A practical guide to testing your infrastructure security with Kali Linux, the preferred choice of pentesters and hackers
Key Features
- Employ advanced pentesting techniques with Kali Linux to build highly secure systems
- Discover stealth techniques to go undetected and penetrate modern infrastructures
- Explore red teaming techniques to exploit a secured environment
Book Description
Kali Linux, a successor to BackTrack, is one of the most popular Linux distributions used by security professionals and penetration testers to identify and exploit vulnerabilities in the target environment.
As a tester or security practitioner, you'll be taken through the reconnaissance, vulnerability assessment, exploitation, privilege escalation, and post-exploitation activities used by pentesters. You'll start by setting up a laboratory environment to validate an application using pentesting tools and techniques. You'll then cover passive reconnaissance with open source intelligence and active reconnaissance of the external and internal infrastructure. You'll learn how to select, use, customize, and interpret results from different vulnerability scanners, and examine specific routes to the target, such as bypassing physical security and data exfiltration techniques. This Kali Linux book covers concepts such as attacking wireless networks, web services, and embedded devices and gives insights into social engineering.
Once you are confident with these topics, you'll delve into the practical aspects of attacking user client systems by backdooring with fileless techniques, and then shift focus to the most vulnerable part of the network – directly attacking the end user.
By the end of this book, you'll have explored approaches for carrying out advanced pentesting in tightly secured environments, and understand pentesting and hacking techniques employed on embedded peripheral devices.
What you will learn
- Configure the most effective Kali Linux tools to test infrastructure security
- Leverage Kali Linux to avoid detection in a controlled infrastructure
- Exploit networks and data systems using wired and wireless networks as well as web services
- Identify and download valuable data from target systems
- Maintain access to compromised systems
- Use social engineering to compromise the weakest part of a network - the end users
Who this book is for
This third edition of Mastering Kali Linux for Advanced Penetration Testing is for you if you are a security analyst, pentester, ethical hacker, or security consultant who wants to optimize infrastructure security using advanced Kali Linux features. Prior penetration testing experience and basic knowledge of ethical hacking will help you make the most of this book.
Table of Contents
- Goal-based Penetration Testing with Kali Linux
- Open Source Intelligence and Passive Reconnaissance
- Active Reconnaissance of the External and Internal Networks
- Vulnerability Assessment
- Physical Security and Social Engineering
- Wireless and Bluetooth Attacks
- Reconnaissance and Exploitation of Web-based Applications
- Client-side Exploitation
- Bypassing Security Controls
- Exploitation
- Action on the Objective and Lateral movement
- Privilege Escalation
- Command and Control
- Embedded and Peripheral Devices hacking
Vijay Kumar Velu is a Passionate Information Security Practitioner, Author, Speaker, Investor and Blogger. He has more than 12 years of IT industry experience, is a Licensed Penetration Tester, and has specialized in providing technical solutions to a variety of cyber problems, ranging from simple security configuration reviews to cyber threat intelligence. Vijay holds multiple security qualifications including CEH, ECSA and CHFI.He has Authored couple of books on Penetration Testing ""Mastering Kali Linux for Advanced Penetration Testing - Second Edition"" and ""Mobile Application Penetration Testing"".
For community Vijay servers as Chair member in NCDRC, India. Out of work, He enjoys playing music and doing charity.
Robert Beggs is the founder and CEO of DigitalDefence, a Canadian-focused company that specializes in preventing and responding to information security incidents. Robert is a security practitioner with more than 15 years of experience. He has been responsible for the technical leadership and project management of more than 300 consulting engagements, including policy development and review, standards compliance, penetration testing of wired and wireless networks, third party security assessments, incident response and data forensics, and other consulting projects. Previously, he provided security services for a major Canadian financial institution and Netigy, a global network and security infrastructure firm based in San Jose.
