Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Learn Penetration Testing
  • Table Of Contents Toc
  • Feedback & Rating feedback
Learn Penetration Testing

Learn Penetration Testing

By : Rishalin Pillay
4.7 (3)
Buy this Book
close
close
Learn Penetration Testing

Learn Penetration Testing

4.7 (3)
By: Rishalin Pillay

Overview of this book

Sending information via the internet is not entirely private, as evidenced by the rise in hacking, malware attacks, and security threats. With the help of this book, you'll learn crucial penetration testing techniques to help you evaluate enterprise defenses. You'll start by understanding each stage of pentesting and deploying target virtual machines, including Linux and Windows. Next, the book will guide you through performing intermediate penetration testing in a controlled environment. With the help of practical use cases, you'll also be able to implement your learning in real-world scenarios. By studying everything from setting up your lab, information gathering and password attacks, through to social engineering and post exploitation, you'll be able to successfully overcome security threats. The book will even help you leverage the best tools, such as Kali Linux, Metasploit, Burp Suite, and other open source pentesting tools to perform these techniques. Toward the later chapters, you'll focus on best practices to quickly resolve security threats. By the end of this book, you'll be well versed with various penetration testing techniques so as to be able to tackle security threats effectively
Table of Contents (21 chapters)
close
close
close
Preface
Preface
Who this book is for
What this book covers
To get the most out of this book
Get in touch
Disclaimer
Free Chapter
1
Section 1: The Basics
Section 1: The Basics
2
Introduction to Penetration Testing
Introduction to Penetration Testing
Technical requirements
What is penetration testing?
Stages of a penetration test
Getting started with your lab
Creating virtual machines in VMware, Hyper-V, and VirtualBox
Summary
Questions
3
Getting Started with Kali Linux
Getting Started with Kali Linux
Technical requirements
An introduction to Kali Linux
Installing and configuring Kali Linux
Basic commands in Kali Linux
Scripting in Kali Linux
The essential tools of Kali Linux
Summary
Questions
4
Section 2: Exploitation
Section 2: Exploitation
5
Performing Information Gathering
Performing Information Gathering
Technical requirements
Passive information gathering
Active information gathering
Vulnerability scanning
Capturing traffic
Summary
Questions
6
Mastering Social Engineering
Mastering Social Engineering
Technical requirements
What is social engineering?
Social engineering tools
Creating a social engineering campaign
Summary
Questions
7
Diving into the Metasploit Framework
Diving into the Metasploit Framework
Technical requirements
Introducing Metasploit
Finding modules
Adding modules
Metasploit options, shells, and payloads
Working with MSFvenom
Summary
Questions
8
Understanding Password Attacks
Understanding Password Attacks
Technical requirements
Introduction to password attacks
Working with wordlists
Offline password attacks
Online password attacks
Dumping passwords from memory
Summary
Questions
9
Working with Burp Suite
Working with Burp Suite
Technical requirements
Understanding Burp Suite
Preparing your environment
Exploring and configuring Burp Suite components
Summary
Questions
10
Attacking Web Applications
chevron up
Attacking Web Applications
Technical requirements
Preparing your environment
Types of web application security testing
The components of a web application
Understanding the HTTP protocol
Common web application attacks
Attacking web applications
Summary
Questions
11
Getting Started with Wireless Attacks
Getting Started with Wireless Attacks
Technical requirements
Exploring wireless attacks
Compatible hardware
Wireless attack tools
Cracking WEP, WPA, and WPA2
Summary
Questions
12
Section 3: Post Exploitation
Section 3: Post Exploitation
13
Moving Laterally and Escalating Your Privileges
Moving Laterally and Escalating Your Privileges
Technical requirements
Discovering post-exploitation techniques
Preparing your environment
Performing post-exploitation attacks
Summary
Questions
14
Antivirus Evasion
Antivirus Evasion
Technical requirements
The evolution of antivirus technologies
Concepts of antivirus evasion
Getting started with antivirus evasion
Testing evasion techniques
Summary
Questions
15
Maintaining Control within the Environment
Maintaining Control within the Environment
Technical requirements
The importance of maintaining access
Techniques used to maintain access
Using tools for persistence
Summary
Questions
16
Section 4: Putting It All Together
Section 4: Putting It All Together
17
Reporting and Acting on Your Findings
Reporting and Acting on Your Findings
Technical requirements
The importance of a penetration testing report
What goes into a penetration test report?
Tools for report writing
Recommending remediation options
Summary
Questions
18
Where Do I Go from Here?
Where Do I Go from Here?
Technical requirements
Knowledge maintenance
Toolkit maintenance
Purposefully vulnerable resources
Summary
19
Assessments
Assessments
Chapter 1: Introduction to Penetration Testing
Chapter 2: Getting Started with Kali Linux
Chapter 3: Performing Information Gathering
Chapter 4: Mastering Social Engineering
Chapter 5: Diving into the Metasploit Framework
Chapter 6: Understanding Password Attacks
Chapter 7: Working with Burp Suite
Chapter 8: Attacking Web Applications
Chapter 9: Getting Started with Wireless Attacks
Chapter 10: Moving Laterally and Escalating your Privileges
Chapter 11: Antivirus Evasion
Chapter 12: Maintaining Control within the Environment
Chapter 13: Reporting and Acting on Your Findings
20
Other Books You May Enjoy
Other Books You May Enjoy
Leave a review - let other readers know what you think

Understanding the HTTP protocol

Hypertext Transfer Protocol (HTTP) is a client-server protocol. The web browser is classified as the client, which makes requests to the server, who will provide a response to the request. By default, HTTP uses port 80, but this port can be configured if desired.

HTTP is stateless, which means that the server doesn't store any information related to the various users that make requests to it. For example, you can send multiple requests to a web application and they will be treated separately. HTTP is also a clear text protocol, and so any sensitive information that's sent over HTTP can be sniffed using tools such as Wireshark:

Figure 2: Clear text credentials transmitted via HTTP

SSL is used to secure the data, and the protocol that's used is Hypertext Transfer Protocol Secure (HTTPS). HTTPS operates on port 443 by default, and this...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
Start a 7-day FREE trial
End of Section 6
Next Section
bookmark search playlist download
font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY