Professional Penetration Testing: Volume 1 and over one million other books are available for Amazon Kindle. Learn more
CDN$ 69.34
  • List Price: CDN$ 85.80
  • You Save: CDN$ 16.46 (19%)
Only 1 left in stock (more on the way).
Ships from and sold by
Gift-wrap available.
Add to Cart
Have one to sell?
Flip to back Flip to front
Listen Playing... Paused   You're listening to a sample of the Audible audio edition.
Learn more
See this image

Professional Penetration Testing: Volume 1: Creating and Learning in a Hacking Lab Paperback – Aug 14 2009

Amazon Price New from Used from
Kindle Edition
"Please retry"
"Please retry"
CDN$ 69.34
CDN$ 45.63 CDN$ 12.00
"Please retry"

Join Amazon Student in Canada

Customers Who Bought This Item Also Bought


Product Details

  • Paperback: 528 pages
  • Publisher: Syngress; 1 edition (Aug. 14 2009)
  • Language: English
  • ISBN-10: 1597494259
  • ISBN-13: 978-1597494250
  • Product Dimensions: 3 x 18.5 x 22.8 cm
  • Shipping Weight: 907 g
  • Average Customer Review: 5.0 out of 5 stars  See all reviews (2 customer reviews)
  • Amazon Bestsellers Rank: #342,346 in Books (See Top 100 in Books)
  • See Complete Table of Contents

Inside This Book (Learn More)
Browse Sample Pages
Front Cover | Copyright | Table of Contents | Excerpt | Index
Search inside this book:

What Other Items Do Customers Buy After Viewing This Item?

Customer Reviews

5.0 out of 5 stars
5 star
4 star
3 star
2 star
1 star
See both customer reviews
Share your thoughts with other customers

Most helpful customer reviews

Format: Paperback
This is a very well written book, and it includes slides and lecture from 2 full courses from [...]
The courses included here are the HPTF and HIPT courses, which are no longer offered via the web site.

The content covers much more than a how-to form some of the tools available in the trade, but actual tips from real life experience on how to get started in the field.
Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback. If this review is inappropriate, please let us know.
Sorry, we failed to record your vote. Please try again.
Format: Paperback
I bought this book about 6 months ago to help me set up my lab. Everything is very well explained. It contains lots of details but somehow, the amount of information doesn't make reading too heavy.

Excellent book. It helped me a lot starting my career!
Was this review helpful to you? Yes No Sending feedback...
Thank you for your feedback. If this review is inappropriate, please let us know.
Sorry, we failed to record your vote. Please try again.

Most Helpful Customer Reviews on (beta) 10 reviews
38 of 41 people found the following review helpful
Should be called "Professional Pen Testing Project Management" Jan. 27 2010
By Richard Bejtlich - Published on
Format: Paperback
I had fairly high hopes for Professional Penetration Testing (PPT). The book looks very well organized, and it is published in the new Syngress style that is a big improvement over previous years. Unfortunately, PPT should be called "Professional Pen Testing Project Management." The vast majority of this book is about non-technical aspects of pen testing, with the remainder being the briefest overview of a few tools and techniques. You might find this book useful if you either 1) know nothing about the field or 2) are a pen testing project manager who wants to better understand how to manage projects. Those looking for technical content would clearly enjoy a book like Professional Pen Testing for Web Applications by Andres Andreu, even though that book is 3 years older and focused on Web apps.

PPT offers 18 chapters, with 12 chapters on project management and non-technical issues, and 6 ostensibly covering technical issues. The technical material is limited to the basics of conducting reconnaissance, running Nmap, Nessus, CORE IMPACT, Ettercap, Aircrack-ng, Netcat for "maintaining access," SSH for an "encrypted tunnel," and trivial file and script changes to "cover tracks." Seriously. I'm sure some review readers are saying "sometimes it's just that easy." That's true, but we don't need a 528 page book with an outrageous price tag to read about these well-known methods. If your experience with pen testing is limited to this book, take a look at Andres Andreu's title to see the sort of material you should expect in a book on pen testing.

