Building Virtual Pentesting Labs for Advanced Penetration Testing (Paperback)
暫譯: 建立虛擬滲透測試實驗室以進行高級滲透測試 (平裝本)

Kevin Cardwell

  • 出版商: Packt Publishing
  • 出版日期: 2014-06-14
  • 售價: $2,570
  • 貴賓價: 9.5$2,442
  • 語言: 英文
  • 頁數: 480
  • 裝訂: Paperback
  • ISBN: 1783284773
  • ISBN-13: 9781783284771
  • 相關分類: Penetration-test
  • 海外代購書籍(需單獨結帳)

買這商品的人也買了...

相關主題

商品描述

Build intricate virtual architecture to practice any penetration testing technique virtually

Overview

  • Build and enhance your existing pentesting methods and skills
  • Get a solid methodology and approach to testing
  • Step-by-step tutorial helping you build complex virtual architecture

In Detail

A penetration test, also known as pentest, is a method of assessing computer and network security by replicating an attack on a computer system or network from the outside world and internal threats. With the increase of advanced hackers and threats to our virtual world, pentesting is an absolute necessity.

Building Virtual Pentesting Labs for Advanced Penetration Testing will teach you how to build your own labs and give you a proven process to test these labs; a process that is currently used in industry by global pentesting teams. You will also learn a systematic approach to professional security testing, building routers, firewalls, and web servers to hone your pentesting skills.

What you will learn from this book

  • Build routers, firewalls, and web servers to hone your pentesting skills
  • Deploy and then find the weaknesses in a firewall architecture
  • Construct a layered architecture and perform a systematic process and methodology to use for conducting an external test
  • Get introduced to several of the different security testing methodologies
  • Design monitored environments and evade them
  • Create complex architecture
  • Bypass antivirus and other protection
  • Practice methods of evasion against today's top defenses
  • Leverage the client configuration

Approach

Written in an easy-to-follow approach using hands-on examples, this book helps you create virtual environments for advanced penetration testing, enabling you to build a multi-layered architecture to include firewalls, IDS/IPS, web application firewalls, and endpoint protection, which is essential in the penetration testing world.

Who this book is written for

If you are a penetration tester, security consultant, security test engineer, or analyst who wants to practice and perfect penetration testing skills by building virtual pentesting labs in varying industry scenarios, this is the book for you. This book is ideal if you want to build and enhance your existing pentesting methods and skills. Basic knowledge of network security features is expected along with web application testing experience.

商品描述(中文翻譯)

建立複雜的虛擬架構以虛擬方式練習任何滲透測試技術

概述
- 建立並增強您現有的滲透測試方法和技能
- 獲得穩固的測試方法論和方法
- 逐步教程幫助您建立複雜的虛擬架構

詳細內容
滲透測試(penetration test),也稱為 pentest,是一種通過模擬外部世界和內部威脅對計算機系統或網絡的攻擊來評估計算機和網絡安全的方法。隨著高級黑客和對我們虛擬世界的威脅的增加,滲透測試已成為絕對必要。

《為高級滲透測試建立虛擬滲透測試實驗室》將教您如何建立自己的實驗室,並提供一個經過驗證的流程來測試這些實驗室;這一流程目前在全球滲透測試團隊中被廣泛使用。您還將學習專業安全測試的系統方法,建立路由器、防火牆和網頁伺服器,以磨練您的滲透測試技能。

您將從本書中學到的內容
- 建立路由器、防火牆和網頁伺服器以磨練您的滲透測試技能
- 部署並找到防火牆架構中的弱點
- 構建分層架構並執行系統化的流程和方法論以進行外部測試
- 了解幾種不同的安全測試方法論
- 設計受監控的環境並避開它們
- 創建複雜的架構
- 繞過防病毒和其他保護措施
- 練習對抗當今頂尖防禦的規避方法
- 利用客戶端配置

方法
本書以易於遵循的方式撰寫,使用實作範例,幫助您為高級滲透測試創建虛擬環境,使您能夠建立多層架構,包括防火牆、入侵檢測/防禦系統(IDS/IPS)、網頁應用防火牆和端點保護,這在滲透測試領域中至關重要。

本書的讀者對象
如果您是滲透測試員、安全顧問、安全測試工程師或分析師,並希望通過在不同的行業場景中建立虛擬滲透測試實驗室來練習和完善滲透測試技能,那麼這本書就是為您而寫的。如果您想建立和增強現有的滲透測試方法和技能,這本書非常理想。預期具備基本的網絡安全功能知識以及網頁應用測試經驗。