2023版Kali Linux高级渗透测试指南：保障网络安全

需积分: 5 115 浏览量更新于2024-06-23 2 收藏 47.36MB PDF 举报

"精通Kali Linux 高级渗透测试2023版本（Mastering Kali Linux for Advanced Penetration Testing Fourth Edition）是一本由Vijay Kumar Velu编写的权威指南，它在当前数字化时代背景下，聚焦于网络安全领域。随着COVID-19大流行促使远程工作成为常态，网络技术的可靠性和安全性变得至关重要。这本书旨在帮助读者应用主动防御的方法来保护其网络基础设施，并提升高级渗透测试的专业技能。在第四版中，作者深入探讨了如何在虚拟世界中有效应对新的挑战，特别是在远程办公环境中，敏感信息的处理和保护面临着更高的风险。Kali Linux作为一款强大的开源渗透测试工具，是学习者和专业渗透测试人员的必备资源，它提供了广泛的工具集和攻击模拟环境，以便进行系统评估、漏洞探测和道德黑客活动。书中内容涵盖了从基础配置到高级技术的全面指导，包括但不限于网络扫描、漏洞利用、社会工程学技巧、密码破解、取证分析以及自动化脚本编写。读者可以借此掌握如何利用Kali Linux进行深度渗透测试，识别并修复潜在的安全漏洞，同时遵循道德准则，确保在合法授权范围内进行操作。版权方面，该书受到严格保护，未经出版商Packt Publishing的书面许可，不得复制、存储或以任何形式传播。尽管作者和出版社尽力保证信息的准确性，但不承担因本书内容导致的直接或间接损失的责任。在商标使用上，Packt Publishing已尽其所能准确标注书中提及的所有公司和产品的商标信息。然而，由于文本限制，完整列出所有商标可能会有所遗漏，但读者可以理解这些标识旨在尊重知识产权。精通Kali Linux 高级渗透测试2023版本是一本实用的指南，对于寻求在现代网络安全环境中保持领先的专业人士和对渗透测试感兴趣的个人而言，具有很高的参考价值和实战指导意义。通过学习这本书，读者将能够增强自己的网络安全防护能力，适应不断变化的威胁环境。"

Compromising Kerberos – a golden-ticket attack ........................................................... 458

Summary ........................................................................................................................ 464

Chapter 13: Command and Control 465

Persistence ...................................................................................................................... 465

Using persistent agents ................................................................................................... 466

Employing Netcat as a persistent agent • 467

Using schtasks to congure a persistent task • 471

Maintaining persistence with the Metasploit framework • 472

Using the post exploit persistence module • 472

Creating a standalone persistent agent with Metasploit • 473

Persistence using online le storage cloud services • 475

Dropbox • 475

Microsoft OneDrive • 478

Covenant • 482

PoshC2 • 485

Domain fronting ............................................................................................................. 487

Using Amazon CloudFront for C2 • 487

Exltration of data .......................................................................................................... 492

Using existing system services (Telnet, RDP, and VNC) • 492

Using the ICMP protocol • 494

Hiding evidence of an attack • 496

Summary ........................................................................................................................ 498

Chapter 14: Embedded Devices and RFID Hacking 501

Embedded systems and hardware architecture ............................................................... 502

Embedded system basic architecture • 502

Understanding rmware • 503

Different types of rmware • 504

Understanding bootloaders • 505

Common tools • 505

Preface

xviii

What this book covers

Chapter 1, Goal-Based Penetration Testing, introduces a functional outline based on the penetra-

tion testing methodology that will be used throughout the book. It ensures that a coherent and

comprehensive approach to penetration testing will be followed.

Chapter 2, Open-Source Intelligence and Passive Reconnaissance, provides a background on how to

gather information about a target using publicly available sources and the tools that can simplify

reconnaissance and information management.

Chapter 3, Active Reconnaissance of External and Internal Networks, introduces the reader to stealthy

approaches that can be used to gain information about the target, especially the information that

identies vulnerabilities, which could be exploited.

