Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Learn Ethical Hacking from Scratch
  • Table Of Contents Toc
  • Feedback & Rating feedback
Learn Ethical Hacking from Scratch

Learn Ethical Hacking from Scratch

By : Sabih
4.4 (17)
Buy this Book
close
close
Learn Ethical Hacking from Scratch

Learn Ethical Hacking from Scratch

4.4 (17)
By: Sabih
Buy this Book

Overview of this book

This book starts with the basics of ethical hacking, how to practice hacking safely and legally, and how to install and interact with Kali Linux and the Linux terminal. You will explore network hacking, where you will see how to test the security of wired and wireless networks. You’ll also learn how to crack the password for any Wi-Fi network (whether it uses WEP, WPA, or WPA2) and spy on the connected devices. Moving on, you will discover how to gain access to remote computer systems using client-side and server-side attacks. You will also get the hang of post-exploitation techniques, including remotely controlling and interacting with the systems that you compromised. Towards the end of the book, you will be able to pick up web application hacking techniques. You'll see how to discover, exploit, and prevent a number of website vulnerabilities, such as XSS and SQL injections. The attacks covered are practical techniques that work against real systems and are purely for educational purposes. At the end of each section, you will learn how to detect, prevent, and secure systems from these attacks.
Table of Contents (24 chapters)
close
close
close
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Get in touch
Free Chapter
1
Introduction
Introduction
What's in this book?
What is hacking?
Why should we learn about hacking?
A glimpse of hacking
Summary
2
Setting Up a Lab
Setting Up a Lab
Lab overview
Installing Kali Linux
Installing Metasploitable
Installing Windows
Creating and using snapshots
Summary
3
Linux Basics
Linux Basics
Overview of Kali Linux
Linux commands
Updating resources
Summary
4
Network Penetration Testing
chevron up
Network Penetration Testing
What is a network?
Network basics
Connecting to a wireless adapter
MAC addresses
Wireless modes – managed and monitor
Enabling monitor mode manually
Enabling monitor mode using airmon-ng
Summary
5
Pre-Connection Attacks
Pre-Connection Attacks
Packet sniffing basics
Targeted packet sniffing
Deauthentication attack
What is a fake access point?
Creating fake access points with the MANA Toolkit
Summary
6
Network Penetration Testing - Gaining Access
Network Penetration Testing - Gaining Access
WEP theory
Basic web cracking
Fake authentication attack
ARP request replay
WPA introduction
WPS cracking
Handshake theory
Capturing the handshake
Creating a wordlist
Wordlist cracking
Securing network from attacks
Summary
7
Post-Connection Attacks
Post-Connection Attacks
Post-connection attacks
Summary
8
Man-in-the-Middle Attacks
Man-in-the-Middle Attacks
Man-in-the–middle attacks
Wireshark
Summary
9
Network Penetration Testing, Detection, and Security
Network Penetration Testing, Detection, and Security
Detecting ARP poisoning
Detecting suspicious behavior
Summary
10
Gaining Access to Computer Devices
Gaining Access to Computer Devices
Introduction to gaining access
Sever-side attacks
Server-side attack basics
Server-side attacks – Metasploit basics
Metasploit remote code execution
Summary
11
Scanning Vulnerabilities Using Tools
Scanning Vulnerabilities Using Tools
Installing MSFC
MSFC scan
MSFC analysis
Installing Nexpose
Running Nexpose
Nexpose analysis
Summary
12
Client-Side Attacks
Client-Side Attacks
Client-side attacks
Installing Veil
Payloads overview
Generating a Veil backdoor
Listening for connections
Testing the backdoor
Fake bdm1 updates
Client-side attacks using the bdm2 BDFProxy
Protection against delivery methods
Summary
13
Client-Side Attacks - Social Engineering
Client-Side Attacks - Social Engineering
Client-side attacks using social engineering
Maltego overview
Social engineering – linking accounts
Social engineering – Twitter
Social engineering – emails
Social engineering – summary
Downloading and executing AutoIt
Changing the icon and compiling the payload
Changing extensions
Client-side attacks – TDM email spoofing
Summary
14
Attack and Detect Trojans with BeEF
Attack and Detect Trojans with BeEF
The BeEF tool
BeEF – hook using a MITMf
BeEF – basic commands
BeEF – Pretty Theft
BeEF – Meterpreter 1
Detecting Trojans manually
Detecting Trojans using a sandbox
Summary
15
Attacks Outside the Local Network
Attacks Outside the Local Network
Port forwarding
External backdoors
IP forwarding
External BeEF
Summary
16
Post Exploitation
Post Exploitation
An introduction to post exploitation
Meterpreter basics
Filesystem commands
Maintaining access by using simple methods
Maintaining access by using advanced methods
Keylogging
An introduction to pivoting
Pivoting autoroutes
Summary
17
Website Penetration Testing
Website Penetration Testing
What is a website?
Attacking a website
Summary
18
Website Pentesting - Information Gathering
Website Pentesting - Information Gathering
Information gathering using tools
Websites on the same server
Information gathering from target websites
Summary
19
File Upload, Code Execution, and File Inclusion Vulnerabilities
File Upload, Code Execution, and File Inclusion Vulnerabilities
File upload vulnerabilities
Code execution vulnerabilities
Local file inclusion vulnerabilities
Remote file inclusion using Metasploitable
Basic mitigation
Summary
20
SQL Injection Vulnerabilities
SQL Injection Vulnerabilities
What is SQL?
The dangers of SQLi
Discovering SQLi
SQLi authorization bypass
Discovering an SQLi using the GET method
Basic SELECT statements
Discovering tables
Reading columns and their data
Reading and writing files on the server
The sqlmap tool
Preventing SQLi
Summary
21
Cross-Site Scripting Vulnerabilities
Cross-Site Scripting Vulnerabilities
Introduction to XSS
Reflected XSS
Stored XSS
XSS BeEF exploitation
XSS protection
Summary
22
Discovering Vulnerabilities Automatically Using OWASP ZAP
Discovering Vulnerabilities Automatically Using OWASP ZAP
OWASP ZAP start
OWASP ZAP results
Summary
23
Other Books You May Enjoy
Other Books You May Enjoy
Leave a review - let other readers know what you think

Wireless modes – managed and monitor

Now we know that the MAC address is used to make sure that the packet goes in the right direction, so each packet has a source MAC and a destination MAC, and it flows from the device that has the source MAC to the device that has the destination MAC. This is how wireless cards work in the default mode. So, if we go into the Kali machine and use iwconfig, in the following screenshot, you can see that we have a wireless card, named wlan0, and that the default mode is called managed mode:

So, basically, in this mode, our wireless device will only receive packets, or will only try to capture packets that have our device's MAC address as the destination MAC. It will only capture packets that are actually directed to our computer.

What we want to do, however, is enable it to capture any packet that's around us—any packet...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
Start a 7-day FREE trial
End of Section 6
Next Section
bookmark search playlist download
font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY