In this chapter, we will perform complete penetration testing step-by-step, starting from information gathering to gaining access.

As a target, we will be dealing with a real server in a production environment, a real case. We will be doing this on one of the servers due for audit. Note that we have been given nothing other than the website address of this server. The entire task will be performed by solely using BackBox Linux penetration testing distribution. BackBox gives us enormous advantages because we find the entire suite of tools, which gives us everything that we need to complete our auditing case, that is, penetration testing successfully.

For security reasons, we will be using a fake name for the target server's web address and all the sensitive information will be manipulated and replaced with imaginary data. With the exception of the sensitive data, everything will be posted entirely and demonstrated in this chapter. So...