Complete Guide to Shodan: Collect. Analyze. Visualize. Make Internet Intelligence Work for You. by John Matherly, 2017

Learn everything there is to know about Shodan from the founder himself. The book covers all aspects from the website through to the developer API with exercises to help test your understanding.

#book

PTFM: Purple Team Field Manual by Tim Bryant, 2021

Red teams can show flaws that exist in your network before they are compromised by malicious actors and blue teams traditionally assess current security measures and identify security flaws. The teams can provide valuable feedback to each other, but this is often overlooked, enter the purple team. The purple team allows for the integration of red team tactics and blue team security measures. The purple team field manual is a manual for all security professionals and integrates red and blue team methodologies.

#book #defensive

A Complete Guide to Burp Suite. Learn to Detect Application Vulnerabilities, Sagar Rahalkar, 2021

Use this comprehensive guide to learn the practical aspects of Burp Suite—from the basics to more advanced topics. The book goes beyond the standard OWASP Top 10 and also covers security testing of APIs and mobile apps.

#book #web

101 Labs CompTIA Security+ by Paul Browning, Mark Drinan, 2021

Experts agree that we retain only 10% of what we read but 90% of what we do. Perhaps this explains why the global pass rate for most IT exams is a ghastly 40%. This is where the 101 Labs book series can help. We are revolutionizing how IT people train for their exams and the real world with our Learn - By - Doing teaching method.

Using free tools and software you configure:

+ Kali Linux
+ SQL Injection Attacks
+ Implement IPSEC Site-to-Site VPN
+ Using ARP for Network Reconnaissance
+ Sniffing Network Attacks Using Wireshark
+ Using Password Cracking Tools
+ Scripting Using Bash and Python
+ FTP Exploits

Official page
https://www.101labs.net/courses/101-labs-comptia-security/

Предыдущие книги из этой же серии
https://news.1rj.ru/str/w2hack/964
https://news.1rj.ru/str/w2hack/1074

#book

Metasploit 5.0 for Beginners (Second Edition). Perform penetration testing to secure your IT environment against threats and vulnerabilities by Sagar Rahalkar

A comprehensive guide to Metasploit for beginners that will help you get started with the latest Metasploit 5.0 Framework for exploiting real-world vulnerabilities

Key Features
+ Perform pentesting in highly secured environments with Metasploit 5.0
+ Become well-versed with the latest features and improvements in the Metasploit Framework 5.0
+ Analyze, find, exploit, and gain access to different systems by bypassing various defenses

Состоялся релиз Metasploit Framework 5.0
https://bit.ly/3dUpDPh

Предыдущий пост с версией 4.11 на русском языке
https://news.1rj.ru/str/w2hack/850

#book #metasploit #pentest

Common Windows, Linux and Web Server Systems Hacking Technique by Dr. Hidaia Mahmood Alassouli

This report covers the common techniques and tools used for System, Windows, Linux and Web Server Hacking.

The report contains from the following sections:
+ Part A: Setup Lab:
+ Part B: Trojens and Backdoors and Viruses
+ Part C: System Hacking
+ Part D: Hacking Web Servers
+ Part E: Windows and Linux Hacking

#book #pentest