The Pentester BluePrint

Index

• A
• A+, 20, 85
• Accenture, 125
• access control
  • about, 26
  • discretionary (DAC), 27
  • mandatory (MAC), 27
  • role-based (RBAC), 26–27
• action plan
  • about, 105, 112–113
  • skill gaps, 111–112
  • skills inventory, 105–111
• actions on objectives, in Cyber Kill Chain, 36
• Active Directory (AD), 18
• administrative controls, 24–25
• advanced lab, 67
• Advanced Penetration Testing: Hacking the World's Most Secure Networks (Allsopp), 59–60, 102
• advanced persistent threats (APTs), 34
• Adversarial Tactics, Techniques & Common Knowledge (MITRE ATT&CK) Framework, 34
• airgapped machines, 38–39
• Allsopp, Wil, 59–60, 102
• Apple, 51
• applications
  • pentesting, 11–12, 46
  • vulnerability scanning, 69–70
• APTs (advanced persistent threats), 34
• autonomous vehicles, 14
• availability, in CIA triad, 22, 23

• B
• BackTrack, 53
• Beaver, Kevin
  • Hacking Wireless Networks For Dummies, 100–101
• Bennetts, Simon, 74–75
• Berners-Lee, Tim, 51
• binary reverse engineering, 62
• Binnie, Chris, 101
• Bitcoin, 32
• black box pentesting, 9, 49
• black hat hackers, 2
• blue team, 2
• BLuef0x, 80
• books, on pentesting, 56–60
• botnets, 33
• Bourbon, Jean-Marie, 134–135
• Brack, Dominique, 99
• bug bounties, 123–125
• Bugcrowd, 123

• C
• California Consumer Privacy Act (CCPA), 14–15
• Campbell, Steve, 93–94, 141–142
• Capture the Flag (CTF) competitions, 115–123
• Carey, Marcus, 58
• CCPA (California Consumer Privacy Act), 14–15
• CEH (Certified Ethical Hacker) certification, 84–85
• CEH v10 Certified Ethical Hacker Study Guide (Messier), 100
• certifications and degrees