book

The Ultimate Kali Linux Book - Third Edition

Name: The Ultimate Kali Linux Book - Third Edition
Author: Glen D. Singh
ISBN: 9781835085806

by Glen D. Singh

April 2024

Intermediate to advanced

828 pages

21h 32m

English

Packt Publishing

Read now

Unlock full access

Preface
Introduction to Ethical Hacking
Understanding the need for cybersecurityExploring cybersecurity terminologyIdentifying threat actors and their intentUnderstanding what matters to threat actorsTimeResourcesFinancial factorsHack valueExploring the importance of penetration testingPenetration testing methodologiesPre-engagement phaseInformation-gathering phaseThreat modelingVulnerability analysisExploitationPost-exploitationReport writingDiscovering penetration testing approachesTypes of penetration testingWeb application penetration testingMobile application penetration testingSocial engineering penetration testingNetwork penetration testing (external and internal)Cloud penetration testingPhysical penetration testingExploring the phases of penetration testingReconnaissanceScanning and enumerationGaining access (exploitation)Maintaining accessCovering your tracksUnderstanding the Cyber Kill Chain framework ReconnaissanceWeaponizationDeliveryExploitationInstallationCommand and Control (C2)Actions on objectivesSummaryFurther readingGet this book’s PDF version and more
Building a Penetration Testing Lab
Technical requirementsAn overview of the lab setup and technologies usedSetting up a hypervisor and virtual networksPart 1 – setting up the hypervisorPart 2 – creating virtually isolated networksSetting up and working with Kali LinuxPart 1 – deploying Kali Linux as a virtual machinePart 2 – customizing Kali Linux and its network adaptersPart 3 – getting started with Kali LinuxPart 4 – updating repository sources and packagesSetting up a vulnerable web applicationDeploying Metasploitable 2 as a vulnerable machinePart 1 – deploying Metasploitable 2Part 2 – configuring network settingsBuilding and deploying Metasploitable 3Part 1 – building the Windows server versionPart 2 – building the Linux server versionSummaryFurther readingGet this book’s PDF version and more
Setting Up for Advanced Penetration Testing Techniques
Technical requirementsBuilding an Active Directory red team labPart 1 – Setting up Windows ServerPart 2 – Configuring virtual machine additional featuresPart 3 – Setting Active Directory Domain ServicesPart 4 – Creating domain users and administrator accountsPart 5 – Disabling antimalware protection and the domain firewallPart 6 – Setting up for service authentication attacksPart 7 – Installing Windows 10 EnterprisePart 8 – Adding the clients to the domain Part 9 – Setting up for account takeover and file sharing attacksSetting up a wireless penetration testing labBrief overview of wireless network securitySetting up a RADIUS serverPart 1 – Install a Ubuntu serverPart 2 – Setting up FreeRadiusPart 3 – Setting the wireless router with RADIUSSummaryFurther readingGet this book’s PDF version and more
Passive Reconnaissance
Technical requirementsThe importance of reconnaissanceExploring passive reconnaissanceOpen source intelligenceHow much data should be collected?Creating a sock puppetAnonymizing internet-based trafficVPNProxychainsTORSummaryFurther readingGet this book’s PDF version and more
Exploring Open-Source Intelligence
Technical requirementsGoogle hacking techniquesDomain reconnaissanceCollecting WHOIS dataPerforming DNS enumerationExploiting DNS zone transferAutomation using SpiderFootSub-domain harvestingEnumeration with DNSMapSub-domain discovery with KnockpyIdentifying organizational infrastructureData leakage on job websitesFinding vulnerable systems using ShodanDiscovering exposed systems with CensysMapping external systems using MaltegoIdentifying infrastructure with NetcraftUsing Recon-ng for data harvestingData collection with theHarvesterHarvesting employees’ data using HunterAutomating social media reconnaissance with SherlockSummary Further readingGet this book’s PDF version and more
Active Reconnaissance
Technical requirementsUnderstanding active informationProfiling websites using EyeWitnessExploring active scanning techniquesChanging your MAC addressPerforming live host discoveryIdentifying open ports, services, and operating systemsUsing scanning evasion techniquesAvoiding detection with decoysUsing MAC and IP spoofing techniquesStealth scanning techniquesEnumerating network servicesEnumerating SMB servicesEnumerating SMTP servicesEnumerating SNMP servicesDiscovering data leaks in the cloudSummaryFurther readingGet this book’s PDF version and more
Performing Vulnerability Assessments
Technical requirementsGetting started with NessusPart 1 – installing NessusPart 2 – identifying vulnerabilities Part 3 – vulnerability analysisPart 4 – exporting vulnerability reportsVulnerability identification using NmapWorking with Greenbone Vulnerability ManagerPart 1 – installing GVMPart 2 – vulnerability identificationPart 3 – vulnerability analysis and reportingUsing web application scannersWhatWebNmapNiktoMetasploitWPScanSummaryFurther readingGet this book’s PDF version and more
Understanding Network Penetration Testing
Technical requirementsIntroduction to network penetration testingWorking with bind and reverse shellsWorking with remote shells using NetcatSetting up a bind shellSetting up reverse shellsAntimalware evasion techniquesEncoding payloads with MSFvenomCreating custom payloads with ShellterWorking with wireless adaptersConnecting wireless adapters to Kali LinuxConnecting a wireless adapter with an RTL8812AU chipsetManaging and Monitoring wireless modesConfiguring Monitoring modeUsing aircrack-ng to enable monitor modeSummaryFurther readingGet this book’s PDF version and more
Performing Network Penetration Testing
Technical requirementsExploring password-based attacksCreating a keyword-based wordlistGenerating a custom wordlist using CrunchGaining access by exploiting SSHExploiting Remote Desktop ProtocolPerforming host discoveryProfiling a targeted systemIdentifying and exploiting vulnerable servicesExploiting Linux-based systemsCompromising Windows-based systemsExploiting vulnerable SMB servicesCracking hashes with HashcatExploiting Windows Remote ManagementExploiting ElasticSearch Exploiting Simple Network Management ProtocolSummaryFurther readingGet this book’s PDF version and more

