Book Overview & Buying
Table Of Contents

Kali Linux 2018: Windows Penetration Testing - Second Edition

By : Wolf Halton , Bo Weaver

5 (1)

Buy this Book

Kali Linux 2018: Windows Penetration Testing

5 (1)

By: Wolf Halton , Bo Weaver

Buy this Book

Overview of this book

Microsoft Windows is one of the two most common OSes, and managing its security has spawned the discipline of IT security. Kali Linux is the premier platform for testing and maintaining Windows security. Kali is built on the Debian distribution of Linux and shares the legendary stability of that OS. This lets you focus on using the network penetration, password cracking, and forensics tools, and not the OS. This book has the most advanced tools and techniques to reproduce the methods used by sophisticated hackers to make you an expert in Kali Linux penetration testing. You will start by learning about the various desktop environments that now come with Kali. The book covers network sniffers and analysis tools to uncover the Windows protocols in use on the network. You will see several tools designed to improve your average in password acquisition, from hash cracking, online attacks, offline attacks, and rainbow tables to social engineering. It also demonstrates several use cases for Kali Linux tools like Social Engineering Toolkit, and Metasploit, to exploit Windows vulnerabilities. Finally, you will learn how to gain full system-level access to your compromised system and then maintain that access. By the end of this book, you will be able to quickly pen test your system and network using easy-to-follow instructions and support images.

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Disclaimer

Free Chapter

Choosing Your Distro

Desktop environments

Choosing your look and feel

Configuring Kali to be your Daily Driver

Summary

Sharpening the Saw

Technical requirements

Installing Kali Linux to an encrypted USB drive

Running Kali from the Live DVD

Installing and configuring applications

Setting up and configuring OpenVAS

Reporting tests

Running services on Kali Linux

Summary

Information Gathering and Vulnerability Assessments

Technical requirements

Footprinting the network

An annotated list of Nmap command options

Using OpenVAS

Using Maltego

Using KeepNote

Summary

Further reading

Sniffing and Spoofing

Technical requirements

Sniffing and spoofing network traffic

Sniffing network traffic

Spoofing network traffic

Summary

Further reading

Password Attacks

Password attack planning

My friend, Johnny

John the Ripper (command line)

xHydra

Summary

Further reading

NetBIOS Name Service and LLMNR - Obsolete but Still Deadly

Technical requirements

NetBIOS name service and NTLM

Sniffing and capturing traffic

Summary

Further reading

Gaining Access

Pwnage

Technical requirements

Exploiting Windows systems with Metasploit

Using advanced Footprinting

Summary

Further reading

Windows Privilege Escalation and Maintaining Access

Technical requirements

Windows privilege escalation

MS16-032 Secondary Logon Handle Privilege Escalation

Windows Escalate Service Permissions Local Privilege Escalation

Windows Escalate UAC Protection Bypass (ScriptHost Vulnerability)

Maintaining access

Summary

Maintaining Access on Server or Desktop

Maintaining access or ET Phone Home

Maintaining access with Ncat

The Drop Box

Cracking the Network Access Controller (NAC)

Creating a spear-phishing attack with the Social Engineering Toolkit

Using Backdoor Factory to evade antivirus

Summary

Further reading

Reverse Engineering and Stress Testing

Technical requirements

Setting up a test environment

Reverse Engineering theory

Working with Boolean logic

Practicing Reverse Engineering

Stress testing Windows

Summary

Further reading

Other Books You May Enjoy

Leave a review - let other readers know what you think

Sniffing and Spoofing

Network sniffing helps you understand which users are using services you can exploit, and
IP spoofing can be used to poison a system's DNS or ARP cache, so that all their traffic is sent to a man in the middle (your designated host, for instance). Sniffing and spoofing are often used against the Windows endpoints in the network, and you need to understand the techniques that the bad guys are going to be using:

Sniffing network traffic: There are many tools to sniff network traffic, but they all work on the same principle. Capturing packets readable by your Network Interface Card (NIC). There are hundreds of protocols, and thousands of TCP/IP ports. It is safe to say that you will not have to learn about all of them, but you will probably learn a couple of dozen.
Spoofing network traffic: The TCP/IP system is trusting. The general assumption underlying...