Advanced Penetration Testing for Highly-Secured Environments: The Ultimate Security Guide: Learn to perform professional penetration testing for highly-secured environments with this intensive hands-on guide with this book and ebook.

Lee Allen

$65.99

4 (23 Ratings)

Paperback May 2012 414 pages 1st Edition

Lee Allen

$65.99

4 (23 Ratings)

Paperback May 2012 414 pages 1st Edition

What do you get with Print?

Instant access to your digital eBook copy whilst your Print order is Shipped

Paperback book shipped to your preferred address

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

View table of contents

Preview Book

Advanced Penetration Testing for Highly-Secured Environments: The Ultimate Security Guide

Chapter 2. Advanced Reconnaissance Techniques

Actionable information is the key to success when performing a penetration test. The amount of public data that is available on the Internet is staggering, and sifting through it all to find useful information can be a daunting task. Luckily, there are tools available that assist in gathering and sorting through this wealth of knowledge. In this chapter, we will be reviewing some of these tools and will focus on how to use the information to ensure your penetration tests are efficient, focused, and effective. Key topics covered include:

What is reconnaissance and why do we need it
Reconnaissance types
Using DNS to quickly identify potential targets
Using search engines data
Using metadata to your advantage

Note

Throughout this chapter we will use the domain names example.com, example.org, and example.net which are owned and maintained by IANA. DO NOT USE THESE FOR PRACTICE PURPOSES.

These domain names are used as a representation of a domain that you...

DNS recon

Domain Name System (DNS) can provide valuable data during the reconnaissance phase. If you do not already understand DNS, you may want to take some time to get a good grasp on the service and how it works. At a very basic level, DNS is used to translate domain names into IP addresses. Luckily for us, there are many tools available that are excellent at extracting the data that we need from nameservers. An example of the information you are able to gather includes:

Record	Description
CNAME	Alias, used to tie many names to a single IP. An IP address can have multiple CNAME records associated with it.
A	Used to translate a domain or subdomain name to a thirty-two bit IP address. It can also store additional useful information.
MX	Ties a domain name to associated mail servers.

There are other record types that can be collected from DNS tools as well; the records listed in the table are the most popular and often, the most useful.

Note

DNS reconnaissance is considered active...

Key benefits

Learn how to perform an efficient, organized, and effective penetration test from start to finish
Gain hands-on penetration testing experience by building and testing a virtual lab environment that includes commonly found security measures such as IDS and firewalls
Take the challenge and perform a virtual penetration test against a fictional corporation from start to finish and then verify your results by walking through step-by-step solutions

Description

The internet security field has grown by leaps and bounds over the last decade. Everyday more people around the globe gain access to the internet and not all of them with good intentions. The need for penetration testers has grown now that the security industryhas had time to mature. Simply running a vulnerability scanner is a thing of the past and is no longer an effective method of determining a business's true security posture. Learn effective penetration testing skills so that you can effectively meet and manage the rapidly changing security needs of your company. Advanced Penetration Testing for Highly-Secured Environments will teach you how to efficiently and effectively ensure the security posture of environments that have been secured using IDS/IPS, firewalls, network segmentation, hardened system configurations and more. The stages of a penetration test are clearly defined and addressed using step-by-step instructions that you can follow on your own virtual lab.The book follows the standard penetration testing stages from start to finish with step-by-step examples. The book thoroughly covers penetration test expectations, proper scoping and planning, as well as enumeration and footprinting. You'll learn how to clean up and compile proof of concept, exploit code from the web, advanced web application testing techniques, client side attacks, post exploitation strategies, detection avoidance methods, generation of well defined reports and metrics, and setting up a penetration testing virtual lab that mimics a secured environment. The book closes by issuing a challenge to your skills and ability to perform a full penetration test against a fictional corporation; followed by a detailed walk through of the solution.Advanced Penetration Testing for Highly-Secured Environments is packed with detailed examples that reinforce enumeration, exploitation, post-exploitation, reporting skills and more.

Who is this book for?

