舉報 
會員
Hands-On Penetration Testing with Kali NetHunter
KaliNetHunterisaversionofthepopularandpowerfulKaliLinuxpentestingplatform,designedtobeinstalledonmobiledevices.Hands-OnPenetrationTestingwithKaliNetHunterwillteachyouthecomponentsofNetHunterandhowtoinstallthesoftware.You’llalsolearnaboutthedifferenttoolsincludedandhowtooptimizeanduseapackage,obtaindesiredresults,performtests,andmakeyourenvironmentmoresecure.StartingwithanintroductiontoKaliNetHunter,youwilldelveintodifferentphasesofthepentestingprocess.Thisbookwillshowyouhowtobuildyourpenetrationtestingenvironmentandsetupyourlab.Youwillgaininsightintogatheringintellectualdata,exploitingvulnerableareas,andgainingcontrolovertargetsystems.Asyouprogressthroughthebook,youwillexploretheNetHuntertoolsavailableforexploitingwiredandwirelessdevices.Youwillworkthroughnewwaystodeployexistingtoolsdesignedtoreducethechancesofdetection.Intheconcludingchapters,youwilldiscovertipsandbestpracticesforintegratingsecurityhardeningintoyourAndroidecosystem.Bytheendofthisbook,youwillhavelearnedtosuccessfullyuseamobilepenetrationtestingdevicebasedonKaliNetHunterandAndroidtoaccomplishthesametasksyouwouldtraditionally,butinasmallerandmoremobileformfactor.
最新章節(jié)
- Leave a review - let other readers know what you think
- Other Books You May Enjoy
- Summary
- OTG cables
- Wireless adapters
- External components
品牌：中圖公司
上架時間：2021-07-02 12:22:53
出版社：Packt Publishing
本書數(shù)字版權(quán)由中圖公司提供，并由其授權(quán)上海閱文信息技術(shù)有限公司制作發(fā)行
- Leave a review - let other readers know what you think 更新時間：2021-07-02 12:39:24
- Other Books You May Enjoy
- Summary
- OTG cables
- Wireless adapters
- External components
- Mobile hardware
- ODROID U2
- Raspberry Pi 2 and 3
- Gem PDA
- Small computers
- Selecting a Kali Device and Hardware
- Summary
- Step 4 – setting up the OWASP broken web applications project
- Step 3 – setting up Metasploitable
- Step 2 – obtaining vulnerable systems
- Step 1 – installing the hypervisor
- Setting up the lab
- Vulnerable systems
- Type 2
- Type 1
- Hypervisor
- Technical requirements
- Building a Lab
- Summary
- Hardening mobile devices
- Hardening networking devices
- Disabling services in Linux
- Security scanner for Linux
- The Linux baseline
- Disabling services
- Windows Firewall
- Patch management
- User accounts
- The Windows registry
- The Windows baseline
- Client system security
- Other common viruses
- Viruses
- Security threats and countermeasures
- Hardening Techniques and Countermeasures
- Summary
- Encrypting traffic
- Metasploit Payload Generator
- Fragmentation
- MAC spoofing
- Idle scans
- Decoys
- Stealth scanning
- Scanning
- Avoiding Detection
- Summary
- Bluetooth hacking
- Cracking WEP Encryption
- Exercise – cracking WEP and WPA
- Exercise – discovering hidden SSIDs
- Exercise – detecting a de-authentication attack
- Exercise – de-authenticating a specific client
- Exercise – de-authentication attacks
- Exercise – discovering the WPS version of an access point
- Exercise – detecting access points and their manufacturers
- Exercise – checking whether a wireless card supports injection
- Wireless attacks
- Wireless threats
- Wi-Fi Protected Access 2
- Wi-Fi Protected Access
- Wired Equivalent Privacy
- Wireless encryption standard
- Wireless authentication modes
- Service Set Identifier
- Wireless standards
- Extended Service Set
- Basic Service Set
- Independent Basic Service Set
- Wireless network topologies
- Targeting Wireless Devices and Networks
- Summary
- Tcpdump
- Urlsnarf
- Tshark
- Dsniff
- Packet analysis techniques
- The MITM framework
- TShark
- Tcpdump
- Kismet
- Dsniff
- Arpspoof
- Observing wireless networks using airmon-ng
- Aircrack-ng
- Tools and techniques of packet sniffing
- Passive sniffing
- Active sniffing
- Types of packet-sniffing techniques
- The need for sniffing traffic
- Packet Sniffing and Traffic Analysis
- Section 3: Advanced Pentesting Tasks and Tools
- Summary
- Clearing logs in Linux
- Using the command prompt to clear logs in Windows
- Using PowerShell to clear logs in Windows
- Clearing logs on Windows
- Event logs
- Database logs
- Web server logs
- Packet analysis
