Название: The Hack Is Back: Techniques to Beat Hackers at Their Own Games
Автор: Jesse Varsalone, Christopher Haller
Издательство: CRC Press
Год: 2025
Страниц: 324
Язык: английский
Формат: pdf (true)
Размер: 35.1 MB

Have you wondered how hackers and nation-states gain access to confidential information on some of the most protected systems and networks in the world? Where did they learn these techniques and how do they refine them to achieve their objectives? How do I get started in a career in cyber and get hired? We will discuss and provide examples of some of the nefarious techniques used by hackers and cover how attackers apply these methods in a practical manner.

The Hack Is Back is tailored for both beginners and aspiring cybersecurity professionals to learn these techniques to evaluate and find risks in computer systems and within networks. This book will benefit the offensive-minded hacker (red-teamers) as well as those who focus on defense (blue-teamers). This book provides real-world examples, hands-on exercises, and insider insights into the world of hacking, including:

• Hacking our own systems to learn security tools
• Evaluating web applications for weaknesses
• Identifying vulnerabilities and earning CVEs
• Escalating privileges on Linux, Windows, and within an Active Directory environment
• Deception by routing across the TOR network
• How to set up a realistic hacking lab
• Show how to find indicators of compromise
• Getting hired in cyber!

Exploitation and Reverse shells are important to understand to create an effective impact on the target. Identifying vulnerabilities is only half of the game, we need to be able to prove that these vulnerabilities can be exploited to cause an impact to the organization. The best way to prove an impact is to craft an exploit that will either give us additional access within the system or allow us to gather sensitive information we can use to attack further. Shells are interactive terminals and ways we can execute commands on an exploited host. Gaining a shell is commonly referred to as a “foothold” as well within the hacking community, as the initial access is leveraged further to user or root level access. This chapter covers identifying the ways we can get shells and how to detect them. We will explore finding exploits, using Metasploit, leveraging Meterpreter, and generating the exploit with msfvenom.

This book will give readers the tools they need to become effective hackers while also providing information on how to detect hackers by examining system behavior and artifacts. By following the detailed and practical steps within these chapters, readers can gain invaluable experience that will make them better attackers and defenders. The authors, who have worked in the field, competed with and coached cyber teams, acted as mentors, have a number of certifications, and have tremendous passions for the field of cyber, will demonstrate various offensive and defensive techniques throughout the book.