Kali Linux Cookbook

Kali Linux Cookbook

Overview of this book

In this age, where online information is at its most vulnerable, knowing how to execute the same attacks that hackers use to break into your system or network helps you plug the loopholes before it's too late and can save you countless hours and money. Kali Linux is a Linux distribution designed for penetration testing and security auditing. It is the successor to BackTrack, the world's most popular penetration testing distribution. Discover a variety of popular tools of penetration testing, such as information gathering, vulnerability identification, exploitation, privilege escalation, and covering your tracks. Packed with practical recipes, this useful guide begins by covering the installation of Kali Linux and setting up a virtual environment to perform your tests. You will then learn how to eavesdrop and intercept traffic on wireless networks, bypass intrusion detection systems, and attack web applications, as well as checking for open ports, performing data forensics, and much more. The book follows the logical approach of a penetration test from start to finish with many screenshots and illustrations that help to explain each tool in detail. The Kali Linux Cookbook will serve as an excellent source of information for the security professional and novice alike!

Kali Linux Cookbook

Credits

About the Authors

About the Reviewers

www.PacktPub.com

Preface

Free Chapter

Up and Running with Kali Linux

Introduction

Installing to a hard disk drive

Installing to a USB drive with persistent memory

Installing in VirtualBox

Installing VMware Tools

Fixing the splash screen

Starting network services

Setting up the wireless network

Customizing Kali Linux

Introduction

Preparing kernel headers

Installing Broadcom drivers

Installing and configuring ATI video card drivers

Installing and configuring nVidia video card drivers

Applying updates and configuring extra security tools

Setting up ProxyChains

Directory encryption

Advanced Testing Lab

Introduction

Getting comfortable with VirtualBox

Downloading Windows Targets

Downloading Linux Targets

Attacking WordPress and other applications

Information Gathering

Introduction

Service enumeration

Determining network range

Identifying active machines

Finding open ports

Operating system fingerprinting

Service fingerprinting

Threat assessment with Maltego

Mapping the network

Vulnerability Assessment

Introduction

Installing, configuring, and starting Nessus

Nessus – finding local vulnerabilities

Nessus – finding network vulnerabilities

Nessus – finding Linux-specific vulnerabilities

Nessus – finding Windows-specific vulnerabilities

Installing, configuring, and starting OpenVAS

OpenVAS – finding local vulnerabilities

OpenVAS – finding network vulnerabilities

OpenVAS – finding Linux-specific vulnerabilities

OpenVAS – finding Windows-specific vulnerabilities

Exploiting Vulnerabilities

Introduction

Installing and configuring Metasploitable

Mastering Armitage, the graphical management tool for Metasploit

Mastering the Metasploit Console (MSFCONSOLE)

Mastering the Metasploit CLI (MSFCLI)

Mastering Meterpreter

Metasploitable MySQL

Metasploitable PostgreSQL

Metasploitable Tomcat

Metasploitable PDF

Implementing browser_autopwn

Escalating Privileges

Introduction

Using impersonation tokens

Local privilege escalation attack

Mastering the Social Engineering Toolkit (SET)

Collecting the victim's data

Cleaning up the tracks

Creating a persistent backdoor

Man In The Middle (MITM) attack

Password Attacks

Introduction

Online password attacks

Cracking HTTP passwords

Gaining router access

Password profiling

Cracking a Windows password using John the Ripper

Using dictionary attacks

Using rainbow tables

Using nVidia Compute Unified Device Architecture (CUDA)

Using ATI Stream

Physical access attacks

Wireless Attacks

Introduction

Wireless network WEP cracking

Wireless network WPA/WPA2 cracking

Automating wireless network cracking

Accessing clients using a fake AP

URL traffic manipulation

Port redirection

Sniffing network traffic

Index

Customer Reviews

5 star

4 star

3 star

2 star

1 star

Mastering the Metasploit CLI (MSFCLI)

In this recipe, we will explore the Metasploit CLI (MSFCLI). Metasploit requires the use of an interface in order to perform its tasks. The MSFCLI is such an interface. It is a good interface for learning Metasploit or testing/writing a new exploit. It also serves well in the case of using scripts and applying basic automation to tasks.

One major issue with using the MSFCLI is that you can only open one shell at a time. You will also notice that as we are exploring some of our commands it functions a bit slower and is a little more complicated than the MSFCONSOLE. Finally, you have to know the exact exploit that you would like to run in order to use the MSFCLI. This can make it a little difficult for new penetration testers who are not familiar with the Metasploit list of exploits.

Some commands for MSFCLI are:

msfcli: This loads a list of all available exploits accessible to MSFCLI
msfcli –h: Displays the MSFCLI help file
msfcli [PATH TO EXPLOIT] [options...

Kali Linux Cookbook

Kali Linux Cookbook

Overview of this book

Related Content you might be interested in

Current Title:

Kali Linux Cookbook

Mastering the Metasploit CLI (MSFCLI)