Book Image

Metasploit Penetration Testing Cookbook

By : Abhinav Singh
Book Image

Metasploit Penetration Testing Cookbook

By: Abhinav Singh

Overview of this book

Metasploit® software helps security and IT professionals identify security issues, verify vulnerability mitigations, and manage expert-driven security assessments. Capabilities include smart exploitation, password auditing, web application scanning, and social engineering. Teams can collaborate in Metasploit and present their findings in consolidated reports. The goal of the software is to provide a clear understanding of the critical vulnerabilities in any environment and to manage those risks.Metasploit Penetration Testing Cookbook targets both professionals and beginners to the framework. The chapters of the book are logically arranged with an increasing level of complexity and cover Metasploit aspects ranging from pre-exploitation to the post-exploitation phase thoroughly. The recipe structure of the book provides a good mix of both theoretical understanding and practical implementation. This book will help readers in thinking from a hacker's perspective to dig out the flaws in target networks and also to leverage the powers of Metasploit to compromise them. It will take your penetration skills to the next level.The book starts with the basics such as gathering information about your target and gradually covers advanced topics like building your own framework scripts and modules. The book goes deep into operating systems-based penetration testing techniques and moves ahead with client-based exploitation methodologies. In the post- exploitation phase, it covers meterpreter, antivirus bypass, ruby wonders, exploit building, porting exploits to framework, and third party tools like armitage, and SET. Metasploit Penetration Testing Cookbook is the required guide to penetration testing and exploitation.

Related Content you might be interested in

Current Title:

Small book image
Metasploit Penetration Testing Cookbook
Abhinav Singh
Jun, 2012 | 268 pages
No titles found
Table of Contents (17 chapters)
Metasploit Penetration Testing Cookbook
Metasploit Penetration Testing Cookbook
Credits
Credits
About the Author
About the Author
About the Reviewers
About the Reviewers
www.PacktPub.com
www.PacktPub.com
Preface
Preface
Free Chapter
1
Metasploit Quick Tips for Security Professionals
Metasploit Quick Tips for Security Professionals
Introduction
Configuring Metasploit on Windows
Configuring Metasploit on Ubuntu
Metasploit with BackTrack 5 – the ultimate combination
Setting up the penetration testing lab on a single machine
Setting up Metasploit on a virtual machine with SSH connectivity
Beginning with the interfaces – the "Hello World" of Metasploit
Setting up the database in Metasploit
Using the database to store penetration testing results
Analyzing the stored results of the database
2
Information Gathering and Scanning
Information Gathering and Scanning
Introduction
Passive information gathering 1.0 – the traditional way
Passive information gathering 2.0 – the next level
Port scanning – the Nmap way
Exploring auxiliary modules for scanning
Target service scanning with auxiliary modules
Vulnerability scanning with Nessus
Scanning with NeXpose
Sharing information with the Dradis framework
3
Operating System-based Vulnerability Assessment and Exploitation
Operating System-based Vulnerability Assessment and Exploitation
Introduction
Exploit usage quick tips
Penetration testing on a Windows XP SP2 machine
Binding a shell to the target for remote access
Penetration testing on the Windows 2003 Server
Windows 7/Server 2008 R2 SMB client infinite loop
Exploiting a Linux (Ubuntu) machine
Understanding the Windows DLL injection flaws
4
Client-side Exploitation and Antivirus Bypass
Client-side Exploitation and Antivirus Bypass
Introduction
Internet Explorer unsafe scripting misconfiguration vulnerability
Internet Explorer CSS recursive call memory corruption
Microsoft Word RTF stack buffer overflow
Adobe Reader util.printf() buffer overflow
Generating binary and shellcode from msfpayload
Bypassing client-side antivirus protection using msfencode
Using the killav.rb script to disable antivirus programs
A deeper look into the killav.rb script
Killing antivirus services from the command line
5
Using Meterpreter to Explore the Compromised Target
Using Meterpreter to Explore the Compromised Target
Introduction
Analyzing meterpreter system commands
Privilege escalation and process migration
Setting up multiple communication channels with the target
Meterpreter filesystem commands
Changing file attributes using timestomp
Using meterpreter networking commands
The getdesktop and keystroke sniffing
Using a scraper meterpreter script
6
Advanced Meterpreter Scripting
Advanced Meterpreter Scripting
Introduction
Passing the hash
Setting up a persistent connection with backdoors
Pivoting with meterpreter
Port forwarding with meterpreter
Meterpreter API and mixins
Railgun – converting Ruby into a weapon
Adding DLL and function definition to Railgun
Building a "Windows Firewall De-activator" meterpreter script
Analyzing an existing meterpreter script
7
Working with Modules for Penetration Testing
Working with Modules for Penetration Testing
Introduction
Working with scanner auxiliary modules
Working with auxiliary admin modules
SQL injection and DOS attack modules
Post-exploitation modules
Understanding the basics of module building
Analyzing an existing module
Building your own post-exploitation module
8
Working with Exploits
Working with Exploits
Introduction
Exploiting the module structure
Common exploit mixins
Working with msfvenom
Converting exploit to a Metasploit module
Porting and testing the new exploit module
Fuzzing with Metasploit
Writing a simple FileZilla FTP fuzzer
9
Working with Armitage
Working with Armitage
Introduction
Getting started with Armitage
Scanning and information gathering
Finding vulnerabilities and attacking targets
Handling multiple targets using the tab switch
Post-exploitation with Armitage
Client-side exploitation with Armitage
10
Social Engineer Toolkit
Social Engineer Toolkit
Introduction
Getting started with Social Engineer Toolkit (SET)
Working with the SET config file
Spear-phishing attack vector
Website attack vectors
Multi-attack web method
Infectious media generator
Index
Index

