Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Advanced Infrastructure Penetration Testing

2.4 (8)

Advanced Infrastructure Penetration Testing

2.4 (8)

Overview of this book

It has always been difficult to gain hands-on experience and a comprehensive understanding of advanced penetration testing techniques and vulnerability assessment and management. This book will be your one-stop solution to compromising complex network devices and modern operating systems. This book provides you with advanced penetration testing techniques that will help you exploit databases, web and application servers, switches or routers, Docker, VLAN, VoIP, and VPN. With this book, you will explore exploitation abilities such as offensive PowerShell tools and techniques, CI servers, database exploitation, Active Directory delegation, kernel exploits, cron jobs, VLAN hopping, and Docker breakouts. Moving on, this book will not only walk you through managing vulnerabilities, but will also teach you how to ensure endpoint protection. Toward the end of this book, you will also discover post-exploitation tips, tools, and methodologies to help your organization build an intelligent security system. By the end of this book, you will have mastered the skills and methodologies needed to breach infrastructures and provide complete endpoint protection for your system.

Preface

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Disclaimer

Free Chapter

Introduction to Advanced Infrastructure Penetration Testing

Introduction to Advanced Infrastructure Penetration Testing

Information security overview

Hacking concepts and phases

Penetration testing overview

Pentesting standards and guidance

Penetration testing steps

Penetration testing limitations and challenges

Pentesting maturity and scoring model

Summary

Advanced Linux Exploitation

Advanced Linux Exploitation

Linux basics

Security models

Security controls

Linux attack vectors

Linux kernel exploitation

Buffer overflow prevention techniques

Linux hardening

Summary

Corporate Network and Database Exploitation

Corporate Network and Database Exploitation

Networking fundamentals

Open Systems Interconnection model

In-depth network scanning

Services enumeration

Sniffing attacks

DDoS attacks

Software-Defined Network penetration testing

Attacks on database servers

Summary

Active Directory Exploitation

Active Directory Exploitation

Active Directory

Single Sign-On

Kerberos authentication

Lightweight Directory Access Protocol

PowerShell and Active Directory

Active Directory attacks

Summary

Docker Exploitation

Docker Exploitation

Docker fundamentals

Docker exploitation

Docker bench security

Docker vulnerability static analysis with Clair

Building a penetration testing laboratory

Summary

Exploiting Git and Continuous Integration Servers

Exploiting Git and Continuous Integration Servers

Software development methodologies

Continuous integration

Continuous integration with GitHub and Jenkins

Continuous integration attacks

Continuous integration server penetration testing

Summary

Metasploit and PowerShell for Post-Exploitation

Metasploit and PowerShell for Post-Exploitation

Dissecting Metasploit Framework

Bypassing antivirus with the Veil-Framework

Writing your own Metasploit module

Metasploit Persistence scripts

Weaponized PowerShell with Metasploit

Defending against PowerShell attacks

Summary

VLAN Exploitation

VLAN Exploitation

Switching in networking

MAC attack

DHCP attacks

ARP attacks

VLAN attacks

Spanning Tree Protocol attacks

Summary

VoIP Exploitation

VoIP Exploitation

VoIP fundamentals

VoIP exploitation

VoLTE Exploitation

Summary

Insecure VPN Exploitation

Insecure VPN Exploitation

Cryptography

Hash functions and message integrity

Steganography

Key management

Cryptographic attacks

VPN fundamentals

Summary

Routing and Router Vulnerabilities

Routing and Router Vulnerabilities

Routing fundamentals

Exploiting routing protocols

Exploiting routers

Summary

Internet of Things Exploitation

Internet of Things Exploitation

The IoT ecosystem

IoT attack surfaces

Summary

Other Books You May Enjoy

Other Books You May Enjoy

Leave a review - let other readers know what you think

Active Directory Exploitation

In the previous chapter, we explored how to exploit an organization's networks. We went from networking fundamentals to discovering the latest attacking methodologies. This chapter is your next step to gaining more knowledge about securing another important technical system for every modern company, which is Active Directory. We will take you to another level of experience following a well-designed plan to obtain the required skills to defend another environment.

The following topics will be covered in this chapter:

Learning Active Directory and Kerberos concepts
An overview of various Active Directory attacks
Learning what defensive measures are effective and how they mitigate current attacks

Visually different images

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Advanced Infrastructure Penetration Testing

Search

Your notes and bookmarks