book

The Ultimate Kali Linux Book - Second Edition

Name: The Ultimate Kali Linux Book - Second Edition
Author: Glen D. Singh
ISBN: 9781801818933

by Glen D. Singh

February 2022

Intermediate to advanced

742 pages

15h 41m

English

Packt Publishing

Read now

Unlock full access

The Ultimate Kali Linux Book Second Edition
ContributorsAbout the authorAbout the reviewer
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the color imagesConventions usedDisclaimerShare Your Thoughts
Section 1: Getting Started with Penetration Testing
Chapter 1: Introduction to Ethical Hacking
Identifying threat actors and their intentUnderstanding what matters to threat actorsTimeResourcesFinancial factorsHack valueDiscovering cybersecurity terminologiesExploring the need for penetration testing and its phasesCreating a penetration testing battle planUnderstanding penetration testing approachesTypes of penetration testing Exploring hacking phases Reconnaissance or information gathering Scanning and enumerationGaining access Maintaining access Covering your tracks Understanding the Cyber Kill Chain frameworkReconnaissance WeaponizationDeliveryExploitationInstallationCommand and Control (C2)Actions on objectivesSummaryFurther reading
Chapter 2: Building a Penetration Testing Lab
Technical requirementsUnderstanding the lab overview and its technologiesSetting up a hypervisor and virtually isolated networksPart 1 – deploying the hypervisorPart 2 – creating virtually isolated networksSetting up and working with Kali LinuxPart 1 – setting up Kali Linux as a virtual machinePart 2 – customizing the Kali Linux virtual machine and network adaptersPart 3 – getting started with Kali LinuxPart 4 – updating sources and packagesDeploying Metasploitable 2 as a target systemPart 1 – deploying Metasploitable 2Part 2 – configuring networking settingsImplementing Metasploitable 3 using VagrantPart 1 – setting up the Windows versionPart 2 – setting up the Linux versionSetting up vulnerability web application systemsPart 1 – deploying OWASP Juice ShopPart 2 – setting up OWASP Broken Web ApplicationsSummaryFurther reading
Chapter 3: Setting Up for Advanced Hacking Techniques
Technical requirementsBuilding an AD red team labPart 1 – installing Windows Server 2019 Part 2 – installing Windows 10 EnterprisePart 2 – setting up AD servicesPart 3 – promoting to a DCPart 4 – creating domain users and administrator accountsPart 5 – disabling antimalware protection and the domain firewallPart 6 – setting up for file sharing and service authentication attacks Part 7 – joining clients to the AD domainPart 8 – setting up for local account takeover and SMB attacks Setting up a wireless penetration testing labImplementing a RADIUS server SummaryFurther reading
Section 2: Reconnaissance and Network Penetration Testing
Chapter 4: Reconnaissance and Footprinting
Technical requirementsUnderstanding the importance of reconnaissance FootprintingUnderstanding passive information gatheringExploring open source intelligenceUsing OSINT strategies to gather intelligenceImportance of a sock puppetAnonymizing your traffic Profiling a target organization's IT infrastructureGathering employees' dataSocial media reconnaissance Gathering a company's infrastructure dataSummaryFurther reading
Chapter 5: Exploring Active Information Gathering
Technical requirementsUnderstanding active reconnaissanceExploring Google hacking strategies Exploring DNS reconnaissancePerforming DNS enumerationChecking for DNS zone transfer misconfigurationAutomating OSINTEnumerating subdomainsWorking with DNSmapExploring Sublist3rProfiling websites using EyeWitnessExploring active scanning techniquesSpoofing MAC addressesDiscovering live systems on a networkProbing open service ports, services, and operating systemsWorking with evasion techniquesEnumerating common network servicesScanning using MetasploitEnumerating SMBEnumerating SSHPerforming user enumeration through noisy authentication controlsFinding data leaks in the cloudSummaryFurther reading
Chapter 6: Performing Vulnerability Assessments
Technical requirementsNessus and its policiesSetting up NessusScanning with NessusAnalyzing Nessus resultsExporting Nessus resultsVulnerability discovery using NmapWorking with Greenbone Vulnerability ManagerUsing web application scannersWhatWebNmap MetasploitNiktoWPScanSummaryFurther reading

Chapter 7: Understanding Network Penetration Testing
Technical requirementsIntroduction to network penetration testingWorking with bind and reverse shellsRemote shells using NetcatCreating a bind shellCreating a reverse shellAntimalware evasion techniquesUsing MSFvenon to encode payloadsCreating payloads using ShellterWorking with wireless adaptersConnecting a wireless adapter to Kali LinuxConnecting a wireless adapter with an RTL8812AU chipsetManaging and monitoring wireless modesConfiguring monitor mode manuallyUsing Aircrack-ng to enable monitor modeSummaryFurther reading
Chapter 8: Performing Network Penetration Testing
Technical requirementsDiscovering live systemsProfiling a target systemExploring password-based attacksExploiting Windows Remote Desktop ProtocolCreating wordlists using keywordsCrunching those wordlistsIdentifying and exploiting vulnerable servicesExploiting a vulnerable service on a Linux systemExploiting SMB in Microsoft WindowsPassing the hashGaining access by exploiting SSHExploiting Windows Remote ManagementExploiting ElasticSearchExploiting Simple Network Management ProtocolUnderstanding watering hole attacksFurther reading
Section 3: Red Teaming Techniques
Chapter 9: Advanced Network Penetration Testing — Post Exploitation
Technical requirementsPost-exploitation using MeterpreterCore operationsUser interface operationsFile transfersPrivilege escalationToken stealing and impersonationImplementing persistenceLateral movement and pivotingClearing tracksData encoding and exfiltrationEncoding executables using exe2hexData exfiltration using PacketWhisperUnderstanding MITM and packet sniffing attacksPerforming MITM attacks using EttercapSummaryFurther reading
Chapter 10: Working with Active Directory Attacks
Technical requirementsUnderstanding Active DirectoryEnumerating Active Directory Working with PowerViewExploring BloodhoundLeveraging network-based trustExploiting LLMNR and NetBIOS-NSExploiting trust between SMB and NTLMv2 within Active DirectorySummaryFurther reading
Chapter 11: Advanced Active Directory Attacks
Technical requirementsUnderstanding KerberosAbusing trust on IPv6 with Active DirectoryPart 1: Setting up for the attackPart 2: Launching the attackPart 3: Taking over the domainAttacking Active DirectoryLateral movement with CrackMapExecVertical movement with KerberosLateral movement with MimikatzDomain dominance and persistenceGolden ticketSilver ticketSkeleton keySummaryFurther reading
Chapter 12: Delving into Command and Control Tactics
Technical requirementsUnderstanding C2Setting up C2 operationsPart 1 – setting up EmpirePart 2 – managing usersPost-exploitation using EmpirePart 1 – creating a listenerPart 2 – creating a stagerPart 3 – working with agentsPart 4 – creating a new agentPart 5 – improving threat emulationPart 6 – setting up persistenceWorking with StarkillerPart 1 – starting StarkillerPart 2 – user managementPart 3 – working with modulesPart 4 – creating listenersPart 5 – creating stagersPart 6 – interacting with agentsPart 7 – credentials and reportingSummaryFurther reading
Chapter 13: Advanced Wireless Penetration Testing
Technical requirementsIntroduction to wireless networkingSISO and MIMOWireless security standardsPerforming wireless reconnaissanceDetermining the associated clients for a specific networkCompromising WPA and WPA2 networksPerforming AP-less attacksExploiting enterprise wireless networksPart 1 – setting up for the attackPart 2 – choosing the targetPart 3 – starting the attackPart 4 – retrieving user credentialsCreating a Wi-Fi honeypotDiscovering WPA3 attacksPerforming a downgrade and dictionary attackSecuring your wireless networkSSID managementMAC filteringPower levels for antennasStrong passwordsSecuring enterprise wireless networksSummaryFurther reading
Section 4: Social Engineering and Web Application Attacks
Chapter 14: Performing Client-Side Attacks – Social Engineering
Technical requirementsFundamentals of social engineeringElements of social engineeringTypes of social engineeringHuman-basedComputer-basedMobile-basedSocial networkingDefending against social engineeringPlanning for each type of social engineering attackExploring social engineering tools and techniquesCreating a phishing websiteCreating infectious media SummaryFurther reading
Chapter 15: Understanding Website Application Security
Technical requirementsUnderstanding web applicationsFundamentals of HTTPExploring the OWASP Top 10: 2021Getting started with FoxyProxy and Burp Suite Part one – setting up FoxyProxyPart two – setting up Burp SuitePart three – getting familiar with Burp SuiteUnderstanding injection-based attacksPerforming a SQL injection attackExploring broken access control attacksExploring broken access controlDiscovering cryptographic failuresExploiting cryptographic failuresUnderstanding insecure designExploring security misconfigurationExploiting security misconfigurationsSummaryFurther reading
Chapter 16: Advanced Website Penetration Testing
Technical requirementsIdentifying vulnerable and outdated componentsDiscovering vulnerable componentsExploiting identification and authentication failuresDiscovering authentication failuresUnderstanding software and data integrity failuresUnderstanding security logging and monitoring failuresPerforming server-side request forgeryAutomating SQL injection attacksPart 1 – discovering databasesPart 2 – retrieving sensitive informationUnderstanding cross-site scriptingPart 1 – discovering reflected XSSPart 2 – discovering stored XSSPerforming client-side attacksSummaryFurther reading
Chapter 17: Best Practices for the Real World
Technical requirementsGuidelines for penetration testersGaining written permissionBeing ethicalPenetration testing contractRules of engagementPenetration testing checklistInformation gatheringNetwork scanningEnumerationGaining accessCovering tracksReport writingCreating a hacker's tool bagSetting up remote accessNext steps aheadSummaryFurther reading
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare Your Thoughts

Overview

Dive into the world of penetration testing with "The Ultimate Kali Linux Book." This comprehensive guide provides practical knowledge on using Kali Linux to discover vulnerabilities, perform advanced testing techniques on networks, and secure your environment effectively. With real-world scenarios and hands-on labs, you'll build essential skills in ethical hacking and cybersecurity.

What this Book will help me do

Set up and configure Kali Linux for penetration testing.
Use Nmap and Metasploit to discover and exploit vulnerabilities.
Perform network reconnaissance and active information gathering.
Implement advanced penetration testing techniques like C2 operations.
Secure Active Directory environments and web applications.

Author(s)

Glen D. Singh is a cybersecurity professional with extensive experience in penetration testing and ethical hacking. Passionate about teaching, he crafts his books to guide readers step-by-step through practical scenarios, enhancing their skills effectively. His background in network security ensures deep insights into Kali Linux tools and methods.

Who is it for?

Readers of this book include ethical hackers, cybersecurity professionals, and tech enthusiasts interested in Kali Linux and penetration testing. Whether you're starting out or aiming to enhance advanced skills, this book provides clear guidance. If you seek a structured approach to learning penetration testing, it's ideal for your needs.

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

The Ultimate Kali Linux Book - Third Edition

Publisher Resources

ISBN: 9781801818933

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills