Resources: "Be a Better Trainer" (Level-up)
Password Dictionary Creation
Documentation: "John the Ripper password cracker" (OpenWall)
Password Dictionaries: "Password dictionaries" (Skull Security)
Project Site: "CeWL - Custom Word List generator" (Robin Wood)
Presentation: "Supercharged John the Ripper Techniques" (Rick Redman KoreLogic)
Project Site: "Hashcat: advanced password recovery" (hashcat.net)
Guide: "KoreLogic's Custom rules" (Rick Redman - KoreLogic)
Guide: "Creating custom username list & wordlist for bruteforciing" (Nirav Desai)
Source Code: "JohnTheRipper: bleeding-jumbo branch"
Standard: "Pre-Engagement" (The Penetration Testing Execution Standard: PreEngagement Guidelines)
Template: Pre-Inspection Visit ( VulnerabilityAssessment.co.uk)
Template: "Rules of Engagement Template" (NIST SP 800-115)
Article: "Legal Issues in Penetration Testing"
Other Pre-Engagement Resources
Standard: "Pre-Engagement" (The Penetration Testing Execution Standard: PreEngagement Guidelines)
Template: Pre-Inspection Visit ( VulnerabilityAssessment.co.uk)
Incident Handling Resources
Legal Considerations
Data Security Standards
ACTIVITIES
ASSESSMENT PLAN
Summary
Page 15 of 240