Book Image

Building Virtual Pentesting Labs for Advanced Penetration Testing - Second Edition

By : Kevin Cardwell
Book Image

Building Virtual Pentesting Labs for Advanced Penetration Testing - Second Edition

By: Kevin Cardwell

Overview of this book

Security flaws and new hacking techniques emerge overnight – security professionals need to make sure they always have a way to keep . With this practical guide, learn how to build your own virtual pentesting lab environments to practice and develop your security skills. Create challenging environments to test your abilities, and overcome them with proven processes and methodologies used by global penetration testing teams. Get to grips with the techniques needed to build complete virtual machines perfect for pentest training. Construct and attack layered architectures, and plan specific attacks based on the platforms you’re going up against. Find new vulnerabilities for different kinds of systems and networks, and what these mean for your clients. Driven by a proven penetration testing methodology that has trained thousands of testers, Building Virtual Labs for Advanced Penetration Testing, Second Edition will prepare you for participation in professional security teams.
Table of Contents (20 chapters)
Building Virtual Pentesting Labs for Advanced Penetration Testing - Second Edition
Credits
About the Author
Acknowledgments
About the Reviewer
www.PacktPub.com
Preface

Readers' challenge


Throughout this chapter we identified a number of methods of creating multiple layers of a network architecture. We presented a challenge of when you face a router, and different firewalls as Bastion Hosts. Your challenge is as follows:

  • Carry out the process and methodology against the two firewalls, and add the iptables to your testing. Document what works and does not work and save it to you testing techniques file

  • Add additional machines to the network, first test it and exploit it flat, then try and connect it to the different network devices.

  • Explore the options for adding reflexive ACLs to the router, and see if that prevents the penetration when a weak rule is in place. Explore and have fun and remember to document everything! There is a saying: "no job is complete until the documentation is delivered."

This challenge will allow you to practice the process against a number of devices, and more importantly, allow you to document methods that do or do not work to save...