2021版《Kali Linux渗透测试揭秘》详解与认证指南

需积分: 0 62 浏览量更新于2024-06-29 收藏 11.71MB PDF 举报

《Kali Linux Revealed: Mastering Penetration Testing Distribution (2021)》是一本由Raphaël Hertzog、Jim O’Gorman、Mati Aharoni和Joe O’Gorman合著的专业书籍，专注于深度解析和指导如何有效利用Kali Linux进行渗透测试。Kali Linux是一款专为网络安全专业人士设计的操作系统，它集合了众多用于漏洞评估、渗透测试和取证分析的工具，是信息安全领域中的热门选择。本书内容涵盖了Kali Linux的核心功能、安装、配置以及高级操作技巧，包括但不限于网络扫描、密码破解、漏洞利用、取证分析等渗透测试的各个方面。作者们凭借丰富的经验和深入理解，将复杂的概念以易于理解的方式呈现出来，适合初学者和经验丰富的安全专业人员参考。值得注意的是，书中部分内容取材自Raphaël Hertzog和Roland Mas合著的《Debian Administrator's Handbook》，体现了对开源社区知识的尊重与传承。《Kali Linux Revealed》遵循Creative Commons Attribution-ShareAlike 3.0 Unported License，这意味着读者可以在分享和修改作品的同时保持对原作者的适当认可。此外，由于Kali Linux是Offensive Security公司的商标，本书在使用和分发时必须遵守其商标政策，确保尊重并维护品牌的官方形象。通过阅读这本书，读者可以提升自己的渗透测试技能，了解如何在实际环境中运用Kali Linux来保护系统安全，同时也能了解到最新的安全威胁和应对策略。对于那些希望在IT安全领域深化学习和实践的人来说，《Kali Linux Revealed》是一本不可或缺的参考资料。想要获取更多IT认证资源，可以访问美河学习在线（www.eimhe.com），以获得更全面的学习支持。

In 2005, WHoppiX evolved into WHAX, with an expanded and updated toolset, based on “the more

modular SLAX (Slackware) live CD.” Muts and a growing team of volunteers from the hacker com-

munity seemed to realize that no matter how insightful they were, they could never anticipate all

the growth and fluctuation of our industry and that users of their CD would have varied needs in

the field. It was obvious that Muts and his team were actually using WHAX in the field, and they

seemed dedicated to making it work. This was encouraging to me.

In 2006, Muts, Max Moser, and their teams consolidated Auditor Security Linux and WHAX into

a single distribution called BackTrack. Still based on SLAX, BackTrack continued to grow, adding

more tools, more frameworks, extended language support, extensive wireless support, a menu

structure catering to both novice and pro users, and a heavily modified kernel. BackTrack became

the leading security distribution, but many like me still used it as a backup for their ”real tools.”

By early 2009, Muts and his team had extended BackTrack significantly to BackTrack 4. Now a full-

time job for Muts, BackTrack was no longer a live CD but a full-blown Ubuntu-based distribution

leveraging the Ubuntu software repositories. The shift marked a serious evolution: BackTrack 4

had an update mechanism. In Muts’ own words: “When syncing with our BackTrack repositories,

you will regularly get security tool updates soon after they are released.”

This was a turning point. The BackTrack team had tuned into the struggles facing pen testers,

forensic analysts and others working in our industry. Their efforts would save us countless hours

and provide a firm foundation, allowing us to get back into the fight and spend more time doing

the important (and fun) stuff. As a result, the community responded by flocking to the forums

and wiki; and by pitching in on the dev team. BackTrack was truly a community effort, with Muts

still leading the charge.

BackTrack 4 had finally become an industrial-strength platform and I, and others likeme, breathed

a sigh of relief. We knew firsthand the “pain and sufferance” Muts and his team were bearing,

because we had been there. As a result, many of us began using BackTrack as a primary foundation

for our work. Yes, we still fiddled with tools, wrote our own code, and developed our own exploits

and techniques; and we researched and experimented; but we did not spend all our time collecting,

updating, validating, and organizing tools.

BackTrack 4 R1 and R2 were further revisions in 2010, leading to the ground-up rebuild of Back-

Track 5 in 2011. Still based on Ubuntu, and picking up steam with every release, BackTrack was

now a massive project that required a heroic volunteer and community effort but also funding.

Muts launched Offensive Security (in 2006) not only to provide world-class training and penetra-

tion testing services but also to provide a vehicle to keep BackTrack development rolling, and

ensure that BackTrack remained open-source and free to use.

