Book Image

Learn Penetration Testing

By : Rishalin Pillay
Book Image

Learn Penetration Testing

By: Rishalin Pillay

Overview of this book

Sending information via the internet is not entirely private, as evidenced by the rise in hacking, malware attacks, and security threats. With the help of this book, you'll learn crucial penetration testing techniques to help you evaluate enterprise defenses. You'll start by understanding each stage of pentesting and deploying target virtual machines, including Linux and Windows. Next, the book will guide you through performing intermediate penetration testing in a controlled environment. With the help of practical use cases, you'll also be able to implement your learning in real-world scenarios. By studying everything from setting up your lab, information gathering and password attacks, through to social engineering and post exploitation, you'll be able to successfully overcome security threats. The book will even help you leverage the best tools, such as Kali Linux, Metasploit, Burp Suite, and other open source pentesting tools to perform these techniques. Toward the later chapters, you'll focus on best practices to quickly resolve security threats. By the end of this book, you'll be well versed with various penetration testing techniques so as to be able to tackle security threats effectively
Table of Contents (21 chapters)
Free Chapter
1
Section 1: The Basics
4
Section 2: Exploitation
12
Section 3: Post Exploitation
16
Section 4: Putting It All Together

Diving into the Metasploit Framework

The Metasploit Framework is a penetration testing platform that makes exploiting target machines simple. It is an intuitive tool that is an integral part of any penetration tester's toolkit. It is maintained by Rapid7, but there are many contributors in the security community.

In this chapter, we will explore the modularity and flexibility of the Metasploit Framework. Since there are regular exploits being developed which can be added into Metasploit's already large database, you will learn how to find and import these. We will explore the various options that exist for payloads and the difference between various shells. Building skills in Metasploit can enhance your penetration tests, making it easy by using exploits that already exist, as opposed to writing your own.

As you progress through this chapter, you will learn about the...