In this chapter we have covered the various techniques for gathering information against a victim using the modules of Metasploit. We covered some freely available tools along with some auxiliary scanners. Using some of the auxiliary scanners we were actually able to fingerprint a particular running service. Through Nmap we learned to perform a network scan for live systems, firewall protected systems, and the various other scanning techniques which can be used in different scenarios. We saw that Nessus is a very big tool, which can be used for vulnerability assessment of a victim machine. We also learned to import Nmap and Nessus reports into Metasploit. With this chapter, we are already one step ahead in exploiting our victim, and will move on to covering client-side exploitation in the next chapter.
Learning Metasploit Exploitation and Development
By :
Learning Metasploit Exploitation and Development
By:
Overview of this book
<p>Metasploit is an open source exploit framework that provides you with heaps of exploits, as well as tools to assist you in creating your own exploits. This includes the ability to generate a large range of shellcodes for different purposes and platforms that can be customized to attack your target. The recent improvements in network security mechanisms have given rise to new trends and techniques of compromising a network. This book deals with these recent trends and attack tips to compromise the weakest to the strongest of networks. Metasploit Exploitation and Development describes actual penetration testing skills and ways to penetrate and assess different types of networks.<br /><br />Metasploit Exploitation and Development is a perfect fit for hackers who want to develop some real exploitation skills. This book has been designed with a practical approach which emphasizes hands-on rather than theoretical reading. It covers all the new exploits for new operating systems and tips from the experience of real hackers. This is a best buy book for learning the art of exploitation and skills of a penetration tester.<br /><br />Metasploit Exploitation and Development is a guide to real network hacking with the best tricks to master the art of exploitation.</p>
<p><br />This book has been designed in well-defined stages so the reader learns more effectively. From the actual setup to vulnerability assessment, this book provides an individual with in-depth knowledge of an expert penetration tester. The book deals with vulnerability assessment exercises with some of the industrially-used tools and report-making tips. It covers topics such as client exploitation, backdoors, post exploitation, and also exploitation development with Metasploit.<br />This book has been developed with a practical hands-on approach so that readers can effectively try and test what they actually read.</p>
<p><br />Metasploit Exploitation and Development covers the experience of real network hacking with some of the latest operating systems. The readers will go through a journey in which they will learn from basic to advanced levels of the art of exploitation.</p>
<p><br />This book covers real hacking and exploitation of the current vulnerabilities in some of the latest operating systems.</p>
Related Content you might be interested in
Current Title:
Learning Metasploit Exploitation and Development
No titles found
Table of Contents (20 chapters)
Learning Metasploit Exploitation and Development
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
Free Chapter
Lab Setup
Metasploit Framework Organization
Exploitation Basics
Meterpreter Basics
Vulnerability Scanning and Information Gathering
Client-side Exploitation
Post Exploitation
Post Exploitation – Privilege Escalation
Post Exploitation – Cleaning Up Traces
Post Exploitation – Backdoors
Post Exploitation – Pivoting and Network Sniffing
Exploit Research with Metasploit
Using Social Engineering Toolkit and Armitage
Index
Customer Reviews