Learn ethical hacking from scratch : your stepping stone to penetration testing / Zaid Sabih.

Format:

Book

Author/Creator:

Sabih, Zaid, author.

Language:

English

Subjects (All):

Kali Linux.

Penetration testing (Computer security).

Hacking.

Computer networks--Security measures.

Computer networks.

Physical Description:

1 online resource (549 pages)

Edition:

1st edition

Place of Publication:

Birmingham, England : Packt, 2018.

System Details:

text file

Biography/History:

Sabih Zaid: Zaid Sabih is an ethical hacker, a computer scientist, and the founder and CTO of zSecurity. He has valuable experience in ethical hackinghe started working as a pentester with iSecurity. In 2013, he started teaching his first network hacking coursewhich received amazing feedbackleading him to publish a number of online ethical hacking courses, each focusing on a specific topic, all of which are dominating ethical hacking. Now, Zaid has more than 300, 000 students worldwide.

Summary:

Learn how to hack systems like black hat hackers and secure them like security experts Key Features Understand how computer systems work and their vulnerabilities Exploit weaknesses and hack into machines to test their security Learn how to secure systems from hackers Book Description This book starts with the basics of ethical hacking, how to practice hacking safely and legally, and how to install and interact with Kali Linux and the Linux terminal. You will explore network hacking, where you will see how to test the security of wired and wireless networks. You'll also learn how to crack the password for any Wi-Fi network (whether it uses WEP, WPA, or WPA2) and spy on the connected devices. Moving on, you will discover how to gain access to remote computer systems using client-side and server-side attacks. You will also get the hang of post-exploitation techniques, including remotely controlling and interacting with the systems that you compromised. Towards the end of the book, you will be able to pick up web application hacking techniques. You'll see how to discover, exploit, and prevent a number of website vulnerabilities, such as XSS and SQL injections. The attacks covered are practical techniques that work against real systems and are purely for educational purposes. At the end of each section, you will learn how to detect, prevent, and secure systems from these attacks. What you will learn Understand ethical hacking and the different fields and types of hackers Set up a penetration testing lab to practice safe and legal hacking Explore Linux basics, commands, and how to interact with the terminal Access password-protected networks and spy on connected clients Use server and client-side attacks to hack and control remote computers Control a hacked system remotely and use it to hack other systems Discover, exploit, and prevent a number of web application vulnerabilities such as XSS and SQL injections Who this book is for Learning Ethical Hacking from Scratch is for anyone interested in learning how to hack and test the security of systems like professional hackers and security experts. Downloading the example code for this book You can download the example code files for all Packt books you have purchased from your account at http://www.PacktPub.com. If you purchased this book elsewhere, you can visit http://www.PacktPub.com/support and register to have the files e-mailed directly to you.

Contents:

Cover

Title Page

Copyright and Credits

Dedication

Packt Upsell

Contributors

Table of Contents

Preface

Chapter 1: Introduction

What's in this book?

Preparation

Penetration testing

Network penetration testing

Gaining access

Post exploitation

Website penetration testing

Protecting your system

What is hacking?

Why should we learn about hacking?

A glimpse of hacking

Browser exploitation framework

Accessing the target computer's webcam

Summary

Chapter 2: Setting Up a Lab

Lab overview

VirtualBox

Installation of VirtualBox

Installing Kali Linux

Installing Metasploitable

Installing Windows

Creating and using snapshots

Chapter 3: Linux Basics

Overview of Kali Linux

Status bar icons

Connecting the wireless card

Linux commands

Commands

The ls command

The man command

The help command

The Tab button

Updating resources

Chapter 4: Network Penetration Testing

What is a network?

Network basics

Connecting to a wireless adapter

MAC addresses

Wireless modes - managed and monitor

Enabling monitor mode manually

Enabling monitor mode using airmon-ng

Chapter 5: Pre-Connection Attacks

Packet sniffing basics

Targeted packet sniffing

Deauthentication attack

What is a fake access point?