BackTrack continued to grow and improve through 2012 (with R1, R2, and R3), maintaining an

Ubuntu core and adding hundreds of new tools, including physical and hardware exploitation

tools, VMware support, countless wireless and hardware drivers, and a multitude of stability im-

provements and bug fixes. However, after the release of R3, BackTrack development went rela-

tively, and somewhat mysteriously, quiet.

XIII

Preface

更多ＩＴ认证资源　　请访问　美河学习在线　ｗｗｗ．ｅｉｍｈｅ．ｃｏｍ

There was some speculation in the industry. Some thought that BackTrack was getting “bought

out”, selling its soul to a faceless evil corporate overlord for a massive payout. Offensive Secu-

rity was growing into one of the most respected training companies and a thought leader in our

industry, and some speculated that its success had gobbled up and sidelined the key BackTrack

developers. However, nothing could be farther from the truth.

In 2013, Kali Linux 1.0 was released. From the release notes: “After a year of silent development,

Offensive Security is proud to announce the release and public availability of Kali Linux, the most

advanced, robust, and stable penetration-testing distribution to date. Kali is a more mature, se-

cure, and enterprise-ready version of BackTrack.”

Kali Linux was not a mere rebranding of BackTrack. Sporting more than 600 completely repack-

aged tools, it was clearly an amazing toolset, but there was still more to it than that. Kali had been

built, from the ground up, on a Debian core. To the uninformed, this might not seem like a big

deal. But the ripple effects were staggering. Thanks to a massive repackaging effort, Kali users

could download the source for every single tool; they could modify and rebuild a tool as needed,

with only a few keystrokes. Unlike other mainstream operating systems of the day, Kali Linux

synchronized with the Debian repositories four times a day, which meant Kali users could get

wickedly current package updates and security fixes. Kali developers threw themselves into the

fray, packaging and maintaining upstream versions of many tools so that users were constantly

kept on the bleeding edge. Thanks to its Debian roots, Kali’s users could bootstrap an installation

or ISO directly from the repositories, which opened the door for completely customized Kali in-

stallations or massive enterprise deployments, which could be further automated and customized

with preseed files. To complete the customization trifecta, Kali Users could modify the desktop

environment, alter menus, change icons, and even replace windowing environments. A massive

ARM development push opened the door for installation of Kali Linux on a wide range of hardware

platforms including access points, single-board computers (Raspberry Pi, ODROID, BeagleBone,

and CubieBoard, for example), and ARM-based Chromebook computers. And last but certainly

not least, Kali Linux sported seamless minor and major upgrades, which meant devotees would

never have to re-install customized Kali Linux setups.

The community took notice. In the first five days, 90,000 of us downloaded Kali 1.0.

This was just the beginning. In 2015, Kali 2.0 was released, followed by the 2016 rolling releases.

In summary, “If Kali 1.0 was focused on building a solid infrastructure, then Kali 2.0 is focused on

overhauling the user experience and maintaining updated packages and tool repositories.”

The current version of Kali Linux is a rolling distribution, which marks the end of discrete ver-

sions. Now, users are up to date continuously and receive updates and patches as they are created.

Core tools are updated more frequently thanks to an upstream version tagging system, ground-

breaking accessibility improvements for the visually impaired have been implemented, and the

Linux kernels are updated and patched to continue wireless 802.11 injection support. Software De-

fined Radio (SDR) and Near-Field Communication (NFC) tools add support for new fields of security

testing. Full Linux encrypted disk installation and emergency self-destruct options are available,

XIV

Kali Linux Revealed

更多ＩＴ认证资源　　请访问　美河学习在线　ｗｗｗ．ｅｉｍｈｅ．ｃｏｍ

thanks to LVM and LUKS respectively, USB persistence options have been added, allowing USB-

based Kali installs to maintain changes between reboots, whether the USB drive is encrypted or

not. Finally, the latest revisions of Kali opened the door for NetHunter, an open-source world-class

operating system running on mobile devices based on Kali Linux and Android.

Kali Linux has evolved not only into the information security professional’s platform of choice,

but truly into an industrial-grade, world-class, mature, secure, and enterprise-ready operating

system distribution.

Through the decade-long development process, Muts and his team, along with the tireless dedi-

cation of countless volunteers from the hacker community, have taken on the burden of stream-

lining and organizing our work environment, freeing us from much of the drudgery of our work

and providing a secure and reliable foundation, allowing us to concentrate on driving the industry

forward to the end goal of securing our digital world.

