Cybersecurity - Attack and Defense Strategies

Cybersecurity - Attack and Defense Strategies

Author: Yuri Diogenes

Publisher: Packt Publishing Ltd

Published: 2018-01-30

Total Pages: 368

ISBN-13: 178847385X

DOWNLOAD EBOOK

Key Features Gain a clear understanding of the attack methods, and patterns to recognize abnormal behavior within your organization with Blue Team tactics Learn to unique techniques to gather exploitation intelligence, identify risk and demonstrate impact with Red Team and Blue Team strategies A practical guide that will give you hands-on experience to mitigate risks and prevent attackers from infiltrating your system Book DescriptionThe book will start talking about the security posture before moving to Red Team tactics, where you will learn the basic syntax for the Windows and Linux tools that are commonly used to perform the necessary operations. You will also gain hands-on experience of using new Red Team techniques with powerful tools such as python and PowerShell, which will enable you to discover vulnerabilities in your system and how to exploit them. Moving on, you will learn how a system is usually compromised by adversaries, and how they hack user's identity, and the various tools used by the Red Team to find vulnerabilities in a system. In the next section, you will learn about the defense strategies followed by the Blue Team to enhance the overall security of a system. You will also learn about an in-depth strategy to ensure that there are security controls in each network layer, and how you can carry out the recovery process of a compromised system. Finally, you will learn how to create a vulnerability management strategy and the different techniques for manual log analysis.What you will learn Learn the importance of having a solid foundation for your security posture Understand the attack strategy using cyber security kill chain Learn how to enhance your defense strategy by improving your security policies, hardening your network, implementing active sensors, and leveraging threat intelligence Learn how to perform an incident investigation Get an in-depth understanding of the recovery process Understand continuous security monitoring and how to implement a vulnerability management strategy Learn how to perform log analysis to identify suspicious activities Who this book is for This book aims at IT professional who want to venture the IT security domain. IT pentester, Security consultants, and ethical hackers will also find this course useful. Prior knowledge of penetration testing would be beneficial.


Kali Linux Revealed

Kali Linux Revealed

Author: Raphaël Hertzog

Publisher:

Published: 2017-06-05

Total Pages: 342

ISBN-13: 9780997615609

DOWNLOAD EBOOK

Whether you're a veteran or an absolute n00b, this is the best place to start with Kali Linux, the security professional's platform of choice, and a truly industrial-grade, and world-class operating system distribution-mature, secure, and enterprise-ready.


Black Hat Go

Black Hat Go

Author: Tom Steele

Publisher: No Starch Press

Published: 2020-02-04

Total Pages: 369

ISBN-13: 1593278667

DOWNLOAD EBOOK

Like the best-selling Black Hat Python, Black Hat Go explores the darker side of the popular Go programming language. This collection of short scripts will help you test your systems, build and automate tools to fit your needs, and improve your offensive security skillset. Black Hat Go explores the darker side of Go, the popular programming language revered by hackers for its simplicity, efficiency, and reliability. It provides an arsenal of practical tactics from the perspective of security practitioners and hackers to help you test your systems, build and automate tools to fit your needs, and improve your offensive security skillset, all using the power of Go. You'll begin your journey with a basic overview of Go's syntax and philosophy and then start to explore examples that you can leverage for tool development, including common network protocols like HTTP, DNS, and SMB. You'll then dig into various tactics and problems that penetration testers encounter, addressing things like data pilfering, packet sniffing, and exploit development. You'll create dynamic, pluggable tools before diving into cryptography, attacking Microsoft Windows, and implementing steganography. You'll learn how to: Make performant tools that can be used for your own security projects Create usable tools that interact with remote APIs Scrape arbitrary HTML data Use Go's standard package, net/http, for building HTTP servers Write your own DNS server and proxy Use DNS tunneling to establish a C2 channel out of a restrictive network Create a vulnerability fuzzer to discover an application's security weaknesses Use plug-ins and extensions to future-proof productsBuild an RC2 symmetric-key brute-forcer Implant data within a Portable Network Graphics (PNG) image. Are you ready to add to your arsenal of security tools? Then let's Go!