Creating fake access points with the MANA Toolkit

Chapter 6: Network Penetration Testing - Gaining Access

WEP theory

Basic web cracking

Fake authentication attack

ARP request replay

WPA introduction

WPS cracking

Handshake theory

Capturing the handshake

Creating a wordlist

Wordlist cracking

Securing network from attacks

Chapter 7: Post-Connection Attacks

Post-connection attacks

The netdiscover tool

The AutoScan tool

Zenmap.

Summary

Chapter 8: Man-in-the-Middle Attacks

Man-in-the-middle attacks

ARP spoofing using arpspoof

ARP spoofing using MITMf

Bypassing HTTPS

Session hijacking

DNS spoofing

MITMf screenshot keylogger

MITMf code injection

MITMf against a real network

Wireshark

Wireshark basics

Wireshark filters

Chapter 9: Network Penetration Testing, Detection, and Security

Detecting ARP poisoning

Detecting suspicious behavior

Chapter 10: Gaining Access to Computer Devices

Introduction to gaining access

Server side

Client side

Post-exploitation

Sever-side attacks

Server-side attack basics

Server-side attacks - Metasploit basics

Metasploit remote code execution

Chapter 11: Scanning Vulnerabilities Using Tools

Installing MSFC

MSFC scan

MSFC analysis

Installing Nexpose

Running Nexpose

Nexpose analysis

Chapter 12: Client-Side Attacks

Client-side attacks

Installing Veil

Payloads overview

Generating a Veil backdoor

Listening for connections

Testing the backdoor

Fake bdm1 updates

Client-side attacks using the bdm2 BDFProxy

Protection against delivery methods

Chapter 13: Client-Side Attacks - Social Engineering

Client-side attacks using social engineering

Maltego overview

Social engineering - linking accounts

Social engineering - Twitter

Social engineering - emails

Social engineering - summary

Downloading and executing AutoIt

Changing the icon and compiling the payload

Changing extensions

Client-side attacks - TDM email spoofing

Chapter 14: Attack and Detect Trojans with BeEF

The BeEF tool

BeEF - hook using a MITMf

BeEF - basic commands

BeEF - Pretty Theft

BeEF - Meterpreter 1

Detecting Trojans manually.

Detecting Trojans using a sandbox

Chapter 15: Attacks Outside the Local Network

Port forwarding

External backdoors

IP forwarding

External BeEF

Chapter 16: Post Exploitation

An introduction to post exploitation

Meterpreter basics

Filesystem commands

Maintaining access by using simple methods

Maintaining access by using advanced methods

Keylogging

An introduction to pivoting

Pivoting autoroutes

Chapter 17: Website Penetration Testing

What is a website?

Attacking a website

Chapter 18: Website Pentesting - Information Gathering

Information gathering using tools

The Whois Lookup

Netcraft

Robtex

Websites on the same server

Information gathering from target websites

Finding subdomains

Information gathering using files

Analyzing file results

Chapter 19: File Upload, Code Execution, and File Inclusion Vulnerabilities

File upload vulnerabilities

Getting started with Weevely

Code execution vulnerabilities

Local file inclusion vulnerabilities

Remote file inclusion using Metasploitable

Basic mitigation

Chapter 20: SQL Injection Vulnerabilities

What is SQL?

The dangers of SQLi

Discovering SQLi

SQLi authorization bypass

Discovering an SQLi using the GET method

Basic SELECT statements

Discovering tables

Reading columns and their data

Reading and writing files on the server

The sqlmap tool

Preventing SQLi

Chapter 21: Cross-Site Scripting Vulnerabilities

Introduction to XSS

Reflected XSS

Stored XSS

XSS BeEF exploitation

XSS protection

Chapter 22: Discovering Vulnerabilities Automatically Using OWASP ZAP

OWASP ZAP start

OWASP ZAP results

Other Books You May Enjoy

Index.

Notes:

Includes index.

Description based on print version record.

ISBN:

9781788624787

1788624785

OCLC:

1048797823