Book Image

Hands-On Penetration Testing with Kali NetHunter

By : Glen D. Singh, Sean-Philip Oriyano
Book Image

Hands-On Penetration Testing with Kali NetHunter

By: Glen D. Singh, Sean-Philip Oriyano

Overview of this book

Kali NetHunter is a version of the popular and powerful Kali Linux pentesting platform, designed to be installed on mobile devices. Hands-On Penetration Testing with Kali NetHunter will teach you the components of NetHunter and how to install the software. You’ll also learn about the different tools included and how to optimize and use a package, obtain desired results, perform tests, and make your environment more secure. Starting with an introduction to Kali NetHunter, you will delve into different phases of the pentesting process. This book will show you how to build your penetration testing environment and set up your lab. You will gain insight into gathering intellectual data, exploiting vulnerable areas, and gaining control over target systems. As you progress through the book, you will explore the NetHunter tools available for exploiting wired and wireless devices. You will work through new ways to deploy existing tools designed to reduce the chances of detection. In the concluding chapters, you will discover tips and best practices for integrating security hardening into your Android ecosystem. By the end of this book, you will have learned to successfully use a mobile penetration testing device based on Kali NetHunter and Android to accomplish the same tasks you would traditionally, but in a smaller and more mobile form factor.
Table of Contents (19 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

Wireless threats


The following are security threats when using wireless networks:

  • Rogue access point: At times, a penetration tester will need to check the security posture of a company's wireless network and the security awareness of the employees. A rogue access pointis where a penetration tester would set up afakeaccess point with an SSID to trick users into establishing a connection. Imagine creating an SSID on a rogue access point, naming it Company XYZ VIP Access, and leaving it open. A lot of people seeing this name will think there are special resources on this wireless network. This technique will allow the pentester to sniff traffic easily and obtain sensitive data:
  • Evil twin: The evil twinsetup is a bit similar to the rogue access point configuration. However, with an evil twin, the penetration tester deploys an access point within the corporate network using the same SSID as the actual organization. When users connect, they will be able to access the local resources without realizing...