PacktLib: BackTrack 4: Assuring Security by Penetration Testing

BackTrack 4: Assuring Security by Penetration Testing

About the Authors

About the Reviewers

www.PacktPub.com

Beginning with BackTrack

BackTrack purpose

Getting BackTrack

Using BackTrack

Configuring network connection

Updating BackTrack

Installing additional weapons

Customizing BackTrack

Penetration Testing Methodology

Types of penetration testing

Vulnerability assessment versus penetration testing

Security testing methodologies

BackTrack testing methodology

Gathering client requirements

Preparing the test plan

Profiling test boundaries

Defining business objectives

Project management and scheduling

Information Gathering

Public resources

Document gathering

DNS information

Route information

Utilizing search engines

All-in-one intelligence gathering

Documenting the information

Target Discovery

Identifying the target machine

OS fingerprinting

Enumerating Target

Service enumeration

VPN enumeration

Vulnerability Mapping

Types of vulnerabilities

Vulnerability taxonomy

Open Vulnerability Assessment System (OpenVAS)

Web application analysis

Social Engineering

Modeling human psychology

Social Engineering Toolkit (SET)

Common User Passwords Profiler (CUPP)

Target Exploitation

Vulnerability research

Vulnerability and exploit repositories

Advanced exploitation toolkit

Privilege Escalation

Attacking the password

Network sniffers

Network spoofing tools

Maintaining Access

Protocol tunneling

End-to-end connection

Documentation and Reporting

Documentation and results verification

Types of reports

Post testing procedures

Supplementary Tools

Supplementary Tools

Supplementary Tools

Supplementary Tools

Supplementary Tools