Tribe of Hackers Red Team - Tribal Knowledge from the Best in Offensive Cybersecurity by Marcus J. Carey , Jennifer Jin.pdf

(23806 KB) Pobierz
TRIBE
OF
HACKERS
RED TEAM
TRIBAL KNOWLEDGE FROM THE BEST
IN OFFENSIVE CYBERSECURITY
MARCUS J. CAREY & JENNIFER JIN
Copyright©2019MarcusJ.CareyandJenniferJin
PublishedbyJohnWiley&Sons,Inc.Indianapolis,Indiana
PublishedsimultaneouslyinCanada
ISBN:978-1-119-64332-6
ISBN:978-1-119-64336-4(ebk.)
ISBN:978-1-119-64333-3(ebk.)
ManufacturedintheUnitedStatesofAmerica
Nopartofthispublicationmaybereproduced,storedinaretrievalsystemor
transmittedinanyformorbyanymeans,electronic,mechanical,photocopying,
recording,scanningorotherwise,exceptaspermittedunderSections107or108of
the1976UnitedStatesCopyrightAct,withouteitherthepriorwrittenpermissionof
thePublisher,orauthorizationthroughpaymentoftheappropriateper-copyfeetothe
CopyrightClearanceCenter,222RosewoodDrive,Danvers,MA01923,(978)750-8400,
fax(978)646-8600.RequeststothePublisherforpermissionshouldbeaddressedtothe
PermissionsDepartment,JohnWiley&Sons,Inc.,111RiverStreet,Hoboken,NJ07030,
(201)748-6011,fax(201)748-6008,oronlineathttp://www.wiley.com/go/permissions.
LimitofLiability/DisclaimerofWarranty:Thepublisherandtheauthormakeno
representationsorwarrantieswithrespecttotheaccuracyorcompletenessofthe
contentsofthisworkandspecificallydisclaimallwarranties,includingwithoutlimitation
warrantiesoffitnessforaparticularpurpose.Nowarrantymaybecreatedorextended
bysalesorpromotionalmaterials.Theadviceandstrategiescontainedhereinmay
notbesuitableforeverysituation.Thisworkissoldwiththeunderstandingthatthe
publisherisnotengagedinrenderinglegal,accounting,orotherprofessionalservices.
Ifprofessionalassistanceisrequired,theservicesofacompetentprofessionalperson
shouldbesought.Neitherthepublishernortheauthorshallbeliablefordamages
arisingherefrom.ThefactthatanorganizationorWebsiteisreferredtointhiswork
asacitationand/orapotentialsourceoffurtherinformationdoesnotmeanthatthe
authororthepublisherendorsestheinformationtheorganizationorWebsitemay
provideorrecommendationsitmaymake.Further,readersshouldbeawarethat
InternetWebsiteslistedinthisworkmayhavechangedordisappearedbetweenwhen
thisworkwaswrittenandwhenitisread.
Forgeneralinformationonourotherproductsandservicesortoobtaintechnical
support,pleasecontactourCustomerCareDepartmentwithintheU.S.at(877)762-
2974,outsidetheU.S.at(317)572-3993orfax(317)572-4002.
Wileypublishesinavarietyofprintandelectronicformatsandbyprint-on-demand.
Somematerialincludedwithstandardprintversionsofthisbookmaynotbeincluded
ine-booksorinprint-on-demand.IfthisbookreferstomediasuchasaCDorDVDthat
isnotincludedintheversionyoupurchased,youmaydownloadthismaterialathttp://
booksupport.wiley.com.FormoreinformationaboutWileyproducts,visitwww.wiley.com.
Library of Congress Control Number:2019945380
TRADEMARKS:Wiley,theWileylogo,andtheSybexlogoaretrademarksorregistered
trademarksofJohnWiley&Sons,Inc.and/oritsaffiliates,intheUnitedStatesandother
countries,andmaynotbeusedwithoutwrittenpermission.Allothertrademarksare
thepropertyoftheirrespectiveowners.JohnWiley&Sons,Inc.isnotassociatedwith
anyproductorvendormentionedinthisbook.
10987654321
Contents
01
02
03
04
05
06
07
08
09
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
Introduction
Marcus J. Carey
David Bell
Paul Brager
Beau Bullock
Christopher Campbell
Stephanie Carruthers
Mark Clayton
Ben Donnelly
Skip Duckwall
Ronald Eddings
Justin Elze
Mike Felch
Kevin Figueroa
Marco Figueroa
Jared Folkins
Rob Fuller
Patrick Fussell
Chris Gates
Brian Genz
Jared Haight
Stephen Hilt
Brent Kennedy
David Kennedy
Maggie Ligon
Jerey Man
Tim MalcomVetter
Brandon McCrillis
Oddvar Moe
Chris Nickerson
Ryan O’Horo
Carlos Perez
Francesc Rodriguez
Derek Rook
Isaiah Sarju
Mary Sawyer
Bradley Schaufenbuel
vi
1
5
10
16
22
28
34
39
47
52
57
62
70
75
80
86
92
97
102
112
118
122
128
139
143
151
161
164
169
176
179
185
190
195
200
204
iii
iv
contents
37
38
39
40
41
42
43
44
45
46
47
Tinker Secor
Jayson E. Street
Chris Truncer
Carl Vincent
Georgia Weidman
Adam Willard
Jake Williams
Robert Willis
Robin Wood
Wirefall
Phillip Wylie
Epilogue
210
217
223
230
238
244
248
253
259
264
271
274
Acknowledgments
Tribe of Hackers would not exist without the awesome cybersecurity community
and the contributors in it. I owe them tremendously for allowing me to share
their perspectives on our industry.
I’d like to give a special shout-out to my wife, Mandy, for allowing me to do
whatever the heck I want as far as building a business and being crazy enough
to do this stuff. To Erran, Kaley, Chris, Chaya, Justin, Annie, Davian, Kai: I love you
all more than the whole world!
I also want to thank Jennifer Jin for helping build the Tribe of Hackers book
series and summit. She would like to thank her parents for not thinking that
she’s crazy for quitting pre-med.
Thanks also goes to Jennifer Aldoretta for helping me build a company that
is true to our values. Shout-out to every one of the people that I’ve worked with
over the past few years.
Thanks to Dan Mandel, Jim Minatel, and the Wiley team for believing in the
whole vision.
—Marcus J. Carey
v
Zgłoś jeśli naruszono regulamin