Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Mastering Metasploit
  • Table Of Contents Toc
  • Feedback & Rating feedback
Mastering Metasploit

Mastering Metasploit - Third Edition

By : Nipun Jaswal
3.3 (3)
Buy this Book
close
close
Mastering Metasploit

Mastering Metasploit

3.3 (3)
By: Nipun Jaswal
Buy this Book

Overview of this book

We start by reminding you about the basic functionalities of Metasploit and its use in the most traditional ways. You’ll get to know about the basics of programming Metasploit modules as a refresher and then dive into carrying out exploitation as well building and porting exploits of various kinds in Metasploit. In the next section, you’ll develop the ability to perform testing on various services such as databases, Cloud environment, IoT, mobile, tablets, and similar more services. After this training, we jump into real-world sophisticated scenarios where performing penetration tests are a challenge. With real-life case studies, we take you on a journey through client-side attacks using Metasploit and various scripts built on the Metasploit framework. By the end of the book, you will be trained specifically on time-saving techniques using Metasploit.
Table of Contents (14 chapters)
close
close
close
Preface
Icon
Preface
Icon
Who this book is for
Icon
What this book covers
Icon
To get the most out of this book
Icon
Get in touch
Icon
Disclaimer
Lock Free Chapter
1
Approaching a Penetration Test Using Metasploit
Icon
Approaching a Penetration Test Using Metasploit
Icon
Organizing a penetration test
Icon
Mounting the environment
Icon
The fundamentals of Metasploit
Icon
Conducting a penetration test with Metasploit
Icon
Benefits of penetration testing using Metasploit
Icon
Case study - diving deep into an unknown network
Icon
Revisiting the case study
Icon
Summary and exercises
2
Reinventing Metasploit
Icon
Reinventing Metasploit
Icon
Ruby - the heart of Metasploit
Icon
Developing custom modules
Icon
Breakthrough Meterpreter scripting
Icon
Working with RailGun
Icon
Summary and exercises
3
The Exploit Formulation Process
Icon
The Exploit Formulation Process
Icon
The absolute basics of exploitation
Icon
Exploiting stack-based buffer overflows with Metasploit
Icon
Exploiting SEH-based buffer overflows with Metasploit
Icon
Bypassing DEP in Metasploit modules
Icon
Other protection mechanisms
Icon
Summary
4
Porting Exploits
chevron up
Icon
Porting Exploits
Icon
Importing a stack-based buffer overflow exploit
Icon
Importing web-based RCE into Metasploit
Icon
Importing TCP server/browser-based exploits into Metasploit
Icon
Summary
5
Testing Services with Metasploit
Icon
Testing Services with Metasploit
Icon
Fundamentals of testing SCADA systems
Icon
Database exploitation
Icon
Testing VOIP services
Icon
Summary
6
Virtual Test Grounds and Staging
Icon
Virtual Test Grounds and Staging
Icon
Performing a penetration test with integrated Metasploit services
Icon
Generating manual reports
Icon
Summary
7
Client-Side Exploitation
Icon
Client-Side Exploitation
Icon
Exploiting browsers for fun and profit
Icon
Metasploit and Arduino - the deadly combination
Icon
File format-based exploitation
Icon
Attacking Android with Metasploit
Icon
Summary and exercises
8
Metasploit Extended
Icon
Metasploit Extended
Icon
Basics of post-exploitation with Metasploit
Icon
Basic post-exploitation commands
Icon
Advanced post-exploitation with Metasploit
Icon
Additional post-exploitation modules
Icon
Advanced extended features of Metasploit
Icon
Summary and exercises
9
Evasion with Metasploit
Icon
Evasion with Metasploit
Icon
Evading Meterpreter using C wrappers and custom encoders
Icon
Evading intrusion detection systems with Metasploit
Icon
Bypassing Windows firewall blocked ports
Icon
Summary and exercises
10
Metasploit for Secret Agents
Icon
Metasploit for Secret Agents
Icon
Maintaining anonymity in Meterpreter sessions
Icon
Maintaining access using vulnerabilities in common software
Icon
Harvesting files from target systems
Icon
Using venom for obfuscation
Icon
Covering tracks with anti-forensics modules
Icon
Summary
11
Visualizing with Armitage
Icon
Visualizing with Armitage
Icon
The fundamentals of Armitage
Icon
Scanning networks and host management
Icon
Exploitation with Armitage
Icon
Post-exploitation with Armitage
Icon
Red teaming with Armitage team server
Icon
Scripting Armitage
Icon
Summary
12
Tips and Tricks
Icon
Tips and Tricks
Icon
Automation using Minion script
Icon
Using connect as Netcat
Icon
Shell upgrades and background sessions
Icon
Naming conventions
Icon
Saving configurations in Metasploit
Icon
Using inline handler and renaming jobs
Icon
Running commands on multiple Meterpreters
Icon
Automating the Social Engineering Toolkit
Icon
Cheat sheets on Metasploit and penetration testing
Icon
Further reading
13
Other Books You May Enjoy
Icon
Other Books You May Enjoy
Icon
Leave a review - let other readers know what you think

The absolute basics of exploitation

In this section, we will look at the most critical components required for exploitation. We will discuss a wide variety of registers in the x86 architecture, along with necessary Opcodes such as NOPs (No Operations), JMP (Jump), JNZ (Jump if not Zero), and CALL.

The basics

Let's cover the terminologies that are necessary when learning about exploit writing. The following terms are based on hardware, software, and security perspectives in exploit development:

  • Register: This is an area on the processor used to store information. Also, the processor leverages registers to handle process execution, memory manipulation, API calls, and much more.
  • x86 instruction set: This is a family of system architectures that are found mostly on Intel-based systems and are generally 32-bit systems, while x64 are 64-bit systems.
  • Assembly language: This is a low-level and somewhat readable programming language with simple operations. However...
Visually different images
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Mastering Metasploit
End of Section 4
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist download Download options
font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon