Welcome to eLearnSecurity’s Cyber Insecurity, a new show dedicated to the latest InfoSec news. Every week, cyber experts Neal Bridges and Jeff Golz join eLearnSecurity’s Matt Kreisher to discuss what businesses need to know about the latest events in cyber security.
by Hisomeru
This is the final article in a series on fingerprinting in Pentesting. Start from the beginning here.
The goal of fingerprinting a network is to find out what operating systems and services are running and potentially find a way into the network through those internet facing systems.
On Tuesday, June 23, eLearnSecurity released the latest version of Penetration Testing Extreme, our most advanced pentesting course. We overhauled PTXv2 to address modern TTPs, especially regarding Active Directory attacks. Our course designers have also created 100+ hands-on red teaming challenges spread across 11+ attack scenarios in our industry leading labs.
by Hisomeru
So far, the Fingerprinting section of our Pentesting 101 series has shown scans originating from a personal network. That isn’t always ideal in some situations. While following the attack methodologies found in the APT-1 report, Mandiant did not talk about APT-1 doing any type of scanning or fingerprinting.
We here at eLearnSecurity have been beating the dead horse about cyber security skills shortage for quite a while now. Why? According to CoreSecurity’s 2020 Penetration Testing Report, 47 percent of businesses have not pentested their network.
by Hisomeru
Since we are trying to paint a picture of the target network, saving the nmap output would help. The command line switch “-oA” will output the results of a nmap scan to XML, a grepable format and plain text like you’d see on the screen.
eLearnSecurity officially launched our latest cyber security training course, Malware Analysis Professional (MAP) on May 19. As malware continues to plague modern industry, many organizations struggle to comprehend the effects of an attack, where the vulnerability started and the consequences of such a breach.
by Hisomeru
So far in the introduction to penetration testing series of articles, we have covered non-intrusive ways of gathering intelligence on a target network. Using Technical and Human OSINT helped create a picture of the target network that is subject to a penetration test through unobtrusive means.
eLearnSecurity sat down with Stephanie Ihezukwu, known online as Steph and Sec. She serves as a Lead for WoSEC Houston and served as lead for WISP at last year’s DefCon. She speaks at security conferences on various topics. She co-hosts a “happy hour” inspired podcast called Coolest Nerds in the Room, where she leads conversations based on the lives of people in tech.
With the rapid development of malware, many businesses are struggling to defend their network against malicious software and quickly analyze and eliminate attacks.