Packt+ | Advance your knowledge in tech

You're reading from Pentesting Fundamentals for Beginners Build a practical foundation of pentesting fundamentals using hands-on, practical, applied learning

Product type Video

Published in Jun 2022

Publisher Packt

ISBN-13 9781804615553

Length 7hrs 29mins

Edition 1st Edition

Tools

Burp Suite

Concepts

Cybersecurity

Author (1):

Cliff Krahenbill

View More author details

Table of Contents (13) Chapters

1. Introduction to the Course

Course Overview

2. Virtual Lab Build FREE CHAPTER

Create a Virtual Install of Kali Linux
Create a Virtual Install of Windows 10
Create a Virtual Install of Metasploitable2 Using VirtualBox
Create a Virtual Install of Metasploitable3 Using VirtualBox
Create a Virtual Install of OWASP
Taking a Snapshot of Your Current Configuration

3. Documentation

Scoping the Engagement
Statement of Work (SOW) Document
Rules of Engagement (ROE) Document
Master Service Agreement (MSA), NDA
Pentesting Final Report

4. Penetration Testing Frameworks

Overview of MITRE ATT&CK Framework
Overview of the NIST Pentesting Framework
Overview of the Penetration Testing Execution Standard (PTES)

5. Nmap - Network Discovery

Introduction to Nmap
Nmap Service and Open Port Scan
Nmap OS Detection
Nmap Service and Version Detection
Nmap Host Discovery
Nmap Scripting Engine (NSE)
Analyzing Nmap Results

6. OpenVAS - Vulnerability Scanning

Perform a Vulnerability Scan Using OpenVAS

7. Information Gathering

Using Banner Grabbing to Aid in Reconnaissance
Enumerating Windows 10 Using WinPEAS

8. Reverse Shells and Persistent Connections

Creating a Persistent Backdoor Using Service Persistence
Create a Windows Reverse Shell Using PowerShell
Launch a Graphic Console Window Using SSH and XTERM.mp4

9. Privilege Escalation

Window 7/10 Privilege Escalation Using UAC Bypass
Verify Windows Privilege Escalation: Unquoted Service Path
Windows Privilege Escalation Unquoted Service Path

10. OWASP Top 10 Mitigations

Overview of OWASP Top 10
Assemble Fake TCPIP Packets Using Hping3
Identify Active Network Hosts and Services Using Nmap
Perform a Vulnerability Scan Using OWASP Zed Attack Proxy

11. Web Applications Testing

Configuring BurpSuite as a Proxy.pdf
Web Application Firewall Detection Using WAFW00F
Perform a SQL Injection Attack Using SQLmap
Exploit Vulnerable Web Applications Using Command Injection
Exploiting HTTP PUT Method
Brute Forcing WordPress Password

12. Compiling Exploit Code

Compiling Exploit Code for Linux Using GCC
Prepare a Windows OVA file for your Virtual Lab Environment
Cross Compiling Windows Exploits Using Mingw-w64

13. Scripting

Local File Inclusion Using Kali Web Shells PHP Scripts
File Transfer Using HTTP and PowerShellâ€™s WebClient Object
Python3 SimpleHTTPServer
String Slicing Using Python
Disable Windows 10 UAC Using PowerShell

You're reading from Pentesting Fundamentals for Beginners Build a practical foundation of pentesting fundamentals using hands-on, practical, applied learning

Table of Contents (13) Chapters

Authors (1)

Personalised recommendations for you

You're reading from Pentesting Fundamentals for Beginners Build a practical foundation of pentesting fundamentals using hands-on, practical, applied learning

Table of Contents (13) Chapters

Unlock this book and the full library FREE for 7 days

Authors (1)

Personalised recommendations for you