Book Image

Building Virtual Pentesting Labs for Advanced Penetration Testing - Second Edition

By : Kevin Cardwell
Book Image

Building Virtual Pentesting Labs for Advanced Penetration Testing - Second Edition

By: Kevin Cardwell

Overview of this book

Security flaws and new hacking techniques emerge overnight – security professionals need to make sure they always have a way to keep . With this practical guide, learn how to build your own virtual pentesting lab environments to practice and develop your security skills. Create challenging environments to test your abilities, and overcome them with proven processes and methodologies used by global penetration testing teams. Get to grips with the techniques needed to build complete virtual machines perfect for pentest training. Construct and attack layered architectures, and plan specific attacks based on the platforms you’re going up against. Find new vulnerabilities for different kinds of systems and networks, and what these mean for your clients. Driven by a proven penetration testing methodology that has trained thousands of testers, Building Virtual Labs for Advanced Penetration Testing, Second Edition will prepare you for participation in professional security teams.
Table of Contents (20 chapters)
Building Virtual Pentesting Labs for Advanced Penetration Testing - Second Edition
Credits
About the Author
Acknowledgments
About the Reviewer
www.PacktPub.com
Preface

Readers' challenge


Throughout this chapter, we identified a number of considerations when we test a flat and internal network:

  • Review the information in the host-based firewall section, and experiment with different settings to see what results you can achieve while performing the testing methodology. Try to discover techniques that will bypass the firewall, or at least provide some results that we can use. For example, do a Windows or an ACK scan with the firewall on and off and note the results. As with all testing, ensure you create detailed documentation.

  • Revisit the section on EMET, and experiment with different settings and see if you can bypass the protections that are in place. If you are a coder, then try and enhance the code examples that are available and see if you can get the bypass to work on Windows 10. The majority of the examples that have been released at the time of this book are for Windows 7. Finally, experiment with the smallest option to reduce the size of your executable...