Penetration Testing A Survival Guide 无水印pdf 0分

Penetration

Testing

需积分: 10 39 下载量 62 浏览量 2017-01-22 14:06:43 上传评论收藏 58.64MB PDF 举报

温馨提示

试读

1258页

Penetration Testing A Survival Guide 英文无水印pdf pdf所有页面使用FoxitReader和PDF-XChangeViewer测试都可以打开

资源推荐

资源详情

资源评论

PenetrationTesting:ASurvivalGuide

TableofContents
PenetrationTesting:ASurvivalGuide
PenetrationTesting:ASurvivalGuide
Credits
Preface
Whatthislearningpathcovers
Whatyouneedforthislearningpath
Whothislearningpathisfor
Readerfeedback
Customersupport
Downloadingtheexamplecode
Errata
Piracy
Questions
I.Module1
1.SharpeningtheSaw
InstallingKaliLinuxtoanencryptedUSBdrive
Prerequisitesforinstallation
BootingUp
Installingconfiguration
Settingupthedrive
BootingyournewinstallationofKali
RunningKalifromtheliveCD
Installingandconfiguringapplications
Gedit–theGnometexteditor
Terminator–theterminalemulatorformultitasking
EtherApe–thegraphicalprotocolanalysistool
SettingupandconfiguringOpenVAS
Reportingthetests
KeepNote–thestandalonedocumentorganizer
Dradis–theweb-baseddocumentorganizer
RunningservicesonKaliLinux
ExploringtheKaliLinuxTop10andmore
Summary
2.InformationGatheringandVulnerabilityAssessment
Footprintingthenetwork
ExploringthenetworkwithNmap
Zenmap
Thedifferenceverbositymakes
Scanninganetworkrange
Wherecanyoufindinstructionsonthisthing?
AreturntoOpenVAS

UsingMaltego
UsingUnicorn-Scan
MonitoringresourceusewithHtop
Monkeyingaroundthenetwork
Summary
3.ExploitationTools(Pwnage)
Choosingtheappropriatetimeandtool
ChoosingtherightversionofMetasploit
StartingMetasploit
Creatingworkspacestoorganizeyourattack
Usingthehostsandservicescommands
Usingadvancedfootprinting
Interpretingthescanandbuildingontheresult
Exploitingpoorpatchmanagement
Findingoutwhetheranyoneishome
Usingthepivot
Mappingthenetworktopivot
Creatingtheattackpath
Grabbingsystemonthetarget
SettingUptheroute
Exploringtheinnernetwork
AbusingtheWindowsNETUSEcommand
AddingaWindowsuserfromthecommandline
Summary
4.WebApplicationExploitation
Surveyingthewebscape
ConceptofRobots.txt
Conceptof.htaccess
Quicksolutionstocross-sitescripting
Reducingbufferoverflows
AvoidingSQLinjection
ArmyourselfwithArmitage
Workingwithasingleknownhost
DiscoveringnewmachineswithNMap
ZingingWindowsserverswithOWASPZAP
UsingZAPasanattackproxy
ReadingtheZAPinterface
SearchanddestroywithBurpSuite
Targetingthetestsubject
UsingBurpSuiteasaProxy
InstallingtheBurpSuitesecuritycertificate
SpideringasitewithBurpSpider
Summary
5.SniffingandSpoofing

Sniffingandspoofingnetworktraffic
Sniffingnetworktraffic
Basicsniffingwithtcpdump
MorebasicsniffingwithWinDump(Windowstcpdump)
PackethuntingwithWireshark
Dissectingthepacket
SwimmingwithWireshark
Spoofingnetworktraffic
Ettercap
UsingEttercaponthecommandline
Summary
6.PasswordAttacks
Passwordattackplanning
CrackingtheNTLMcode(Revisited)
Passwordlists
Cleaningapasswordlist
MyfriendJohnny
JohntheRipper(commandline)
xHydra
AddingatooltothemainmenuinKali2.x
Summary
7.WindowsPrivilegeEscalation
GainingaccesswithMetasploit
Replacingtheexecutable
Localprivilegeescalationwithastandalonetool
Escalatingprivilegeswithphysicalaccess
RobbingtheHiveswithsamdump2
Owningtheregistrywithchntpw
WeaselinginwithWeevely
PreparingtouseWeevely
Creatinganagent
TestingWeevelylocally
TestingWeevelyonaWindowsserver
GettinghelpinWeevely
Gettingthesysteminfo
UsingfilesystemcommandsinWeevely
Writingintofiles
Summary
8.MaintainingRemoteAccess
Maintainingaccess
Coveringourtracks
MaintainingaccesswithNcat
PhoningHomewithMetasploit
TheDropbox