Book Image

Kali Linux - An Ethical Hacker's Cookbook

By : Himanshu Sharma
Book Image

Kali Linux - An Ethical Hacker's Cookbook

By: Himanshu Sharma

Overview of this book

With the current rate of hacking, it is very important to pentest your environment in order to ensure advanced-level security. This book is packed with practical recipes that will quickly get you started with Kali Linux (version 2016.2) according to your needs, and move on to core functionalities. This book will start with the installation and configuration of Kali Linux so that you can perform your tests. You will learn how to plan attack strategies and perform web application exploitation using tools such as Burp, and Jexboss. You will also learn how to perform network exploitation using Metasploit, Sparta, and Wireshark. Next, you will perform wireless and password attacks using tools such as Patator, John the Ripper, and airoscript-ng. Lastly, you will learn how to create an optimum quality pentest report! By the end of this book, you will know how to conduct advanced penetration testing thanks to the book’s crisp and task-oriented recipes.

Related Content you might be interested in

Current Title:

Small book image
Kali Linux - An Ethical Hacker's Cookbook
Himanshu Sharma
Oct, 2017 | 376 pages
Small book image
Kali Linux 2018: Assuring Security by Penetration Testing
Lee Allen | Alex Samm | Shakeel Ali | Damian Boodoo | Tedi Heriyanto | Gerard Johansen | Shiva V N Parasram
Oct, 2018 | 528 pages
Small book image
Kali Linux Intrusion and Exploitation Cookbook
Dhruv Shah | Ishan Girdhar
Apr, 2017 | 512 pages
Small book image
Mastering Kali Linux for Advanced Penetration Testing
Vijay Kumar Velu
Jun, 2017 | 510 pages
Table of Contents (20 chapters)
Title Page
Title Page
Credits
Credits
Disclaimer
Disclaimer
About the Author
About the Author
About the Reviewer
About the Reviewer
www.PacktPub.com
www.PacktPub.com
Customer Feedback
Customer Feedback
Preface
Preface
Free Chapter
1
Kali – An Introduction
Kali – An Introduction
Introduction
Configuring Kali Linux
Configuring the Xfce environment
Configuring the Mate environment
Configuring the LXDE environment
Configuring the e17 environment
Configuring the KDE environment
Prepping up with custom tools
Pentesting VPN's ike-scan
Setting up proxychains
Going on a hunt with Routerhunter
2
Gathering Intel and Planning Attack Strategies
Gathering Intel and Planning Attack Strategies
Introduction
Getting a list of subdomains
Using Shodan for fun and profit
Shodan Honeyscore
Shodan plugins
Using Nmap to find open ports
Bypassing firewalls with Nmap
Searching for open directories
Performing deep magic with DMitry
Hunting for SSL flaws
Exploring connections with intrace
Digging deep with theharvester
Finding the technology behind web apps
Scanning IPs with masscan
Sniffing around with Kismet
Testing routers with firewalk
3
Vulnerability Assessment
Vulnerability Assessment
Introduction
Using the infamous Burp
Exploiting WSDLs with Wsdler
Using Intruder
Web app pentest with Vega
Exploring SearchSploit
Exploiting routers with RouterSploit
Using Metasploit
Automating Metasploit
Writing a custom resource script
Databases in Metasploit
4
Web App Exploitation – Beyond OWASP Top 10
Web App Exploitation – Beyond OWASP Top 10
Introduction
Exploiting XSS with XSS Validator
Injection attacks with sqlmap
Owning all .svn and .git repositories
Winning race conditions
Exploiting JBoss with JexBoss
Exploiting PHP Object Injection
Backdoors using web shells
Backdoors using meterpreters
5
Network Exploitation on Current Exploitation
Network Exploitation on Current Exploitation
Introduction
Man in the middle with hamster and ferret
Exploring the msfconsole
Railgun in Metasploit
Using the paranoid meterpreter
A tale of a bleeding heart
Redis exploitation
Say no to SQL – owning MongoDBs
Embedded device hacking
Elasticsearch exploit
Good old Wireshark
This is Sparta!
6
Wireless Attacks – Getting Past Aircrack-ng
Wireless Attacks – Getting Past Aircrack-ng
Introduction
7
Password Attacks – The Fault in Their Stars
Password Attacks – The Fault in Their Stars
Introduction
Identifying different types of hash in the wild!
Using hash-identifier
Cracking with patator
Cracking hashes online
Playing with John the ripper
Johnny Bravo!
Using cewl
Generating word list with crunch
8
Have Shell Now What?
Have Shell Now What?
Introduction
Spawning a TTY Shell
Looking for weakness
Horizontal escalation
Vertical escalation
Node hopping – pivoting
Privilege escalation on Windows
Using PowerSploit
Pulling plaintext passwords with mimikatz
Dumping other saved passwords from the machine
Pivoting into the network
Backdooring for persistence
9
Buffer Overflows
Buffer Overflows
Introduction
Exploiting stack-based buffer overflows
Exploiting buffer overflow on real software
SEH bypass
Exploiting egg hunters
An overview of ASLR and NX bypass
10
Playing with Software-Defined Radios
Playing with Software-Defined Radios
Introduction
Radio frequency scanners
Hands-on with RTLSDR scanner
Playing around with gqrx
Kalibrating device for GSM tapping
Decoding ADS-B messages with Dump1090
11
Kali in Your Pocket – NetHunters and Raspberries
Kali in Your Pocket – NetHunters and Raspberries
Introduction
Installing Kali on Raspberry Pi
Installing NetHunter
Superman typing – HID attacks
Can I charge my phone?
Setting up an evil access point
12
Writing Reports
Writing Reports
Introduction
Generating reports using Dradis
Using MagicTree

Johnny Bravo!

Johnny is a GUI client for John. Since it adds a UI, it becomes much easier to use.

How to do it...

To learn about Johnny follow the given steps:

  1. You have learned to use John in our previous recipe. We will start Johnny using the following command:
        johnny

The following screenshot shows the output of the preceding command:

  1. We load our password file by clicking on the Open Passwd File option. Our file is loaded:
  1. Now we go to Options and choose the type of attack we want to perform:
  1. We choose the Format of the hash:
  1. Once it is done, we click on Start Attack, and we should see our password when it's cracked.
Previous Section
End of Section 8
Next Section