Book Image

Advanced Infrastructure Penetration Testing

Book Image

Advanced Infrastructure Penetration Testing

Overview of this book

It has always been difficult to gain hands-on experience and a comprehensive understanding of advanced penetration testing techniques and vulnerability assessment and management. This book will be your one-stop solution to compromising complex network devices and modern operating systems. This book provides you with advanced penetration testing techniques that will help you exploit databases, web and application servers, switches or routers, Docker, VLAN, VoIP, and VPN. With this book, you will explore exploitation abilities such as offensive PowerShell tools and techniques, CI servers, database exploitation, Active Directory delegation, kernel exploits, cron jobs, VLAN hopping, and Docker breakouts. Moving on, this book will not only walk you through managing vulnerabilities, but will also teach you how to ensure endpoint protection. Toward the end of this book, you will also discover post-exploitation tips, tools, and methodologies to help your organization build an intelligent security system. By the end of this book, you will have mastered the skills and methodologies needed to breach infrastructures and provide complete endpoint protection for your system.

Preface

Who this book is for

What this book covers

To get the most out of this book

Free Chapter

Introduction to Advanced Infrastructure Penetration Testing

Introduction to Advanced Infrastructure Penetration Testing

Information security overview

Hacking concepts and phases

Penetration testing overview

Pentesting standards and guidance

Penetration testing steps

Penetration testing limitations and challenges

Pentesting maturity and scoring model

Advanced Linux Exploitation

Advanced Linux Exploitation

Security models

Security controls

Linux attack vectors

Linux kernel exploitation

Buffer overflow prevention techniques

Linux hardening

Corporate Network and Database Exploitation

Corporate Network and Database Exploitation

Networking fundamentals

Open Systems Interconnection model

In-depth network scanning

Services enumeration

Sniffing attacks

Software-Defined Network penetration testing

Attacks on database servers

Active Directory Exploitation

Active Directory Exploitation

Active Directory

Kerberos authentication

Lightweight Directory Access Protocol

PowerShell and Active Directory

Active Directory attacks

Docker Exploitation

Docker Exploitation

Docker fundamentals

Docker exploitation

Docker bench security

Docker vulnerability static analysis with Clair

Building a penetration testing laboratory

Exploiting Git and Continuous Integration Servers

Exploiting Git and Continuous Integration Servers

Software development methodologies

Continuous integration

Continuous integration with GitHub and Jenkins

Continuous integration attacks

Continuous integration server penetration testing

Metasploit and PowerShell for Post-Exploitation

Metasploit and PowerShell for Post-Exploitation

Dissecting Metasploit Framework

Bypassing antivirus with the Veil-Framework

Writing your own Metasploit module

Metasploit Persistence scripts

Weaponized PowerShell with Metasploit

Defending against PowerShell attacks

VLAN Exploitation

VLAN Exploitation

Switching in networking

Spanning Tree Protocol attacks

VoIP Exploitation

VoIP Exploitation

VoIP fundamentals

VoIP exploitation

VoLTE Exploitation

Insecure VPN Exploitation

Insecure VPN Exploitation

Hash functions and message integrity

Cryptographic attacks

VPN fundamentals

Routing and Router Vulnerabilities

Routing and Router Vulnerabilities

Routing fundamentals

Exploiting routing protocols

Exploiting routers

Internet of Things Exploitation

Internet of Things Exploitation

The IoT ecosystem

IoT attack surfaces

Other Books You May Enjoy

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

5 star

0

4 star

0

3 star

0

2 star

0

1 star

0

Defending against PowerShell attacks

In the previous sections, we went through various techniques for attacking machines using Metasploit and PowerShell. Now it is time to learn how to defend against and mitigate PowerShell attacks. In order to protect against PowerShell attacks, you need to:

Implement the latest PowerShell version (version 5, when this book was written). To check, type Get-Host:

Monitor PowerShell logs.

Ensure a least-privilege policy and group policies settings. You can edit them with the Local Group Policy Editor. If you are using the Windows 10 Enterprise edition, you can also use AppLocker:

Use the Constrained Language mode:

PS C:\Windows\system32> [environment]::SetEnvironmentVariable('__PSLockdownPolicy', '4', 'Machine')

To check the Constrained Language mode, type:

 $ExecutionContext.SessionState.LanguageMode...