FRINGEINDEPENEDENTREVIEW
Posted February 27, 2012
Are you a professional penetration tester who wants to increase the capability maturity of their current PenTest processes? If you are, then this book is for you! Author Thomas Wilhelm, has done an outstanding job of writing a book that provides the reader with an in-depth understanding of all facets of a penetration test. Author Wilhelm, begins by discussing ethics and laws specific to penetration testing. In addition, the author identifies career paths, certifications, and information on security organizations that can assist in career development. He then shows you how to design a corporate or private penetration test lab. The author then, shows you how to use turnkey scenarios and real-world targets in the penetration test lab. He continues by examining the different methodologies available for professional penetration test projects. In addition, the author identifies the different methods of applying metrics to vulnerabilities found in a penetration test project. He then explains team members, roles, and organizational structures that influence the success of a penetration test. The author then shows you how to collect information on a target system. Then, the author examines target systems for possible vulnerabilities. Next, he shows you how to exploit discovered vulnerabilities. The author continues by showing you how to find ways to own the system. In addition, he discusses how to stay on the exploited system. The author then shows you how to manipulate the system to remain undetected. Next, he shows you how to write a report and verify the facts. Then, the author shows you how to save penetration test data. He continues by showing you how to save configuration and data from the lab. Finally, he identifies training needs and how to obtain resources. The goal of this most excellent book and accompanying DVD, was written to be used in a variety of different ways. Perhaps more importantly, the initial intent of this book is to provide a formal training program on penetration testing.
Was this review helpful? Yes NoThank you for your feedback. Report this reviewThank you, this review has been flagged.Anonymous
Posted January 16, 2011
No text was provided for this review.
Anonymous
Posted February 24, 2010
No text was provided for this review.
More About This Textbook
Overview
Save yourself some money! This complete classroom-in-a-book on penetration testing provides material that can cost upwards of $1,000 for a fraction of the price!
Thomas Wilhelm has delivered pen testing training to countless security professionals and now through the pages of this book you can benefit from his years of experience as a professional penetration tester and educator. After reading this book you will be able to create a personal penetration test lab that can deal with real-world vulnerability scenarios.
Penetration testing is the act of testing a network to find security vulnerabilities before they are exploited by phishers, digital piracy groups, and countless other organized or individual malicious hackers. The material presented will be useful to beginners all the way through to advanced practitioners.
Editorial Reviews
From the Publisher
"Wilhelm has created the ultimate handbook for becoming a pen tester. This is going to help launch many a career." - Richard Stiennon, Chief Research Analyst, IT-Harvest
"Professional Penetration Testing covers everything from ethical concerns, to advance concepts, to setting up your own custom laboratory. It is the most comprehensive and authoritative guide at penetration testing that I have seen. Tom Wilhelm is a true expert in the field who not only is in the trenches on a daily basis, but also takes the time to instruct others on the ways and means of pen testing." –Frank Thornton, Owner, Blackthorn Systems
Product Details
Related Subjects
Meet the Author
Table of Contents
PART II - Running a PenTest Chapter 9: Information Gathering Chapter 10: Vulnerability Identification Chapter 11: Vulnerability Verification Chapter 12: Compromising a System and Privilege Escalation Chapter 13: Maintaining Access Chapter 14: Covering Your Tracks
PART III - Wrapping Everything Up Chapter 15: Reporting Results Chapter 16: Archiving Data Chapter 17: Cleaning Up Your Lab Chapter 18: Planning for Your Next PenTest
Appendix A - Acronyms Appendix B - Definitions