仅支持付费会员使用
微信扫码开通付费会员
The Ultimate Kali Linux Book
Glen D. Singh
微信读书推荐值 0%
待评分
0人点评
推荐
一般
不行
推荐(0)
一般(0)
不行(0)
阅读
11人
会员卡可读
字数
93.2万字
微信读书推荐值 0%
待评分
0人点评
推荐
一般
不行
推荐(0)
一般(0)
不行(0)
阅读
11人
会员卡可读
字数
93.2万字
The Ultimate Kali Linux BookGlen D. Singh
Master the art of ethical hacking, from setting up labs and exploiting security vulnerabilities, to implementing Command and Control (C2) operations, this hands-on guide is your ultimate real-wo
Master the art of ethical hacking, from setting up labs and exploiting security vulnerabilities, to implementing Command and Control (C2) operations, this hands-on guide is your ultimate real-wo
简介
Master the art of ethical hacking, from setting up labs and exploiting security vulnerabilities, to implementing Command and Control (C2) operations, this hands-on guide is your ultimate real-wo
版权
出版社packt
出版时间2024年4月
字数931,979
分类计算机-计算机综合
试读结束
本书为付费会员卡可读
登录后获得专属福利 · 百万好书免费读
热门想法
复制
划线
写想法
查询
书友想法
评论
赞
0
暂无评论
发 表
回复
赞
评论详情
发 表
写想法
公开
确定删除吗？
取 消
删 除
想法 · 0
写想法
书友想法
评论
0
赞
0
暂无评论
发 表
回复
赞
评论详情
发 表
写想法
公开
查询
继续提问
Generated by AI
写想法
公开
字号大小
字体
翻译完成
切 换
译文
目录
Ai 问书
笔记
开启书友想法
上下滚动阅读
字号
浅色
The Ultimate Kali Linux Book
Glen D. Singh
- 扉页
- 版权信息+书签
- Contributors
- Preface
- Who this book is for
- What this book covers
- To get the most out of this book
- Disclaimer
- Get in touch
- Free benefits with your book
- 1 Introduction to Ethical Hacking
- Understanding the need for cybersecurity
- Exploring cybersecurity terminology
- Identifying threat actors and their intent
- Understanding what matters to threat actors
- Time
- Resources
- Financial factors
- Hack value
- Exploring the importance of penetration testing
- Penetration testing methodologies
- Pre-engagement phase
- Information-gathering phase
- Threat modeling
- Vulnerability analysis
- Exploitation
- Post-exploitation
- Report writing
- Discovering penetration testing approaches
- Types of penetration testing
- Web application penetration testing
- Mobile application penetration testing
- Social engineering penetration testing
- Network penetration testing (external and internal)
- Cloud penetration testing
- Physical penetration testing
- Exploring the phases of penetration testing
- Reconnaissance
- Scanning and enumeration
- Gaining access (exploitation)
- Maintaining access
- Covering your tracks
- Understanding the Cyber Kill Chain framework
- Reconnaissance
- Weaponization
- Delivery
- Exploitation
- Installation
- Command and Control (C2)
- Actions on objectives
- Summary
- Further reading
- Get this book s PDF version and more
- 2 Building a Penetration Testing Lab
- Technical requirements
- An overview of the lab setup and technologies used
- Setting up a hypervisor and virtual networks
- Part 1 – setting up the hypervisor
- Part 2 – creating virtually isolated networks
- Setting up and working with Kali Linux
- Part 1 – deploying Kali Linux as a virtual machine
- Part 2 – customizing Kali Linux and its network adapters
- Part 3 – getting started with Kali Linux
- Part 4 – updating repository sources and packages
- Setting up a vulnerable web application
- Deploying Metasploitable 2 as a vulnerable machine
- Part 1 – deploying Metasploitable 2
- Part 2 – configuring network settings
- Building and deploying Metasploitable 3
- Part 1 – building the Windows server version
- Part 2 – building the Linux server version
- Summary
- Further reading
- Get this book s PDF version and more
- 3 Setting Up for Advanced Penetration Testing Techniques
- Technical requirements
- Building an Active Directory red team lab
- Part 1 – Setting up Windows Server
- Part 2 – Configuring virtual machine additional features
- Part 3 – Setting Active Directory Domain Services
- Part 4 – Creating domain users and administrator accounts
- Part 5 – Disabling antimalware protection and the domain firewall
- Part 6 – Setting up for service authentication attacks
- Part 7 – Installing Windows 10 Enterprise
- Part 8 – Adding the clients to the domain
- Part 9 – Setting up for account takeover and file sharing attacks
- Setting up a wireless penetration testing lab
- Brief overview of wireless network security
- Setting up a RADIUS server
- Summary
- Further reading
- Get this book s PDF version and more
- 4 Passive Reconnaissance
- Technical requirements
- The importance of reconnaissance
- Exploring passive reconnaissance
- Open source intelligence
- How much data should be collected?
- Creating a sock puppet
- Anonymizing internet-based traffic
- VPN
- Proxychains
- TOR
- Summary
- Further reading
- Get this book s PDF version and more
- 5 Exploring Open-Source Intelligence
- Technical requirements
- Google hacking techniques
- Domain reconnaissance
- Collecting WHOIS data
- Performing DNS enumeration
- Exploiting DNS zone transfer
- Automation using SpiderFoot
- Sub-domain harvesting
- Enumeration with DNSMap
- Sub-domain discovery with Knockpy
- Identifying organizational infrastructure
- Data leakage on job websites
- Finding vulnerable systems using Shodan
- Discovering exposed systems with Censys
- Mapping external systems using Maltego
- Identifying infrastructure with Netcraft
- Using Recon-ng for data harvesting
- Data collection with theHarvester
- Harvesting employees data using Hunter
- Automating social media reconnaissance with Sherlock
- Summary
- Further reading
- Get this book s PDF version and more
- 6 Active Reconnaissance
- Technical requirements
- Understanding active information
- Profiling websites using EyeWitness
- Exploring active scanning techniques
- Changing your MAC address
- Performing live host discovery
- Identifying open ports, services, and operating systems
- Using scanning evasion techniques
- Avoiding detection with decoys
- Using MAC and IP spoofing techniques
- Stealth scanning techniques
- Enumerating network services
- Enumerating SMB services
- Enumerating SMTP services
- Enumerating SNMP services
- Discovering data leaks in the cloud
- Summary
- Further reading
- Get this book s PDF version and more
- 7 Performing Vulnerability Assessments
- Technical requirements
- Getting started with Nessus
- Part 1 – installing Nessus
- Part 2 – identifying vulnerabilities
- Part 3 – vulnerability analysis
- Part 4 – exporting vulnerability reports
- Vulnerability identification using Nmap
- Working with Greenbone Vulnerability Manager
- Part 1 – installing GVM
- Part 2 – vulnerability identification
- Part 3 – vulnerability analysis and reporting
- Using web application scanners
- WhatWeb
- Nmap
- Nikto
- Metasploit
- WPScan
- Summary
- Further reading
- Get this book s PDF version and more
- 8 Understanding Network Penetration Testing
- Technical requirements
- Introduction to network penetration testing
- Working with bind and reverse shells
- Working with remote shells using Netcat
- Setting up a bind shell
- Setting up reverse shells
- Antimalware evasion techniques
- Encoding payloads with MSFvenom
- Creating custom payloads with Shellter
- Working with wireless adapters
- Connecting wireless adapters to Kali Linux
- Connecting a wireless adapter with an RTL8812AU chipset
- Managing and Monitoring wireless modes
- Configuring Monitoring mode
- Using aircrack-ng to enable monitor mode
- Summary
- Further reading
- Get this book s PDF version and more
- 9 Performing Network Penetration Testing
- Technical requirements
- Exploring password-based attacks
- Creating a keyword-based wordlist
- Generating a custom wordlist using Crunch
- Gaining access by exploiting SSH
- Exploiting Remote Desktop Protocol
- Performing host discovery
- Profiling a targeted system
- Identifying and exploiting vulnerable services
- Exploiting Linux-based systems
- Compromising Windows-based systems
- Cracking hashes with Hashcat
- Exploiting Windows Remote Management
- Exploiting ElasticSearch
- Exploiting Simple Network Management Protocol
- Summary
- Further reading
- Get this book s PDF version and more
- 10 Post-Exploitation Techniques
- Technical requirements
- Pass-the-hash techniques
- Gaining a shell with PTH-WinExe
- Working with Impacket
- Pass-the-hash for remote desktop
- Post exploitation using Meterpreter
- Core operations
- User interface options
- File transfers
- Privilege escalation
- Token stealing and impersonation
- Setting up persistence
- Lateral movement and pivoting
- Clearing tracks
- Data encoding and exfiltration
- Encoding using exe2hex
- Exfiltration with PacketWhisper
- Man-in-the-Middle (MiTM) attacks
- Summary
- Further reading
- Get this book s PDF version and more
- 11 Delving into Command and Control Tactics
- Technical requirements
- Understanding C2
- Setting up C2 operations
- Part 1 – Empire client-server model
- Part 2 – Managing users on Empire
- Post-exploitation using Empire
- Working with Starkiller
- Summary
- Further reading
- Get this book s PDF version and more
- 12 Working with Active Directory Attacks
- Technical requirements
- Understanding Active Directory
- Enumerating Active Directory
- Working with PowerView
- Exploring BloodHound
- Leveraging network-based trust