And interestingly, but not surprisingly, an amazing community has built up around Kali Linux.

Each and every month, three to four hundred thousand of us download a version of Kali. We come

together on the Kali forums, some forty-thousand strong, and three to four hundred of us at a time

can be found on the Kali IRC channel. We gather at conferences and attend Kali Dojos to learn how

to best leverage Kali from the developers themselves.

Kali Linux has changed the world of information security for the better, and Muts and his team

have saved each of us countless hours of toil and frustration, allowing us to spend more time and

energy driving the industry forward, together.

But despite its amazing acceptance, support, and popularity, Kali has never released an official

manual. Well, now that has changed. I’m thrilled to have come alongside the Kali development

team and specifically Mati Aharoni, Raphaël Hertzog, Devon Kearns, and Jim O’Gorman to offer

this, the first in perhaps a series of official publications focused on Kali Linux. In this book, we

will focus on the Kali Linux platform itself, and help you understand and maximize the usage of

Kali from the ground up. We won’t yet delve into the arsenal of tools contained in Kali Linux, but

whether you’re a veteran or an absolute n00b, this is the best place to start, if you’re ready to dig

in and get serious with Kali Linux. Regardless of how long you’ve been at the game, your decision

to read this book connects you to the growing Kali Linux community, one of the oldest, largest,

most active, and most vibrant in our industry.

On behalf of Muts and the rest of the amazing Kali team, congratulations on taking the first step

to mastering Kali Linux!

Johnny Long

February 2017

Preface

Foreword

The sixteen high-end laptops ordered for your pentesting team just arrived, and you have been

tasked to set them up—for tomorrow’s offsite engagement. You install Kali and boot up one of the

laptops only to find that it is barely usable. Despite Kali’s cutting-edge kernel, the network cards

and mouse aren’t working, and the hefty NVIDIA graphics card and GPU are staring at you blankly,

because they lack properly installed drivers. You sigh.

In Kali Live mode, you quickly type lspci into a console, then squint. You scroll through the

hardware listing: “PCI bridge, USB controller, SATA controller. Aha! Ethernet and Network con-

trollers.” A quick Google search for their respective model numbers, cross referenced with the

Kali kernel version, reveals that these cutting-edge drivers haven’t reached the mainline kernel

yet.

But all is not lost. A plan is slowly formulating in your head, and you thank the heavens for the

Kali Linux Revealed book that you picked up a couple of weeks ago. You could use the Kali Live-

Build system to create a custom Kali ISO, which would have the needed drivers baked into the

installation media. In addition, you could include the NVIDIA graphics drivers as well as the CUDA

libraries needed to get that beast of a GPU to talk nicely to hashcat, and have it purr while cracking

password hashes at blistering speeds. Heck, you could even throw in a custom wallpaper with a

Microsoft Logo on it, to taunt your team at work.

Since the hardware profiles for your installations are identical, you add a preseeded boot option to

the ISO, so that your team can boot off a USB stick and have Kali installed with no user interaction—

the installation takes care of itself, full disk encryption and all.

Perfect! You can now generate an updated version of Kali on demand, specifically designed and

optimized for your hardware. You saved the day. Mission complete!

With the deluge of hardware hitting the market, this scenario is becoming more common for

those of us who venture away from mainstream operating systems, in search of something leaner,

meaner, or more suitable to our work and style.

This is especially applicable to those attracted to the security field, whether it be an alluring hobby,

fascination, or line of work. As newcomers, they often find themselves stumped by the environ-

ment or the operating system. For many newcomers Kali is their first introduction to Linux.

We recognized this shift in our user base a couple of years back, and figured that we could help

our community by creating a structured, introductory book that would guide users into the world

剩余345页未读，继续阅读

CodeGolang

粉丝: 121
资源: 1317

2021版《Kali Linux渗透测试揭秘》详解与认证指南

Kali-Linux-Revealed-1st-edition.

Kali Linux Revealed

Kali Linux 秘籍 中文版

Kali-Linux-Revealed-1st-edition

Kali-Linux-Revealed-1st-edition.doc

Kali-Linux-Revealed-1st-edition.pdf

Kali-Linux-Revealed-1st-edition_KaliLinuxRevealed_

kali-linux-docker:使用Docker学习Kali-linux

kali-linux-wireless-pentest_kali使用指南_productg6t_kali_kali-linux-

Web-Penetration-Testing-with-Kali-Linux-Third-Edition-源码.rar

最新资源

Kali Linux 秘籍中文版