Getting Started with pen testing

Understanding the role pen testers play in security

Pen Testing Roles

(1) Crowdsourced pen testers

(2) In-house security pro

(3) Security consultant

Gaining the basic skills to pen test

(1) Basic networking

(2) General security technology

(3) Systems infrastructure and applications

(4) Mobile and cloud

Deciding how and when to pen test

An overview look at pen testing

The goals of pen testing

(1) Protecting assets

(2) Identifying risk

(3) Finding vulnerabilities

(4) Scanning and assessing

(5) Securing operations

(6) Responding to incidents

Scanning maintenance

(1) Exclusions and ping sweeps

(2) Patching

(3) Antivirus and other technologies

(4) Compliance

Hacker agenda

(1) Hacktivist

(2) Script kiddie to elite

(3) White hat

(4) Grey hat

(5) Black hat

Gathering your tools

(1) Considerations for your toolkit

(2) Nessus

(3) Wireshark

(4) Kali linux

(5) Nmap

Understanding the different types of pen testing

Penetrate and exploit

Understanding vectors and the art of hacking

Examining types of penetration attacks

(1) Social engineering

(2) Client-side and server-side attacks

(3) Password cracking

Cryptology and encryption

(1) SSL/TLS

(2) SSH

(3) IPSec

Using Metasploit framework and pro

Assumption (Man in the middle)

Burp suite

Wireshark

Listening in to collect data

(1) Address spoofing

(2) Eavesdropping

(3) Packet capture and analysis

(4) Key loggers

(5) Card skimmers

(6) USB drivers

Overwhelm and Disrupt (Dos/DDoS)

Kali/Kali T50 Mixed Packet injector tool

(1) Understanding Denial of service(Dos) Attacks

(2) Buffer Overflow Attacks

(3) Fragmentation Attacks

(4) Smurf Attacks

(5) Tiny Packet Attacks

(6) Xmas Tree Attacks

Destroy(Malware)

Antivirus software/Nessus

(1) Malware

(2) Ransomware

(3) Other Types of Destroy Attacks

Subvert (Controls Bypass)

Nmap

(1) Attack Vectors

(2) Phishing

(3) Spoofing

(4) Malware

(a) Using malware to find a way in

(b) Bypassing AV software

Diving In: Preparations and testing

Preparing for the pen test

Handing the preliminary Logistics

(1) Holding an initial meeting

(2) Gaining permission

(3) Following change control

(4) Keep backups

(5) Having documentation

Gathering Requirements

(1) Reviewing past test results

(2) Consulting the risk register

Coming up with a plan

(1) Selecting a project or scan type

(2) Selecting the tools

Having a backout plan

Conducting a penetration Test

Attack!

(1) Infiltration

(2) Penetration

(3) Exploitation

(4) APT

(5) Exfiltration(and success)

(6) Next steps

Looking at the pen test from inside

Documenting your every move

(1) Networking mapping

(2) Updating the risk register

(3) Maintaining balance

Other capture methods and vectors

Assessment

(1) Infiltrate

(2) Penetrate

(3) Exploit

(4) Exfiltrate

Prevention

(1) Hardening

(2) Active monitoring

(3) Retesting

(4) Devising best practices from lessons learned

Creating A Pen test report