If you are looking for guidance and detailed instructions on how to perform a penetration test from start to finish, are looking to build out your own penetration testing lab, or are looking to improve on your existing penetration testing skills, this book is for you. Although the books attempts to accommodate those that are still new to the penetration testing field, experienced testers should be able to gain knowledge and hands-on experience as well. The book does assume that you have some experience in web application testing and as such the chapter regarding this subject may require you to understand the basic concepts of web security. The reader should also be familiar with basic IT concepts, and commonly used protocols such as TCP/IP.

What you will learn

Detailed step-by-step guidance on managing testing results and writing clearly organized and effective penetration testing reports
Properly scope your penetration test to avoid catastrophe
Understand in detail how the testing process works from start to finish, not just how to use specific tools
Use advanced techniques to bypass security controls and remain hidden while testing
Create a segmented virtual network with several targets, IDS and firewall
Generate testing reports and statistics
Advanced web application testing and exploitation
Perform an efficient, organized, and effective penetration test from start to finish

Estimated delivery fee Deliver to Indonesia

Standard delivery 10 - 13 business days

$12.95

Premium delivery 5 - 8 business days

$45.95

(Includes tracking information)

What do you get with Print?

Instant access to your digital eBook copy whilst your Print order is Shipped

Paperback book shipped to your preferred address

Download this book in EPUB and PDF formats

Access this title in our online reader with advanced features

DRM FREE - Read whenever, wherever and however you want

Frequently bought together

$65.99

$54.99

$54.99

Total $ 175.97

FAQs

What is the delivery time and cost of print book?

Shipping Details

USA:

Economy: Delivery to most addresses in the US within 10-15 business days

Premium: Trackable Delivery to most addresses in the US within 3-8 business days

UK:

Economy: Delivery to most addresses in the U.K. within 7-9 business days.
Shipments are not trackable

Premium: Trackable delivery to most addresses in the U.K. within 3-4 business days!
Add one extra business day for deliveries to Northern Ireland and Scottish Highlands and islands

EU:

Premium: Trackable delivery to most EU destinations within 4-9 business days.

Australia:

Economy: Can deliver to P. O. Boxes and private residences.
Trackable service with delivery to addresses in Australia only.
Delivery time ranges from 7-9 business days for VIC and 8-10 business days for Interstate metro
Delivery time is up to 15 business days for remote areas of WA, NT & QLD.

Premium: Delivery to addresses in Australia only
Trackable delivery to most P. O. Boxes and private residences in Australia within 4-5 days based on the distance to a destination following dispatch.

India:

Premium: Delivery to most Indian addresses within 5-6 business days

Rest of the World:

Premium: Countries in the American continent: Trackable delivery to most countries within 4-7 business days

Asia:

Premium: Delivery to most Asian addresses within 5-9 business days

Disclaimer:
All orders received before 5 PM U.K time would start printing from the next business day. So the estimated delivery times start from the next day as well. Orders received after 5 PM U.K time (in our internal systems) on a business day or anytime on the weekend will begin printing the second to next business day. For example, an order placed at 11 AM today will begin printing tomorrow, whereas an order placed at 9 PM tonight will begin printing the day after tomorrow.

Unfortunately, due to several restrictions, we are unable to ship to the following countries:

Afghanistan
American Samoa
Belarus
Brunei Darussalam
Central African Republic
The Democratic Republic of Congo
Eritrea
Guinea-bissau
Iran
Lebanon
Libiya Arab Jamahriya
Somalia
Sudan
Russian Federation
Syrian Arab Republic
Ukraine
Venezuela

What is custom duty/charge?

Customs duty are charges levied on goods when they cross international borders. It is a tax that is imposed on imported goods. These duties are charged by special authorities and bodies created by local governments and are meant to protect local industries, economies, and businesses.

Do I have to pay customs charges for the print book order?

The orders shipped to the countries that are listed under EU27 will not bear custom charges. They are paid by Packt as part of the order.

List of EU27 countries: www.gov.uk/eu-eea:

A custom duty or localized taxes may be applicable on the shipment and would be charged by the recipient country outside of the EU27 which should be paid by the customer and these duties are not included in the shipping charges been charged on the order.

How do I know my custom duty charges?

The amount of duty payable varies greatly depending on the imported goods, the country of origin and several other factors like the total invoice amount or dimensions like weight, and other such criteria applicable in your country.

For example:

If you live in Mexico, and the declared value of your ordered items is over $ 50, for you to receive a package, you will have to pay additional import tax of 19% which will be $ 9.50 to the courier service.
Whereas if you live in Turkey, and the declared value of your ordered items is over € 22, for you to receive a package, you will have to pay additional import tax of 18% which will be € 3.96 to the courier service.

How can I cancel my order?

Cancellation Policy for Published Printed Books:

You can cancel any order within 1 hour of placing the order. Simply contact customercare@packt.com with your order details or payment transaction id. If your order has already started the shipment process, we will do our best to stop it. However, if it is already on the way to you then when you receive it, you can contact us at customercare@packt.com using the returns and refund process.

Please understand that Packt Publishing cannot provide refunds or cancel any order except for the cases described in our Return Policy (i.e. Packt Publishing agrees to replace your printed book because it arrives damaged or material defect in book), Packt Publishing will not accept returns.

What is your returns and refunds policy?

Return Policy:

We want you to be happy with your purchase from Packtpub.com. We will not hassle you with returning print books to us. If the print book you receive from us is incorrect, damaged, doesn't work or is unacceptably late, please contact Customer Relations Team on customercare@packt.com with the order number and issue details as explained below:

If you ordered (eBook, Video or Print Book) incorrectly or accidentally, please contact Customer Relations Team on customercare@packt.com within one hour of placing the order and we will replace/refund you the item cost.
Sadly, if your eBook or Video file is faulty or a fault occurs during the eBook or Video being made available to you, i.e. during download then you should contact Customer Relations Team within 14 days of purchase on customercare@packt.com who will be able to resolve this issue for you.
You will have a choice of replacement or refund of the problem items.(damaged, defective or incorrect)
Once Customer Care Team confirms that you will be refunded, you should receive the refund within 10 to 12 working days.
If you are only requesting a refund of one book from a multiple order, then we will refund you the appropriate single item.
Where the items were shipped under a free shipping offer, there will be no shipping costs to refund.

On the off chance your printed book arrives damaged, with book material defect, contact our Customer Relation Team on customercare@packt.com within 14 days of receipt of the book with appropriate evidence of damage and we will work with you to secure a replacement copy, if necessary. Please note that each printed book you order from us is individually made by Packt's professional book-printing partner which is on a print-on-demand basis.

What tax is charged?

Currently, no tax is charged on the purchase of any print book (subject to change based on the laws and regulations). A localized VAT fee is charged only to our European and UK customers on eBooks, Video and subscriptions that they buy. GST is charged to Indian customers for eBooks and video purchases.

What payment methods can I use?

You can pay with the following card types:

Visa Debit
Visa Credit
MasterCard
PayPal

What is the delivery time and cost of print books?

Shipping Details

USA:

Economy: Delivery to most addresses in the US within 10-15 business days

Premium: Trackable Delivery to most addresses in the US within 3-8 business days

UK:

Economy: Delivery to most addresses in the U.K. within 7-9 business days.
Shipments are not trackable

Premium: Trackable delivery to most addresses in the U.K. within 3-4 business days!
Add one extra business day for deliveries to Northern Ireland and Scottish Highlands and islands

EU:

Premium: Trackable delivery to most EU destinations within 4-9 business days.

Australia:

India:

Premium: Delivery to most Indian addresses within 5-6 business days

Rest of the World:

Premium: Countries in the American continent: Trackable delivery to most countries within 4-7 business days

Asia:

Premium: Delivery to most Asian addresses within 5-9 business days

Unfortunately, due to several restrictions, we are unable to ship to the following countries:

Afghanistan
American Samoa
Belarus
Brunei Darussalam
Central African Republic
The Democratic Republic of Congo
Eritrea
Guinea-bissau
Iran
Lebanon
Libiya Arab Jamahriya
Somalia
Sudan
Russian Federation
Syrian Arab Republic
Ukraine
Venezuela

Filter reviews by

All

Amazon verified reviews

Rafa Sep 24, 2012

The Book Advanced Penetration Testing for Highly-Secured Environments: The Ultimate Security Guide, make us a tour of each of the phases involved in the Pentesting. Starting from the basics to conducting and reporting the same. If you have some knowledge of offensive computer security and want to deepen your knowledge, this book is for you. Most Pentesting teach basic courses to some extent leaving out field closely related in real life as evasion of network systems.I like in this book is to teach you not to depend on remote labs that will eventually generate considerable expense, with the only requirement a computer update, as it will need to virtualize multiple systems and that the virtual platform you are going to develop will serve you in your future to continue further studies.It is a book I recommend to have in your library studies to further advance your career, the tools to which they refer are open source so they will not have many problems in implementing the virtualization platform and make the recommended practices.

Amazon Verified review

John Brown Jun 04, 2015

great information in this book

A. Student Sep 27, 2012

"This book is an excellent walkthrough of how to profitably use the immense toolbox available to the penetration tester. If you've only dipped into a few of the tools that are pre-installed in Back|Track, this book will introduce you to many of the other tools, their capabilities and how they can be used in a penetration testing engagement.However, this is not just a catalog and instruction manual for tools; Allen spends a lot of time talking about the penetration testing process including how to plan for one, consulting with the client to set appropriate scope and expectations and all the other details that set the professional penetration tester apart from the tool-focused amateur.Allen includes an excellent chapter on building a lab to follow along and try out the many techniques illustrated in the book. The book concludes with a challenge chapter that walks through an example penetration test.Most definitely a worthwhile read for technical security professionals and aspiring penetration testers."

Po Foon Kwong Oct 04, 2012

Eventually, a step-by-step guide on how to perform a penetration testing instead of just another book throwing tons of tools and ask readers to try one by one...Instead of explaining stages of penetration testing and throwing tools for each step, this book uses examples with instructions, guiding readers how to do the job directly - from setting up the virtual lab environment, to which tool to use, and then step-by-step instruction on how to use the tool to do the job. Anybody with just a basic understanding on *nix system will be able to follow the book easily, and eventually have an idea on what the penetration testing is after finishing the book.Definitely it doesn't cover everything, but it actually covers quite a lot of common scenarios - from exploitation of a single machine directly connected, to that of multiple machines of different operating systems behind firewall. The scenarios go a little bit more complex as the author explains different stages of penetration testing. The author did an excellent job in keeping the learning curve low.I highly recommend anybody who want to learn penetration testing to get this book. This is also suitable for those who tried pentesting courses like OSCP but found that the learning curve is too steep and eventually give up. It definitely helps bridging the gap.

Kindle Customer Dec 23, 2012

The book shows a comprehensive base of knowledge for learning the basics of computer/network security. More then this book will be required to fully learn what you MUST know to be considered an expert ,but this book will get you started down the right path.

AFRINIC	http://www.afrinic.net
APNIC	http://www.apnic.net
ARIN	http://ws.arin.net
IANA	http://www.iana.com
ICANN	http://www.icann.org
LACNIC	http://www.lacnic.net
NRO	http://www.nro.net
RIPE	http://www.ripe.net
InterNic	http://www.internic.net

Advanced Penetration Testing for Highly-Secured Environments: The Ultimate Security Guide: Learn to perform professional penetration testing for highly-secured environments with this intensive hands-on guide with this book and ebook.

What do you get with Print?

Advanced Penetration Testing for Highly-Secured Environments: The Ultimate Security Guide

Chapter 2. Advanced Reconnaissance Techniques

Note

Introduction to reconnaissance

DNS recon

Note

Gathering and validating domain and IP information

Gathering information with whois

Using search engines to do your job for you

Tip

Summary

Page 1 of 6

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with Print?

Product Details

Frequently bought together

Table of Contents

Recommendations for you

Customer reviews

Filter reviews by

People who bought this also bought

About the author

FAQs

Advanced Penetration Testing for Highly-Secured Environments: The Ultimate Security Guide: Learn to perform professional penetration testing for highly-secured environments with this intensive hands-on guide with this book and ebook.

What do you get with Print?

Key benefits

Description

Who is this book for?

What you will learn

Product Details

What do you get with Print?

Product Details

Packt Subscriptions

Frequently bought together

Table of Contents

Recommendations for you

Customer reviews

Filter reviews by

People who bought this also bought

About the author

FAQs