Book description
Discover end-to-end penetration testing solutions to enhance your ethical hacking skills
Key Features
- Practical recipes to conduct effective penetration testing using the latest version of Kali Linux
- Leverage tools like Metasploit, Wireshark, Nmap, and more to detect vulnerabilities with ease
- Confidently perform networking and application attacks using task-oriented recipes
Book Description
Many organizations have been affected by recent cyber events. At the current rate of hacking, it has become more important than ever to pentest your environment in order to ensure advanced-level security. This book is packed with practical recipes that will quickly get you started with Kali Linux (version 2018.4 / 2019), in addition to covering the core functionalities.
The book will get you off to a strong start by introducing you to the installation and configuration of Kali Linux, which will help you to perform your tests. You will also learn how to plan attack strategies and perform web application exploitation using tools such as Burp and JexBoss. As you progress, you will get to grips with performing network exploitation using Metasploit, Sparta, and Wireshark. The book will also help you delve into the technique of carrying out wireless and password attacks using tools such as Patator, John the Ripper, and airoscript-ng. Later chapters will draw focus to the wide range of tools that help in forensics investigations and incident response mechanisms. As you wrap up the concluding chapters, you will learn to create an optimum quality pentest report.
By the end of this book, you will be equipped with the knowledge you need to conduct advanced penetration testing, thanks to the book's crisp and task-oriented recipes.
What you will learn
- Learn how to install, set up and customize Kali for pentesting on multiple platforms
- Pentest routers and embedded devices
- Get insights into fiddling around with software-defined radio
- Pwn and escalate through a corporate network
- Write good quality security reports
- Explore digital forensics and memory analysis with Kali Linux
Who this book is for
If you are an IT security professional, pentester, or security analyst who wants to conduct advanced penetration testing techniques, then this book is for you. Basic knowledge of Kali Linux is assumed.
Table of contents
- Title Page
- Copyright and Credits
- About Packt
- Contributors
- Preface
-
Kali - An Introduction
- Configuring Kali Linux
- Configuring the Xfce environment
- Configuring the MATE environment
- Configuring the LXDE environment
- Configuring the E17 environment
- Configuring the KDE environment
- Prepping with custom tools
- Zone Walking using DNSRecon
- Setting up I2P for anonymity
- Pentesting VPN's ike-scan
- Setting up proxychains
- Going on a hunt with Routerhunter
-
Gathering Intel and Planning Attack Strategies
- Getting a list of subdomains
- Using Shodan for fun and profit
- Shodan Honeyscore
- Shodan plugins
- Censys
- Using Nmap to find open ports
- Bypassing firewalls with Nmap
- Searching for open directories using GoBuster
- Hunting for SSL flaws
- Automating brute force with BruteSpray
- Digging deep with TheHarvester
- Finding technology behind webapps using WhatWeb
- Scanning IPs with masscan
- Finding origin servers with CloudBunny
- Sniffing around with Kismet
- Testing routers with Firewalk
-
Vulnerability Assessment - Poking for Holes
- Using the infamous Burp
- Exploiting WSDLs with Wsdler
- Using Intruder
- Using golismero
- Exploring Searchsploit
- Exploiting routers with routersploit
- Using Metasploit
- Automating Metasploit
- Writing a custom resource script
- Setting up a database in Metasploit
- Generating payloads with MSFPC
- Emulating threats with Cobalt Strike
-
Web App Exploitation - Beyond OWASP Top 10
- Exploiting XSS with XSS Validator
- Injection attacks with sqlmap
- Owning all .svn and .git repositories
- Winning race conditions
- Exploiting XXEs
- Exploiting Jboss with JexBoss
- Exploiting PHP Object Injection
- Automating vulnerability detection using RapidScan
- Backdoors using meterpreter
- Backdoors using webshells
-
Network Exploitation
- Introduction
- MITM with hamster and ferret
- Exploring the msfconsole
- Railgun in Metasploit
- Using the paranoid meterpreter
- The tale of a bleeding heart
- Exploiting Redis
- Saying no to SQL – owning MongoDBs
- Hacking embedded devices
- Exploiting Elasticsearch
- Good old Wireshark
- This is Sparta
- Exploiting Jenkins
- Shellver – reverse shell cheatsheet
- Generating payloads with MSFvenom Payload Creator (MSFPC)
- Wireless Attacks - Getting Past Aircrack-ng
- Password Attacks - The Fault in Their Stars
-
Have Shell, Now What?
- Spawning a TTY shell
- Looking for weaknesses
- Horizontal escalation
- Vertical escalation
- Node hopping – pivoting
- Privilege escalation on Windows
- Pulling a plaintext password with Mimikatz
- Dumping other saved passwords from the machine
- Pivoting
- Backdooring for persistance
- Age of Empire
- Automating Active Directory (AD) exploitation with DeathStar
- Exfiltrating data through Dropbox
- Data exfiltration using CloakifyFactory
- Buffer Overflows
- Elementary, My Dear Watson - Digital Forensics
- Playing with Software-Defined Radios
- Kali in Your Pocket - NetHunters and Raspberries
- Writing Reports
- Other Books You May Enjoy
Product information
- Title: Kali Linux - An Ethical Hacker's Cookbook - Second Edition
- Author(s):
- Release date: March 2019
- Publisher(s): Packt Publishing
- ISBN: 9781789952308
You might also like
book
Kali Linux - An Ethical Hacker's Cookbook
Over 120 recipes to perform advanced penetration testing with Kali Linux About This Book Practical recipes …
book
Kali Linux Cookbook - Second Edition
Over 80 recipes to effectively test your network and boost your career in security About This …
video
Hacking WEP/WPA/WPA2 Wi-Fi Networks Using Kali Linux
In this course, you will learn how to set up your Kali Linux lab environment properly. …
book
Mastering Kali Linux for Advanced Penetration Testing - Third Edition
A practical guide to testing your infrastructure security with Kali Linux, the preferred choice of pentesters …
