This is not a book about information security. Certainly not about IT. This is a book about specifically, how to infiltrate a company’s network, locate their most critical data, and make off with it without triggering whatever shiny new security tool the company wasted their budget on.Whether you are a wannabe ethical hacker or an experienced pentester frustrated by outdated books and false media reports, this book is definitely for you.We will set up a fake – but realistic enough – target and go in detail over the main steps to pwn the building phishing malware, finding vulnerabilities, rooting Windows domains, pwning a mainframe, etc.

(Previously published as How to Hack a Fashion Brand) Follow me on a step-by-step hacking journey where we pwn a high-profile fashion company. From zero initial access to remotely recording board meetings, we will detail every custom script and technique used in this attack, drawn from real-life findings, to paint the most realistic picture possible. Whether you are a wannabe pentester dreaming about real-life hacking experiences or an experienced ethical hacker tired of countless Metasploit tutorials, you will find unique gems in this book for you to try: Playing with Kerberos Bypassing Citrix & Applocker Mainframe hacking Fileless WMI persistence NoSQL injections Wiegand protocol Exfiltration techniques Antivirus evasion tricks And much more advanced hacking techniques I have documented almost every tool and custom script used in this book. I strongly encourage you to test them out yourself and master their capabilities (and limitations) in an environment you own and control. Hack (safely) the Planet!

This is not your regular hacking book. Hell, some might say it is not even a book. This is a training program that gives you a free coupon to access dedicated and real machines with real flaws for 24 hours straight. Reading about hacking is fun, hacking real systems is a whole other level of awesomeness! This program is an opportunity to hone your skills on the training platform at www.hacklikeapornstar.com/ no simulation, no regex based wargames, no far-fetched hacking-like tricks that only work in CTF games… You get a free coupon to access real machines with real and common flaws. The kind of vulnerabilities you find in every corporate environment around the • Bypassing application whitelisting • Privilege escalation • Pivoting on other machines It’s up to you to exploit them in a meaningful way without screwing up the system. I strongly encourage you to take on the training, struggle with the challenge on your own for a few minutes before reading the chapter describing the solution. Try your usual techniques, read about new ones, and have fun. If you are looking for a passive read about hacking, there are other interesting (and more comprehensive) books to try (preferably mine). This piece of work is about concrete action! This is, in my opinion, the best way to fully internalize the concepts and reflexes that make a great hacker. In case you are discovering the world of hacking/pentesting, I planted several links to resources explaining the different concepts we are dealing with.

If there is a section that most hacking books and blog posts currently disregard, it is the ‘stay safe’ section. In other words, they fail to detail the schemes and techniques a typical hacker (or activist) should use to guarantee a certain level of anonymity and safety. You may be the best hacker in the world, but if you cannot control your footprint on the internet and correctly erase your trail, you will simply crash and burn. There are many books on how to be anonymous online with tips that may work to some disabling JavaScript, installing the Ghostery extension, using TOR, etc. These techniques may be effective against Facebook tracking and Google ads, but will do you no good against an active investigator tracking you down following a nasty hack, or a state sponsored surveillance program targeting activists. There is a mindset to have as well as a series of practical precautions to take when you want to completely disappear off the grid. Together, we will set up an anonymous environment that guarantees maximum protection and shields your identity against prying eyes. Of course, there is no such thing as a zero-risk job, but we will try to get as close as possible.

"There are two kinds of those that have been breached and those that do not know it yet." The company calling us just discovered an anomaly on their most critical systems. Our job is to conduct a deep forensic analysis, perform threat assessment, and uncover all malware programs left by hackers. Digital Forensics We follow the attacker's footprint across a variety of systems and create an infection timeline to help us understand their motives. We go as deep as memory analysis, perfect disk copy, threat hunting and malware analysis while sharing insights into real crisis management. Rebuilding systems Finally, we tackle the most important issues of any security incident how to kick the attackers out of the systems and regain trust in machines that have been breached. For those that read hacking books like the "Art of Exploitation" or "How to Hack Like a Pornstar", you finally get to experience what it feels like to be on the other side of the Firewall!

« If you are looking for a passive read about hacking, pass your way. This is a hands-on program to train and hack real systems with real flaws» You get dedicated access to machines with common vulnerabilities. The kind you may find in any corporate environment. Your job is to exploit these flaws and hack your way to the company's business documents. Hacker playbook You get to learn and perform the following hacking Ethical hacking I was pleasantly surprised to see people taking up the first edition of the "Ultimate Hacking Challenge", two even three times in a row. Some even used it to pass the OSCP certification. That's the spirit! I modeled the challenge based on the scenario described in "How to Hack Like a Pornstar" and a few tips from the "Art of Exploitation". This your chance to take action and fully internalize the concepts and reflexes that make a great hacker.

This is the story of a hacker who met his match while breaking into a machine learning, behavioral analysis, artificial intelligence... Most hacking tools simply crash and burn in such a hostile environment. What is a hacker to do when facing such a fully equipped opponent? The source code for all custom attack payloads are provided and explained thoroughly in the book. Cybersecurity at its best We start by building a resilient C2 infrastructure using cloud providers, HTTP redirectors and SSH tunnels . The idea is to hide behind an array of disposable machines that we can renew in a matter of seconds to completely change our internet footprint . We then set up step-by-step a phishing fake website, postfix server, DKIM signing, SPF and DMARC . The Art of intrusion Instead of hacking directly our mark (an offshore company), we target one of their suppliers that we identified using OSINT techniques . We collect a couple of passwords thanks to our phishing platform and leverage the remote Citrix access to put our first foot inside. We bypass Applocker and Constrained Language on PowerShell to achieve code execution, then start our Active Directory reconnaissance . Minutes later, we are kicked out of the network due to suspicious activity! The art of exploitation We exploit a flaw in password patterns to get back on the Citrix server. We are facing MS ATA and the QRADAR SIEM . We learn to evade them using various hacking tricks and manage to disable all new Windows Server 2016 security features (AMSI, ScriptBlock Logging, etc.). We also face Windows next-gen antivirus (ATP) while trying to get credentials belonging to developers we suspect are working on the product used by the offshore company. We end up backdooring the accounting software in a way to evade most security and functional tests. Forget penetration testing, time for some red team Our backdoor triggers a fileless malware that give us access to our final target's internal network . After that it's just a cakewalk to achieve domain admin privileges and access personal data of thousands of shell companies and their end beneficiaries. This book’s edition assumes prior knowledge of basic computer security principles such as NTLM, pass-the-hash, Windows Active Directory, group policy objects and so forth. If you are scantly comfortable with these concepts, I strongly encourage you to first read How to Hack Like a Pornstar ( or How to Hack Like a God ( before taking on this book.

There are a thousand and one ways to hack an Active Directory environment. But, what happens when end up in a full Cloud environment with thousands of servers, containers and not a single Windows machine to get you going?When we land in an environment designed in the Cloud and engineered using the latest DevOps practices, our hacker intuition needs a little nudge to follow along. How did the company build their systems and what erroneous assumptions can we take advantage of?This book covers the basics of hacking in this new era of Cloud and Break container isolation, achieve persistence on Kubernetes cluster and navigate the treacherous sea of AWS detection features to make way with the company’s most precious data.Whether you are a fresh infosec student or a Windows veteran, you will certainly find a couple of interesting tricks to help you in your next adventure.