CompTIA PenTest+ PT0-001 Cert Guide

Omar Santos is a principal engineer in the Cisco Product Security Incident Response Team (PSIRT) within Cisco’s Security Research and Operations. He mentors and leads engineers and incident managers during the investigation and resolution of security vulnerabilities in all Cisco products, including cloud services. Omar has been working with information technology and cybersecurity since the mid-1990s. He has designed, implemented, and supported numerous secure networks for Fortune 100 and 500 companies and the U.S. government. Prior to his current role, he was a technical leader within the Worldwide Security Practice and the Cisco Technical Assistance Center (TAC), where he taught, led, and mentored many engineers within both organizations.Omar is an active member of the security community, where he leads several industrywide initiatives and standards bodies. His active role helps businesses, academic institutions, state and local law enforcement agencies, and other participants that are dedicated to increasing the security of the critical infrastructure. Omar often delivers technical presentations at many cybersecurity conferences. He is the author of more than 20 books and video courses. You can follow Omar on any of the following: Personal website: omarsantos.io and theartofhacking.orgTwitter: @santosomarLinkedIn: https://www.linkedin.com/in/santosomarRon Taylor has been in the information security field for almost 20 years, 10 of which were spent in consulting. In 2008, he joined the Cisco Global Certification Team as an SME in information assurance. In 2012, he moved into a position with the Security Research & Operations group, where his focus was mostly on penetration testing of Cisco products and services. He was also involved in developing and presenting security training to internal development and test teams globally. In addition, he provided consulting support to many product teams as an SME on product security testing. He then spent some time as a consulting systems engineer specializing in Cisco’s security product line. In his current role, he works in the Cisco Product Security Incident Response Team (PSIRT). He has held a number of industry certifications, including GPEN, GWEB, GCIA, GCIH, GWAPT, RHCE, CCSP, CCNA, CISSP, and MCSE. Ron is also a Cisco Security Blackbelt, SANS mentor, cofounder and president of the Raleigh BSides Security Conference, and an active member of the Packet Hacking Village team at Defcon.You can follow Ron on any of the following: Twitter: @Gu5G0rmanLinkedIn: www.linkedin.com/in/-RonTaylor

• Introduction xxiiiChapter 1 Introduction to Ethical Hacking and Penetration Testing 3“Do I Know This Already?” Quiz 3Understanding Ethical Hacking and Penetration Testing 6Understanding the Current Threat Landscape 7Exploring Penetration Testing Methodologies 10Building Your Own Lab 16Requirements and Guidelines for Penetration Testing Labs 18What Tools Should You Use in Your Lab? 18What if You Break Something? 19Review All Key Topics 20Define Key Terms 20Q&A 21Chapter 2 Planning and Scoping a Penetration Testing Assessment 25“Do I Know This Already?” Quiz 25Explaining the Importance of the Planning and Preparation Phase 29Understanding the Legal Concepts of Penetration Testing 41Learning How to Scope a Penetration Testing Engagement Properly 44Learning the Key Aspects of Compliance-Based Assessments 50Review All Key Topics 58Define Key Terms 59Q&A 59Chapter 3 Information Gathering and Vulnerability Identification 63“Do I Know This Already?” Quiz 63Understanding Information Gathering and Reconnaissance 67Understanding the Art of Performing Vulnerability Scans 103Understanding How to Analyze Vulnerability Scan Results 112Review All Key Topics 116Define Key Terms 117Q&A 117Chapter 4 Social Engineering Attacks 121“Do I Know This Already?” Quiz 121Understanding Social Engineering Attacks 125Phishing 126Pharming 126Malvertising 127Spear Phishing 128SMS Phishing 134Voice Phishing 135Whaling 135Elicitation, Interrogation, and Impersonation (Pretexting) 135Social Engineering Motivation Techniques 137Shoulder Surfing 137USB Key Drop and Social Engineering 138Review All Key Topics 138Define Key Terms 139Q&A 139Chapter 5 Exploiting Wired and Wireless Networks 143“Do I Know This Already?” Quiz 143Exploiting Network-Based Vulnerabilities 148Exploiting Wireless and RF-Based Attacks and Vulnerabilities 185Review All Key Topics 200Define Key Terms 202Q&A 202Chapter 6 Exploiting Application-Based Vulnerabilities 207“Do I Know This Already?” Quiz 207Overview of Web Applications for Security Professionals 213How to Build Your Own Web Application Lab 224Understanding Injection-Based Vulnerabilities 227Exploiting Authentication-Based Vulnerabilities 242Exploiting Authorization-Based Vulnerabilities 250Understanding Cross-Site Scripting (XSS) Vulnerabilities 252Understanding Cross-Site Request Forgery Attacks 260Understanding Clickjacking 261Exploiting Security Misconfigurations 262Exploiting File Inclusion Vulnerabilities 264Exploiting Insecure Code Practices 265Review All Key Topics 271Define Key Terms 272Q&A 273Chapter 7 Exploiting Local Host and Physical Security Vulnerabilities 277“Do I Know This Already?” Quiz 277Exploiting Local Host Vulnerabilities 281Understanding Physical Security Attacks 326Review All Key Topics 328Define Key Terms 329Q&A 329Chapter 8 Performing Post-Exploitation Techniques 333“Do I Know This Already?” Quiz 333Maintaining Persistence After Compromising a System 337Understanding How to Perform Lateral Movement 347Understanding How to Cover Your Tracks and Clean Up Systems After a Penetration Testing Engagement 356Review All Key Topics 357Define Key Terms 358Q&A 358Chapter 9 Penetration Testing Tools 361“Do I Know This Already?” Quiz 361Understanding the Different Use Cases of Penetration Testing Tools and How to Analyze Their Output 365Leveraging Bash, Python, Ruby, and PowerShell in Penetration Testing Engagements 460Review All Key Topics 462Define Key Terms 465Q&A 465Chapter 10 Understanding How to Finalize a Penetration Test 471“Do I Know This Already?” Quiz 471Explaining Post-Engagement Activities 474Surveying Report Writing Best Practices 475Understanding Report Handling and Communications Best Practices 499Review All Key Topics 501Define Key Terms 502Q&A 502Chapter 11 Final Preparation 505Tools for Final Preparation 505Suggested Plan for Final Review/Study 509Summary 509Appendix A Answers to the “Do I Know This Already?” Quizzes andOnline Elements:Glossary of Key TermsAppendix B Study PlannerTOC, 9780789760357