Post-Exploitation Techniques
Technical requirementsPass-the-hash techniquesGaining a shell with PTH-WinExeWorking with ImpacketPass-the-hash for remote desktopPost exploitation using MeterpreterCore operationsUser interface optionsFile transfersPrivilege escalationToken stealing and impersonationSetting up persistenceLateral movement and pivotingClearing tracksData encoding and exfiltrationEncoding using exe2hexExfiltration with PacketWhisperPart 1 – setting up the environmentPart 2 – changing the DNS settings on the targeted systemPart 3 – performing data exfiltrationPart 4 – reassembling dataMan-in-the-Middle (MiTM) attacksIntercepting traffic with MiTM attacksSummaryFurther readingGet this book’s PDF version and more
Delving into Command and Control Tactics
Technical requirementsUnderstanding C2Setting up C2 operationsPart 1 – Empire client-server modelPart 2 – Managing users on EmpirePost-exploitation using EmpirePart 1 – Creating a listenerPart 2 – Creating a stagerPart 3 – Working with agentsPart 4 – Creating a new agentPart 5 – Threat emulationPart 6 – Setting up persistenceWorking with StarkillerPart 1 – StarkillerPart 2 – User managementPart 3 – Working with modulesPart 4 – Creating listenersPart 5 – Creating stagersPart 6 – Interacting with agentsPart 7 – Credentials and reportingSummaryFurther readingGet this book’s PDF version and more
Working with Active Directory Attacks
Technical requirementsUnderstanding Active DirectoryEnumerating Active DirectoryWorking with PowerViewExploring BloodHoundPart 1 – setting up BloodHoundPart 2 – remote data collection with BloodHound.pyPart 3 – data analysis using BloodHoundLeveraging network-based trustExploiting LLMNR and NetBIOS-NSExploiting SMB and NTLMv2 within Active DirectoryRetrieving the SAM databaseObtaining a reverse shellSummaryFurther readingGet this book’s PDF version and more
Advanced Active Directory Attacks
Technical requirementsUnderstanding KerberosAbusing trust on IPv6 with Active DirectoryPart 1: setting up for an attackPart 2: launching the attackPart 3: taking over the domainAttacking Active DirectoryLateral movement with CrackMapExecVertical movement with KerberosLateral movement with MimikatzPart 1: setting up the attackPart 2: grabbing credentialsDomain dominance and persistenceGolden ticketSilver ticketSkeleton keySummaryFurther readingGet this book’s PDF version and more
Advanced Wireless Penetration Testing
Technical RequirementsIntroduction to Wireless NetworkingSingle-In Single-Out (SISO) and Multiple-In Multiple-Out (MIMO)Wireless security standardsPerforming Wireless ReconnaissanceIdentifying the associated clients of a targeted networkCompromising WPA/WPA2 NetworksPerforming AP-less AttacksExploiting Enterprise NetworksPart 1 – setting up for the attackPart 2 – choosing the targetPart 3 – starting the attackPart 4 – retrieving user credentialsSetting Up a Wi-Fi HoneypotExploiting WPA3 AttacksPerforming a Downgrade and Dictionary AttackSummaryFurther ReadingGet this book’s PDF version and more
Social Engineering Attacks
Technical requirementsFundamentals of social engineeringElements of social engineeringTypes of social engineeringHuman-based social engineeringComputer-based social engineeringMobile-based social engineeringSocial networkingPlanning for each type of social engineering attackDefending against social engineeringExploring social engineering tools and techniquesCreating infectious mediaCreating a phishing websiteCreating a fake wireless networkSummaryFurther readingGet this book’s PDF version and more
