Book Image

Kali Linux - An Ethical Hacker's Cookbook

By : Himanshu Sharma
Book Image

Kali Linux - An Ethical Hacker's Cookbook

By: Himanshu Sharma

Overview of this book

With the current rate of hacking, it is very important to pentest your environment in order to ensure advanced-level security. This book is packed with practical recipes that will quickly get you started with Kali Linux (version 2016.2) according to your needs, and move on to core functionalities. This book will start with the installation and configuration of Kali Linux so that you can perform your tests. You will learn how to plan attack strategies and perform web application exploitation using tools such as Burp, and Jexboss. You will also learn how to perform network exploitation using Metasploit, Sparta, and Wireshark. Next, you will perform wireless and password attacks using tools such as Patator, John the Ripper, and airoscript-ng. Lastly, you will learn how to create an optimum quality pentest report! By the end of this book, you will know how to conduct advanced penetration testing thanks to the book’s crisp and task-oriented recipes.
Table of Contents (20 chapters)
Title Page
Credits
Disclaimer
About the Author
About the Reviewer
www.PacktPub.com
Customer Feedback
Preface
6
Wireless Attacks – Getting Past Aircrack-ng

Cracking hashes online


Often when we come across hashes while pentesting, it's a good idea to check the hash online: whether it has been already cracked or not. In this recipe, you will learn about some of the cool websites that provide the hash cracking service.

How to do it...

Let's take a look at identifying different types of hashes.

Hashkiller

The following steps demonstrate the use of Hashkiller:

  1. Hashkiller is a great service where we can submit our hashes, and if it has already been cracked in the past, it will show us the plaintext:
  1. The process is simple; we simply choose the option on the website where it says Decrypter / Cracker and then we click on the type of hash we want to crack:
  1. On the page that opens, we paste our hash, fill in the CAPTCHA, and then click on Submit:
  1. If the hash exists, it will show us the plaintext; else, we will see a message saying Failed to find any hashes!:

Crackstation

Crackstation is a free service that supports MD2, MD5, NTLM, and SHA1 cracking. It uses its...