About the Reviewers

Kubilay Onur Gungor currently works at Sony Europe as a Web Application Security Expert, and is also one of the Incident Managers for the Europe and Asia regions.

He has been working in the IT Security field for more than 5 years. After individual, security work experience, he started his security career with the cryptanalysis of images, which are encrypted by using chaotic logistic maps. He gained experience in the Network Security field by working in the Data Processing Center of Isik University. After working as a QA Tester in Netsparker, he continued his work in the Penetration Testing field, for one of the leading security companies in Turkey. He performed many penetration tests for the IT infrastructures of many big clients, such as banks, government institutions, and telecommunication companies. He has also provided security consulting to several software manufacturers to help secure their compiled software.

Kubilay has also been developing multidisciplinary, cyber security approaches, including criminology, conflict management, perception management, terrorism, international relations, and sociology. He is the Founder of the Arquanum Multidisciplinary Cyber Security Studies Society.

Kubilay has participated in many security conferences as a frequent speaker.

Kanishka Khaitan, a postgraduate in Master of Computer Application from the University of Pune, with Honors in Mathematics from Banaras Hindu University, has been working in the web domain with Amazon for the past two years. Prior to that, she worked for Infibeam, an India-based, online retail startup, in an internship program lasting for six months.

Sachin Raste is a leading security expert, with over 17 years of experience in the fields of Network Management and Information Security. With his team, he has designed, streamlined, and integrated the networks, applications, and IT processes for some of the big business houses in India, and helped them achieve business continuity.

He is currently working with MicroWorld, the developers of the eScan range of Information Security Solution, as a Senior Security Researcher. He has designed and developed some path-breaking algorithms to detect and prevent Malware and Digital Fraud, to safeguard networks from Hackers and Malware. In his professional capacity, Sachin Raste has presented many whitepapers, and has also participated in many TV shows spreading awareness on Digital Frauds.

Working with MicroWorld has helped him in developing his technical skills to keep up with the current trends in the Information Security industry.

First and foremost, I'd like to thank my wife, my son, and my close group of friends for their support, without whom everything in this world would have seemed impossible. To my colleagues from MicroWorld and from past organizations, for being patient listeners and assisting me in successfully completing complex projects; it has been a pleasure working with all of you. And to my boss, MD of MicroWorld, for allowing me the freedom and space to explore beyond my limits.

I thank you all.

Previous Section
Next Chapter