Bundle Pricing Bought separately$51.97
Suggested price$28.97
Author
Kim Carter
Kim is an experienced Senior Software Architect / Engineer, Entrepreneur and the founder of BinaryMist.
Website: https://binarymist.io
Blog: https://binarymist.io/blog
OWASP NZ Chapter Leader.
Experienced and passionate about mentoring and motivating cross functional, self managing teams.
One of my strengths is helping organisations realise how they can increase profit and reduce costs.
How I do this:
• Take a holistic view of the organisation and focus on the lowest hanging (biggest wins) fruit first
• Bring visibility to all areas of the organisation
• Help people discover their full potential, especially those involved in the software engineering field
• When needed: acquire, design and build robust software and networks
• Help people understand their security status: assets, risks, countermeasures, costs & trade-off's of possible solutions.
• Increasing quality awareness and helping people and organisations implement higher quality in a cost effective manner.
Very broad skill set, with many deep specialities. Some of which are:
• Enterprise Application Architecture
• Web Development
• Networking & hardening
• Security
• DevOps
Contents
Foreword Preface Description Purpose Reason Acknowledgements Influences
Introduction Starting with the 30,000’ View 1. SSM Asset Identification 2. SSM Identify Risks Rating of Threats 3. SSM Countermeasures 4. SSM Risks that Solution Causes 5. SSM Costs and Trade-offs 2. 10,000’ View and Lower A 10,000’ View Scenario 3. Tooling Setup Kali Linux What’s Included in Kali Linux Kali Linux Install Tools I Use in Kali Linux requiring config, etc Metasploit Useful metasploit commands metasploit meterpreter client commands Using the database and workspaces in metasploit BeEF Updating BurpSuite Tools I Use That Need Adding to Kali Linux Terminator Discover Scripts SmbExec Gitrob CMSmap Veil Framework Password Lists Common User Passwords Profiler (cupp) Http Screenshot Psmsf Responder Custom Scripts from The Hacker Playbook 2 BypassUAC NoSQLMap Spiderfoot OWASP SecLists Net-creds Unix-privesc-check LinEnum Chromium Chromium Extensions Iceweasel (FireFox with different Licensing) add-ons Additional Hardware TP-LINK TL-WN722N USB Wireless Adapter Wi-Fi Adapter: Useful commands: Reconnaissance: Provide USB privileges to guest: Provide USB recognition to guest: Blacklist Wi-Fi Module on Host: Test: Windows Tools I Use That Need Adding to Windows MinGW Hyperion psmsf Nishang PowerSploit 4. Process and Practises Penetration Testing Reconnaissance Reconnaissance Forms Passive Semi-Active Active Netcat Nmap Concealing NMap Source IP Address Decoy host -D Idle scan -sI Service Fingerprinting Depending on the Server field Ordering of Header Fields Malformed Requests Non-existent protocol Other Services Web Application Firewall (WAF) Fingerprinting Nmap WAFW00F DNS Domain Information Groper (dig) dnsenum dnsrecon theHarvester Discover-scripts recon-ng Password Profiling Vulnerability Scanning / Discovery Nmap Metasploit Vulnerability Searching Security Focus BugTraq Exploit Database Metasploit Exploitation Isolating, Testing Potential Malware linux containers (LXC) Docker Virtual Machines FireJail Qubes Offensive Documenting and Reporting Dradis CaseFile Agile Development and Practices Architecture Cheapest Place to Deal with Defects Evil Test Conditions Security Focussed TDD Security Regression Testing Zap REST API Regression Testing NodeGoat NodeGoat Set-up on your local machine Zap Running on a local VirtualBox guest Start the Security Regression test(s) from your local machine Hand-crafted Penetration Testing Establish a Security Champion Pair Programming Code Review Why? Linting, Static Analysis Dynamic Analysis Techniques for Asserting Discipline Static Type Checking Design by Contract (DbC) Essentials for Creating and Maintaining a High Performance Development Team How and Why Many Software Development Shops Fail The Scenario Scrum Teams can Fail Too How Does This Happen? So… What do We Do? How do We Do This Forming