Packt+ | Advance your knowledge in tech

You're reading from Building a Pentesting Lab for Wireless Networks Build your own secure enterprise or home penetration testing lab to dig into the various hacking techniques

Product type Paperback

Published in Mar 2016

Publisher

ISBN-13 9781785283154

Length 264 pages

Edition 1st Edition

Concepts

Penetration Testing

Authors (3):

Andrey Popov

Aaron Woody

Vyacheslav Fadyushin

View More author details

Table of Contents (10) Chapters

Preface

1. Understanding Wireless Network Security and Risks

2. Planning Your Lab Environment FREE CHAPTER

3. Configuring Networking Lab Components

4. Designing Application Lab Components

5. Implementing Security

6. Exploring Hacking Toolkits

7. Preparing a Wireless Penetration Testing Platform

8. What's Next?

Index

Web application hacking tools

Needless to say, with every new day web applications play a bigger role in the life of the modern Internet than they have ever played before and their security stays among the most important and complicated tasks for various companies.

Most of them are custom written proprietary applications developed without proper application security management processes in place and often without security considerations and controls. That is why probably the most demanded penetration testing service nowadays is web application security analysis and we are going to review the most popular tool used by web hackers and pentesters.

Burp Suite

Burp Suite is a tool of the class called intercepting or attacking proxy, which allows its users to inspect and manipulate web traffic passing through it.

There are other free and non-free intercepting (attack) proxies available. However, the authors of this book got used to and stuck to Burp Suite, and that is why we are going to describe...

The rest of the chapter is locked

Authors (3)

Woody

Aaron Woody is an expert in information security with over 15 years of experience across several industry verticals. His experience includes securing some of the largest enterprises in the world. Currently, he is a Security Consultant in the public sector. He is also a speaker and active instructor teaching hacking and forensics, and maintains a blog n00bpentesting.com. Aaron can also be followed on twitter at @shai_saint. He will be launching a companion website (http://www.datacentricsec.com) for this book. To contact him for consulting please e-mail him at aaron.m.woody@gmail.com.

See other products by Woody

Fadyushin

Vyacheslav Fadyushin (CISA, CEH, PCI ASV) is a security consultant and a penetration tester with more than 9 years of professional experience and a diverse background in various aspects of information security. His main points of interest and fields of expertise are ethical hacking and penetration testing, infrastructure and application security, mobile security, and information security management. He is also an author of the book, Penetration Testing: Setting Up a Test Lab How-to, published by Packt Publishing in 2013.

See other products by Fadyushin

Popov

Sergey Popov is an SOA Implementation Expert, Oracle Certified Professional, Oracle Fusion Middleware Architect, certified Oracle SOA Infrastructure  Implementation Specialist, and certified SOA Trainer in Architecture and Security. With over 20 years of experience in establishing enterprise collaboration platforms based on SOA and integration principles, he started with earlier Oracle DB versions while still an undergraduate in the early 90s. After graduating with Honors from St. Petersburg Telecommunication Institute, he became part of the shipping and transportation business, initially working in Norway for a large RORO and then later with container-shipping companies such as Wilh. Wilhelmsen ASA and Leif Hegh as an Integration / SOA Developer and Architect. During this technology-shifting period, when EDI was initially enhanced and later replaced by XML, a number of solutions were provided for message brokering, enterprise application integration, and public services implementation. By adopting the emerging SOA principles, lightweight service brokers were implemented, handling around 100 to 1,000 messages daily in all possible formats and protocols. With new Oracle products that were launched in early 2,000s, new technological solutions were tried and realized, based on Service Repositories and Enterprise Orchestrations. Upon joining Accenture, Nordic, new opportunities emerged for him with regards to the implementation of the SOA methodology and Oracle-advanced products across Scandinavia and Northern Europe. Sergey was an Architect, responsible for enabling the service of a massive installation of Oracle E-Business Suite at Posten Norge, the largest Scandinavian logistics operator. Several OFM 10g products were employed in order to achieve the desirable high throughput. The project was considered successful by both the client and Oracle. Providing message-brokering solutions at TDC, Danish Telecom, and designing the entire SOA infrastructure blueprint for DNB NORD bank were other significant tasks that he accomplished at the time. As a certified trainer in several SOA areas, Sergey in recent years has been engaged in providing extensive multipath training to highly skilled architects, participated as a speaker at SOA Symposium, and published several articles for Service Technology Magazine, which is dedicated to the optimal Service Repository taxonomy. As an Enterprise SOA/SDP Architect at Liberty Global (LGI), Sergey participated in the implementation of the Pan-European Service Layer for the entire telecom enterprise, based on optimal combinations of various SOA patterns. The benefits of the SOA methodology allow you to combine Oracle Fusion products with the best-in-breed from Security and ESB platforms (Intel, Fuse, and ServiceMix). The success of this course would not have been possible without great efforts from the TMNS development and implementation team.

See other products by Popov

You're reading from Building a Pentesting Lab for Wireless Networks Build your own secure enterprise or home penetration testing lab to dig into the various hacking techniques

Table of Contents (10) Chapters

Web application hacking tools

Burp Suite

Unlock this book and the full library FREE for 7 days

Authors (3)

Personalised recommendations for you