BHIS | Pentester Tactics, Techniques, and Procedures TTPs | Chris Traynor скачать в хорошем качестве

BHIS | Pentester Tactics, Techniques, and Procedures TTPs | Chris Traynor

Join us in the Black Hills InfoSec Discord server here:   / discord   to keep the security conversation going! 🛝 Slides for this webcast – https://www.blackhillsinfosec.com/wp-... Penetration Testing is often considered a dark art that's shrouded in mystery. This unfortunate perception can hold back organizations from being more secure and keep people from an exciting career. In this Black Hills Information Security (BHIS) webcast, join Chris Traynor (@cstraynor) as he shares the tactics, techniques, and procedures (TTPs) for a Pentester. Chapters 00:00 - Pentester Tactics, Techniques, and Procedures (TTPs) with Chris Traynor 00:21 - Whoami 00:56 - Agenda 02:36 - Baseline Terminology 08:12 - Reconnaissance — Tactic/Intended Effect 09:15 - Nmap — Tool/Mechanism 11:14 - Nmap — Execution 14:36 - Recon-ng – Tool/Mechanism 19:57 - Recon-ng — Execution 22:34 - Recon-ng — Cheatsheet 25:13 - Account Enumeration — Tactic/Intended Effect 26:10 - Burp Repeater — Tool/Mechanism 27:01 - Burp Repeater — Execution 33:51 - Password Spraying — Tactic/Intended Effect 39:15 - Burp Intruder — Tool/Mechanism 40:15 - Burp Intruder — Execution 44:17 - smb_login Module — Tool/Mechanism 45:51 - smb_login Module — Execution 47:56 - psexec Module — Execution 52:30 - Chris’s Other Talks 54:18 - Post Show Questions Black Hills Infosec Socials Twitter:   / bhinfosecurity   Mastodon: https://infosec.exchange/@blackhillsi... LinkedIn:   / antisyphon-training   Discord:   / discord   Black Hills Infosec Shirts & Hoodies https://spearphish-general-store.mysh... Black Hills Infosec Services Active SOC: https://www.blackhillsinfosec.com/ser... Penetration Testing: https://www.blackhillsinfosec.com/ser... Incident Response: https://www.blackhillsinfosec.com/ser... Backdoors & Breaches - Incident Response Card Game Backdoors & Breaches: https://www.backdoorsandbreaches.com/ Play B&B Online: https://play.backdoorsandbreaches.com/ Antisyphon Training Pay What You Can: https://www.antisyphontraining.com/pa... Live Training: https://www.antisyphontraining.com/co... On Demand Training: https://www.antisyphontraining.com/on... Educational Infosec Content Black Hills Infosec Blogs: https://www.blackhillsinfosec.com/blog/ Wild West Hackin' Fest YouTube:    / wildwesthackinfest   Active Countermeasures YouTube:    / activecountermeasures   Antisyphon Training YouTube:    / antisyphontraining