- Syslog messages
- DHCP server logs
- Types of logs and their locations
- Clearing tracks
- Clearing Tracks and Removing Evidence from a Target
- Further reading
- Summary
- Exercise – planting a backdoor with Netcat
- Executing applications on the target
- Escalating privileges
- Executing applications
- Exercise – recovering passwords with hashcat
- Putting it together
- Exercise – working with rtgen
- Exercise – creating the rainbow table
- Rainbow tables
- Offline attacks
- Exercise – working with Ncrack
- Working with Ncrack
- Active techniques
- Exercise – working with SSL strip
- Man-in-the-Middle
- Passive techniques
- Choosing an approach to cracking
- Concerning passwords
- Technical requirements
- Penetrating the Target
- Further reading
- Summary
- Exercise – using SMBmap
- Exercise – using acccheck
- Exercise – using enum4linux
- Working with SMB
- Exercise – working with smtp-user-enum
- Exercise – using NMAP to enumerate
- Enumerating SMTP
- Enumerating DNS
- Enumeration with NetHunter
- Exercise – using nmap to banner-grab
- Exercise using Telnet to banner-grab
- Banner grabbing
- UDP scanning
- Tuning and tweaking
- ACK scans
- NULL scans
- FIN scans
- XMAS scans
- Stealth scans
- Full Open/TCP connect scans
- Port scanning
- Exercise – Performing a Ping Sweep with Nmap
- Using Nmap
- Exercise – working with ping
- Determining whether a host is up or down
- Troubleshooting scanning results
- Conducting a scan
- Scanning
- Technical requirements
- Scanning and Enumeration Tools
- Further reading
- Summary
- Using traceroute
- Using DNSMAP
- Exercise – working with dnsenum
- Using dnsenum
- Querying another DNS
- Querying an SOA record
- Querying an MX record
- Looking up an NS record
- Reverse DNS Lookups
- nslookup
- Exercise – getting the most from WHOIS
- Using WHOIS
- Going for technical data
- Working with Recon-Ng
- Exercise – working with Echosec
- Using Echosec
- Social networking
- Location
- Exercise – what's the Right Search Engine
- Google Hacking
- Exercise – using HTTrack
- Using HTTrack
- Exercise – working with wget
- Using wget
- Exercise – working with Parsero
- Using Parsero
- What is robots.txt?
- Exercise – working with Nikto
- Using Nikto
- Exercise using Metagoofil to collect information
- Using Metagoofil
- Working with filters
- Using Shodan
- Tools for gathering useful information
- Organizational data
- Network information
- Types of information available
- Information for the taking
- Objectives of intelligence gathering
- Technical requirements
- Intelligence-Gathering Tools
- Section 2: Common Pentesting Tasks and Tools
- Summary
- Deliverables
- Clearing tracks
- Maintaining access
- Gaining access
- Scanning
- Reconnaissance
- Phases of penetration testing
- Open Source Security Testing Methodology Manual
- Penetration Testing Execution Standard
- PCI penetration testing guide
- OWASP testing framework
- Penetration testing methodologies and frameworks
- The post-attack phase
- The attack phase
- The pre-attack phase
- Phases of penetration testing
- Types of penetration tests
- Purple team
- Red team
- Blue team
- Blue teaming vs red teaming vs purple team
- Penetration testing
- State-sponsored hacker
- Hacktivist
- Suicide hacker
- Script kiddie
- Black hat
- Grey hat
- White hat
- Types of hackers
- The need for penetration testing
- Understanding the Phases of the Pentesting Process
- Summary
- Additional optional hardware
- Building Kali NetHunter for a specific device (optional)
- Installing NetHunter
- Google Play Protect
- The Google Play Store
- Android updates
- Application services
- Verify applications
- SafetyNet
- Android Device Manager
- The Android security model
- Kernel
- Android Runtime
- Android Libraries
- The Application Framework Layer
- The Application layer
- The Android architecture
- The Android platform and security model
- Searchsploit
- The Metasploit Payload Generator
- Network Mapper
- Software defined radio
- The MANA Wireless Toolkit
- BadUSB MITM attacks
- DuckHunter HID
- HID attacks
- The MITM framework
- MAC Changer
- Tools within Kali NetHunter
- What is Kali NetHunter?