Chapter 4, Vulnerability Assessment, teaches you the semi-automated process of scanning a network

and its devices to locate systems that are vulnerable to attack and compromise and the process

of taking all reconnaissance and vulnerability scan information, assessing it, and then creating

a map to guide the penetration testing process.

Chapter 5, Advanced Social Engineering and Physical Security, shows you why being able to phys-

ically access a system or interact with the humans who manage it provides the most successful

route to exploitation.

Chapter 6, Wireless and Bluetooth Attacks, provides a brief explanation of wireless and Bluetooth

technologies and focuses on the common techniques used to compromise these networks by

bypassing security.

Chapter 7, Exploiting Web-Based Applications, provides a brief overview of one of the most complex

delivery phases to secure: web-based applications that are exposed to the public internet.

Chapter 8, Cloud Security Exploitation, focuses on attacks against AWS cloud infrastructure, which

are frequently prone to security miscongurations and are protected to the same degree as the

organization’s primary network.

Chapter 9, Bypassing Security Controls, demonstrates the most common security controls in place,

identies a systematic process for overcoming these controls, and demonstrates this using the

tools from the Kali toolset.

Chapter 10, Exploitation, demonstrates the methodologies that can be used to nd and execute

exploits that allow a system to be compromised by an attacker.

Preface

xix

Chapter 11, Action on the Objective and Lateral Movement, focuses on the immediate post-exploit

activities, as well as the aspect of horizontal escalation – the process of using an exploited system

as a starting point to “jump off” to other systems on the network.

Chapter 12, Privilege Escalations, teaches the penetration tester to own all aspects of a system’s

operations; more importantly, obtaining some access privileges that allow the tester to control

all the systems across a network.

Chapter 13, Command and Control, focuses on what a modern attacker would do to enable data to

be exltrated to the attacker’s location and hide the evidence of the attack.

Chapter 14, Embedded Devices and RFID hacking, focuses on what a modern attacker would do to

perform a structured attack on embedded devices and clone NFC cards.

To get the most out of this book

To practice the material presented in this book, you will need virtualization tools such as VMware

or VirtualBox.

You will need to download and congure the Kali Linux operating system and its suite of tools. To

ensure that it is up-to-date and that you have all of the tools, you will need access to an internet

connection.

Sadly, not all of the tools on the Kali Linux system will be addressed since there are too many

of them. The focus of this book is not to overwhelm you with all of the tools and options but to

provide an approach for testing that will allow you to learn and incorporate new tools as their

experiences and knowledge change over time.

Although most of the examples from this book focus on Microsoft Windows, the methodology

and most of the tools are transferrable to other operating systems such as Linux and the other

avors of Unix.

Finally, this book applies Kali to complete the cyber kill chain against target systems. You will

need a target operating system. Many of the examples in the book use Microsoft Windows 2016,

Windows 10, Ubuntu 14.04, and Windows 2008 R2.

To make the best use of lab exercises, it is recommended that you disable Windows

Defender on the vulnerable Windows servers by running PowerShell with admin-

istrative privilege and typing Set-MpPreference -DisableRealtimeMonitoring

$true

剩余572页未读，继续阅读

灬扫地僧

粉丝: 1
资源: 5

2023版Kali Linux高级渗透测试指南：保障网络安全

kali linux 高级渗透测试

Web渗透测试使用Kali Linux

Web渗透测试 使用Kali Linux

Kali Linux高级渗透测试 _2016.05_罗伯特_KaliLinux高级渗透测试_渗透_完整版_

kalilinux高级渗透测试

Kali Linux等渗透测试英文原版合集【共23本，22本PDF带书签】part1

Kali Linux等渗透测试英文原版合集3【共23本，22本PDF带书签】part3

Kali Linux等渗透测试英文原版合集6【共23本，22本PDF带书签】part6

Kali Linux等渗透测试英文原版合集4【共23本，22本PDF带书签】part4

Kali Linux等渗透测试英文原版合集5【共23本，22本PDF带书签】part5

最新资源

Web渗透测试使用Kali Linux