Cargando…
Building virtual pentesting labs for advanced penetration testing : build intricate virtual architecture to practice any penetration testing technique virtually /
Written in an easy-to-follow approach using hands-on examples, this book helps you create virtual environments for advanced penetration testing, enabling you to build a multi-layered architecture to include firewalls, IDS/IPS, web application firewalls, and endpoint protection, which is essential in...
| Clasificación: | Libro Electrónico |
|---|---|
| Autor principal: | |
| Formato: | Electrónico eBook |
| Idioma: | Inglés |
| Publicado: |
Birmingham :
Packt Publishing,
2014.
|
| Colección: | Community experience distilled.
|
| Temas: | |
| Acceso en línea: | Texto completo |
MARC
| LEADER | 00000cam a2200000 a 4500 | ||
|---|---|---|---|
| 001 | EBOOKCENTRAL_ocn881886712 | ||
| 003 | OCoLC | ||
| 005 | 20240329122006.0 | ||
| 006 | m o d | ||
| 007 | cr cnu---unuuu | ||
| 008 | 140628s2014 enk o 000 0 eng d | ||
| 040 | |a EBLCP |b eng |e pn |c EBLCP |d N$T |d E7B |d UMI |d XFF |d DEBSZ |d DEBBG |d OCLCQ |d COO |d TEFOD |d OCLCQ |d D6H |d K6U |d AGLDB |d OCLCQ |d ICA |d OCLCQ |d PIFFA |d FVL |d ZCU |d MERUC |d OCLCQ |d U3W |d OCLCA |d REB |d STF |d OCLCF |d OCLCQ |d VTS |d CEF |d ICG |d INT |d VT2 |d UKMGB |d OCLCQ |d WYU |d G3B |d TKN |d OCLCQ |d UAB |d DKC |d AU@ |d OCLCQ |d M8D |d OCLCQ |d OCLCO |d QGK |d OCLCQ |d OCLCO |d OCLCL | ||
| 016 | 7 | |a 018006546 |2 Uk | |
| 019 | |a 883801310 |a 961681146 |a 962624562 |a 1259093904 | ||
| 020 | |a 9781783284788 |q (electronic bk.) | ||
| 020 | |a 1783284781 |q (electronic bk.) | ||
| 020 | |z 9781783284771 | ||
| 020 | |z 1783284773 | ||
| 029 | 1 | |a AU@ |b 000055989644 | |
| 029 | 1 | |a DEBBG |b BV042031196 | |
| 029 | 1 | |a DEBBG |b BV043608068 | |
| 029 | 1 | |a DEBSZ |b 409806269 | |
| 029 | 1 | |a DEBSZ |b 414187865 | |
| 029 | 1 | |a DEBSZ |b 484724878 | |
| 029 | 1 | |a GBVCP |b 882839063 | |
| 029 | 1 | |a UKMGB |b 018006546 | |
| 035 | |a (OCoLC)881886712 |z (OCoLC)883801310 |z (OCoLC)961681146 |z (OCoLC)962624562 |z (OCoLC)1259093904 | ||
| 037 | |a CL0500000457 |b Safari Books Online | ||
| 037 | |a 40AB2CBE-BE42-4449-984F-CD9A78F9EC12 |b OverDrive, Inc. |n http://www.overdrive.com | ||
| 050 | 4 | |a TK5105.59 | |
| 072 | 7 | |a COM |x 053000 |2 bisacsh | |
| 082 | 0 | 4 | |a 005.8 |
| 049 | |a UAMI | ||
| 100 | 1 | |a Cardwell, Kevin. | |
| 245 | 1 | 0 | |a Building virtual pentesting labs for advanced penetration testing : |b build intricate virtual architecture to practice any penetration testing technique virtually / |c Kevin Cardwell. |
| 260 | |a Birmingham : |b Packt Publishing, |c 2014. | ||
| 300 | |a 1 online resource (430 pages) | ||
| 336 | |a text |b txt |2 rdacontent | ||
| 337 | |a computer |b c |2 rdamedia | ||
| 338 | |a online resource |b cr |2 rdacarrier | ||
| 490 | 1 | |a Community experience distilled | |
| 588 | 0 | |a Print version record. | |
| 505 | 0 | |a Cover; Copyright; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Introducing Penetration Testing; Security testing; Authentication; Authorization; Confidentiality; Integrity; Availability; Non-repudiation; Abstract testing methodology; Planning; Nonintrusive target search; Intrusive target search; Data analysis; Reporting; Myths and misconceptions of pen testing; Summary; Chapter 2: Choosing the Virtual Environment; Open source and free environments; VMware Player; VirtualBox; Xen; Hyper-V; vSphere Hypervisor; Commercial environments. | |
| 505 | 8 | |a VSphereVMware Player Plus; XenServer; VMware Workstation; Image conversion; Converting from a physical to virtual environment; Summary; Chapter 3: Planning a Range; Planning; What are we trying to accomplish?; By when do we have to accomplish it?; Identifying vulnerabilities; Vulnerability sites; Vendor sites; Summary; Chapter 4: Identifying Range Architecture; Building the machines; Building new machines; Conversion; Cloning a virtual machine; Selecting network connections; The bridged setting; Network Address Translation; The host-only switch; The custom settings; Choosing range components. | |
