Authors: Himanshu Sharma – Harpreet Singh
ISBN-10: 1788995236
ISBN-13: 9781788995238
Publication Date 出版日期: 2018-10-09
Print Length 页数: 480 pages
Publisher finelybook 出版社: Packt
Book Description
By finelybook
Red Teaming is used to enhance security by performing simulated attacks on an organization in order to detect network and system vulnerabilities. Hands-On Red Team Tactics starts with an overview of pentesting and Red Teaming,before giving you an introduction to few of the latest pentesting tools. We will then move on to exploring Metasploit and getting to grips with Armitage. Once you have studied the fundamentals,you will learn how to use Cobalt Strike and how to set up its team server.
The book introduces some common lesser known techniques for pivoting and how to pivot over SSH,before using Cobalt Strike to pivot. This comprehensive guide demonstrates advanced methods of post-exploitation using Cobalt Strike and introduces you to Command and Control (C2) servers and redirectors. All this will help you achieve persistence using beacons and data exfiltration,and will also give you the chance to run through the methodology to use Red Team activity tools such as Empire during a Red Team activity on Active Directory and Domain Controller.
In addition to this,you will explore maintaining persistent access,staying untraceable,and getting reverse connections over different C2 covert channels.
By the end of this book,you will have learned about advanced penetration testing tools,techniques to get reverse shells over encrypted channels,and processes for post-exploitation.
Contents
1: RED-TEAMING AND PENTESTING
2: PENTESTING 2018
3: FOREPLAY – METASPLOIT BASICS
4: GETTING STARTED WITH COBALT STRIKE
5: ./REVERSESHELL
6: PIVOTING
7: AGE OF EMPIRE – THE BEGINNING
8: AGE OF EMPIRE – OWNING DOMAIN CONTROLLERS
9: COBALT STRIKE – RED TEAM OPERATIONS
10: C2 – MASTER OF PUPPETS
11: OBFUSCATING C2S – INTRODUCING REDIRECTORS
12: ACHIEVING PERSISTENCE
13: DATA EXFILTRATION
What You Will Learn
Get started with red team engagements using lesser-known methods
Explore intermediate and advanced levels of post-exploitation techniques
Get acquainted with all the tools and frameworks included in the Metasploit framework
Discover the art of getting stealthy access to systems via Red Teaming
Understand the concept of redirectors to add further anonymity to your C2
Get to grips with different uncommon techniques for data exfiltration
Authors
Himanshu Sharma
Himanshu Sharma has already achieved fame for finding security loopholes and vulnerabilities in Apple,Google,Microsoft,Facebook,Adobe,Uber,AT&T,Avira,and many more with hall of fame listings. He has helped celebrities such as Harbhajan Singh in recovering their hacked accounts,and also assisted an international singer in recovering his hacked accounts. He was a speaker at the international conference Botconf ’13,CONFidence 2018 and RSA Singapore 2018. He also spoke at IEEE Conference as well as for TedX. Currently,he is the cofounder of BugsBounty,a crowd-sourced security platform.
Harpreet Singh
Harpreet Singh has more than 5 years experience in the field of Ethical Hacking,Penetration Testing,and Red Teaming. In addition,he has performed red team engagement in multi-national banks and companies. Harpreet is a Offensive Security Certified Professional (OSCP) and Offensive Security Wireless Professional (OSWP). He has trained 1500+ students including Govt. officials in International projects.
