Mastering Kali Linux for Advanced Penetration Testing: Secure your network with Kali Linux 2019.1 – the ultimate white hat hackers’ toolkit,3rd Edition
Authors: Vijay Kumar Velu – Robert Beggs
ISBN-10: 178934056X
ISBN-13: 9781789340563
Released: 2019-01-30
Publisher finelybook 出版社: Packt
Print Length 页数: 548 pages
Book Description
This book takes you,as a tester or security practitioner,through the reconnaissance,vulnerability assessment,exploitation,privilege escalation,and post-exploitation activities used by pentesters.
To start with,you’ll use a laboratory environment to validate tools and techniques,along with an application that supports a collaborative approach for pentesting. You’ll then progress to passive reconnaissance with open source intelligence and active reconnaissance of the external and internal infrastructure. You’ll also focus on how to select,use,customize,and interpret the results from different vulnerability scanners,followed by examining specific routes to the target,which include bypassing physical security and the exfiltration of data using a variety of techniques. You’ll discover concepts such as social engineering,attacking wireless networks,web services,and embedded devices.
Once you are confident with these topics,you’ll learn the practical aspects of attacking user client systems by backdooring with fileless techniques,followed by focusing on the most vulnerable part of the network – directly attacking the end user. By the end of this book,you’ll have explored approaches for carrying out advanced pentesting in tightly secured environments,understood pentesting and hacking techniques employed on embedded peripheral devices.
Contents
1: GOAL-BASED PENETRATION TESTING
2: OPEN SOURCE INTELLIGENCE AND PASSIVE RECONNAISSANCE
3: ACTIVE RECONNAISSANCE OF EXTERNAL AND INTERNAL NETWORKS
4: VULNERABILITY ASSESSMENT
5: ADVANCED SOCIAL ENGINEERING AND PHYSICAL SECURITY
6: WIRELESS ATTACKS
7: EXPLOITING WEB-BASED APPLICATIONS
8: CLIENT-SIDE EXPLOITATION
9: BYPASSING SECURITY CONTROLS
10: EXPLOITATION
11: ACTION ON THE OBJECTIVE AND LATERAL MOVEMENT
12: PRIVILEGE ESCALATION
13: COMMAND AND CONTROL
14: EMBEDDED DEVICES AND RFID HACKING
What You Will Learn
Confiure the most effective Kali Linux tools to test infrastructure security
Employ stealth to avoid detection in the infrastructure being tested
Recognize when stealth attacks are being used against your infrastructure
Exploit networks and data systems using wired and wireless networks as well as web services
Identify and download valuable data from target systems
Maintain access to compromised systems
Use social engineering to compromise the weakest part of the network – the end users
Authors
Vijay Kumar Velu
Vijay Kumar Velu is a Passionate Information Security Practitioner,Author,Speaker,Investor and Blogger. He has more than 12 years of IT industry experience,is a Licensed Penetration Tester,and has specialized in providing technical solutions to a variety of cyber problems,ranging from simple security configuration reviews to cyber threat intelligence. Vijay holds multiple security qualifications including CEH,ECSA and CHFI.
He has Authored couple of books on Penetration Testing “Mastering Kali Linux for Advanced Penetration Testing Second Edition” and “Mobile Application Penetration Testing”.
For community Vijay servers as Chair member in NCDRC,India. Out of work,He enjoys playing music and doing charity.
Robert Beggs
Robert Beggs is the founder and CEO of DigitalDefence,a Canadian-focused company that specializes in preventing and responding to information security incidents. Robert is a security practitioner with more than 15 years of experience. He has been responsible for the technical leadership and project management of more than 300 consulting engagements,including policy development and review,standards compliance,penetration testing of wired and wireless networks,third party security assessments,incident response and data forensics,and other consulting projects. Previously,he provided security services for a major Canadian financial institution and Netigy,a global network and security infrastructure firm based in San Jose.