Metasploit

Metasploit

Author: David Kennedy

Publisher: No Starch Press

Published: 2011-07-15

Total Pages: 331

ISBN-13: 159327288X

DOWNLOAD EBOOK

The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless. But while Metasploit is used by security professionals everywhere, the tool can be hard to grasp for first-time users. Metasploit: The Penetration Tester's Guide fills this gap by teaching you how to harness the Framework and interact with the vibrant community of Metasploit contributors. Once you've built your foundation for penetration testing, you’ll learn the Framework's conventions, interfaces, and module system as you launch simulated attacks. You’ll move on to advanced penetration testing techniques, including network reconnaissance and enumeration, client-side attacks, wireless attacks, and targeted social-engineering attacks. Learn how to: –Find and exploit unmaintained, misconfigured, and unpatched systems –Perform reconnaissance and find valuable information about your target –Bypass anti-virus technologies and circumvent security controls –Integrate Nmap, NeXpose, and Nessus with Metasploit to automate discovery –Use the Meterpreter shell to launch further attacks from inside the network –Harness standalone Metasploit utilities, third-party tools, and plug-ins –Learn how to write your own Meterpreter post exploitation modules and scripts You'll even touch on exploit discovery for zero-day research, write a fuzzer, port existing exploits into the Framework, and learn how to cover your tracks. Whether your goal is to secure your own networks or to put someone else's to the test, Metasploit: The Penetration Tester's Guide will take you there and beyond.


Complete Offensive Line

Complete Offensive Line

Author: Rick Trickett

Publisher: Human Kinetics

Published: 2012-08-21

Total Pages: 298

ISBN-13: 1492581321

DOWNLOAD EBOOK

Developing dominating offensive linemen is Rick Trickett’s specialty. His accomplishments speak for themselves: 4 first-round draft selections, 20 NFL players, 13 All-Americans, and more than 30 all-conference selections. Now with Complete Offensive Line, he’s created the most in-depth guide ever on offensive line play. Today’s linemen must have skill, strength, power, quickness, agility, and intelligence to excel at the position. That is why Complete Offensive Line presents it all—from footwork and hand positioning to pulling and cutbacks. In this one-of-a-kind guide, Trickett takes you onto the practice field and into the trenches to learn these skills, among others: • Pass protection • Run blocking • Man and zone blocking • Combination blocks • Blitz pickup • Recognition of defensive sets such as 4-3, 3-4, and stack • Strengths, weaknesses, and opportunities against any defensive set • Techniques and schemes for formations such as spread, option, and the run and shoot With XX of the most effective drills, skill evaluation, line play assessments, scheme suggestions, and unparalleled coaching advice from one of the best in the game, Complete Offensive Line is simply the definitive book on football’s most demanding position.


