Kali Linux - An Ethical Hacker's Cookbook

Kali Linux - An Ethical Hacker's Cookbook

By : Himanshu Sharma

Buy this Book

Kali Linux - An Ethical Hacker's Cookbook

By: Himanshu Sharma

Buy this Book

Overview of this book

With the current rate of hacking, it is very important to pentest your environment in order to ensure advanced-level security. This book is packed with practical recipes that will quickly get you started with Kali Linux (version 2016.2) according to your needs, and move on to core functionalities. This book will start with the installation and configuration of Kali Linux so that you can perform your tests. You will learn how to plan attack strategies and perform web application exploitation using tools such as Burp, and Jexboss. You will also learn how to perform network exploitation using Metasploit, Sparta, and Wireshark. Next, you will perform wireless and password attacks using tools such as Patator, John the Ripper, and airoscript-ng. Lastly, you will learn how to create an optimum quality pentest report! By the end of this book, you will know how to conduct advanced penetration testing thanks to the book’s crisp and task-oriented recipes.

Title Page

Credits

Disclaimer

About the Author

About the Reviewer

www.PacktPub.com

Customer Feedback

Preface

Free Chapter

Kali – An Introduction

Introduction

Configuring Kali Linux

Configuring the Xfce environment

Configuring the Mate environment

Configuring the LXDE environment

Configuring the e17 environment

Configuring the KDE environment

Prepping up with custom tools

Pentesting VPN's ike-scan

Setting up proxychains

Going on a hunt with Routerhunter

Gathering Intel and Planning Attack Strategies

Introduction

Getting a list of subdomains

Using Shodan for fun and profit

Shodan Honeyscore

Shodan plugins

Using Nmap to find open ports

Bypassing firewalls with Nmap

Searching for open directories

Performing deep magic with DMitry

Hunting for SSL flaws

Exploring connections with intrace

Digging deep with theharvester

Finding the technology behind web apps

Scanning IPs with masscan

Sniffing around with Kismet

Testing routers with firewalk

Vulnerability Assessment

Introduction

Using the infamous Burp

Exploiting WSDLs with Wsdler

Using Intruder

Web app pentest with Vega

Exploring SearchSploit

Exploiting routers with RouterSploit

Using Metasploit

Automating Metasploit

Writing a custom resource script

Databases in Metasploit

Web App Exploitation – Beyond OWASP Top 10

Introduction

Exploiting XSS with XSS Validator

Injection attacks with sqlmap

Owning all .svn and .git repositories

Winning race conditions

Exploiting JBoss with JexBoss

Exploiting PHP Object Injection

Backdoors using web shells

Backdoors using meterpreters

Network Exploitation on Current Exploitation

Introduction

Man in the middle with hamster and ferret

Exploring the msfconsole

Railgun in Metasploit

Using the paranoid meterpreter

A tale of a bleeding heart

Redis exploitation

Say no to SQL – owning MongoDBs

Embedded device hacking

Elasticsearch exploit

Good old Wireshark

This is Sparta!

Wireless Attacks – Getting Past Aircrack-ng

Introduction

Password Attacks – The Fault in Their Stars

Introduction

Identifying different types of hash in the wild!

Using hash-identifier

Cracking with patator

Cracking hashes online

Playing with John the ripper

Johnny Bravo!

Using cewl

Generating word list with crunch

Have Shell Now What?

Introduction

Spawning a TTY Shell

Looking for weakness

Horizontal escalation

Vertical escalation

Node hopping – pivoting

Privilege escalation on Windows

Using PowerSploit

Pulling plaintext passwords with mimikatz

Dumping other saved passwords from the machine

Pivoting into the network

Backdooring for persistence

Buffer Overflows

Introduction

Exploiting stack-based buffer overflows

Exploiting buffer overflow on real software

SEH bypass

Exploiting egg hunters

An overview of ASLR and NX bypass

Playing with Software-Defined Radios

Introduction

Radio frequency scanners

Hands-on with RTLSDR scanner

Playing around with gqrx

Kalibrating device for GSM tapping

Decoding ADS-B messages with Dump1090

Kali in Your Pocket – NetHunters and Raspberries

Introduction

Installing Kali on Raspberry Pi

Installing NetHunter

Superman typing – HID attacks

Can I charge my phone?

Setting up an evil access point

Writing Reports

Introduction

Generating reports using Dradis

Using MagicTree

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Playing with John the ripper

Websites and online services may not be always available and it is also possible that those websites may not have the plaintext of the hash we have found. In such cases, we can use different offline tools that are available to crack the hashes.

Let's assume we now have the hash and we have identified what type it is. In this recipe, we will see how to crack hashes with John the ripper. John is fast and supports various cracking modes. It also has the ability to auto-detect the hash type.

How to do it...

to learn about John the ripper, follow the given steps:

We can see the full features using the help (-h) command:

        john -h

The following screenshot shows the output of the preceding command:

To crack the password, we use the following command:

        john --format=raw-md5
        --wordlist=/usr/share/wordlists/rockyou.txt /root/demo_hash.txt

We will see that the password has been cracked successfully!

There's more...

For more information you can refer to the following...

Kali Linux - An Ethical Hacker's Cookbook

By : Himanshu Sharma

Kali Linux - An Ethical Hacker's Cookbook

By: Himanshu Sharma

Overview of this book

Related Content you might be interested in

Current Title:

Kali Linux - An Ethical Hacker's Cookbook

Kali Linux 2018: Assuring Security by Penetration Testing

Kali Linux Intrusion and Exploitation Cookbook

Mastering Kali Linux for Advanced Penetration Testing

Playing with John the ripper

How to do it...

There's more...