Sign In Start Free Trial

Hands-On Penetration Testing with Kali NetHunter

By : Glen D. Singh, Oriyano

3 (4)

Hands-On Penetration Testing with Kali NetHunter

3 (4)

By: Glen D. Singh, Oriyano

Overview of this book

Kali NetHunter is a version of the popular and powerful Kali Linux pentesting platform, designed to be installed on mobile devices. Hands-On Penetration Testing with Kali NetHunter will teach you the components of NetHunter and how to install the software. You’ll also learn about the different tools included and how to optimize and use a package, obtain desired results, perform tests, and make your environment more secure. Starting with an introduction to Kali NetHunter, you will delve into different phases of the pentesting process. This book will show you how to build your penetration testing environment and set up your lab. You will gain insight into gathering intellectual data, exploiting vulnerable areas, and gaining control over target systems. As you progress through the book, you will explore the NetHunter tools available for exploiting wired and wireless devices. You will work through new ways to deploy existing tools designed to reduce the chances of detection. In the concluding chapters, you will discover tips and best practices for integrating security hardening into your Android ecosystem. By the end of this book, you will have learned to successfully use a mobile penetration testing device based on Kali NetHunter and Android to accomplish the same tasks you would traditionally, but in a smaller and more mobile form factor.

Preface

Preface

Who this book is for

What this book covers

To get the most out of this book

Get in touch

Disclaimer

Free Chapter

Section 1: Exploring Kali NetHunter

Section 1: Exploring Kali NetHunter

Introduction to Kali NetHunter

Introduction to Kali NetHunter

What is Kali NetHunter?

Tools within Kali NetHunter

The Android platform and security model

Installing NetHunter

Additional optional hardware

Summary

Understanding the Phases of the Pentesting Process

Understanding the Phases of the Pentesting Process

The need for penetration testing

Types of penetration tests

Phases of penetration testing

Penetration testing methodologies and frameworks

Phases of penetration testing

Deliverables

Summary

Section 2: Common Pentesting Tasks and Tools

Section 2: Common Pentesting Tasks and Tools

Intelligence-Gathering Tools

Intelligence-Gathering Tools

Technical requirements

Objectives of intelligence gathering

Information for the taking

Tools for gathering useful information

Working with Recon-Ng

Going for technical data

Summary

Further reading

Scanning and Enumeration Tools

Scanning and Enumeration Tools

Technical requirements

Scanning

Determining whether a host is up or down

Using Nmap

Port scanning

Full Open/TCP connect scans

Stealth scans

XMAS scans

FIN scans

NULL scans

ACK scans

Tuning and tweaking

Banner grabbing

Enumeration with NetHunter

Enumerating DNS

Enumerating SMTP

Working with SMB

Summary

Further reading

Penetrating the Target

Penetrating the Target

Technical requirements

Concerning passwords

Summary

Further reading

Clearing Tracks and Removing Evidence from a Target

Clearing Tracks and Removing Evidence from a Target

Clearing tracks

Clearing logs on Windows

Clearing logs in Linux

Summary

Section 3: Advanced Pentesting Tasks and Tools

Section 3: Advanced Pentesting Tasks and Tools

Packet Sniffing and Traffic Analysis

Packet Sniffing and Traffic Analysis

The need for sniffing traffic

Types of packet-sniffing techniques

Tools and techniques of packet sniffing

Packet analysis techniques

Summary

Targeting Wireless Devices and Networks

Targeting Wireless Devices and Networks

Wireless network topologies

Wireless standards

Service Set Identifier

Wireless authentication modes

Wireless encryption standard

Wireless threats

Wireless attacks

Bluetooth hacking

Summary

Avoiding Detection

Avoiding Detection

Scanning

MAC spoofing

Fragmentation

Metasploit Payload Generator

Encrypting traffic

Summary

Hardening Techniques and Countermeasures

Hardening Techniques and Countermeasures

Security threats and countermeasures

Client system security

Hardening networking devices

Hardening mobile devices

Summary

Building a Lab

Building a Lab

Technical requirements

Hypervisor

Vulnerable systems

Setting up the lab

Summary

Selecting a Kali Device and Hardware

Selecting a Kali Device and Hardware

Small computers

Mobile hardware

External components

Summary

Other Books You May Enjoy

Other Books You May Enjoy

Leave a review - let other readers know what you think

Customer Reviews

3 (4)

5 star

50%

4 star

0

3 star

0

2 star

0

1 star

50%

Bluetooth hacking

Similar to wireless hacking on IEEE 802.11 networks, Bluetooth hacking also exists on the IEEE 802.15 networks as well. As we know, a Bluetooth connection is established over a short distance, by creating an ad hoc network:

The following is a short list of various types of Bluetooth attacks:

Bluejacking: This allows a malicious user to send unsolicited messages over a Bluetooth connected to another Bluetooth-enabled device.
Bluesnarfing: This is when an attacker is able to access the information on another Bluetooth-enabled device. Information may include the victim's email messages, their address book details, or SMS messages.
Bluesniffing: The concept of war driving in search of Bluetooth-enabled devices.
Bluebugging: This is when an attacker is able to take control of a victim's Bluetooth-enabled device. This allows the attacker to listen on telephone...

Search

Your notes and bookmarks