Web Penetration Testing with Kali Linux

Joseph Muniz, Aamir Lakhani

• Publisher: Packt Publishing
• Year: 2013
• Edition: 1
• eBook ISBN:
  9781782163169
• Topic: Informatique
• Subtopic: Assurance qualité et tests

In Detail

Kali Linux is built for professional penetration testing and security auditing. It is the next-generation of BackTrack, the most popular open-source penetration toolkit in the world. Readers will learn how to think like real attackers, exploit systems, and expose vulnerabilities.

Even though web applications are developed in a very secure environment and have an intrusion detection system and firewall in place to detect and prevent any malicious activity, open ports are a pre-requisite for conducting online business. These ports serve as an open door for attackers to attack these applications. As a result, penetration testing becomes essential to test the integrity of web-applications. Web Penetration Testing with Kali Linux is a hands-on guide that will give you step-by-step methods on finding vulnerabilities and exploiting web applications.

"Web Penetration Testing with Kali Linux" looks at the aspects of web penetration testing from the mind of an attacker. It provides real-world, practical step-by-step instructions on how to perform web penetration testing exercises.

You will learn how to use network reconnaissance to pick your targets and gather information. Then, you will use server-side attacks to expose vulnerabilities in web servers and their applications. Client attacks will exploit the way end users use web applications and their workstations. You will also learn how to use open source tools to write reports and get tips on how to sell penetration tests and look out for common pitfalls.

On the completion of this book, you will have the skills needed to use Kali Linux for web penetration tests and expose vulnerabilities on web applications and clients that access them.

Approach

"Web Penetration Testing with Kali Linux" contains various penetration testing methods using BackTrack that will be used by the reader. It contains clear step-by-step instructions with lot of screenshots. It is written in an easy to understand language which will further simplify the understanding for the user.

Who this book is for

"Web Penetration Testing with Kali Linux" is ideal for anyone who is interested in learning how to become a penetration tester. It will also help the users who are new to Kali Linux and want to learn the features and differences in Kali versus Backtrack, and seasoned penetration testers who may need a refresher or reference on new tools and techniques. Basic familiarity with web-based programming languages such as PHP, JavaScript and MySQL will also prove helpful.

Web Penetration Testing with Kali Linux

---

Table of Contents

Web Penetration Testing with Kali Linux

Credits

About the Authors

About the Reviewers

www.PacktPub.com

Support files, eBooks, discount offers and more

Why Subscribe?

Free Access for Packt account holders

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Errata

Piracy

Questions

1. Penetration Testing and Setup

Web application Penetration Testing concepts

Penetration Testing methodology

Calculating risk

Kali Penetration Testing concepts

Step 1 – Reconnaissance

Step 2 – Target evaluation

Step 3 – Exploitation

Step 4 – Privilege Escalation

Step 5 – maintaining a foothold

Introducing Kali Linux

Kali system setup

Running Kali Linux from external media

Installing Kali Linux

Kali Linux and VM image first run

Kali toolset overview

Summary

2. Reconnaissance

Reconnaissance objectives

Initial research

Company website

Web history sources

Regional Internet Registries (RIRs)

Electronic Data Gathering, Analysis, and Retrieval (EDGAR)

Social media resources

Trust

Job postings

Location

Shodan

Google hacking

Google Hacking Database

Researching networks

HTTrack – clone a website

ICMP Reconnaissance techniques

DNS Reconnaissance techniques

DNS target identification

Maltego – Information Gathering graphs

Nmap

FOCA – website metadata Reconnaissance

Summary

3. Server-side Attacks

Vulnerability assessment

Webshag

Skipfish

ProxyStrike

Vega

Owasp-Zap

Websploit

Exploitation

Metasploit

w3af

Exploiting e-mail systems

Brute-force attacks

Hydra

DirBuster

WebSlayer

Cracking passwords

John the Ripper

Man-in-the-middle

SSL strip

Starting the attack – redirection

Setting up port redirection using Iptables

Summary

4. Client-side Attacks

Social engineering

Social Engineering Toolkit (SET)

Using SET to clone and attack

MitM Proxy

Host scanning

Host scanning with Nessus

Installing Nessus on Kali

Using Nessus

Obtaining and cracking user passwords

Windows passwords

Mounting Windows

Linux passwords

Kali password cracking tools

Johnny

hashcat and oclHashcat

samdump2

chntpw

Ophcrack

Crunch

Other tools available in Kali

Hash-identifier

dictstat

RainbowCrack (rcracki_mt)

findmyhash

phrasendrescher

CmosPwd

creddump

Summary

5. Attacking Authentication

Attacking session management

Clickjacking

Hijacking web session cookies

Web session tools

Firefox plugins

Firesheep – Firefox plugin

Web Developer – Firefox plugin

Greasemonkey – Firefox plugin

Cookie Injector – Firefox plugin

Cookies Manager+ – Firefox plugin

Cookie Cadger

Wireshark

Hamster and Ferret

Man-in-the-middle attack

dsniff and arpspoof

Ettercap

Driftnet

SQL Injection

sqlmap

Cross-site scripting (XSS)

Testing cross-site scripting

XSS cookie stealing / Authentication hijacking

Other tools

urlsnarf

acccheck

hexinject

Patator

DBPwAudit

Summary

6. Web Attacks

Browser Exploitation Framework – BeEF

FoxyProxy – Firefox plugin

BURP Proxy

OWASP – ZAP

SET password harvesting

Fimap

Denial of Services (DoS)

THC-SSL-DOS

Scapy

Slowloris

Low Orbit Ion Cannon

Other tools

DNSCHEF

SniffJoke

Siege

Inundator

TCPReplay

Summary

7. Defensive Countermeasures

Testing your defenses

Baseline security

STIG

Patch management

Password policies

Mirror your environment

HTTrack

Other cloning tools

Man-in-the-middle defense

SSL strip defense

Denial of Service defense

Cookie defense

Clickjacking defense

Digital forensics

Kali Forensics Boot

Filesystem analysis with Kali

dc3dd

Other forensics tools in Kali

chkrootkit

Autopsy

Binwalk

pdf-parser

Foremost

Pasco

Scalpel

bulk_extractor

Summary

8. Penetration Test Executive Report

Compliance

Industry standards

Professional services

Documentation

Report format

Cover page

Confidentiality statement

Document control

Timeline

Executive summary

Methodology

Detailed testing procedures

Summary of findings

Vulnerabilities

Network considerations and recommendations

Appendices

Glossary

Statement of Work (SOW)

External Penetration Testing

Additional SOW material

Kali reporting tools

Dradis

KeepNote

Maltego CaseFile

MagicTree

CutyCapt

Sample reports

Summary

Index

Web Penetration Testing with Kali Linux

Copyright © 2013 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: September 2013

Production Reference: 1180913

Published by Packt Publishing Ltd.

Livery Place

35 Livery...

Table of contents

• Web Penetration Testing with Kali Linux