Mastering Kali Linux for Advanced Penetration Testing

Vijay Kumar Velu

• Publisher: Packt Publishing
• Year: 2022
• eBook ISBN: 9781801812672
• Edition: 4
• Topic: Computer Science
• Subtopic: Cyber Security
• Index: Computer Science

Master key approaches used by real attackers to perform advanced pentesting in tightly secured infrastructure, cloud and virtualized environments, and devices, and learn the latest phishing and hacking techniquesKey Features• Explore red teaming and play the hackers game to proactively defend your infrastructure• Use OSINT, Google dorks, Nmap, recon-nag, and other tools for passive and active reconnaissance• Learn about the latest email, Wi-Fi, and mobile-based phishing techniquesBook DescriptionRemote working has given hackers plenty of opportunities as more confidential information is shared over the internet than ever before. In this new edition of Mastering Kali Linux for Advanced Penetration Testing, you'll learn an offensive approach to enhance your penetration testing skills by testing the sophisticated tactics employed by real hackers. You'll go through laboratory integration to cloud services so that you learn another dimension of exploitation that is typically forgotten during a penetration test. You'll explore different ways of installing and running Kali Linux in a VM and containerized environment and deploying vulnerable cloud services on AWS using containers, exploiting misconfigured S3 buckets to gain access to EC2 instances.This book delves into passive and active reconnaissance, from obtaining user information to large-scale port scanning. Building on this, different vulnerability assessments are explored, including threat modeling. See how hackers use lateral movement, privilege escalation, and command and control (C2) on compromised systems.By the end of this book, you'll have explored many advanced pentesting approaches and hacking techniques employed on networks, IoT, embedded peripheral devices, and radio frequencies.What you will learn• Exploit networks using wired/wireless networks, cloud infrastructure, and web services• Learn embedded peripheral device, Bluetooth, RFID, and IoT hacking techniques• Master the art of bypassing traditional antivirus and endpoint detection and response (EDR) tools• Test for data system exploits using Metasploit, PowerShell Empire, and CrackMapExec• Perform cloud security vulnerability assessment and exploitation of security misconfigurations• Use bettercap and Wireshark for network sniffing• Implement complex attacks with Metasploit, Burp Suite, and OWASP ZAPWho this book is forThis fourth edition is for security analysts, pentesters, ethical hackers, red team operators, and security consultants wanting to learn and optimize infrastructure/application/cloud security using advanced Kali Linux features. Prior penetration testing experience and basic knowledge of ethical hacking will help you make the most of this book.

Index

Symbols

0-day vulnerabilities

reference link 141

A

Access Control Lists (ACLs) 124

Access Point (AP) 212

access rights

escalating, in Active Directory 452-458

acknowledge (ACK) 91

Active Directory 35

access rights, escalating 452-458

active directory domain servers

reconnaissance 128

active fingerprinting 113

active services

determining 114, 115

activities, on compromised local system 401

additional accounts

creating 406, 407

administrative privileges

escalating, to system level 436

advanced access credentials

gaining 402

Advanced Persistent Threats (APTs) 81

Amazon CloudFront

using, for C2 487-492

Amazon Machine Interface (AMI) 17

Amazon Web Services (AWS) 17

Android (non-rooted phones)

Kali Linux, installing 27, 28

antivirus

bypassing, with files 337, 338

Shellter, using 344-347

Veil framework, using 338-343

application exploitation

in EC2 instance 298, 299, 306-310

application-level controls

bypassing 331

past client-side firewalls, tunneling with SSH 332

Application Programming Interface (API) 243, 365

application-specific attacks 262

brute-forcing, access credentials 262

ARP

broadcasting 120

attack

escalating, with DNS redirection 196, 197

evidence, hiding 496, 497, 498

attacker’s URL

obfuscating 195

attack tree approach 166

AWS Cloud

Kali Linux, installing 17...

Table of contents

• Preface
• Goal-Based Penetration Testing
• Open-Source Intelligence and Passive Reconnaissance
• Active Reconnaissance of External and Internal Networks
• Vulnerability Assessment
• Advanced Social Engineering and Physical Security
• Wireless and Bluetooth Attacks
• Exploiting Web-Based Applications
• Cloud Security Exploitation
• Bypassing Security Controls
• Exploitation
• Action on the Objective and Lateral Movement
• Privilege Escalations
• Command and Control
• Embedded Devices and RFID Hacking
• Other Books You May Enjoy
• Index