I didn't find the project management parts all that helpful, either. Some of it just repeats material published in various guides like the Open Source Security Testing Methodology Manual. Other sections repeat certification descriptions found on vendor Web sites. It is clear the author really cares about project management, so maybe he should have just written a book on project management for security managers?

I gave the book three stars because I didn't find the book to be technically or managerially incorrect. (If that had been the case, I would have rated it two stars.) If you want much better coverage on technical matters not found in Andreu's book, try the core Hacking Exposed titles. They address the same topics that PPT barely introduces.
10 of 10 people found the following review helpful
A Very Good book for the intended Audience March 19 2010
By Bane - Published on
Format: Paperback
I recently finished going through Professional Penetration Testing by Wilhelm. This book is very good for beginers and advance Pen testers. In the past there have not really been any texts that focused on the entire process of Penetration testing. This is where Professional Penetration Testing excells. It goes over the entire process from start to finish.

For beginners, this text gives a very good overview of the entire penetration testing process from scoping all the way to writing an executive summary. For advanced testers, the most valuable sections are problaby the ones on testing frameworks, scoping, and report writing. I have met many testers who were excellent technically but could not communicate the results effectively to business leaders, this book will help these testers improve in that area. Advanced Pen Testers will probably not learn any technical tricks from this text.

My only complaint about the book is that it doesn't really go into how any of the exploits that one would use in pen testing work. For example, the author gives a listing of different NMAP scan options and very briefly goes over what the options are, but doesn't really explain why you would use one over the other. I am guessing that this omission is primarily due to the space required to add such information and the that the goal of the text seems to be to give the whole view of pen testing without going into too much deatil on any section.
7 of 8 people found the following review helpful
PPT is an excellent and easy read April 27 2010
By K. Wolstencroft - Published on
Format: Paperback
I have read quite a few books covering the security field and have found most of them very dry and hard to read. Thomas Wilhelm's PPT book is the exception, I found it easy to read and managed to complete it in a weekend. The book will suit both the security professional and those new to the security field. The technical depth of the book will benefit systems administrators who need to gain an understanding of penetration testing. The project management aspects of the book will benefit the security professional moving into a more managerial role.
2 of 2 people found the following review helpful
Of Value - Maybe Not What You Expect Dec 30 2010
By Douglas Gullett - Published on
Format: Paperback
This book appears to be directed toward at least three audiences: Security consultants that may wish to start their own company, project managers interested in managing penetration testing, and finally those that want to get into the penetration testing field. There were some awesome nuggets in this book, but I felt that I had to dig to get to them. The book did not flow well in my opinion. Based on the title, I was hoping for a book that would take you through setting up an advanced "Professional" lab and address more advanced techniques.

The author definitely thought out all the ins and outs of writing up a contract with a client and many more legal ramifications that most companies focus on. That section is much marked up and will be kept for future reference.

I will admit I was a bit disappointed in part 2 as it clearly is directed toward beginners and not those with much experience. Overall, there is valuable information in this book and the material and extras on the CD are valuable. I think that it may have been more suitable to make this into two separate books.

The book has valuable knowledge, but the title is a bit misleading.

The next book on my list: Ninja Hacking: Unconventional Penetration Testing Tactics and Techniques, from the same author.
1 of 1 people found the following review helpful
The title of book should be: How to use the tools for penetration test Oct. 24 2012
By Rami S. Altalhi - Published on
Format: Paperback Verified Purchase
I have read this book and found it talking about the tools most of the time, There is no such complete scenario of Penetration Testing and going step by step, That's why I'm not comfortable with this book after I read it.

I'll give you an example, Look at this book from Cisco Penetration Testing and Network Defense This book is published in 2005 but the way to deliver the penetration test is totally different than this book.

Product Images from Customers