / Being efficient during web assessments
• stack adjustments
  • about / Understanding stack adjustments
• stack manipulation
  • about / Understanding the manipulation of the stack
• Standard Error (STDERR)
  • about / Understanding logging within Python
• Standard Input (STDIN)
  • about / Inputting the target ranges for Nmap
• Standard Out (STDOUT)
  • about / Reserved words, keywords, and built-in functions, Understanding Nmap
• Standard Output (STDOUT)
  • about / Understanding logging within Python
• Statement of Work (SOW) / Pre-engagement interactions
• string
  • variable, passing to / Passing a variable to a string
• string variables
  • about / String variables
  • converting / Converting string and number variables
• Structured Exception Handling (SEH)
  • about / Understanding protection mechanisms
• Structured Query Language (SQL)
  • about / Gaining access through websites
• Structured Query Language injection (SQLi)
  • about / Gaining access through websites
• style guide
  • about / The Python style guide
  • reference link / The Python style guide
• SYN scans
  • executing / Executing SYN scans
• Sysinternals tools / Sysinternals tools
• system communication
  • about / Understanding how systems communicate
• System Development Life cycle (SDLC)
  • about / Python – the good and the bad

T

• target
  • identifying / Identifying the target
• targeted usernames
  • creating / Creating targeted usernames
  • URLs / Creating targeted usernames
  • generating, with U.S census / Generating and verifying usernames with help from the U.S. census
  • verifying, with U.S census / Generating and verifying usernames with help from the U.S. census
  • generating / Generating the usernames
  • excel spreadsheet, URL / Generating the usernames
  • script download, URL / Generating the usernames
• target ranges
  • inputting, for nmap / Inputting the target ranges for Nmap
• TCP
  • working / Understanding how TCP works
• TCP/IP stack
  • about / Understanding how systems communicate
• TCP full connection scans
  • executing / Executing TCP full connection scans
• TCP header architecture
  • about / The TCP header architecture
• TCP three-way handshake
  • about / The TCP three-way handshake
• TFTP server
  • backup files, downloading from / Downloading backup files from a TFTP server
• theHarvester / theHarvester and Recon-NG
• Thread Environment Block (TEB)
  • about / Understanding the thread environment block
• thread safe
  • about / Creating a multithreaded script in Python
• tools, penetration testing
  • about / Penetration testing tools
  • Network Mapper (Nmap) / NMAP
  • Metasploit / Metasploit
  • Veil / Veil
  • Burp Suite / Burp Suite
  • Hydra / Hydra
  • John the Ripper (JtR) / John the Ripper
  • oclHashcat / oclHashcat
  • Ophcrack / Ophcrack
  • Mimikatz / Mimikatz and Incognito
  • Incognito / Mimikatz and Incognito
  • SMBexec / SMBexec
  • Cewl / Cewl
  • Responder / Responder
  • theHarvester / theHarvester and Recon-NG
  • Recon-NG / theHarvester and Recon-NG
  • pwdump / pwdump and fgdump
  • fgdump / pwdump and fgdump
  • Netcat / Netcat
  • Sysinternals tools / Sysinternals tools
• Transmission Control Protocol (TCP) / NMAP
  • about / Understanding how to parse XML files for reports
• Trivial File Transfer Protocol (TFTP)
  • about / User Datagram Protocol (UDP) services
• tuple variables
  • about / Tuple variables
• twill
  • using / Using twill to walk through the source
• twill library / Understanding when to use specific libraries

U

• Ubuntu TFTP server
  • reference link / User Datagram Protocol (UDP) services
• UDP
  • working / Understanding how UDP works
• UDP header architecture
  • about / The UDP header architecture
• UDP scans
  • executing / Executing UDP scans
• Uniform Resource Locator (URL)
  • about / Identifying live applications versus open ports, The execution of file inclusion attacks
• Uniform Resource Locators (URLs)
  • about / Understanding the new age of service exploitation
• Universal Serial Bus (USB) / Ophcrack
  • about / Testing for the synchronization of account credentials
• Universal Serial Bus (USB) drive / Understanding the program image and dynamic-link libraries
• User Datagram Protocol (UDP)
  • about / Understanding how systems communicate, Understanding how to parse XML files for reports
• User Datagram Protocol (UDP) services
  • about / User Datagram Protocol (UDP) services

V

• variable
  • passing, to string / Passing a variable to a string
• variables
  • about / Python variables
  • string variables / String variables
  • number variables / Number variables
  • list variables / List variables
  • tuple variables / Tuple variables
  • dictionary variables / Dictionary variables
• variables names
  • about / Variables and instance names
• variable values
  • debugging / Debugging variable values
• Veil / Veil
  • reference link / Testing for the synchronization of account credentials
• Virtual Local Area Networks (VLANs)
  • about / The Scapy library for Python
• Virtual Machines (VMs)
  • about / Understanding the difference between interpreted and compiled languages
• Virtual Private Networks (VPNs)
  • about / Virtual Private Networks (VPNs)
• Vulnerability Assessment (VA) / Vulnerability assessments
• Vulnerability Management Solution (VMS) / An overview of penetration testing

W

• Web Application Firewalls (WAFs)
  • about / Being efficient during web assessments
• web applications
  • about / Web applications
• web assessments
  • Python, using for / Understanding when to use Python for web assessments
  • efficiency feature / Being efficient during web assessments
• Web Proxy AutoDiscovery (WPAD) / Responder
• while loop
  • about / The while loop
• White Box testing (Clear Box testing) / White Box Testing
• Windows Active Directory password complexity requirements
  • reference link / Understanding the chaining of exploits
• Windows memory structure
  • about / Understanding the Windows memory structure
  • stack / Understanding the stack and the heap
  • heap / Understanding the stack and the heap
  • program image / Understanding the program image and dynamic-link libraries
  • dynamic-link libraries / Understanding the program image and dynamic-link libraries
  • process environment block / Understanding the process environment block
  • thread environment block / Understanding the thread environment block
  • kernel / Kernel

X

• XML files
  • parsing, for reports / Understanding how to parse XML files for reports
• XSS lists
  • reference link / Being efficient during web assessments

Z

• Zed Attack Proxy (ZAP) / Burp Suite
  • about / Understanding the difference between interpreted and compiled languages
• Zelster
  • URL / Understanding the new age of service exploitation