Shah / Girdhar Kali Linux Intrusion and Exploitation Cookbook

Powerful recipes to detect vulnerabilities and perform security assessments
1. Auflage 2024
ISBN: 978-1-78398-217-2
Verlag: De Gruyter
Format: PDF
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 512 Seiten

Over 70 recipes for system administrators or DevOps to master Kali Linux 2 and perform effective security assessmentsKey Features - [*] Set up a penetration testing lab to conduct a preliminary assessment of attack surfaces and run exploits
- [*] Improve your testing efficiency with the use of automated vulnerability scanners
- [*] Work through step-by-step recipes to detect a wide array of vulnerabilities, exploit them to analyze their consequences, and identify security anomalies
Book DescriptionWith the increasing threats of breaches and attacks on critical infrastructure, system administrators and architects can use Kali Linux 2.0 to ensure their infrastructure is secure by finding out known vulnerabilities and safeguarding their infrastructure against unknown vulnerabilities. This practical cookbook-style guide contains chapters carefully structured in three phases – information gathering, vulnerability assessment, and penetration testing for the web, and wired and wireless networks. It's an ideal reference guide if you’re looking for a solution to a specific problem or learning how to use a tool. We provide hands-on examples of powerful tools/scripts designed for exploitation. In the final section, we cover various tools you can use during testing, and we help you create in-depth reports to impress management. We provide system engineers with steps to reproduce issues and fix them. What you will learn - [*] Understand the importance of security assessments over merely setting up and managing systems/processes
- [*] Familiarize yourself with tools such as OPENVAS to locate system and network vulnerabilities
- [*] Discover multiple solutions to escalate privileges on a compromised machine
- [*] Identify security anomalies in order to make your infrastructure secure and further strengthen it
- [*] Acquire the skills to prevent infrastructure and application vulnerabilities
- [*] Exploit vulnerabilities that require a complex setup with the help of Metasploit
Who this book is forThis book is intended for those who want to know more about information security. In particular, it's ideal for system administrators and system architects who want to ensure that the infrastructure and systems they are creating and managing are secure. This book helps both beginners and intermediates by allowing them to use it as a reference book and to gain in-depth knowledge.

Autoren/Hrsg.

Shah, Dhruv

Girdhar, Ishan

Fachgebiete

• Mathematik | Informatik EDV | Informatik Betriebssysteme Linux Betriebssysteme, Open Source Betriebssysteme
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Datensicherheit, Datenschutz
• Mathematik | Informatik EDV | Informatik Computerkommunikation & -vernetzung Netzwerksicherheit

Inhaltsverzeichnis

Table of Contents - Setting up environment
- Network Information Gathering
- Vulnerability Assessment
- Exploitation
- Information Gathering and Scanning
- Dive into Network
- Exploitation and Advanced Techniques
- System Exploitation
- Privilege Escalation & Post Exploitation
- Wireless Information Gathering
- Appendices

Über Autor(innen)

Shah Dhruv :

Dhruv Shah holds a Masters degree in IT and has 7 years of experience as a specialist in Information Security. He started off as a trainer sensitizing staff in private sector organizations about security issues and what hackers look for when they launch attacks on networks. He, later on, switched his job to carry out penetration testing for Indian government agencies and then for banking clients in the Middle East. He now has extensive experience in penetration testing for Fortune 500 companies involving web and mobile applications, networks, Infra, and Red Team work. In his spare time, he co-authored the book Kali Linux Intrusion and Exploitation and is an active member and moderator of one of the Null chapters in India.Girdhar Ishan :

Ishan Girdhar is a senior pentester and DevSecOps engineer. With over 7 years of work experience, he has been vigorously involved in building application security and bug bounty programs, in his current and previous roles, helping businesses and organizations to be more secure ad aware. He is currently working with Southeast Asia's biggest ride-hailing platform, Grab. Previously, he has worked with organizations such as InMobi and one of