Pen test for sys admin

Penetration Testing for System

AdministratorsSept 13, 2010

ryan LinnNCSA Meeting

Thursday, September 23, 2010

Agenda

• Introduction

• Description of Penetration Testing

• Overview of Process

• Walkthrough of Common Tasks

• Questions/Closing


Introduction

• Information Security Engineer at SAS

• Columnist at EthicalHacker.net

• Contributed code to Metasploit, Browser Exploitation Framework (BeEF), and Nikto

• Spoken at numerous regional and national security conferences


Description of Pen Testing

• Means different things to different people• Find vulnerabilities and stop

• Find vulnerabilities and verify• Find vulnerabilities and see how far

you can get

• For today: Find vulnerabilities and verify


Overview of Process

• Recon

• Discovery/Scanning

• Enumeration

• Exploitation


Recon

• Non Invasive

• Whois

• Google

• Basic DNS Queries


Discovery/Scanning

• Port Scans

• In-depth DNS queries

• Vulnerability Scanning

• OS Identification


Enumeration

• SMB enumeration

• Oracle DB Enumeration

• User enumeration


Exploitation

• Leverage information gathered

• Verify vulnerability information

• Possibly go back to gather more information if successful


Walkthroughs

• Recon

• Scanning

• Exploitation


Scanning

• Nmap Scans

• Port/Service/OS Identification

• Nessus/OpenVAS

• Vulnerability Scanner

• Safe Checks/Unsafe Checks


Exploitation/Verification

• Metasploit

• Penetration Testing Framework

• Aids in Exploit Development

• Exploitation of Vulnerability

• Also has scanning capability


Docs/Training

• SANS Sec504 : Incident Handling

• SANS Sec580: Metasploit Kung Fu for Enterprise Pen Testing

• http://www.offensive-security.com/metasploit-unleashed

• http://www.EthicalHacker.net


http://www.offensive-security.com/metasploit-unleashed






Questions?

• Contact Info:

• Twitter: @sussurro

• Blog: blog.happypacket.net

• http://www.ethicalhacker.net


http://www.ethicalhacker.net

http://www.ethicalhacker.net

Technology

Pen test for sys admin