Table of Contents

Prelude and Fundamentals
	Penetration Testing: Definition
	What is and isn’t covered in this book?
	Binary, Decimal, and Hexadecimal
Networks
	Networking Terminology
	Networking Devices
	Cables
	OSI and TCP/IP Models
	IP Addressing and Subnetting
		IPv4
		IPv6
	Network Protocol Analysis
		RSA Encryption Algorithm (SSL/TLS)
		Common Protocols
		Routing Protocols
	Network Mapping
		Nmap Scanning
		Other Network Mapping Tools [List]
	Common Attacks, Tutorials, Defenses, and Circumventions
Web Applications
	Common Vulnerabilities
		SQLi (Structured Query Language Injection)
		XSS (Cross Site Scripting)
		CSRF (Cross Site Request Forgery)
		XSPA (Cross Site Port Attacks)
		RCE (Remote Code Execution)
		Format String Vulnerabilities (See System)
	Vulnerability Scanning Tools
System (*nix)
	System Terminology
	Memory
		Text, Data, and BSS
		Stack
		Heap
		Functions
	Stack Overruns
	Stack Buffer Overflows
	Format String Vulnerabilities
	Defeating ASLR
	Libraries
	Race Conditions
	Obtaining Root Access
	Maintaining Root Access
Metasploit and Armitage
	Introduction and About
	Running Exploits
	Post Exploitation
	Privilege Exploitation
	Persistence
	Hiding Your Tracks
Penetration Testing Methodology Explained
	Information Gathering
	Network Discovery
	Enumeration
	Vulnerability Assessment
	Exploitation and Security
	Post Exploitation and Backdoors