The Pentester Blueprint : Starting a Career as an Ethical Hacker

Description

Cover Title Page Copyright Page About the Authors Acknowledgments Contents Foreword Introduction Chapter 1 What Is a Pentester? Synonymous Terms and Types of Hackers Pentests Described Benefits and Reasons Legality and Permission Pentest Methodology Pre-engagement Interactions Intelligence Gathering Threat Modeling Vulnerability Analysis Exploitation Post Exploitation Reporting Pentest Types Vulnerability Scanning Vulnerability Assessments Pentest Targets and Specializations Generalist Pentesting Application Pentesting Internet of Things (IoT) Industrial Control Systems (ICS) Hardware and Medical Devices Social Engineering Physical Pentesting Transportation Pentesting Red Team Pentesting Career Outlook Summary Chapter 2 Prerequisite Skills Skills Required for Learning Pentesting Operating Systems Networking Information Security Prerequisites Learning Information Security Basics What Is Information Security? The CIA Triad Security Controls Access Control Incident Response Malware Advanced Persistent Threats The Cyber Kill Chain Common Vulnerabilities and Exposures Phishing and Other Social Engineering Airgapped Machines The Dark Web Summary Chapter 3 Education of a Hacker Hacking Skills Hacker Mindset The Pentester Blueprint Formula Ethical Hacking Areas Operating Systems and Applications Networks Social Engineering Physical Security Types of Pentesting Black Box Testing White Box Testing Gray Box Testing A Brief History of Pentesting The Early Days of Pentesting Improving the Security of Your Site by Breaking into It Pentesting Today Summary Chapter 4 Education Resources Pentesting Courses Pentesting Books Pentesting Labs Web Resources Summary Chapter 5 Building a Pentesting Lab Pentesting Lab Options Minimalist Lab Dedicated Lab Advanced Lab Hacking Systems Popular Pentesting Tools Kali Linux Nmap Wireshark Vulnerability Scanning Applications Hak5 Hacking Targets PentestBox VulnHub Proving Grounds How Pentesters Build Their Labs Summary Chapter 6 Certifications and Degrees Pentesting Certifications Entry-Level Certifications Intermediate-Level Certifications Advanced-Level Certifications Specialization Web Application Pentesting Certifications Wireless Pentesting Certifications Mobile Pentesting Certifications Pentesting Training and Coursework Acquiring Pentesting Credentials Certification Study Resources CEH v10 Certified Ethical Hacker Study Guide EC-Council Quizlet CEH v10 Study Flashcards Hacking Wireless Networks for Dummies CompTIA PenTest+ Study Guide CompTIA PenTest+ Website Cybrary’s Advanced Penetration Testing Linux Server Security: Hack and Defend Advanced Penetration Testing: Hacking the World’s Most Secure Networks The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws Summary Chapter 7 Developing a Plan Skills Inventory Skill Gaps Action Plan Summary Chapter 8 Gaining Experience Capture the Flag Bug Bounties A Brief History of Bug Bounty Programs Pro Bono and Volunteer Work Internships Labs Pentesters on Experience Summary Chapter 9 Getting Employed as a Pentester Job Descriptions Professional Networking Social Media Résumé and Interview Tips Summary Appendix: The Pentester Blueprint Glossary Index EULA