Network Security Assessment

Chris McNab provides a technical framework for performing structural penetration testing across modern IT infrastructures. This third edition details the exact methods used to scan, probe, and exploit specific network services. The text covers vulnerabilities within core protocols like SNMP, LDAP, and Kerberos, as well as configuration weaknesses in web servers such as Nginx and Apache. McNab examines risks associated with Microsoft-specific services like SMB and RDP, while also providing checklists for securing IPsec and TLS implementations. Each section contrasts offensive techniques with defensive countermeasures to mitigate risk.

Security professionals and systems administrators read this book to develop a systematic approach to vulnerability management. It serves as a manual for those responsible for auditing enterprise environments and identifying entry points before malicious actors do. Readers gain a technical understanding of how to test database servers, email protocols, and web application frameworks for common flaws. By implementing the provided checklists, a reader leaves with a functional toolkit for quantifying network risk and hardening system components against contemporary attack surfaces.

Outward-looking, growth-minded and clear-cut; a moderate read.

Best for readers like The Practical Optimizer. Which reader are you?