Learn Kali Linux 2019

Learn Kali Linux 2019

Author: Glen D. Singh

Publisher: Packt Publishing Ltd

Published: 2019-11-14

Total Pages: 536

ISBN-13: 1789612624

DOWNLOAD EBOOK

Explore the latest ethical hacking tools and techniques in Kali Linux 2019 to perform penetration testing from scratch Key FeaturesGet up and running with Kali Linux 2019.2Gain comprehensive insights into security concepts such as social engineering, wireless network exploitation, and web application attacksLearn to use Linux commands in the way ethical hackers do to gain control of your environmentBook Description The current rise in hacking and security breaches makes it more important than ever to effectively pentest your environment, ensuring endpoint protection. This book will take you through the latest version of Kali Linux and help you use various tools and techniques to efficiently deal with crucial security aspects. Through real-world examples, you’ll understand how to set up a lab and later explore core penetration testing concepts. Throughout the course of this book, you’ll get up to speed with gathering sensitive information and even discover different vulnerability assessment tools bundled in Kali Linux 2019. In later chapters, you’ll gain insights into concepts such as social engineering, attacking wireless networks, exploitation of web applications and remote access connections to further build on your pentesting skills. You’ll also focus on techniques such as bypassing controls, attacking the end user and maintaining persistence access through social media. Finally, this pentesting book covers best practices for performing complex penetration testing techniques in a highly secured environment. By the end of this book, you’ll be able to use Kali Linux to detect vulnerabilities and secure your system by applying penetration testing techniques of varying complexity. What you will learnExplore the fundamentals of ethical hackingLearn how to install and configure Kali LinuxGet up to speed with performing wireless network pentestingGain insights into passive and active information gatheringUnderstand web application pentesting Decode WEP, WPA, and WPA2 encryptions using a variety of methods, such as the fake authentication attack, the ARP request replay attack, and the dictionary attackWho this book is for If you are an IT security professional or a security consultant who wants to get started with penetration testing using Kali Linux 2019.2, then this book is for you. The book will also help if you’re simply looking to learn more about ethical hacking and various security breaches. Although prior knowledge of Kali Linux is not necessary, some understanding of cybersecurity will be useful.


Tribe of Hackers Red Team

Tribe of Hackers Red Team

Author: Marcus J. Carey

Publisher: John Wiley & Sons

Published: 2019-08-13

Total Pages: 293

ISBN-13: 1119643325

DOWNLOAD EBOOK

Want Red Team offensive advice from the biggest cybersecurity names in the industry? Join our tribe. The Tribe of Hackers team is back with a new guide packed with insights from dozens of the world’s leading Red Team security specialists. With their deep knowledge of system vulnerabilities and innovative solutions for correcting security flaws, Red Team hackers are in high demand. Tribe of Hackers Red Team: Tribal Knowledge from the Best in Offensive Cybersecurity takes the valuable lessons and popular interview format from the original Tribe of Hackers and dives deeper into the world of Red Team security with expert perspectives on issues like penetration testing and ethical hacking. This unique guide includes inspiring interviews from influential security specialists, including David Kennedy, Rob Fuller, Jayson E. Street, and Georgia Weidman, who share their real-world learnings on everything from Red Team tools and tactics to careers and communication, presentation strategies, legal concerns, and more Learn what it takes to secure a Red Team job and to stand out from other candidates Discover how to hone your hacking skills while staying on the right side of the law Get tips for collaborating on documentation and reporting Explore ways to garner support from leadership on your security proposals Identify the most important control to prevent compromising your network Uncover the latest tools for Red Team offensive security Whether you’re new to Red Team security, an experienced practitioner, or ready to lead your own team, Tribe of Hackers Red Team has the real-world advice and practical guidance you need to advance your information security career and ready yourself for the Red Team offensive.


Hacking Exposed Unified Communications & VoIP Security Secrets & Solutions, Second Edition

Hacking Exposed Unified Communications & VoIP Security Secrets & Solutions, Second Edition

Author: Mark Collier

Publisher: McGraw Hill Professional

Published: 2013-12-20

Total Pages: 561

ISBN-13: 0071798773

DOWNLOAD EBOOK

The latest techniques for averting UC disaster Establish a holistic security stance by learning to view your unified communications infrastructure through the eyes of the nefarious cyber-criminal. Hacking Exposed Unified Communications & VoIP, Second Edition offers thoroughly expanded coverage of today’s rampant threats alongside ready-to deploy countermeasures. Find out how to block TDoS, toll fraud, voice SPAM, voice social engineering and phishing, eavesdropping, and man-in-the-middle exploits. This comprehensive guide features all-new chapters, case studies, and examples. See how hackers target vulnerable UC devices and entire networks Defend against TDoS, toll fraud, and service abuse Block calling number hacks and calling number spoofing Thwart voice social engineering and phishing exploits Employ voice spam mitigation products and filters Fortify Cisco Unified Communications Manager Use encryption to prevent eavesdropping and MITM attacks Avoid injection of malicious audio, video, and media files Use fuzzers to test and buttress your VoIP applications Learn about emerging technologies such as Microsoft Lync, OTT UC, other forms of UC, and cloud and WebRTC


