Book Overview & Buying
Table Of Contents

Kali Linux 2018: Windows Penetration Testing - Second Edition

By : Wolf Halton , Bo Weaver

5 (1)

Buy this Book

Kali Linux 2018: Windows Penetration Testing

5 (1)

By: Wolf Halton , Bo Weaver

Buy this Book

Overview of this book

Microsoft Windows is one of the two most common OSes, and managing its security has spawned the discipline of IT security. Kali Linux is the premier platform for testing and maintaining Windows security. Kali is built on the Debian distribution of Linux and shares the legendary stability of that OS. This lets you focus on using the network penetration, password cracking, and forensics tools, and not the OS. This book has the most advanced tools and techniques to reproduce the methods used by sophisticated hackers to make you an expert in Kali Linux penetration testing. You will start by learning about the various desktop environments that now come with Kali. The book covers network sniffers and analysis tools to uncover the Windows protocols in use on the network. You will see several tools designed to improve your average in password acquisition, from hash cracking, online attacks, offline attacks, and rainbow tables to social engineering. It also demonstrates several use cases for Kali Linux tools like Social Engineering Toolkit, and Metasploit, to exploit Windows vulnerabilities. Finally, you will learn how to gain full system-level access to your compromised system and then maintain that access. By the end of this book, you will be able to quickly pen test your system and network using easy-to-follow instructions and support images.

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Disclaimer

Free Chapter

Choosing Your Distro

Desktop environments

Choosing your look and feel

Configuring Kali to be your Daily Driver

Summary

Sharpening the Saw

Technical requirements

Installing Kali Linux to an encrypted USB drive

Running Kali from the Live DVD

Installing and configuring applications

Setting up and configuring OpenVAS

Reporting tests

Running services on Kali Linux

Summary

Information Gathering and Vulnerability Assessments

Technical requirements

Footprinting the network

An annotated list of Nmap command options

Using OpenVAS

Using Maltego

Using KeepNote

Summary

Further reading

Sniffing and Spoofing

Technical requirements

Sniffing and spoofing network traffic

Sniffing network traffic

Spoofing network traffic

Summary

Further reading

Password Attacks

Password attack planning

My friend, Johnny

John the Ripper (command line)

xHydra

Summary

Further reading

NetBIOS Name Service and LLMNR - Obsolete but Still Deadly

Technical requirements

NetBIOS name service and NTLM

Sniffing and capturing traffic

Summary

Further reading

Gaining Access

Pwnage

Technical requirements

Exploiting Windows systems with Metasploit

Using advanced Footprinting

Summary

Further reading

Windows Privilege Escalation and Maintaining Access

Technical requirements

Windows privilege escalation

MS16-032 Secondary Logon Handle Privilege Escalation

Windows Escalate Service Permissions Local Privilege Escalation

Windows Escalate UAC Protection Bypass (ScriptHost Vulnerability)

Maintaining access

Summary

Maintaining Access on Server or Desktop

Maintaining access or ET Phone Home

Maintaining access with Ncat

The Drop Box

Cracking the Network Access Controller (NAC)

Creating a spear-phishing attack with the Social Engineering Toolkit

Using Backdoor Factory to evade antivirus

Summary

Further reading

Reverse Engineering and Stress Testing

Technical requirements

Setting up a test environment

Reverse Engineering theory

Working with Boolean logic

Practicing Reverse Engineering

Stress testing Windows

Summary

Further reading

Other Books You May Enjoy

Leave a review - let other readers know what you think

Sharpening the Saw

A craftsman is only as good as his tools and tools need to be set up and maintained. Since you have an idea of what Kali Linux distro you are interested in installing, this chapter will help you set up and configure your personal versions of the platform. Kali Linux is versatile and can be used in several use cases.

When you first decided to use Kali Linux, you probably hadn't thought about the various common and uncommon uses. This chapter introduces you to ups that will work best for your Windows penetration testing requirements, the documentation tools that we use to make sure that the results of the tests are prepared and presented properly, and the details of Linux services that you need to operate these tools. Many books, including the first book Wolf Halton wrote about penetration testing, set its chapters in the order of the sub-menus in the Kali...