- Exploiting LLMNR and NetBIOS-NS
- Exploiting SMB and NTLMv2 within Active Directory
- Summary
- Further reading
- Get this book s PDF version and more
- 13 Advanced Active Directory Attacks
- Technical requirements
- Understanding Kerberos
- Abusing trust on IPv6 with Active Directory
- Part 1: setting up for an attack
- Part 2: launching the attack
- Part 3: taking over the domain
- Attacking Active Directory
- Lateral movement with CrackMapExec
- Vertical movement with Kerberos
- Lateral movement with Mimikatz
- Domain dominance and persistence
- Golden ticket
- Silver ticket
- Skeleton key
- Summary
- Further reading
- Get this book s PDF version and more
- 14 Advanced Wireless Penetration Testing
- Technical Requirements
- Introduction to Wireless Networking
- Single-In Single-Out (SISO) and Multiple-In Multiple-Out (MIMO)
- Wireless security standards
- Performing Wireless Reconnaissance
- Identifying the associated clients of a targeted network
- Compromising WPA/WPA2 Networks
- Performing AP-less Attacks
- Exploiting Enterprise Networks
- Part 1 – setting up for the attack
- Part 2 – choosing the target
- Part 3 – starting the attack
- Part 4 – retrieving user credentials
- Setting Up a Wi-Fi Honeypot
- Exploiting WPA3 Attacks
- Performing a Downgrade and Dictionary Attack
- Summary
- Further Reading
- Get this book s PDF version and more
- 15 Social Engineering Attacks
- Technical requirements
- Fundamentals of social engineering
- Elements of social engineering
- Types of social engineering
- Human-based social engineering
- Computer-based social engineering
- Mobile-based social engineering
- Social networking
- Planning for each type of social engineering attack
- Defending against social engineering
- Exploring social engineering tools and techniques
- Creating infectious media
- Creating a phishing website
- Creating a fake wireless network
- Summary
- Further reading
- Get this book s PDF version and more
- 16 Understanding Website Application Security
- Technical requirements
- Understanding web applications
- The fundamentals of HTTP
- Exploring the OWASP Top 10: 2021
- Getting started with FoxyProxy and Burp Suite
- Part 1 - setting up FoxyProxy
- Part 2 - setting up Burp Suite
- Part 3 - getting familiar with Burp Suite
- Understanding injection-based attacks
- Performing an SQLi attack
- Exploring broken access control attacks
- Discovering cryptographic failures
- Understanding insecure design
- Exploring security misconfiguration
- Summary
- Further reading
- Get this book s PDF version and more
- 17 Advanced Website Penetration Testing
- Technical requirements
- Identifying vulnerable and outdated components
- Exploiting identification and authentication failures
- Discovering authentication failures
- Understanding software and data integrity failures
- Exploring server-side request forgery
- Understanding security logging and monitoring failures
- Identifying logging security vulnerabilities
- Understanding cross-site scripting
- Part 1 – Discovering reflected XSS
- Part 2 – Performing DOM-based XSS
- Part 3 – Discovering stored XSS
- Automating SQL injection attacks
- Part 1 – Discovering databases
- Part 2 – Retrieving sensitive information
- Performing client-side attacks
- Summary
- Further reading
- Get this book s PDF version and more
- 18 Best Practices for the Real World
- Technical requirements
- Guidelines for penetration testers
- Gaining written permission
- Being ethical
- Penetration testing contract
- Rules of engagement
- Penetration testing checklist
- Pre-engagement
- Reconnaissance
- Enumeration
- Vulnerability assessment
- Exploitation
- Post-exploitation
- Covering tracks
- Report writing
- Creating a hacker s toolkit
- ESP8266 microcontroller
- WiFi Pineapple Nano
- Bash Bunny
- Packet Squirrel
- LAN Turtle
- Mini USB-powered network switch
- Retractable network cable
- Flipper Zero
- Setting up remote access
- Next steps ahead
- Summary
- Further reading
- Get this book s PDF version and more
- Appendix
- Setting Up a Penetration Testing Lab on Ubuntu Desktop
- Technical requirements
- An overview of the lab setup and technologies used
- Setting up a hypervisor and virtual networks
- Setting up Kali Linux on Ubuntu
- Setting up Metasploitable 3 on Ubuntu
- Part 1 – building the Windows Server version
- Part 2 – building the Linux Server version
- Summary
- Share your thohughts
- Index
The Ultimate Kali Linux Book
已读到0% · 共0条笔记
你可以在这里记录本书的
想法、划线、书签
想法、划线、书签
点评此书
点评此书
推荐
一般
不行
公开
书友想法
评论
0
赞
0
暂无评论
发 表
回复
赞
评论详情
发 表
确定删除吗？
取 消
删 除
《The Ultimate Kali Linux Book》
仅支持付费会员使用
仅支持付费会员使用
微信扫码开通付费会员