- Introduction to Kali NetHunter
- Section 1: Exploring Kali NetHunter
- Disclaimer
- Reviews
- Get in touch
- Conventions used
- Download the color images
- To get the most out of this book
- What this book covers
- Who this book is for
- Preface
- Packt is searching for authors like you
- About the reviewers
- About the authors
- Contributors
- Packt.com
- Why subscribe?
- About Packt
- Hands-On Penetration Testing with Kali NetHunter
- Copyright and Credits
- Title Page
- coverpage
- coverpage
- Title Page
- Copyright and Credits
- Hands-On Penetration Testing with Kali NetHunter
- About Packt
- Why subscribe?
- Packt.com
- Contributors
- About the authors
- About the reviewers
- Packt is searching for authors like you
- Preface
- Who this book is for
- What this book covers
- To get the most out of this book
- Download the color images
- Conventions used
- Get in touch
- Reviews
- Disclaimer
- Section 1: Exploring Kali NetHunter
- Introduction to Kali NetHunter
- What is Kali NetHunter?
- Tools within Kali NetHunter
- MAC Changer
- The MITM framework
- HID attacks
- DuckHunter HID
- BadUSB MITM attacks
- The MANA Wireless Toolkit
- Software defined radio
- Network Mapper
- The Metasploit Payload Generator
- Searchsploit
- The Android platform and security model
- The Android architecture
- The Application layer
- The Application Framework Layer
- Android Libraries
- Android Runtime
- Kernel
- The Android security model
- Android Device Manager
- SafetyNet
- Verify applications
- Application services
- Android updates
- The Google Play Store
- Google Play Protect
- Installing NetHunter
- Building Kali NetHunter for a specific device (optional)
- Additional optional hardware
- Summary
- Understanding the Phases of the Pentesting Process
- The need for penetration testing
- Types of hackers
- White hat
- Grey hat
- Black hat
- Script kiddie
- Suicide hacker
- Hacktivist
- State-sponsored hacker
- Penetration testing
- Blue teaming vs red teaming vs purple team
- Blue team
- Red team
- Purple team
- Types of penetration tests
- Phases of penetration testing
- The pre-attack phase
- The attack phase
- The post-attack phase
- Penetration testing methodologies and frameworks
- OWASP testing framework
- PCI penetration testing guide
- Penetration Testing Execution Standard
- Open Source Security Testing Methodology Manual
- Phases of penetration testing
- Reconnaissance
- Scanning
- Gaining access
- Maintaining access
- Clearing tracks
- Deliverables
- Summary
- Section 2: Common Pentesting Tasks and Tools
- Intelligence-Gathering Tools
- Technical requirements
- Objectives of intelligence gathering
- Information for the taking
- Types of information available
- Network information
- Organizational data
- Tools for gathering useful information
- Using Shodan
- Working with filters
- Using Metagoofil
- Exercise using Metagoofil to collect information
- Using Nikto
- Exercise – working with Nikto
- What is robots.txt?
