Penetration Testing : A Hands-On Introduction to Hacking

Penetration testers simulate cyber attacks to find security weaknesses in networks, operating systems, and applications. Information security experts worldwide use penetration techniques to evaluate enterprise defenses. In Penetration Testing, security expert, researcher, and trainer Georgia Weidman introduces you to the core skills and techniques that every pentester needs. Using a virtual machine–based lab that includes Kali Linux and vulnerable operating systems, you’ll run through a series of practical lessons with tools like Wireshark, Nmap, and Burp Suite. As you follow along with the labs and launch attacks, you’ll experience the key stages of an actual assessment—including information gathering, finding exploitable vulnerabilities, gaining access to systems, post exploitation, and more. Learn how to: • Crack passwords and wireless network keys with brute-forcing and wordlists • Test web applications for vulnerabilities • Use the Metasploit Framework to launch exploits and write your own Metasploit modulesv • Automate social-engineering attack • Bypass antivirus software • Turn access to one machine into total control of the enterprise in the post exploitation phase You’ll even explore writing your own exploits. Then it’s on to mobile hacking — Weidman’s particular area of research — with her tool, the Smartphone Pentest Framework. With its collection of hands-on lessons that cover key tools and strategies, Penetration Testing is the introduction that every aspiring hacker needs.

Praise for Life Markets

"This is certainly not a coffee table book, but an extremely comprehensive and in-depth study of the problems associated with longevity and an aging population and how individuals and financial institutions can benefit from trading in life settlements and linked securities."
—Dr. Marc Faber, Editor, Gloom, Boom & Doom Report

" The team's insights are keen and their approach crisp; this is useful information for professionals in the field."
—Steve Acunto, Editor, Insurance Advocate magazine

"Vishaal Bhuyan has assembled leading practitioners and academics in the longevity/mortality space to analyze in depth the intricacies of investing in life settlements. In a rapidly changing marketplace that still remains transparency-challenged, Vishaal and his coauthors provide an indispensable tool to both the novice and the experienced investor thus shifting the risk/reward balance of life settlements investing."
—Robin Willi, Head of Life Settlements, BlueCrest Capital Management

Coauthors include Micah Bloomfield, Boris Ziser, and Joseph Selvidio of Stroock & Stroock & Lavan; David Blake and Debbie Harrison of the Pensions Institute; James Cavoli of Life Settlement Insights; Mike Fasano of Fasano Associates; Congressman George Keiser; Joseph Mason of the Wharton School; Emannuel Modu of A.M. Best; Antony Mott of ICAP Capital Markets; Nemo Perera of Risk Capital Partners; Hal Singer of Criterion Economics; Charles A. Stone and Anne Zissu of The-Financier.com; and Matthew Browndorf and Jonathan Sadowsky of Browndorf PEM

Penetration testers simulate cyber attacks to find security weaknesses in networks, operating systems, and applications. Information security experts worldwide use penetration techniques to evaluate enterprise defenses. In Penetration Testing , security expert, researcher, and trainer Georgia Weidman introduces you to the core skills and techniques that every pentester needs. Using a virtual machine–based lab that includes Kali Linux and vulnerable operating systems, you’ll run through a series of practical lessons with tools like Wireshark, Nmap, and Burp Suite. As you follow along with the labs and launch attacks, you’ll experience the key stages of an actual assessment—including information gathering, finding exploitable vulnerabilities, gaining access to systems, post exploitation, and more. Learn how to: –Crack passwords and wireless network keys with brute-forcing and wordlists –Test web applications for vulnerabilities –Use the Metasploit Framework to launch exploits and write your own Metasploit modules –Automate social-engineering attacks –Bypass antivirus software –Turn access to one machine into total control of the enterprise in the post exploitation phase You’ll even explore writing your own exploits. Then it’s on to mobile hacking—Weidman’s particular area of research—with her tool, the Smartphone Pentest Framework. With its collection of hands-on lessons that cover key tools and strategies, Penetration Testing is the introduction that every aspiring hacker needs. A complete guide to longevity finance As the Baby Boomer population continues to age and the need for the securitization of life insurance policies increases, more financial institutions are looking towards longevity trading as a solution. Consequently, there is now a need for innovative financial products and strategies that have the ability to hedge longevity exposure for pension funds, reinsurance companies, and governments. These products and strategies are currently being developed with the use of life settlements. Here, author Vishaal Bhuyan provides a complete guide to this burgeoning sector. In Life Markets, Bhuyan and a team of expert contributors from leading firms offer an extensive look at how to trade life settlements. Provides practical guidance to the growing field of longevity finance Outlines the innovative financial products that are populating this field Highlights a safe haven for investors seeking returns in troubled times Covering everything from the history of life settlements to making a transaction-pricing, service providers, exchanges, and more-this book contains extensive coverage of the many issues surrounding longevity finance. "In Penetration Testing, security researcher and trainer Georgia Weidman provides you with a survey of important skills that any aspiring pentester needs. This beginner-friendly book opens with some basics of programming and helps you navigate Kali Linux, an operating system that comes preloaded with useful computer security tools like Wireshark and Metasploit. You'll learn about gathering information on a target, social engineering, capturing network traffic, analyzing vulnerabilities, developing exploits, and more. Hands-on examples discuss even advanced topics like mobile device security and bypassing anti-virus software"-- Provided by publisher A brief history of life settlements / Vishaal B. Bhuyan Features of life insurance / Vishaal B. Bhuyan What is a life settlement / David Blake and Debbie Harrison Parties involved / Vishaal B. Bhuyan Other involved parties / Vishaal B. Bhuyan Underwriting / Michael Fasano Life insurance policy swaps / Vishaal B. Bhuyan Premium financing / Vishaal B. Bhuyan Life settlement securitization / Emanuel Modu.