How secure is your network? The best way to find out is to attack it,
using the same tactics attackers employ to identify and exploit
weaknesses. With the third edition of this practical book, you'll learn
how to perform network-based penetration testing in a structured manner.
Security expert Chris McNab demonstrates common vulnerabilities, and the
steps you can take to identify them in your environment.
System complexity and attack surfaces continue to grow. This book
provides a process to help you mitigate risks posed to your network.
Each chapter includes a checklist summarizing attacker techniques, along
with effective countermeasures you can use immediately.
Learn how to effectively test system components, including:
- Common services such as SSH, FTP, Kerberos, SNMP, and LDAP
- Microsoft services, including NetBIOS, SMB, RPC, and RDP
- SMTP, POP3, and IMAP email services
- IPsec and PPTP services that provide secure network access
- TLS protocols and features providing transport security
- Web server software, including Microsoft IIS, Apache, and Nginx
- Frameworks including Rails, Django, Microsoft ASP.NET, and PHP
- Database servers, storage protocols, and distributed key-value stores