- Using Parsero
- Exercise – working with Parsero
- Using wget
- Exercise – working with wget
- Using HTTrack
- Exercise – using HTTrack
- Google Hacking
- Exercise – what's the Right Search Engine
- Location
- Social networking
- Using Echosec
- Exercise – working with Echosec
- Working with Recon-Ng
- Going for technical data
- Using WHOIS
- Exercise – getting the most from WHOIS
- nslookup
- Reverse DNS Lookups
- Looking up an NS record
- Querying an MX record
- Querying an SOA record
- Querying another DNS
- Using dnsenum
- Exercise – working with dnsenum
- Using DNSMAP
- Using traceroute
- Summary
- Further reading
- Scanning and Enumeration Tools
- Technical requirements
- Scanning
- Conducting a scan
- Troubleshooting scanning results
- Determining whether a host is up or down
- Exercise – working with ping
- Using Nmap
- Exercise – Performing a Ping Sweep with Nmap
- Port scanning
- Full Open/TCP connect scans
- Stealth scans
- XMAS scans
- FIN scans
- NULL scans
- ACK scans
- Tuning and tweaking
- UDP scanning
- Banner grabbing
- Exercise using Telnet to banner-grab
- Exercise – using nmap to banner-grab
- Enumeration with NetHunter
- Enumerating DNS
- Enumerating SMTP
- Exercise – using NMAP to enumerate
- Exercise – working with smtp-user-enum
- Working with SMB
- Exercise – using enum4linux
- Exercise – using acccheck
- Exercise – using SMBmap
- Summary
- Further reading
- Penetrating the Target
- Technical requirements
- Concerning passwords
- Choosing an approach to cracking
- Passive techniques
- Man-in-the-Middle
- Exercise – working with SSL strip
- Active techniques
- Working with Ncrack
- Exercise – working with Ncrack
- Offline attacks
- Rainbow tables
- Exercise – creating the rainbow table
- Exercise – working with rtgen
- Putting it together
- Exercise – recovering passwords with hashcat
- Executing applications
- Escalating privileges
- Executing applications on the target
- Exercise – planting a backdoor with Netcat
- Summary
- Further reading
- Clearing Tracks and Removing Evidence from a Target
- Clearing tracks
- Types of logs and their locations
- DHCP server logs
- Syslog messages
- Packet analysis
- Web server logs
- Database logs
- Event logs
- Clearing logs on Windows
- Using PowerShell to clear logs in Windows
- Using the command prompt to clear logs in Windows
- Clearing logs in Linux
- Summary
- Section 3: Advanced Pentesting Tasks and Tools
- Packet Sniffing and Traffic Analysis
- The need for sniffing traffic
- Types of packet-sniffing techniques
- Active sniffing
- Passive sniffing
- Tools and techniques of packet sniffing
- Aircrack-ng
- Observing wireless networks using airmon-ng
- Arpspoof
- Dsniff
- Kismet
- Tcpdump
- TShark
- The MITM framework
- Packet analysis techniques
- Dsniff
- Tshark
- Urlsnarf
- Tcpdump
- Summary
- Targeting Wireless Devices and Networks
- Wireless network topologies
- Independent Basic Service Set
- Basic Service Set
- Extended Service Set
- Wireless standards
- Service Set Identifier
- Wireless authentication modes
- Wireless encryption standard
- Wired Equivalent Privacy
- Wi-Fi Protected Access
- Wi-Fi Protected Access 2
- Wireless threats
- Wireless attacks
- Exercise – checking whether a wireless card supports injection
- Exercise – detecting access points and their manufacturers
- Exercise – discovering the WPS version of an access point
- Exercise – de-authentication attacks
- Exercise – de-authenticating a specific client
- Exercise – detecting a de-authentication attack
- Exercise – discovering hidden SSIDs
- Exercise – cracking WEP and WPA
- Cracking WEP Encryption
- Bluetooth hacking
- Summary
- Avoiding Detection
- Scanning
- Stealth scanning
- Decoys
- Idle scans
- MAC spoofing
- Fragmentation
- Metasploit Payload Generator
- Encrypting traffic
- Summary
- Hardening Techniques and Countermeasures
- Security threats and countermeasures
- Viruses
- Other common viruses
- Client system security
- The Windows baseline
- The Windows registry
- User accounts
- Patch management
- Windows Firewall
- Disabling services
- The Linux baseline
- Security scanner for Linux
- Disabling services in Linux
- Hardening networking devices
- Hardening mobile devices
- Summary
- Building a Lab
- Technical requirements
- Hypervisor
- Type 1
- Type 2
- Vulnerable systems
- Setting up the lab
- Step 1 – installing the hypervisor
- Step 2 – obtaining vulnerable systems
- Step 3 – setting up Metasploitable
- Step 4 – setting up the OWASP broken web applications project
- Summary
- Selecting a Kali Device and Hardware
- Small computers
- Gem PDA
- Raspberry Pi 2 and 3
- ODROID U2
- Mobile hardware
- External components
- Wireless adapters
- OTG cables
- Summary
- Other Books You May Enjoy
- Leave a review - let other readers know what you think 更新時間：2021-07-02 12:39:24
