om

l.c

1@

gm

ai

CODENAME: Samurai Skills

Course

br

y6

89

Module 1: Solid Introduction to

Penetration Testing
Ninja-Sec.com

om

What is a Penetration Test?

89

1@

gm

ai

l.c

A method of evaluating the security of a computer system or

network by simulating an attack from a malicious source that may
involve active exploitation of security vulnerabilities. The process
involves an active analysis of the system for any potential
vulnerabilities that may result from poor or improper system
configuration, known and/or unknown hardware or software flaws,
or operational weaknesses in process or technical
countermeasures.

br

y6

Wow This Is a Nice Big Statement, but how do we define a service

out of it?

om

Penetration Testing Services

br

y6

89

1@

gm

ai

l.c

Finding vulnerabilities in applications and protocols through custom

exploit development
A service where exploits and tools may need to be written on the fly
during the assessment.
Identifying and exploiting code and business logic insecurities in web
applications
Tricking someone into divulging sensitive information
Testing the physical security protections of an organization
Cracking a network perimeter, exfiltration data and demonstrating
impact of successful penetrations.
Attempting to gain access to a system while evading security
monitoring capabilities
Finding as many weaknesses in technical controls as quickly as possible
Simply validating findings identified during a vulnerability assessment

om

One Current Approach to Definitions

br

y6

89

1@

gm

ai

l.c

We sometimes define a penetration tests by

the level of knowledge the tester will have of
the infrastructure to be tested:
White Box: Full prior knowledge
Black Box: No knowledge
Grey Box or Crystal Box: Some variation in
between

om

Another Current Approach to Definitions

ai

l.c

A somewhat better approach is to define a penetration tests

by the technology and/or activity:

br

y6

89

1@

gm

Network Services penetration test

Wireless Security penetration test
Web Application penetration test
Social Engineering penetration test
Physical penetration test
Client Side penetration test
Mobile Application Penetration test
etc.

om

Community Wide Efforts for Improving Competency

gm

ai

l.c

National Board of Information Security

Examiners (NBISE)

y6

89

1@

Council for Registered Ethical Security Testers

(CREST)

br

Penetration Testing Execution Standard (PTES)

y6

l.c
ai
gm
1@

89

Reconnaissance
Scanning
Exploitation
Reporting

br

om

Penetration Testing Overall Process

om

What Are Penetration Testing Goals ?

br

y6

89

1@

gm

ai

l.c

Independently assess a system from the viewpoint of a

malicious attacker, whether a malicious insider or an
uninformed outsider.
determining business impact from a successful attack.
Test information security detection and response
capabilities in ways only an actual cyber-attack can.
Test a system with active exploitation tools and
techniques, validating both technical and non-technical
vulnerabilities.

om

What are Goals of this course?

br

y6

89

1@

gm

ai

l.c

we made our course to provide you with the

ability to conduct an effective hands on penetration
test
we are focusing on medium level penetration test
(NS|PT)
we have another course that focusing on
Advanced level penetration test (NS|APT)
we have a dedicated online penetration testing
labs that mimic REAL WORLD Penetration Testing
Scenarios

l.c

Both Are Different dont Mix!

om

Vulnerability Assessment Vs. Penetration Testing

1@

gm

ai

Vulnerability Assessment : just find and report

Vulnerabilities in a system network with out
trying to exploit these vulnerabilities

br

y6

89

Penetration Testing : Finding and Exploiting these

vulnerabilities and take advantage of them to
going deeper on system or network and gain
more power on system

om

Vulnerability Vs. Exploit

1@

gm

ai

l.c

Vulnerability is a flaw or weakness in a system

that an attacker can exploit it to gain more
power on the system

br

y6

89

Exploit is a piece of code or a technique that

can be used by an attacker to take advantage
of a vulnerability

Exploits Types :
Remote Exploit
Local Exploit
Dos Exploit

l.c

ai

Vulnerabilities types :
Network Service Vulnerabilities
Web Application Vulnerabilities
Mobile Application Vulnerabilities
Local Service Vulnerabilities
System Vulnerabilities
Human Vulnerabilities
Physical Vulnerabilities

br

y6

89

1@

gm

om

Types of Vulnerabilities and Exploits

om

Exploits and tools sources for Penetration Testers

br

y6

89

1@

gm

ai

l.c

http://www.exploit-db.com
http://www.securityfocus.com
http://packetstormsecurity.org

y6

l.c
ai
gm
1@

89

us-cert.gov
cve.mitre.org
secunia.com
vupen.com

br

om

Vulnerability Research Sources for Penetration Testers

y6

89

l.c
ai
gm

1@

Metasploit pro
NeXpose
SAINT
IBM Rational Appscan
Immunity canvas
Core impact
Nessus professional feed
HP Web Inspect
Acunetix WVS
And many others .

br

om

Commercial Tools for Penetration Testers

om

Penetration Testing Methodologies

br

y6

89

1@

gm

ai

l.c

NIST 800-115 (Technical Guide for Information Security

Testing)
OSSTMM (Open Source Security Testing Methodology
Manual)
OWASP Testing Guide
ISSAF (Information Systems Security Assessment
Framework)
Penetration Testing Framework
PTES (Penetration Testing Execution Standard)

om

Penetration Test Report

ai

l.c

This is The most important thing in penetration

testing process

y6

89

1@

gm

We show managers and technical guys at

company what vulnerabilities they have in either
their Network ,systems ,web apps , mobile apps ,
wireless and how they can secure them with
detailed and clear explanation

br

You can download and view a very good

penetration testing reports :

om

Introduction : References -1

l.c

Vulnerability Types

Top Vulnerabilities

1@

http://secunia.com/resources/reports/

gm

ai

http://nvd.nist.gov/cwe.cfm

89

Exploit Availability Repositories

br

y6

http://www.exploit-db.com/
http://packetstormsecurity.org/
http://securityreason.com/

om

Introduction : References -2

br

y6

89

1@

gm

ai

l.c

NIST 800-115: http://csrc.nist.gov/publications/nistpubs/800115/SP800-115.pdf

OSSTM: http://www.isecom.org/osstmm/
OWASP Testing Project:
https://www.owasp.org/index.php/OWASP_Testing_Project
ISSAF: http://www.oissg.org/issaf
Penetration Testing Framework:
http://www.vulnerabilityassessment.co.uk/Penetration%20Tes
t.html
PTES: http://www.pentest-standard.org/index.php/Main_Page
Interesting discussion on the use of standards:
http://resources.infosecinstitute.com/standards-forpenetration-testing/

om

Introduction : References -3

gm

ai

l.c

http://www.vulnerabilityassessment.co.uk/rep
ort%20template.html

89

1@

Penetration test reports

br

y6

http://www.mediafire.com/?wl969qbtptzfp13