Understanding Website Application Security
Technical requirementsUnderstanding web applicationsThe fundamentals of HTTPExploring the OWASP Top 10: 2021Getting started with FoxyProxy and Burp SuitePart 1 - setting up FoxyProxyPart 2 - setting up Burp SuitePart 3 - getting familiar with Burp SuiteUnderstanding injection-based attacksPerforming an SQLi attackExploring broken access control attacksDiscovering cryptographic failuresUnderstanding insecure designExploring security misconfigurationSummaryFurther readingGet this book’s PDF version and more
Advanced Website Penetration Testing
Technical requirementsIdentifying vulnerable and outdated componentsExploiting identification and authentication failuresDiscovering authentication failuresUnderstanding software and data integrity failuresExploring server-side request forgeryUnderstanding security logging and monitoring failuresIdentifying logging security vulnerabilitiesUnderstanding cross-site scriptingPart 1 – Discovering reflected XSSPart 2 – Performing DOM-based XSSPart 3 – Discovering stored XSSAutomating SQL injection attacksPart 1 – Discovering databasesPart 2 – Retrieving sensitive informationPerforming client-side attacksSummaryFurther readingGet this book’s PDF version and more
Best Practices for the Real World
Technical requirementsGuidelines for penetration testersGaining written permissionBeing ethicalPenetration testing contractRules of engagementPenetration testing checklistPre-engagementReconnaissanceEnumerationVulnerability assessment ExploitationPost-exploitationCovering tracksReport writingCreating a hacker’s toolkitESP8266 microcontrollerWiFi Pineapple NanoBash BunnyPacket SquirrelLAN TurtleMini USB-powered network switchRetractable network cableFlipper ZeroSetting up remote accessNext steps aheadSummaryFurther readingGet this book’s PDF version and more
Appendix
Setting Up a Penetration Testing Lab on Ubuntu DesktopTechnical requirementsAn overview of the lab setup and technologies usedSetting up a hypervisor and virtual networksSetting up Kali Linux on UbuntuSetting up Metasploitable 3 on UbuntuPart 1 – building the Windows Server versionPart 2 – building the Linux Server versionSummary
Share your thohughts
Index

Content preview from The Ultimate Kali Linux Book - Third Edition

4 Passive Reconnaissance

As an aspiring ethical hacker and penetration tester, it’s important to develop your skills and gain a solid understanding of how adversaries are able to efficiently discover and collect sensitive information about a targeted organization, and analyze the collected data to create meaningful information that can be leveraged in planning a future cyber-attack on the target. As with many aspiring ethical hackers, we are always excited to get started with hacking into systems and networks as it’s the fun part of learning offensive security tactics and techniques. However, it’s important to develop the mindset of an adversary to better understand why and how a real threat actor will plan their attack on a targeted system, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781835085806

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

The Ultimate Kali Linux Book - Third Edition

by Glen D. Singh

4

Passive Reconnaissance

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.