Book Image

Kali Linux Intrusion and Exploitation Cookbook

By : Dhruv Shah, Ishan Girdhar
Book Image

Kali Linux Intrusion and Exploitation Cookbook

By: Dhruv Shah, Ishan Girdhar

Overview of this book

With the increasing threats of breaches and attacks on critical infrastructure, system administrators and architects can use Kali Linux 2.0 to ensure their infrastructure is secure by finding out known vulnerabilities and safeguarding their infrastructure against unknown vulnerabilities. This practical cookbook-style guide contains chapters carefully structured in three phases – information gathering, vulnerability assessment, and penetration testing for the web, and wired and wireless networks. It's an ideal reference guide if you’re looking for a solution to a specific problem or learning how to use a tool. We provide hands-on examples of powerful tools/scripts designed for exploitation. In the final section, we cover various tools you can use during testing, and we help you create in-depth reports to impress management. We provide system engineers with steps to reproduce issues and fix them.
Table of Contents (18 chapters)
Title Page
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Customer Feedback
Preface

HTTP and DNS load balancer detection


In this recipe, we will learn how to detect HTTP and load balancer using lbd. Lbd (load balancing detector) detects a given domain uses DNS and/or HTTP load-balancing (via server and date: header and diffs between server answers).

Getting ready

For this recipe, you will an Internet connection.

How to do it...

  1. Open the terminal and enter the following command:
lbd google.com
  1. Successful detection of HTTP and DNS load balancer results in the following output:

  1. Another example where DNS load balancer was detected and HTTP load balancing was detected is shown in the following screenshot:

  1. One thing that needs to be understood here is that lbd is not completely reliable; it is just a proof of concept to check whether balancing is done. One can read on the terminal that it may generate false positives, but it is a tool to have.

 

  1. Another tool that can help us understand whether a DNS-based load balancer is actually present or not is the dig tool. Let's look...