Hands-On AWS Penetration Testing with Kali Linux

Hands-On AWS Penetration Testing with Kali Linux

Author: Karl Gilbert

Publisher: Packt Publishing Ltd

Published: 2019-04-30

Total Pages: 490

ISBN-13: 1789139031

DOWNLOAD EBOOK

Identify tools and techniques to secure and perform a penetration test on an AWS infrastructure using Kali Linux Key FeaturesEfficiently perform penetration testing techniques on your public cloud instancesLearn not only to cover loopholes but also to automate security monitoring and alerting within your cloud-based deployment pipelinesA step-by-step guide that will help you leverage the most widely used security platform to secure your AWS Cloud environmentBook Description The cloud is taking over the IT industry. Any organization housing a large amount of data or a large infrastructure has started moving cloud-ward — and AWS rules the roost when it comes to cloud service providers, with its closest competitor having less than half of its market share. This highlights the importance of security on the cloud, especially on AWS. While a lot has been said (and written) about how cloud environments can be secured, performing external security assessments in the form of pentests on AWS is still seen as a dark art. This book aims to help pentesters as well as seasoned system administrators with a hands-on approach to pentesting the various cloud services provided by Amazon through AWS using Kali Linux. To make things easier for novice pentesters, the book focuses on building a practice lab and refining penetration testing with Kali Linux on the cloud. This is helpful not only for beginners but also for pentesters who want to set up a pentesting environment in their private cloud, using Kali Linux to perform a white-box assessment of their own cloud resources. Besides this, there is a lot of in-depth coverage of the large variety of AWS services that are often overlooked during a pentest — from serverless infrastructure to automated deployment pipelines. By the end of this book, you will be able to identify possible vulnerable areas efficiently and secure your AWS cloud environment. What you will learnFamiliarize yourself with and pentest the most common external-facing AWS servicesAudit your own infrastructure and identify flaws, weaknesses, and loopholesDemonstrate the process of lateral and vertical movement through a partially compromised AWS accountMaintain stealth and persistence within a compromised AWS accountMaster a hands-on approach to pentestingDiscover a number of automated tools to ease the process of continuously assessing and improving the security stance of an AWS infrastructureWho this book is for If you are a security analyst or a penetration tester and are interested in exploiting Cloud environments to reveal vulnerable areas and secure them, then this book is for you. A basic understanding of penetration testing, cloud computing, and its security concepts is mandatory.


The Artist's Way

The Artist's Way

Author: Julia Cameron

Publisher: Penguin

Published: 2002-03-04

Total Pages: 295

ISBN-13: 1101156880

DOWNLOAD EBOOK

"With its gentle affirmations, inspirational quotes, fill-in-the-blank lists and tasks — write yourself a thank-you letter, describe yourself at 80, for example — The Artist’s Way proposes an egalitarian view of creativity: Everyone’s got it."—The New York Times "Morning Pages have become a household name, a shorthand for unlocking your creative potential"—Vogue Over four million copies sold! Since its first publication, The Artist's Way phenomena has inspired the genius of Elizabeth Gilbert and millions of readers to embark on a creative journey and find a deeper connection to process and purpose. Julia Cameron's novel approach guides readers in uncovering problems areas and pressure points that may be restricting their creative flow and offers techniques to free up any areas where they might be stuck, opening up opportunities for self-growth and self-discovery. The program begins with Cameron’s most vital tools for creative recovery – The Morning Pages, a daily writing ritual of three pages of stream-of-conscious, and The Artist Date, a dedicated block of time to nurture your inner artist. From there, she shares hundreds of exercises, activities, and prompts to help readers thoroughly explore each chapter. She also offers guidance on starting a “Creative Cluster” of fellow artists who will support you in your creative endeavors. A revolutionary program for personal renewal, The Artist's Way will help get you back on track, rediscover your passions, and take the steps you need to change your life.