Glen E. Clarke - CompTIA Pentest+ Certification For Dummies

CompTIA® PenTest+® Certification For Dummies®, 2nd Edition

Published by: John Wiley & Sons, Inc.,111 River Street, Hoboken, NJ 07030-5774, www.wiley.com

Copyright © 2022 by John Wiley & Sons, Inc., Hoboken, New Jersey

Published simultaneously in Canada

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without the prior written permission of the Publisher. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions .

Trademarks:Wiley, For Dummies, the Dummies Man logo, Dummies.com, Making Everything Easier, and related trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and may not be used without written permission. CompTIA and PenTest+ are trademarks or registered trademarks of CompTIA, Inc. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book.

LIMIT OF LIABILITY/DISCLAIMER OF WARRANTY: WHILE THE PUBLISHER AND AUTHORS HAVE USED THEIR BEST EFFORTS IN PREPARING THIS WORK, THEY MAKE NO REPRESENTATIONS OR WARRANTIES WITH RESPECT TO THE ACCURACY OR COMPLETENESS OF THE CONTENTS OF THIS WORK AND SPECIFICALLY DISCLAIM ALL WARRANTIES, INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. NO WARRANTY MAY BE CREATED OR EXTENDED BY SALES REPRESENTATIVES, WRITTEN SALES MATERIALS OR PROMOTIONAL STATEMENTS FOR THIS WORK. THE FACT THAT AN ORGANIZATION, WEBSITE, OR PRODUCT IS REFERRED TO IN THIS WORK AS A CITATION AND/OR POTENTIAL SOURCE OF FURTHER INFORMATION DOES NOT MEAN THAT THE PUBLISHER AND AUTHORS ENDORSE THE INFORMATION OR SERVICES THE ORGANIZATION, WEBSITE, OR PRODUCT MAY PROVIDE OR RECOMMENDATIONS IT MAY MAKE. THIS WORK IS SOLD WITH THE UNDERSTANDING THAT THE PUBLISHER IS NOT ENGAGED IN RENDERING PROFESSIONAL SERVICES. THE ADVICE AND STRATEGIES CONTAINED HEREIN MAY NOT BE SUITABLE FOR YOUR SITUATION. YOU SHOULD CONSULT WITH A SPECIALIST WHERE APPROPRIATE. FURTHER, READERS SHOULD BE AWARE THAT WEBSITES LISTED IN THIS WORK MAY HAVE CHANGED OR DISAPPEARED BETWEEN WHEN THIS WORK WAS WRITTEN AND WHEN IT IS READ. NEITHER THE PUBLISHER NOR AUTHORS SHALL BE LIABLE FOR ANY LOSS OF PROFIT OR ANY OTHER COMMERCIAL DAMAGES, INCLUDING BUT NOT LIMITED TO SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR OTHER DAMAGES.

For general information on our other products and services, please contact our Customer Care Department within the U.S. at 877-762-2974, outside the U.S. at 317-572-3993, or fax 317-572-4002. For technical support, please visit https://hub.wiley.com/community/support/dummies .

Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com . For more information about Wiley products, visit www.wiley.com .

Library of Congress Control Number: 2022930511

ISBN 978-1-119-86727-2 (pbk); ISBN 978-1-119-86728-9 (ebk); ISBN 978-1-119-86729-6 (ebk)

1 Cover

2 Title Page

3 Copyright

4 Introduction About This Book Conventions Used in This Book Foolish Assumptions How This Book Is Organized Icons Used in This Book Beyond the Book Where to Go from Here

5 Pre-Assessment Questions Answers

6 Part 1: Planning and Information Gathering Chapter 1: Introduction to Penetration Testing Penetration Testing Overview Defining Penetration Testing Terminology Looking at CompTIA’s Penetration Testing Phases Identifying Testing Standards and Methodologies Reviewing Key Concepts Prep Test Answers Chapter 2: Planning and Scoping Understanding Key Legal Concepts Scoping the Project Identifying the Rules of Engagement (RoE) Defining Targets for the Pentest Verifying Acceptance to Risk Scheduling the Pentest and Managing Scope Creep Conducting Compliance-based Assessments Reviewing Key Concepts Prep Test Answers Chapter 3: Information Gathering Looking at Information-Gathering Tools and Techniques Understanding Scanning and Enumeration Detection Methods and Tokens Lab Exercises Reviewing Key Concepts Prep Test Answers Chapter 4: Vulnerability Identification Understanding Vulnerabilities Performing a Vulnerability Scan Analyzing Vulnerability Results Attacks and Weaknesses in Specialized Systems Lab Exercises Reviewing Key Concepts Prep Test Answers

7 Part 2: Attacks and Exploits Chapter 5: Exploiting Systems Exploiting Systems with Metasploit Understanding Social Engineering Looking at Attacks on Physical Security Common Attack Techniques Exploiting Network-Based Vulnerabilities Exploiting Local-Host Vulnerabilities Lab Exercises Reviewing Key Concepts Prep Test Answers Chapter 6: Exploiting Wireless Vulnerabilities Understanding Wireless Terminology Introducing Wireless Standards Looking at Wireless Configuration and Troubleshooting Implementing Wireless Security Practices Exploiting Wireless Vulnerabilities Lab Exercises Reviewing Key Concepts Prep Test Answers Chapter 7: Exploiting Application-Based Vulnerabilities Looking at Common Application-Based Attacks Understanding Application Security Vulnerabilities Common Coding Mistakes Secure Coding Best Practices Common Tools and Resources Lab Exercises Reviewing Key Concepts Prep Test Answers

8 Part 3: Post-Exploitation and Reporting Chapter 8: Understanding Post-Exploitation Actions Common Post-Exploitation Tasks Performing Lateral Movement Maintaining Access (Persistence) Covering Your Tracks Lab Exercises Reviewing Key Concepts Prep Test Answers Chapter 9: Common Penetration Testing Tools Understanding Use Cases for Common Pentest Tools Looking at Common Pentest Tools Analyzing Tool Output Lab Exercises Reviewing Key Concepts Prep Test Answers Chapter 10: Analyzing Script Functionality Reviewing Scripting Concepts Using Bash Scripting Understanding Python Scripting Working with Ruby Scripting Coding in PowerShell Scripting Code Examples and Automation Lab Exercises Reviewing Key Concepts Prep Test Answers Chapter 11: Reporting and Communication Communicating During a PenTest Findings and Remediations Focusing Your Remediation Strategies Recommending the Appropriate Remediation Strategy Writing and Handling the Pentest Report Delivering the Report and Post-Report Activities Lab Exercises Reviewing Key Concepts Prep Test Answers

9 Part 4: Appendixes Appendix A: PenTest+ Exam Details CompTIA PenTest+ Certification and Why You Need It Checking Out the Exam and Its Objectives Using This Book to Prepare for the Exam Steps to Prepare for the Exam Making Arrangements to Take the Exam The Day the Earth Stood Still: Exam Day Appendix B: CompTIA PenTest+ Exam Reference Matrix 2021 PenTest+ Exam Objectives — PTO-002 Appendix C: Lab Setup Setting Up the Virtual Machines Obtaining the Software Needed