Learning zANTI2 for Android pentesting : dive into the world of advanced network penetration tests to survey and attack wireless networks using your Android device and ZANTI2 / Miroslav Vitula.

Format:

Book

Author/Creator:

Vitula, Miroslav, author.

Series:

Community experience distilled.

Community experience distilled

Language:

English

Subjects (All):

Android (Electronic resource).

Penetration testing (Computer security).

Mobile computing--Security measures.

Mobile computing.

Computer networks--Security measures.

Computer networks.

Physical Description:

1 online resource (134 p.)

Place of Publication:

Birmingham : Packt Publishing, 2015.

Language Note:

English

Summary:

Dive into the world of advanced network penetration tests to survey and attack wireless networks using your Android device and zANTI2 About This Book Understand the basics of wireless penetration testing and its importance Learn the techniques to perform penetration testing on your wireless networks, such as scanning, detecting vulnerabilities in your victim, and then attacking This simple and intriguing guide takes a step-by-step approach that will help you get to grips with network pentesting using just your Android device and zANTI2 Who This Book Is For The book is intended for those who want to know more about network penetration tests and have no prior experience, as well as for those who are experienced in network systems and are curious to discover more about this topic. Since zANTI2 features an extremely intuitive and easy to control interface, it doesn't require any special skills. What You Will Learn Understand the importance of penetration testing throughout systems Take a run through zANTI2's interface and understand the requirements to the app Perform advanced scanning/network mapping and discover the various types of scans used on a target Discover and remotely connect to open ports on a target, thereby accessing a target's files and folders remotely Detect vulnerabilities on a target, learn how to remotely exploit them, and discover ways to protect your self from these exploits Understand what an MITM attack is and how it works, and apply this knowledge to perform attacks on network targets Learn to hijack sessions, identify victim's passwords, replace images on websites, inject scripts, and more Use this knowledge to protect yourself from all of the attacks you will study In Detail A penetration test is one of the most important methods to secure a network or any individual machine. Having knowledge of these methods can enable a user to protect himself/herself from any kinds of attacks. Penetration tests can also be used to discover flaws or loop holes in one's security system, which if not fixed, can be exploited by an unwanted entity. This book starts off with an introduction to what penetration testing is, and how it can be performed on Android using zANTI2. Once you are aware of the basics, we move on to teach you the different types of scans that can be performed to search for targets. You will then learn how to connect to open ports and intrude into an unsecured computer. From here you will explore vulnerabilities and their usage, including ShellShock and SSL Poodle vulnerability. When connected to an open network, a user is susceptible to password and session hijacking, and a number of other cyber attacks. The book therefore ends with one of the main aspects of cyber security: the Man in the Middle attack. You will get to know everything about the MITM attack, how it works, and how one can be protected against it. Style and approach The book follows a step-by-step approach with each of the parts explained in an easy-to-follow style. Most of the methods showcased can be tried out immediately on almost any network."

Contents:

Cover; Copyright; Credits; About the Author; About the Reviewers; www.PacktPub.com; Table of Contents; Preface; Chapter 1: Introducing Android Pentesting with zANTI2; Penetration testing; Getting to know the dark side of Android; zANTI2; Mac Changer; zTether; RouterPWN; Cloud reports; The Wi-Fi monitor; The HTTP server; Nmap scan; Operative actions; Password complexity audit; Zetasploit; Summary; Chapter 2: Scanning for Your Victim; Network discovery; Open or closed?; Scan types; Run script; Intense scan; OS detection; Device type; Running; OS CPE; OS Details; Network distance; Uptime guess

TCP Sequence PredictionIP ID sequence generation; Ping scan; Quick scan, OS detection; Quick traceroute; Slow comprehensive scan; IP/ICMP scan; Script execution; Auth; Broadcast; Brute; Citrix; Database; Discovery; DNS; Geolocation; Protocol; Info; Brute-force scripts; Broadcast scripts; Info scripts; Intrusive scripts; Summary; Chapter 3: Connecting to Open Ports; Open ports; Connecting to open ports; Cracking passwords; Microsoft-DS port connection; A remote desktop connection; Summary; Chapter 4: Vulnerabilities; A vulnerability; Reverse engineering; Shellshock; SSL Poodle

Zetasploit exploitsSummary; Chapter 5: Attacking - MITM Style; Man in the middle?; ARP spoofing; MITM attacks through zANTI2; Logged requests; ZPacketEditor; SSL Strip; HTTP redirection; Replacing images; Capture/intercept downloads; Insert HTML; Summary; Index

Notes:

Includes index.

Description based on online resource; title from PDF title page (ebrary, viewed January 6, 2016).

ISBN:

9781784396183

1784396184