Metasploit: The Penetration Tester’s Guide, 2nd Edition

Metasploit, 2nd Edition

Metasploit, 2nd Edition

Author: by David Kennedy (Author), Mati Aharoni (Author), Devon Kearns (Author), Jim O’Gorman (Author), Daniel G. Graham (Author)

Publisher finelybook 出版社:‏ ‎ No Starch Press

Edition 版次:‏ ‎ 2nd edition

Publication Date 出版日期:‏ ‎ 2025-01-28

Language 语言: ‎ English

Print Length 页数: ‎ 288 pages

ISBN-10: ‎ 1718502982

ISBN-13: ‎ 9781718502987


Book Description
By finelybook

The new and improved guide to penetration testing using the legendary Metasploit Framework.

Metasploit: The Penetration Tester’s Guide has been the definitive security assessment resource for over a decade. The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless, but using it can be challenging for newcomers.

Written by renowned ethical hackers and industry experts, this fully updated second edition includes:

  • Advanced Active Directory and cloud penetration testing
  • Modern evasion techniques and payload encoding
  • Malicious document generation for client-side exploitation
  • Coverage of recently added modules and commands


Starting with Framework essentials—exploits, payloads, Meterpreter, and auxiliary modules—you’ll progress to advanced methodologies aligned with the Penetration Test Execution Standard (PTES). Through real-world examples and simulated penetration tests, you’ll:

  • Conduct network reconnaissance and analyze vulnerabilities
  • Execute wireless network and social engineering attacks
  • Perform post-exploitation techniques, including privilege escalation
  • Develop custom modules in Ruby and port existing exploits
  • Use MSFvenom to evade detection
  • Integrate with Nmap, Nessus, and the Social-Engineer Toolkit


Whether you’re a cybersecurity professional, ethical hacker, or IT administrator, this second edition of
Metasploit: The Penetration Tester’s Guide is your key to staying ahead in the ever-evolving threat landscape.

Review

“This is an excellent book to help familiarize testers with one of the most popular security tools ever created. It will help guide you through familiar concepts and how they integrate into the broader security framework of Metasploit. An absolutely fantastic addition to any penetration tester’s bookshelf.” 
—Menachem Rothbart, Principal Security Consultant, Hacker, OSCE3

“The Metasploit Framework has enrichments and features that can enhance your offensive security journey, and they’re all covered in this book. Many users are acquainted with the pre-built exploitation and initial access use cases covered in the first edition, but this update includes new vulnerabilities, their associated modules, and the new frontier of cloud penetration testing. A practitioner’s toolkit and environment may change, but the methodology remains the same.”  
—Billy Trobbiani, @billycontra, Red Team Engineer at Toast, Inc.

“Not just another Metasploit tutorial. The second edition of this comprehensive book walks you through each stage of a simulated penetration test, and shows you how to use Metasploit to its full potential. Plus, it is logically ordered and easy to follow.”
—Andy “ApexPredator” Poole, OSEE, GSE

“[P]rovides invaluable insights for penetration testers seeking to enhance their skills and understanding using Metasploit. However, its benefits extend beyond penetration testers. In contrast, blue teamers can also leverage the same techniques and knowledge in this book to go behind enemy lines and identify gaps in their own security controls before they can be exploited by attackers using the same toolset.”
—Josh Tristram, @jdtristram, Healthcare Blue Teamer

“An easy read that is more than a metasploit book. It covers beginner and intermediate concepts anyone interested in the offensive side of security should understand.”
—Dave Curtin, security consultant, LRQA

About the Author

Dave Kennedy, founder of Binary Defense and TrustedSec, is a cybersecurity leader who advised on the Emmy-winning series Mr. Robot. Mati Aharoni, OffSec founder, is a veteran penetration tester who has uncovered major security flaws. Devon Kearns co-founded the Exploit Database and Kali Linux. Jim O’Gorman heads the Kali Linux project at OffSec. Daniel G. Graham is a professor of computer science at the University of Virginia and a former program manager at Microsoft.

Amazon Page

相关文件下载地址

Format: PDF, (conv), EPUB | 11 MB | 2024-12-03
下载地址 Download解决验证以访问链接!
打赏
未经允许不得转载:finelybook » Metasploit: The Penetration Tester’s Guide, 2nd Edition

评论 抢沙发

觉得文章有用就打赏一下

您的打赏,我们将继续给力更多优质内容

支付宝扫一扫

微信扫一扫