Hands-On Penetration Testing on Windows

Master the art of identifying vulnerabilities within the Windows OS and develop the desired solutions for it using Kali Linux.

Key Features

• Identify the vulnerabilities in your system using Kali Linux 2018.02
• Discover the art of exploiting Windows kernel drivers
• Get to know several bypassing techniques to gain control of your Windows environment

Book Description

Windows has always been the go-to platform for users around the globe to perform administration and ad hoc tasks, in settings that range from small offices to global enterprises, and this massive footprint makes securing Windows a unique challenge. This book will enable you to distinguish yourself to your clients.

In this book, you'll learn advanced techniques to attack Windows environments from the indispensable toolkit that is Kali Linux. We'll work through core network hacking concepts and advanced Windows exploitation techniques, such as stack and heap overflows, precision heap spraying, and kernel exploitation, using coding principles that allow you to leverage powerful Python scripts and shellcode.

We'll wrap up with post-exploitation strategies that enable you to go deeper and keep your access. Finally, we'll introduce kernel hacking fundamentals and fuzzing testing, so you can discover vulnerabilities and write custom exploits.

By the end of this book, you'll be well-versed in identifying vulnerabilities within the Windows OS and developing the desired solutions for them.

What you will learn

• Get to know advanced pen testing techniques with Kali Linux
• Gain an understanding of Kali Linux tools and methods from behind the scenes
• See how to use Kali Linux at an advanced level
• Understand the exploitation of Windows kernel drivers
• Understand advanced Windows concepts and protections, and how to bypass them using Kali Linux
• Discover Windows exploitation techniques, such as stack and heap overflows and kernel exploitation, through coding principles

Who this book is for

This book is for penetration testers, ethical hackers, and individuals breaking into the pentesting role after demonstrating an advanced skill in boot camps. Prior experience with Windows exploitation, Kali Linux, and some Windows debugging tools is necessary

Table of Contents

1. Bypassing Network Access Control
2. Sniffing and Spoofing
3. Windows Passwords on the Network
4. Advanced Network Attacks
5. Cryptography and the Penetration Tester
6. Advanced Exploitation with Metasploit
7. Stack and Heap: Memory Management
8. Windows Kernel Security
9. Weaponizing Python
10. Windows Shellcoding
11. Bypassing Protections with ROP
12. Fuzzing Techniques
13. Going beyond the Foothold
14. Taking PowerShell to the Next Level
15. Escalating Privileges
16. Maintaining Access
17. Tips and Tricks
18. Assessment

Phil Bramwell acquired the Certified Ethical Hacker and Certified Expert Penetration Tester certifications at the age of 21. His professional experience includes Common Criteria design reviews and testing, network security consulting, penetration testing, and PCI-DSS compliance auditing for banks, universities, and governments. He later acquired the CISSP and Metasploit Pro Certified Specialist credentials. Today, he is a cybersecurity and cryptocurrency consultant and works as a cybersecurity analyst specializing in malware detection and analysis.