Book Overview & Buying
Table Of Contents

Kali Linux 2018: Windows Penetration Testing - Second Edition

By : Wolf Halton , Bo Weaver

5 (1)

Buy this Book

Kali Linux 2018: Windows Penetration Testing

5 (1)

By: Wolf Halton , Bo Weaver

Buy this Book

Overview of this book

Microsoft Windows is one of the two most common OSes, and managing its security has spawned the discipline of IT security. Kali Linux is the premier platform for testing and maintaining Windows security. Kali is built on the Debian distribution of Linux and shares the legendary stability of that OS. This lets you focus on using the network penetration, password cracking, and forensics tools, and not the OS. This book has the most advanced tools and techniques to reproduce the methods used by sophisticated hackers to make you an expert in Kali Linux penetration testing. You will start by learning about the various desktop environments that now come with Kali. The book covers network sniffers and analysis tools to uncover the Windows protocols in use on the network. You will see several tools designed to improve your average in password acquisition, from hash cracking, online attacks, offline attacks, and rainbow tables to social engineering. It also demonstrates several use cases for Kali Linux tools like Social Engineering Toolkit, and Metasploit, to exploit Windows vulnerabilities. Finally, you will learn how to gain full system-level access to your compromised system and then maintain that access. By the end of this book, you will be able to quickly pen test your system and network using easy-to-follow instructions and support images.

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Disclaimer

Free Chapter

Choosing Your Distro

Desktop environments

Choosing your look and feel

Configuring Kali to be your Daily Driver

Summary

Sharpening the Saw

Technical requirements

Installing Kali Linux to an encrypted USB drive

Running Kali from the Live DVD

Installing and configuring applications

Setting up and configuring OpenVAS

Reporting tests

Running services on Kali Linux

Summary

Information Gathering and Vulnerability Assessments

Technical requirements

Footprinting the network

An annotated list of Nmap command options

Using OpenVAS

Using Maltego

Using KeepNote

Summary

Further reading

Sniffing and Spoofing

Technical requirements

Sniffing and spoofing network traffic

Sniffing network traffic

Spoofing network traffic

Summary

Further reading

Password Attacks

Password attack planning

My friend, Johnny

John the Ripper (command line)

xHydra

Summary

Further reading

NetBIOS Name Service and LLMNR - Obsolete but Still Deadly

Technical requirements

NetBIOS name service and NTLM

Sniffing and capturing traffic

Summary

Further reading

Gaining Access

Pwnage

Technical requirements

Exploiting Windows systems with Metasploit

Using advanced Footprinting

Summary

Further reading

Windows Privilege Escalation and Maintaining Access

Technical requirements

Windows privilege escalation

MS16-032 Secondary Logon Handle Privilege Escalation

Windows Escalate Service Permissions Local Privilege Escalation

Windows Escalate UAC Protection Bypass (ScriptHost Vulnerability)

Maintaining access

Summary

Maintaining Access on Server or Desktop

Maintaining access or ET Phone Home

Maintaining access with Ncat

The Drop Box

Cracking the Network Access Controller (NAC)

Creating a spear-phishing attack with the Social Engineering Toolkit

Using Backdoor Factory to evade antivirus

Summary

Further reading

Reverse Engineering and Stress Testing

Technical requirements

Setting up a test environment

Reverse Engineering theory

Working with Boolean logic

Practicing Reverse Engineering

Stress testing Windows

Summary

Further reading

Other Books You May Enjoy

Leave a review - let other readers know what you think

Other Books You May Enjoy

If you enjoyed this book, you may be interested in these other books by Packt:

Web Penetration Testing with Kali Linux - Third Edition
Gilberto Najera-Gutierrez, Juned Ahmed Ansari

ISBN: 978-1-78862-337-7

Learn how to set up your lab with Kali Linux
Understand the core concepts of web penetration testing
Get to know the tools and techniques you need to use with Kali Linux
Identify the difference between hacking a web application and network hacking
Expose vulnerabilities present in web servers and their applications using server-side attacks
Understand the different techniques used to identify the flavor of web applications
See standard attacks such as exploiting cross-site request forgery and cross-site scripting flaws
Get an overview of the art of client-side attacks
Explore automated attacks such as fuzzing web applications

Kali Linux Wireless...