The Basics of Hacking and Penetration Testing : Ethical Hacking and Penetration Testing Made Easy.

Format:

Book

Author/Creator:

Engebretson, Patrick.

Language:

English

Subjects (All):

Penetration testing (Computer security).

Hackers.

Computer software--Testing.

Computer software -- Testing.

Computer crimes--Prevention.

Computer crimes -- Prevention.

Physical Description:

1 online resource (223 pages)

Edition:

2nd ed.

Place of Publication:

San Diego : Elsevier Science & Technology Books, 2013.

Contents:

Front Cover

The Basics of Hacking and Penetration Testing: Ethical Hacking and Penetration Testing Made Easy

Copyright

Dedication

Contents

Acknowledgments

About the Author

Introduction

Chapter 1 - What is Penetration Testing?

INTRODUCTION

SETTING THE STAGE

INTRODUCTION TO KALI AND BACKTRACK LINUX: TOOLS. LOTS OF TOOLS

WORKING WITH YOUR ATTACK MACHINE: STARTING THE ENGINE

THE USE AND CREATION OF A HACKING LAB

PHASES OF A PENETRATION TEST

WHERE DO I GO FROM HERE?

SUMMARY

Chapter 2 - Reconnaissance

HTTRACK: WEBSITE COPIER

GOOGLE DIRECTIVES: PRACTICING YOUR GOOGLE-FU

THE HARVESTER: DISCOVERING AND LEVERAGING E-MAIL ADDRESSES

WHOIS

NETCRAFT

HOST

EXTRACTING INFORMATION FROM DNS

NSLOOKUP

DIG

FIERCE: WHAT TO DO WHEN ZONE TRANSFERS FAIL

EXTRACTING INFORMATION FROM E-MAIL SERVERS

METAGOOFIL

THREATAGENT: ATTACK OF THE DRONES

SOCIAL ENGINEERING

SIFTING THROUGH THE INTEL TO FIND ATTACKABLE TARGETS

HOW DO I PRACTICE THIS STEP?

Chapter 3 - Scanning

PINGS AND PING SWEEPS

PORT SCANNING

THE THREE-WAY HANDSHAKE

USING NMAP TO PERFORM A TCP CONNECT SCAN

USING NMAP TO PERFORM AN SYN SCAN

USING NMAP TO PERFORM UDP SCANS

USING NMAP TO PERFORM AN XMAS SCAN

USING NMAP TO PERFORM NULL SCANS

THE NMAP SCRIPTING ENGINE: FROM CATERPILLAR TO BUTTERFLY

PORT SCANNING WRAP UP

VULNERABILITY SCANNING

Chapter 4 - Exploitation

MEDUSA: GAINING ACCESS TO REMOTE SERVICES

METASPLOIT: HACKING, HUGH JACKMAN STYLE!

JTR: KING OF THE PASSWORD CRACKERS

LOCAL PASSWORD CRACKING

REMOTE PASSWORD CRACKING

LINUX PASSWORD CRACKING AND A QUICK EXAMPLE OF PRIVILEGE ESCALATION.

PASSWORD RESETTING: THE BUILDING AND THE WRECKING BALL

WIRESHARK: SNIFFING NETWORK TRAFFIC

MACOF: MAKING CHICKEN SALAD OUT OF CHICKEN SH∗T

ARMITAGE: INTRODUCING DOUG FLUTIE OF HACKING

WHY LEARN FIVE TOOLS WHEN ONE WORKS JUST AS WELL?

Chapter 5 - Social Engineering

THE BASICS OF SET

WEBSITE ATTACK VECTORS

THE CREDENTIAL HARVESTER

OTHER OPTIONS WITHIN SET

Chapter 6 - Web-Based Exploitation

THE BASICS OF WEB HACKING

NIKTO: INTERROGATING WEB SERVERS

W3AF: MORE THAN JUST A PRETTY FACE

SPIDERING: CRAWLING YOUR TARGET'S WEBSITE

INTERCEPTING REQUESTS WITH WEBSCARAB

CODE INJECTION ATTACKS

CROSS-SITE SCRIPTING: BROWSERS THAT TRUST SITES

ZED ATTACK PROXY: BRINGING IT ALL TOGETHER UNDER ONE ROOF

INTERCEPTING IN ZAP

SPIDERING IN ZAP

SCANNING IN ZAP

ADDITIONAL RESOURCES

Chapter 7 - Post Exploitation and Maintaining Access with Backdoors, Rootkits, and Meterpreter

NETCAT: THE SWISS ARMY KNIFE

NETCAT'S CRYPTIC COUSIN: CRYPTCAT

ROOTKITS

HACKER DEFENDER: IT IS NOT WHAT YOU THINK

DETECTING AND DEFENDING AGAINST ROOTKITS

METERPRETER: THE HAMMER THAT TURNS EVERYTHING INTO A NAIL

Chapter 8 - Wrapping Up the Penetration Test

WRITING THE PENETRATION TESTING REPORT

EXECUTIVE SUMMARY

DETAILED REPORT

RAW OUTPUT

YOU DO NOT HAVE TO GO HOME BUT YOU CANNOT STAY HERE

WRAP UP

THE CIRCLE OF LIFE

Index.

Notes:

Description based on publisher supplied metadata and other sources.

Other Format:

Print version: Engebretson, Patrick The Basics of Hacking and Penetration Testing

ISBN:

9780124116412

OCLC:

854974406