实战指南：利用Kali Linux进行渗透测试

需积分: 50 133 浏览量更新于2024-07-18 2 收藏 8.43MB PDF 举报

《利用Kali进行黑客攻击：实战渗透测试技术》是一本由James Broad和Andrew Bindner合著的专业书籍，它全面指导读者通过当前最先进的Live CD/USB系统Kali Linux进行渗透测试。本书旨在提供一个实用且深入的指南，帮助读者理解并掌握渗透测试的整个生命周期，包括侦察、扫描、exploitation（利用）、维持访问以及报告阶段。首先，作者在第一章"Introduction"中，概述了本书的内容概要和关键学习点。书面向所有对网络安全感兴趣，尤其是希望了解和实践渗透测试技术的人群开放。书中穿插了大量的图表、示例和屏幕截图，以便于读者直观理解。作者强调了渗透测试生命周期的概念，包括术语解释，同时回顾了Kali Linux的历史背景，并给出了参考文献，为后续章节的学习做好铺垫。第二章"Download and Install Kali Linux"，详细介绍了如何下载、安装及定制Kali Linux。章节概览着重于关键操作步骤，如系统信息的确认、从官方网站下载适用于不同媒介（硬盘、USB驱动器或SD卡）的安装选项。作者演示了如何使用图形用户界面（GUI）和命令行来完成这些任务，并在本章末总结了安装过程。第三章"Software, Patches, and Upgrades"关注软件管理，涵盖了APT包处理工具、Debian包管理器的应用，以及如何处理tarballs（归档文件）。此外，还提供了一个实用指南，教授如何安装Nessus这样的漏洞扫描工具。这一章强调了保持系统更新和安全的重要性。第四章"Configuring Kali Linux"深入讲解了Kali Linux的基础配置。章节内容包括网络配置的基本原理，如何使用GUI和命令行工具来设置网络接口，确保读者具备基本的系统配置技能。这章的核心目标是让读者能够有效地调整和优化他们的渗透测试环境。整本书籍通过实例和实践，逐步引导读者从安装和配置到每个阶段的具体工具使用，直至报告编写和规则制定，全面展示了如何利用Kali Linux进行黑客攻击，但请注意，这里的“黑客”一词并非用于非法活动，而是指在授权许可下的渗透测试专业人员。该书旨在提升安全专业人员的技能，而不是鼓励黑客行为。

and Red Team members oen use the techniques used by Black Hats to simulate these

individuals while conducting authorized exercises or tests. Black Hats conduct their

activities without permission and illegally.

Grey Hat

Grey Hat refers to a technical expert that straddles the line between White Hat and Black

Hat. These individuals oen aempt to bypass the security features of an information

system without permission, not for proﬁt but rather to inform the system administrators

of discovered weaknesses. Grey Hats normally do not have permission to test systems

but are usually not after personal monetary gain.

Vulnerability Assessment, Vulnerability Analysis

A vulnerability analysis is used to evaluate the security seings of an information

system. These types of assessments include the evaluation of security patches applied to

and missing from the system. The Vulnerability Assessment Team, or VAT, can be

external to the information system or part of the information systems supporting staff.

Security Controls Assessment

Security Controls Assessments evaluate the information systems compliance with

speciﬁc legal or regulatory requirements. Examples of these requirements include, but

are not limited to, the Federal Information Security Management Act (FISMA), the

Payment Card Industry (PCI), and Health Insurance Portability and Accountability Act

(HIPAA). Security Control Assessments are used as part of the Body of Evidence (BOE)

used by organizations to authorize an information system for operation in a production

environment. Some systems require penetration tests as part of the security control

assessment.

Malicious User Testing, Mal User Testing

In Malicious User Testing, the assessor assumes the role of trusted insider acting

maliciously, a malicious user, or more simply a maluser. In these tests, the assessor is

issued the credentials of an authorized general or administrative user, normally as a test

account. The assessor will use these credentials to aempt to bypass security restrictions

including viewing documents and seings in a way the account was not authorized,

changing seings that should not be changed, and elevating his or her own permissions

beyond the level the account should have. Mal user testing simulates the actions of a

rogue trusted insider.

Social Engineering

Social Engineering involves aempting to trick system users or administrators into doing

something in the interest if the social engineer, but beyond the engineer’s access or

rights. Social Engineering aacks are normally harmful to the information system or

user. The Social Engineer uses people’s inherent need to help others to compromise the

information system. Common Social Engineering techniques include trying to get help

desk analysts to reset user account passwords or have end users reveal their passwords

enabling the Social Engineer to log in to accounts they are not authorized. Other Social

Engineering techniques include phishing and spear phishing.

