Upload File

security

12
BackTrack Penetration Testing Workshop Michael Holcomb, CISSP Upstate ISSA Chapter

Upload: elenakara

Post on 26-Nov-2015

4 views

Category:

Documents


0 download

Report

Tags:

DESCRIPTION

penetration

TRANSCRIPT

  • BackTrack Penetration Testing WorkshopMichael Holcomb, CISSPUpstate ISSA Chapter

  • AgendaIntroductionsScheduleWorkshop FormatThe Attacker MethodologyPenetration Testing Execution Standard (PTES)Pentester Job Requirements

  • DisclaimerDo not try this at home without permission!

  • IntroductionsNameCompanyPositionPrevious ExperienceWindows & LinuxPenetration TestingBackTrack

  • ScheduleHours (9:00AM to 4:30PM)10:20 to 10:30 - Break11:00 to 12:30 ISSA Chapter Meeting2:45 to 3:00 - Break

  • Workshop FormatSession MaterialsPractice ExercisesWorkshop Survey

  • The Hacker MethodologyInformation GatheringVulnerability AssessmentExploitationPrivilege EscalationMaintaining Access

  • Penetration Testing Execution Standard (PTES)Pre-engagement InteractionsIntelligence GatheringThreat ModelingVulnerability AnalysisExploitationPost ExploitationReporting

  • Pentester Job RequirementsSystem and application scanning using analysis toolsValidate automated testing resultsConduct manual analysisEvaluate and communicate riskProvide feedback and guidanceCertifications (CEH, CISA, CISSP, OCSP)

  • Physical SecurityMost overlooked area of Information SecurityIf you can touch it, you can p0wn it!

  • www.securitywizardry.com/radar.htm

  • BookmarksVMware (vmware.com)BackTrack 5 R3 (backtrack-linux.org)Metasploitable (offensive-security.com)Web Security Dojo (mavensecurity.com)Pauldotcom (pauldotcom.com)OCSP (offensive-security.com)Katana (hackfromacave.com)


CYBER SECURITY ADVISORY & CONSULTING …...TELECOM SECURITY – Wireless Security – Signaling Security - SCTP and SS7 – 3G Mobile Network Security – LTE Security Architecture

Junos Security Swconfig Security

Remote Filtering - Web Security, Email Security, Data Security

+ Security Concerns Chapter 10.1. + Security types Physical security Access security Database security

SECURITY Security

Security Security Market Operations

Security Presented by : Qing Ma. Introduction Security overview security threats password security, encryption and network security as specific

Security - 1 Security Peter O’Grady. Security - 2 Network Security Problem n Data Flow - transmission security n Network Security - server security n

The security spectrum - Home - Honeywell Security … security spectrum Systems for comprehensive building security 04 MB24 integrated security panel 08 MB48 integrated security panel

Food Security EconomicsFood Security Food Security in India

Security Target IBM Internet Security Systems GX6116 Security

I-4 security. Security taxonomy Physical security Resource exhaustion Key-based security cryptography

Tax Security 2.0 – A “Taxes-Security-Together” Checklistblogs.shu.edu/...Taxes-Security-Together_Checklist.pdf · The “Taxes-Security-Together Checklist • Security Summit

ANNUAL CONTRACT DETAILS - Banham Security · The following contract details are applicable to: Banham Security, Security 201, Bridger Security, Close Link Security, Tara Security

Hardware Security Attacks Security Architecture Hardware Security

Mobile Services Security: Mobile Platform Security AF Security

SECURITY INFRASTRUCTURE SECURITY

Security Admin security

Security Shutters, Retractable Security Gates, …syston.com/...9267_Security_Shutters_Retractable_Security_Gates.pdf · Security Shutters, Retractable Security Gates, SeceuroBar

Deployment Guide - Web Security, Email Security, Data Security

maritime security regulations - UNOLS · Maritime Security Regulations ... ship security – List primary ... Security Plan Port Security Plan Area Maritime Security Transportation

Security II – Grid Computing Security and Globus Security

HKC Security Installer - HKC Security - HKC Security

Buy the security standards you need shop.bsigroup.com/security Standards Brochure.pdf · Security standards shop.bsigroup.com/security BSI’s Security standards Welcome to our security

Cyber Security Specialist Information Security • Cyber ... · Cyber Security • Security Analyst • Cyber Security Specialist Information Security • Cyber Operations Manager

Wireless and Mobile Security Lesson Introduction ●WiFi security ●iOS security ●Android security

Chapter 13-802.11 Network Security Architecture 802.11 Security Basics Legacy 802.11 security Robust Security Segmentation Infrastructure Security VPN

Network Security Application Security Security Management

The Mobile Security (mSecurity) Bible: 2014 - 2020 - Device Security, Infrastructure Security & Security Services

SECURITY 31 SECURITY 46 SECURITY S - Fiamma

Physical & Personnel Security Physical Security Personnel Security

National Cyber Security Centre (NCSC) Cloud Security ... · Cloud Security Principle 4: Governance 23 Cloud Security Principle 5: Operational Security 25 Cloud Security Principle

COEN 351 Internet Security. Network Layer Security Application Layer Security System Security

Getting Started - Web Security, Email Security, Data Security

VENEZUELA Real Property Security Security Interests in ... Property Security, Security... · VENEZUELA Real Property Security Security Interests in Immovables and Related Property