Kevin Cardwell - Building Virtual Pentesting Labs for Advanced Penetration Testing-Packt Publishing (2016)

Building Virtual Pentesting Labs
for Advanced Penetration Testing
Second Edition
Learn how to build complex virtual architectures
that allow you to perform virtually any required
testing methodology and perfect it
Kevin Cardwell
Community Experience Distilled

Building Virtual Pentesting
Labs for Advanced Penetration
Testing
Second Edition
Learn how to build complex virtual architectures that
allow you to perform virtually any required testing
methodology and perfect it
Kevin Cardwell
BIRMINGHAM - MUMBAI

Building Virtual Pentesting Labs for
Advanced Penetration Testing
Second Edition
Copyright © 2016 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or
transmitted in any form or by any means, without the prior written permission of the
publisher, except in the case of brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the
information presented. However, the information contained in this book is sold without
warranty, either express or implied. Neither the author, nor Packt Publishing, and its
dealers and distributors will be held liable for any damages caused or alleged to be caused
directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the
companies and products mentioned in this book by the appropriate use of capitals.
However, Packt Publishing cannot guarantee the accuracy of this information.
First published: June 2014
Second edition: August 2016
Production reference: 1240816
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham
B3 2PB, UK.
ISBN 978-1-78588-349-1
www.packtpub.com

Credits
Authors
Kevin Cardwell
Copy Editors
Madhusudan Uchil
Reviewer
Joseph Muniz
Project Coordinator
Judie Jose
Commissioning Editor
Kartikey Pandey
Proofreader
Safis Editing
Acquisition Editor
Kirk D'costa
Indexer
Hemangini Bari
Content Development Editor
Abhishek Jadhav
Graphics
Kirk D'Penha
Technical Editor
Vishal K. Mewada
Production Coordinator
Shantanu Zagade

About the Author
Kevin Cardwell is currently working as a freelance consultant and provides consulting
services for companies throughout the world, and he also works as an advisor to numerous
government entities within the USA, the Middle East, Africa, Asia, and the UK. He is an
instructor, technical editor, and author for computer forensics and hacking courses. He is
the author of the Center for Advanced Security and Training (CAST), Advanced Network
Defense, and Advanced Penetration Testing courses. He is technical editor of the Learning
Tree Course Penetration Testing Techniques and Computer Forensics courses. He has
presented at the Black Hat USA, Hacker Halted, ISSA, and TakeDownCon conferences as
well as many others. He has chaired the Cybercrime and Cyber Defense Summit in Oman
and was the executive chairman of the Oil and Gas Cyber Defense Summit. He is the author
of Building Virtual Pen testing Labs for Advanced Penetration Testing, 1st Edition,
Advanced Penetration Testing for Highly Secured Environments, Second Edition, and
Backtrack: Testing Wireless Network Security. He holds a bachelor of science degree in
computer science from National University in California and a master’s degree in software
engineering from the Southern Methodist University (SMU) in Texas. He developed the
strategy and training development plan for the first Government CERT in the country of
Oman that recently was rated as the top CERT for the Middle East. He serves as a
professional training consultant to the Oman Information Technology Authority, and he
developed the team to man the first Commercial Security Operations Center in the country
of Oman. He has worked extensively with banks and financial institutions throughout the
Middle East, Europe, and the UK in the planning of a robust and secure architecture and
implementing requirements to meet compliance. He currently provides consultancy to
Commercial companies, governments, federal agencies, major banks, and financial
institutions throughout the globe. Some of his recent consulting projects include the Muscat
Securities Market (MSM), Petroleum Development Oman, and the Central Bank of Oman.
He designed and implemented the custom security baseline for the existing Oman Airport
Management Company (OAMC) airports and the two new airports opening in 2016 as well
as for the Oman Telephone Company. He created custom security baselines for all of the
Microsoft Operating Systems, Cisco devices, as well as applications.