Expanding Security – CISSP & CEH training

Please note: You will not be able to get files from the server unless you are a paid student and have been issued an account. So some links on this page will not work if you are a guest.

The steps below, the files, and links within, are numbered in order of what you will need to read and do. If this set of steps is unclear, please attend orientation for a walk-through.

SPECIAL NOTE – next week will be wireless- if you want to do the labs, you will need a very particular wireless card-

Search Amazon for Alfa 500mW AWUS036H USB Wireless Adapter 802.11 b/g it should cost $30

and to download the oracle extension pack , installing USB network card into backtrack 4 video, you will need to plug in the USB network card, then run dmesg command if you did everything right it looks like this. Execute /etc/init.d/networking start if you did everything right it looks like this. To confirm working network card – look in internet-wicd and see something that looks like this.

Other configurations are not supported. (you should see the pile of crap that I bought that will not work)

00- Reading – The chapter in the book tracks to the class number. Two other source documents are here:

This week we will cover-

Viruses & worms Read – As many of the links from below as possible.

Penetration testing – SPT Chapter 7

OSSTMM (16MB) SP800-115 (.6MB)

01-Mind map review for Note Cards, Terms and Process. For every term in the concepts section of the mindmap you should find a definition first from the book and second from your research. For every tool in the book you should make a notecard based upon Reconn Layer, Exploit Category, and Process.

02-Tool review

You must have the VBox structure in place to start the labs. Every week and every class you will be assigned one or two base tools. We will discuss that tool in the Lab part of class.  Your assignment is to work the tool, collect artifacts and send via email or post them. Artifacts are ALWAYS packet captures and sometimes a screenshot. Do not send large raw packet captures- you must cut the capture down to the attack/response data. You should be able to discuss this tool’s function, place in the process, and comparison to other tools.

The list of tools discussed this week:

16.  Viruses

1. Senna Spy

17.  Novell Hacking

03-Reports

As a professional you will be required to report your findings to management in a meaningful, actionable way. For each tool you must know how it fits with your original plan, the outcomes from its use, and what should be done to protect the environment from its use in the future.

04-Recording links are listed for your review of presentations. These are updated one week after the new class.

Recording 16

Recording 16LAB

Recording 17 - Metasploit

Recording 17 – Penetration Testing

Recording 17LAB

You can find these links and the class schedule here:http://www.expandingsecurity.com/about/events/

All content is copyright protected. Downloading or reviewing any material means you consent to the copyright restrictions placed on all works by the author. You are forbidden from using any of this material in the teaching of any class. You are only permitted to use this as a current student of Expanding Security. You are not permitted to copy or distribute these materials in any way.

CEH v7 Viruses Study guide
Here is a list of resources and books to help with your study.

07 Viruses and Worms

07 Reading

Wired 11.07: Slammed!

http://download.norman.no/manuals/eng/BOOKON.PDF

http://www.symantec.com/avcenter/reference/striker.pdf

The Spread of the Sapphire/Slammer Worm

Random Scanning Worms and Sapphire/Slammer's PRNG...

Optus myZOO Learning Centre

http://www.mpl.org.eg/doc/eBOOKs/vtutor.pdf

Virus History Summary

Cybercrime : Piercing the darkness

Technical Briefs - Information on Computer Viruses

07 Tools for examination

Honeypots, Intrusion Detection, Incident Response

Packet Storm ≈ Full Disclosure Information Security

Foundstone - A division of McAfee

UPX

Process Monitor

Wired and Wireless Network Analysis Software by TamoSoft

OllyDbg v1.10

IDA Pro Disassembler - multi-processor, windows hosted disassembler and debugger

Malware Analysis, Virus Sandbox - GFI Sandbox an Automated Malware Analysis Tool

07 Tools for protection

Anubis: Analyzing Unknown Binaries

VirusTotal - Free Online Virus, Malware and URL Scanner

OPSWAT Metascan

Submit a sample - Microsoft Malware Protection Center

Free Virus Scan - Kaspersky Lab

Antivirus Software | Antispyware | Norton AntiVirus

BitDefender Antivirus Pro 2011

F-Secure Anti-Virus 2011 - Real-Time Antivirus Protection

Kaspersky Anti-Virus Software | Kaspersky Lab United States

Trend Micor Internet Security Pro - Trend Micro APAC

Virus Protection, Viruses, Anti virus Software | Antivirus Plus 2011 | McAfee

CEH v7 Penetration Testing Study guide

Iphone users - use the copy feature for URLs below and paste to browser - if it is a PDF try goodreader app for better viewing

Here is a list of resources and books to help with your study

16 Penetration Testing / Metasploit (19)

16 Reading

Penetration Testing Framework 0.57

Penetration testing guide

http://www.net-security.org/dl/newsletter/txt/issue059.txt

http://www.netdesignplus.net/publications/victor_sawma_thesis.pdf

16 metasploit

Open Security Training - Security and Hacking Tools

Metasploit Unleashed By Offensive Security

Metasploit Penetration Testing Framework - Module Search

Armitage Tutorial - Cyber Attack Management for Metasploit

Metasploit Megaprimer (Exploitation Basics And Need For Metasploit) Part 1

Metasploit — PenTestIT