Hands-On Web Penetration Testing with Metasploit

Harpreet Singh Himanshu Sharma

更新时间：2021-06-24 16:20:27

封面

Title Page

Hands-On Web Penetration Testing with Metasploit

About Packt

Why subscribe?

Contributors

About the authors

About the reviewer

Packt is searching for authors like you

Preface

Who this book is for

What this book covers

To get the most out of this book

Download the color images

Conventions used

Disclaimer

Get in touch

Reviews

Introduction

Introduction to Web Application Penetration Testing

What is a penetration test?

Types of penetration test

White box penetration test

Black box penetration test

Gray box penetration test

Stages of penetration testing

Reconnaissance and information gathering

Enumeration

Vulnerability assessment and analysis

Exploitation

Reporting

Important terminologies

Penetration testing methodologies

Open Source Security Testing Methodology Manual (OSSTMM)

Operational security metrics

Trust analysis

Human security testing

Physical security testing

Wireless security testing

Telecommunications security testing

Data network security testing

Compliance regulations

Reporting with the STAR

OSSTMM test types

Information Systems Security Assessment Framework (ISSAF)

Penetration Testing Execution Standard (PTES)

Pre-engagement interactions

Intelligence gathering

Threat modeling

Vulnerability analysis

Exploitation

Post-exploitation

Reporting

Common Weakness Enumeration (CWE)

OWASP Top 10

SANS TOP 25

Summary

Questions