THE Visual Guide To Penetration Testing
THE Visual Guide To Penetration Testing
As posted on one of my favorite blogs, A Day in the Life of an Information Security Investigator
What’s that? You really want a visual guide to penetration testing? Something that covers:
- Enumeration tools (nmap, firewalk, amap, nbtscan, hping, scanrand, sinfp, etc.)
- General Vulnerability Scanning Tools (nessus, typon, NGS Squirrel, MatriXay, SARA)
- Exploit Engine Tools (metasploit, manual SQL injection, etherape, netwox, hijetta)
- Pre-inspection visit steps (EVERYTHING!)
- Password Cracking (JtR, L0pht, Rainbow, pwdump)
- Network Recon (whois, samspade, google, social engineering, dumpster diving, zone transfers)
- Enumeration results steps (what if a certain port IS open?)
- Command line examples of each tool
Something that could be printed out and be your all-in-one guide to penetration testing?
SHAZZAM!
Behold, your wish has been granted.
This is a must see!
Chief