Phishing

In Phishing (pronounced like ﬁshing), the social engineer aempts to get the targeted

individual to disclose personal information like user names, account numbers, and

passwords. This is oen done by using authentic looking, but fake, emails from

corporations, banks, and customer support staﬀ. Other forms of phishing aempt to get

users to click on phony hyperlinks that will allow malicious code to be installed on the

targets computer without their knowledge. This malware will then be used to remove

data from the computer or use the computer to aack others. Phishing normally is not

targeted at speciﬁc users but may be everyone on a mailing list or with a speciﬁc email

address extension, for example every user with an “@foo.com” extension.

Spear Phishing

Spear Phishing is a form of phishing in which the target users are speciﬁcally identiﬁed.

For example, the aacker may research to ﬁnd the email addresses of the Chief Executive

Officer (CEO) of a company and other executives and only phish these people.

Dumpster Diving

In Dumpster Diving, the assessor ﬁlters through trash discarded by system users and

administrators looking for information that will lead to further understanding of the

target. This information could be system conﬁgurations and seings, network diagrams,

soware versions and hardware components, and even user names and passwords. The

term refers to entering a large trash container, however “diving” small oﬃce garbage

cans if given the opportunity can lead to lucrative information as well.

Live CD, Live Disk, or LiveOS

A live CD or live disk refers to an optical disk that contains an entire operating system.

These disks are useful to many assessors and can be modiﬁed to contain speciﬁc

soware components, seings, and tools. While live disks are normally based on Linux

distributions, several Microso Windows versions have been released over the years.

Based on the information systems seings, live disks could be the only piece of

equipment that the assessor or tester will need to bring to the assessment as the target

systems computers can be booted to the live disk, turning one of the information systems

assets against the system itself.

Chapter Overview and Key Learning Points

This chapter will explain the downloading and installing process Kali Linux on:

– Hard drives

– Thumb drives (USB memory sticks)

– SD cards

Kali Linux

Installing operating systems, such as Microso’s Windows, Apple’s OSX, or open source

platforms like Debian and Ubuntu, may be second nature to some, but a refresher on this

process is always good. Those that have never installed an operating system before

should not worry, the following sections in this chapter will provide all of the steps

necessary to locate, download, and install Kali Linux.

Kali Linux is unique in many ways, but the most important distinctions of this

distribution are the ability to not only run from a hard drive installation but also boot as

a live disk and the number and type of specialized applications installed by default. A

live disk is an operating system installed on a disk including Compact Disks (CDs),

Digital Video Disk (DVD), or Blu-Ray Disk. As a penetration tester, the ability to boot a

live disk is quite important. Those with access to local machines on the network can

leverage live disks to use these machines even if the penetration tester does not have an

account on the installed operating system. The system will boot to the live disk instead of

the local hard drive; that is, if the machine is conﬁgured correctly the penetration tester

will then have access to many of the resources on the local network, while at the same

time not leaving evidence on the local machines hard drive. The soware installed on

Kali Linux is another reason it is uniquely outﬁed for the penetration tester. By default

Kali Linux has 400 penetration testing and security tools, packages and applications

installed and has the ability to add more as they are needed.

System Information

All operating systems have uniqueness’s and slight deviations that will appear through

their initial installation and setup; however, most Linux/Unix-based platforms are

relatively similar in nature. When installing Kali Linux, as with other Linux operating

systems, planning before installation is crucial. Below is a short list of things to consider

when installing Kali Linux.

Will the operating system be running on a desktop computer or laptop?

What size hard drive is needed?

Does the available hard drive have sufficient space available?

How many hard drive partitions are needed?

Is log management a concern?

Is security a concern?

剩余234页未读，继续阅读

letmedownthem

粉丝: 0
资源: 1

实战指南：利用Kali Linux进行渗透测试

kali国内最完整的更新源

GitHack改进版（git源码泄露恢复工具）

自己用python写的githack工具

kali linuk书籍

kali laudnum

kali linux deploy

kali无线网卡推荐

哪里可以去学习googlehacking

kali 信息收集都需要收集哪些信息，这些信息都有什么用处，经常用什么工具或者是网站来获取信息

kail linux metasploit

最新资源