| 505 | 8 | |a The attacker machineRouter; Firewall; Web server; Summary; Chapter 5: Identifying a Methodology; The OSSTMM; The Posture Review; Logistics; Active detection verification; Visibility Audit; Access verification; Trust verification; Control verification; Process verification; Configuration verification; Property validation; Segregation review; Exposure verification; Competitive intelligence scouting; Quarantine verification; Privileges audit; Survivability validation; Alert and log review; CHECK; NIST SP-800-115; The information security assessment methodology; Technical assessment techniques. | |
| 505 | 8 | |a Comparing tests and examinationsTesting viewpoints; Overt and covert; Offensive Security; Other methodologies; Customization; Summary; Chapter 6: Creating an External Attack Architecture; Establishing layered architectures; Configuring firewall architectures; iptables; Deploying IDS/IPS and load balancers; Intrusion Detection System (IDS); Intrusion Prevention System (IPS); Load balancers; Integrating web application firewalls; Summary; Chapter 7: Assessment of Devices; Assessing routers; Evaluating switches; MAC attacks; VLAN hopping attacks; GARP attacks; Attacking the firewall. | |
| 505 | 8 | |a Identifying the firewall rulesTricks to penetrate filters; Summary; Chapter 8: Architecting an IDS/IPS Range; Deploying a network-based IDS; Implementing the host-based IDS and endpoint security; Working with virtual switches; Evasion; Determining thresholds; Stress testing; Shell code obfuscation; Summary; Chapter 9: Assessment of Web Servers and Web Applications; Analyzing the OWASP Top Ten attacks; Injection flaws; Broken authentication and session management; Cross-Site Scripting; Insecure direct object references; Security misconfiguration; Sensitive data exposure. | |
| 500 | |a Missing function-level access control. | ||
| 520 | |a Written in an easy-to-follow approach using hands-on examples, this book helps you create virtual environments for advanced penetration testing, enabling you to build a multi-layered architecture to include firewalls, IDS/IPS, web application firewalls, and endpoint protection, which is essential in the penetration testing world. If you are a penetration tester, security consultant, security test engineer, or analyst who wants to practice and perfect penetration testing skills by building virtual pen testing labs in varying industry scenarios, this is the book for you. This book is ideal if yo. | ||
| 546 | |a English. | ||
| 590 | |a ProQuest Ebook Central |b Ebook Central Academic Complete | ||
| 590 | |a eBooks on EBSCOhost |b EBSCO eBook Subscription Academic Collection - Worldwide | ||
| 650 | 0 | |a Computer security |x Testing. | |
| 650 | 0 | |a Computer networks |x Security measures. | |
| 650 | 0 | |a Computers |x Access control. | |
| 650 | 6 | |a Réseaux d'ordinateurs |x Sécurité |x Mesures. | |
| 650 | 6 | |a Ordinateurs |x Accès |x Contrôle. | |
| 650 | 7 | |a COMPUTERS |x Security |x General. |2 bisacsh | |
| 650 | 7 | |a Computer networks |x Security measures |2 fast | |
| 650 | 7 | |a Computers |x Access control |2 fast | |
| 758 | |i has work: |a Building virtual pentesting labs for advanced penetration testing (Text) |1 https://id.oclc.org/worldcat/entity/E39PCFBWDhqy4DGGQkgtFqwYdP |4 https://id.oclc.org/worldcat/ontology/hasWork | ||
| 776 | 0 | 8 | |i Print version: |a Cardwell, Kevin. |t Building Virtual Pentesting Labs for Advanced Penetration Testing. |d Birmingham : Packt Publishing, ©2014 |z 9781783284771 |
| 830 | 0 | |a Community experience distilled. | |
| 856 | 4 | 0 | |u https://ebookcentral.uam.elogim.com/lib/uam-ebooks/detail.action?docID=1644005 |z Texto completo |
| 936 | |a BATCHLOAD | ||
| 938 | |a EBL - Ebook Library |b EBLB |n EBL1644005 | ||
| 938 | |a ebrary |b EBRY |n ebr10887984 | ||
| 938 | |a EBSCOhost |b EBSC |n 801777 | ||
| 994 | |a 92 |b IZTAP | ||