Kali Linux - An Ethical Hacker's Cookbook

Kali Linux - An Ethical Hacker's Cookbook

By : Himanshu Sharma

Buy this Book

Kali Linux - An Ethical Hacker's Cookbook

By: Himanshu Sharma

Buy this Book

Overview of this book

With the current rate of hacking, it is very important to pentest your environment in order to ensure advanced-level security. This book is packed with practical recipes that will quickly get you started with Kali Linux (version 2016.2) according to your needs, and move on to core functionalities. This book will start with the installation and configuration of Kali Linux so that you can perform your tests. You will learn how to plan attack strategies and perform web application exploitation using tools such as Burp, and Jexboss. You will also learn how to perform network exploitation using Metasploit, Sparta, and Wireshark. Next, you will perform wireless and password attacks using tools such as Patator, John the Ripper, and airoscript-ng. Lastly, you will learn how to create an optimum quality pentest report! By the end of this book, you will know how to conduct advanced penetration testing thanks to the book’s crisp and task-oriented recipes.

Title Page

Credits

Disclaimer

About the Author

About the Reviewer

www.PacktPub.com

Customer Feedback

Preface

Free Chapter

Kali – An Introduction

Introduction

Configuring Kali Linux

Configuring the Xfce environment

Configuring the Mate environment

Configuring the LXDE environment

Configuring the e17 environment

Configuring the KDE environment

Prepping up with custom tools

Pentesting VPN's ike-scan

Setting up proxychains

Going on a hunt with Routerhunter

Gathering Intel and Planning Attack Strategies

Introduction

Getting a list of subdomains

Using Shodan for fun and profit

Shodan Honeyscore

Shodan plugins

Using Nmap to find open ports

Bypassing firewalls with Nmap

Searching for open directories

Performing deep magic with DMitry

Hunting for SSL flaws

Exploring connections with intrace

Digging deep with theharvester

Finding the technology behind web apps

Scanning IPs with masscan

Sniffing around with Kismet

Testing routers with firewalk

Vulnerability Assessment

Introduction

Using the infamous Burp

Exploiting WSDLs with Wsdler

Using Intruder

Web app pentest with Vega

Exploring SearchSploit

Exploiting routers with RouterSploit

Using Metasploit

Automating Metasploit

Writing a custom resource script

Databases in Metasploit

Web App Exploitation – Beyond OWASP Top 10

Introduction

Exploiting XSS with XSS Validator

Injection attacks with sqlmap

Owning all .svn and .git repositories

Winning race conditions

Exploiting JBoss with JexBoss

Exploiting PHP Object Injection

Backdoors using web shells

Backdoors using meterpreters

Network Exploitation on Current Exploitation

Introduction

Man in the middle with hamster and ferret

Exploring the msfconsole

Railgun in Metasploit

Using the paranoid meterpreter

A tale of a bleeding heart

Redis exploitation

Say no to SQL – owning MongoDBs

Embedded device hacking

Elasticsearch exploit

Good old Wireshark

This is Sparta!

Wireless Attacks – Getting Past Aircrack-ng

Introduction

Password Attacks – The Fault in Their Stars

Introduction

Identifying different types of hash in the wild!

Using hash-identifier

Cracking with patator

Cracking hashes online

Playing with John the ripper

Johnny Bravo!

Using cewl

Generating word list with crunch

Have Shell Now What?

Introduction

Spawning a TTY Shell

Looking for weakness

Horizontal escalation

Vertical escalation

Node hopping – pivoting

Privilege escalation on Windows

Using PowerSploit

Pulling plaintext passwords with mimikatz

Dumping other saved passwords from the machine

Pivoting into the network

Backdooring for persistence

Buffer Overflows

Introduction

Exploiting stack-based buffer overflows

Exploiting buffer overflow on real software

SEH bypass

Exploiting egg hunters

An overview of ASLR and NX bypass

Playing with Software-Defined Radios

Introduction

Radio frequency scanners

Hands-on with RTLSDR scanner

Playing around with gqrx

Kalibrating device for GSM tapping

Decoding ADS-B messages with Dump1090

Kali in Your Pocket – NetHunters and Raspberries

Introduction

Installing Kali on Raspberry Pi

Installing NetHunter

Superman typing – HID attacks

Can I charge my phone?

Setting up an evil access point

Writing Reports

Introduction

Generating reports using Dradis

Using MagicTree

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Exploiting PHP Object Injection

PHP Object Injection occurs when an insecure user input is passed through the PHP unserialize() function. When we pass a serialized string of an object of a class to an application, the application accepts it, and then PHP reconstructs the object and usually calls magic methods if they are included in the class. Some of the methods are __construct(), __destruct(), __sleep(), and __wakeup().

This leads to SQL injections, file inclusions, and even remote code execution. However, in order to successfully exploit this, we need to know the class name of the object.

How to do it...

The following steps demonstrate PHP Object Injection:

Here, we have an app that is passing serialized data in the get parameter:

Since we have the source code, we will see that the app is using __wakeup() function and the class name is PHPObjectInjection:

Now we can write a code with the same class name to produce a serialized object containing our own command that we want to execute on the...

Kali Linux - An Ethical Hacker's Cookbook

By : Himanshu Sharma

Kali Linux - An Ethical Hacker's Cookbook

By: Himanshu Sharma

Overview of this book

Related Content you might be interested in

Current Title:

Kali Linux - An Ethical Hacker's Cookbook

Kali Linux 2018: Assuring Security by Penetration Testing

Kali Linux Intrusion and Exploitation Cookbook

Mastering Kali Linux for Advanced Penetration Testing

Exploiting PHP Object Injection

How to do it...