Habits and Sharpening Skills 5. Physical 1. SSM Asset Identification 2. SSM Identify Risks Fortress Mentality Internal Doors and Cabinets Left Unlocked Insecure Doors and/or Windows Easily Penetrable Building Materials Service Labels Sensitive Printed Matter RFID Tags Computers Logged in and Unlocked Networking Equipment Network Ports Wi-Fi Access Points Hiding the SSID Wi-Fi Protected Set-up (WPS) Transient Devices Lack of Visibility 3. SSM Countermeasures Fortress Mentality Internal Doors and Cabinets Left Unlocked Insecure Doors and/or Windows Easily Penetrable Building Materials Crime Prevention Through Environmental Design (CPTED) Service Labels Sensitive Printed Matter RFID Tags Computers Logged in and Unlocked Networking Equipment Network Ports Wi-Fi Access Points Hiding the SSID Wi-Fi Protected Set-up (WPS) WPA2 and WPA Transient Devices Lack of Visibility Cameras, Sensors and Alarms 4. SSM Risks that Solution Causes Fortress Mentality Internal Doors and Cabinets Left Unlocked Insecure Doors and/or Windows Easily Penetrable Building Materials Service Labels Sensitive Printed Matter RFID Tags Computers Logged in and Unlocked Networking Equipment Network Ports Wi-Fi Access Points Hiding the SSID Wi-Fi Protected Set-up (WPS) WPA2 and WPA Transient Devices Lack of Visibility Cameras, Sensors and Alarms 5. SSM Costs and Trade-offs Fortress Mentality Internal Doors and Cabinets Left Unlocked Insecure Doors and/or Windows Easily Penetrable Building Materials Service Labels Sensitive Printed Matter RFID Tags Computers Logged in and Unlocked Networking Equipment Network Ports Wi-Fi Access Points Hiding the SSID Wi-Fi Protected Set-up (WPS) WPA2 and WPA Transient Devices Lack of Visibility Cameras, Sensors and Alarms Additional Resources Starting with the 30,000’ View Rating of Threats Tooling Setup Process People Attributions Introduction The 30,000’ View Rating of Threats Tooling Setup Process Physical People
Contributors
Some contributions to the Physical chapter
Some contributions to the People chapter. Especially around phishing countermeasures. Chris is the creator of Pond
The Leanpub 60 Day 100% Happiness Guarantee Within 60 days of purchase you can get a 100% refund on any Leanpub purchase, in two clicks .
See full terms...
Earn $8 on a $10 Purchase, and $16 on a $20 Purchase We pay 80% royalties on purchases of $7.99 or more , and 80% royalties minus a 50 cent flat fee on purchases between $0.99 and $7.98 . You earn $8 on a $10 sale, and $16 on a $20 sale . So, if we sell 5000 non-refunded copies of your book for $20 , you'll earn $80,000 .
(Yes, some authors have already earned much more than that on Leanpub.)
In fact, authors have earned over $15 million writing, publishing and selling on Leanpub.
Learn more about writing on Leanpub
Free Updates. DRM Free. If you buy a Leanpub book, you get free updates for as long as the author updates the book! Many authors use Leanpub to publish their books in-progress, while they are writing them. All readers get free updates, regardless of when they bought the book or how much they paid (including free).
Most Leanpub books are available in PDF (for computers) and EPUB (for phones, tablets and Kindle). The formats that a book includes are shown at the top right corner of this page.
Finally, Leanpub books don't have any DRM copy-protection nonsense, so you can easily read them on any supported device.
Learn more about Leanpub's ebook formats and where to read them
Write and Publish on Leanpub You can use Leanpub to easily write, publish and sell in-progress and completed ebooks and online courses!
Leanpub is a powerful platform for serious authors, combining a simple, elegant writing and publishing workflow with a store focused on selling in-progress ebooks.
Leanpub is a magical typewriter for authors: just write in plain text, and to publish your ebook, just click a button. (Or, if you are producing your ebook your own way, you can even upload your own PDF and/or EPUB files and then publish with one click!) It really is that easy.
Learn more about writing on Leanpub
