Advanced Penetration Testing by Allsopp, Wil -- Read -- Imperial Library of Trantor

Index

Title Page Introduction

Coming Full Circle Advanced Persistent Threat (APT) Next Generation Technology “Hackers” Forget Everything You Think You Know About Penetration Testing How This Book Is Organized

Chapter 1: Medical Records (In)security

An Introduction to Simulating Advanced Persistent Threat Background and Mission Briefing Payload Delivery Part 1: Learning How to Use the VBA Macro Command and Control Part 1: Basics and Essentials The Attack Summary Exercises

Chapter 2: Stealing Research

Background and Mission Briefing Payload Delivery Part 2: Using the Java Applet for Payload Delivery Notes on Payload Persistence Command and Control Part 2: Advanced Attack Management The Attack Summary Exercises

Chapter 3: Twenty-First Century Heist

What Might Work? Nothing Is Secure Organizational Politics APT Modeling versus Traditional Penetration Testing Background and Mission Briefing Command and Control Part III: Advanced Channels and Data Exfiltration Payload Delivery Part III: Physical Media The Attack Summary Exercises

Chapter 4: Pharma Karma

Background and Mission Briefing Payload Delivery Part IV: Client-Side Exploits 1 Command and Control Part IV: Metasploit Integration The Attack Summary Exercises

Chapter 5: Guns and Ammo

Background and Mission Briefing Payload Delivery Part V: Simulating a Ransomware Attack Command and Control Part V: Creating a Covert C2 Solution New Strategies in Stealth and Deployment The Attack Summary Exercises

Chapter 6: Criminal Intelligence

Payload Delivery Part VI: Deploying with HTA Privilege Escalation in Microsoft Windows Command and Control Part VI: The Creeper Box The Attack Summary Exercises

Chapter 7: War Games

Background and Mission Briefing Payload Delivery Part VII: USB Shotgun Attack Command and Control Part VII: Advanced Autonomous Data Exfiltration The Attack Summary Exercises

Chapter 8: Hack Journalists

Briefing Advanced Concepts in Social Engineering C2 Part VIII: Experimental Concepts in Command and Control Payload Delivery Part VIII: Miscellaneous Rich Web Content The Attack Summary Exercises

Chapter 9: Northern Exposure

Overview Operating Systems North Korean Public IP Space The North Korean Telephone System Approved Mobile Devices The “Walled Garden”: The Kwangmyong Intranet Audio and Video Eavesdropping Summary Exercises

End User License Agreement