Book Image

Advanced Infrastructure Penetration Testing

Book Image

Advanced Infrastructure Penetration Testing

Overview of this book

It has always been difficult to gain hands-on experience and a comprehensive understanding of advanced penetration testing techniques and vulnerability assessment and management. This book will be your one-stop solution to compromising complex network devices and modern operating systems. This book provides you with advanced penetration testing techniques that will help you exploit databases, web and application servers, switches or routers, Docker, VLAN, VoIP, and VPN. With this book, you will explore exploitation abilities such as offensive PowerShell tools and techniques, CI servers, database exploitation, Active Directory delegation, kernel exploits, cron jobs, VLAN hopping, and Docker breakouts. Moving on, this book will not only walk you through managing vulnerabilities, but will also teach you how to ensure endpoint protection. Toward the end of this book, you will also discover post-exploitation tips, tools, and methodologies to help your organization build an intelligent security system. By the end of this book, you will have mastered the skills and methodologies needed to breach infrastructures and provide complete endpoint protection for your system.
Table of Contents (14 chapters)

Active Directory

A directory is a book that lists individuals or organizations including details, such as names, addresses, and emails, in a sorted way, generally alphabetically or by theme. In other words, a directory contains stored and structured objects to ease the access and the manipulation of these objects. In a small-scale organization, if you need a file, you need to know in what server the file resides and its full path. This works in small environments, but it is not practical in medium- and large-scale companies. Thus, locating a file using that way could be a real challenge. The problem doesn't stop there, as we know every user could have many access credentials, such as passwords, which makes it difficult to manage all the credentials, if the number is high. That is why the need arose for a directory service to locate resources without knowing the full location...