Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Kali Linux Network Scanning Cookbook

By : Hixon

5 (2)

Kali Linux Network Scanning Cookbook

5 (2)

By: Hixon

Overview of this book

With the ever-increasing amount of data flowing in today’s world, information security has become vital to any application. This is where Kali Linux comes in. Kali Linux focuses mainly on security auditing and penetration testing. This step-by-step cookbook on network scanning trains you in important scanning concepts based on version 2016.2. It will enable you to conquer any network environment through a range of network scanning techniques and will also equip you to script your very own tools. Starting with the fundamentals of installing and managing Kali Linux, this book will help you map your target with a wide range of network scanning tasks, including discovery, port scanning, fingerprinting, and more. You will learn how to utilize the arsenal of tools available in Kali Linux to conquer any network environment. The book offers expanded coverage of the popular Burp Suite and has new and updated scripts for automating scanning and target exploitation. You will also be shown how to identify remote services, how to assess security risks, and how various attacks are performed. You will cover the latest features of Kali Linux 2016.2, which includes the enhanced Sparta tool and many other exciting updates. This immersive guide will also encourage the creation of personally scripted tools and the skills required to create them.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Sections

Conventions

Reader feedback

Customer support

Free Chapter

Getting Started

Getting Started

Introduction

Configuring a security lab with VMware Player (Windows)

Configuring a security lab with VMware Fusion (macOS)

Installing Ubuntu Server

Installing Metasploitable2

Installing Windows Server

Increasing the Windows attack surface

Installing Kali Linux

Using text editors (Vim and GNU nano)

Keeping Kali updated

Managing Kali services

Configuring and using SSH

Installing Nessus on Kali Linux

Reconnaissance

Reconnaissance

Introduction

Using Google to find subdomains

Finding e-mail addresses using theHarvester

Enumerating DNS using the host command

Enumerating DNS using DNSRecon

Enumerating DNS using the dnsenum command

Discovery

Discovery

Introduction

Using Scapy to perform host discovery (layers 2/3/4)

Using Nmap to perform host discovery (layers 2/3/4)

Using ARPing to perform host discovery (layer 2)

Using netdiscover to perform host discovery (layer 2)

Using Metasploit to perform host discovery (layer 2)

Using hping3 to perform host discovery (layers 3/4)

Using ICMP to perform host discovery

Using fping to perform host discovery

Port Scanning

Port Scanning

Introduction

UDP port scanning

TCP port scanning

Port scanning with Scapy (UDP, stealth, connect, and zombie)

Port scanning with Nmap (UDP, stealth, connect, zombie)

Port scanning with Metasploit(UDP, stealth, and connect)

Port scanning with hping3 (stealth)

Port scanning with DMitry (connect)

Port scanning with Netcat (connect)

Port scanning with masscan (stealth)

Fingerprinting

Fingerprinting

Introduction

Banner grabbing with Netcat

Banner grabbing with Python sockets

Banner grabbing with DMitry

Banner grabbing with Nmap NSE

Banner grabbing with Amap

Service identification with Nmap

Service identification with Amap

Operating system identification with Scapy

Operating system identification with Nmap

Operating system identification with xprobe2

Passive operating system identification with p0f

SNMP analysis with Onesixtyone

SNMP analysis with SNMPwalk

Firewall identification with Scapy

Firewall identification with Nmap

Firewall identification with Metasploit

Vulnerability Scanning

Vulnerability Scanning

Introduction

Vulnerability scanning with the Nmap Scripting Engine

Vulnerability scanning with MSF auxiliary modules

Creating scan policies with Nessus

Vulnerability scanning with Nessus

Vulnerability scanning with OpenVAS

Validating vulnerabilities with HTTP interaction

Validating vulnerabilities with ICMP interaction

Denial of Service

Denial of Service

Introduction

Fuzz testing to identify buffer overflows

Remote FTP service buffer-overflow DoS

Smurf DoS attack

DNS amplification DoS attacks

SNMP amplification DoS attack

SYN flood DoS attack

Sock stress DoS attack

DoS attacks with Nmap NSE

DoS attacks with Metasploit

DoS attacks with the exploit database

Working with Burp Suite

Working with Burp Suite

Introduction

Configuring Burp Suite on Kali Linux

Defining a web application target with Burp Suite

Using Burp Suite Spider

Using Burp Suite Proxy

Using Burp Suite engagement tools

Using the Burp Suite web application scanner

Using Burp Suite Intruder

Using Burp Suite Comparer

Using Burp Suite Repeater

Using Burp Suite Decoder

Using Burp Suite Sequencer

Using Burp Suite Extender

Using Burp Suite Clickbandit

Web Application Scanning

Web Application Scanning

Introduction

Web application scanning with Nikto

SSL/TLS scanning with SSLScan

SSL/TLS scanning with SSLyze

GET method SQL injection with sqlmap

POST method SQL injection with sqlmap

Requesting a capture SQL injection with sqlmap

Automating CSRF testing

Validating command-injection vulnerabilities with HTTP traffic

Validating command-injection vulnerabilities with ICMP traffic

Attacking the Browser with BeEF

Attacking the Browser with BeEF

Hooking the browser withBeEF

Collecting information with BeEF

Creating a persistent connection with BeEF

Integrating BeEF and Metasploit

Using the BeEF autorule engine

Working with Sparta

Working with Sparta

Information gathering with Sparta

Creating custom commands for Sparta

Port scanning with Sparta

Fingerprinting with Sparta

Vulnerability scanning with Sparta

Web application scanning with Sparta

Automating Kali Tools

Automating Kali Tools

Introduction

Nmap greppable output analysis

Port scanning with NMAP NSE execution

Automate vulnerability scanning with NSE

Automate web application scanning with Nikto

Multithreaded MSF exploitation with reverse shell payload

Multithreaded MSF exploitation with backdoor executable

Multithreaded MSF exploitation with ICMP verification

Multithreaded MSF exploitation with admin account creation

Customer Reviews

5 (2)

5 star

100%

4 star

0

3 star

0

2 star

0

1 star

0

Introduction

In this chapter, we will begin the process of gathering information on our target. This begins with utilizing passive information-gathering techniques using public sources and moves into the active scanning of our target. At this point, it makes sense for us to discuss what our strategy is. Once the targets are determined, we will want to start collecting information on them. One of the key pieces of information is their domain. The Domain Name System (DNS) is a system of databases used to look up IP address(es) for a domain or, given an IP address, provide the domain name associated with it. Identifying the domains and subdomains associated with the target will provide us with a better idea of the targets assets and organization. We start by using Google and other public sources to reveal what we can. This is called reconnaissance or passive information gathering.

When we have completed finding what...

Search

Your notes and bookmarks