A Complete Guide to Burp Suite. Learn to Detect Application Vulnerabilities, Sagar Rahalkar, 2021

Use this comprehensive guide to learn the practical aspects of Burp Suite—from the basics to more advanced topics. The book goes beyond the standard OWASP Top 10 and also covers security testing of APIs and mobile apps.

#book #web

101 Labs CompTIA Security+ by Paul Browning, Mark Drinan, 2021

Experts agree that we retain only 10% of what we read but 90% of what we do. Perhaps this explains why the global pass rate for most IT exams is a ghastly 40%. This is where the 101 Labs book series can help. We are revolutionizing how IT people train for their exams and the real world with our Learn - By - Doing teaching method.

Using free tools and software you configure:

+ Kali Linux
+ SQL Injection Attacks
+ Implement IPSEC Site-to-Site VPN
+ Using ARP for Network Reconnaissance
+ Sniffing Network Attacks Using Wireshark
+ Using Password Cracking Tools
+ Scripting Using Bash and Python
+ FTP Exploits

Official page
https://www.101labs.net/courses/101-labs-comptia-security/

Предыдущие книги из этой же серии
https://news.1rj.ru/str/w2hack/964
https://news.1rj.ru/str/w2hack/1074

#book

Metasploit 5.0 for Beginners (Second Edition). Perform penetration testing to secure your IT environment against threats and vulnerabilities by Sagar Rahalkar

A comprehensive guide to Metasploit for beginners that will help you get started with the latest Metasploit 5.0 Framework for exploiting real-world vulnerabilities

Key Features
+ Perform pentesting in highly secured environments with Metasploit 5.0
+ Become well-versed with the latest features and improvements in the Metasploit Framework 5.0
+ Analyze, find, exploit, and gain access to different systems by bypassing various defenses

Состоялся релиз Metasploit Framework 5.0
https://bit.ly/3dUpDPh

Предыдущий пост с версией 4.11 на русском языке
https://news.1rj.ru/str/w2hack/850

#book #metasploit #pentest

Common Windows, Linux and Web Server Systems Hacking Technique by Dr. Hidaia Mahmood Alassouli

This report covers the common techniques and tools used for System, Windows, Linux and Web Server Hacking.

The report contains from the following sections:
+ Part A: Setup Lab:
+ Part B: Trojens and Backdoors and Viruses
+ Part C: System Hacking
+ Part D: Hacking Web Servers
+ Part E: Windows and Linux Hacking

#book #pentest

Обучающий видео курс "Defeating Anti-Reverse Engineering & Anti-Debugging Techniques" by PLURALSIGHT

◽️ How Anti-analysis Affects Your Analysis
◽️ Detecting and Defeating Anti-reverse Engineering Techniques
◽️ Stopping Anti-debugging Techniques
◽️ Adding Stealth to Your Malware Sandbox

#education #malware #reverse

Cashing in on ATM Malware. A Comprehensive Look at Various Attack Types written by David Sancho and Numaan Huq of Trend Micro Forward-Looking Threat Research (FTR) Team, and Massimiliano Michenzi of Europol’s European Cybercrime
Centre (EC3)

ATM malware is one of the digital threats that have been around for a while now, with the discovery of the first known variant dating back to 2009. It should not be a surprise that it has become a mainstay in many cybercriminals’ arsenal because it can, plainly put, steal cold, hard cash.

In this paper, we explore in detail the different known ATM malware families and attack types (physical and network-based) and how attackers operate their way to and around their target infrastructures.

This malware can make an ATM spit out all of its cash on demand
https://bit.ly/3E5duRX