Kali Linux Network Scanning Cookbook

Multithreaded MSF exploitation with admin account creation

Multithreaded MSF exploitation with ICMP verification

Multithreaded MSF exploitation with backdoor executable

Multithreaded MSF exploitation with reverse shell payload

Nessuscmd vulnerability scanning with MSF exploitation

Nmap NSE vulnerability scanning with MSF exploitation

Nmap port scanning with targeted NSE script execution

Nmap greppable output analysis

Chapter 8. Automating Kali Tools

Validating command injection vulnerabilities with ICMP traffic

Validating command injection vulnerabilities with HTTP traffic

Automating CSRF testing

Requesting a capture SQL injection with sqlmap

POST method SQL injection with sqlmap

GET method SQL injection with sqlmap

Using Burp Suite Sequencer

Using Burp Suite Decoder

Using Burp Suite Repeater

Using Burp Suite Comparer

Using Burp Suite Intruder

Using the Burp Suite web application scanner

Using Burp Suite Proxy

Using Burp Suite engagement tools

Using Burp Suite Spider

Defining a web application target with Burp Suite

SSL/TLS scanning with SSLyze

SSL/TLS scanning with SSLScan

Web application scanning with Nikto

Chapter 7. Web Application Scanning

DoS attacks with the exploit database

DoS attacks with Metasploit

DoS attacks with Nmap NSE

Sock stress DoS attack

SYN flood DoS attack

NTP amplification DoS attack

SNMP amplification DoS attack

DNS amplification DoS attack

Smurf DoS attack

Remote FTP service buffer overflow DoS

Fuzz testing to identify buffer overflows

Chapter 6. Denial of Service

Validating vulnerabilities with ICMP interaction

Validating vulnerabilities with HTTP interaction

Command-line scanning with Nessuscmd

Vulnerability scanning with Nessus

Creating scan policies with Nessus

Vulnerability scanning with MSF auxiliary modules

Vulnerability scanning with Nmap Scripting Engine

Chapter 5. Vulnerability Scanning

Firewall identification with Metasploit

Firewall identification with Nmap

Firewall identification with Scapy

SNMP analysis with SNMPwalk

SNMP analysis with Onesixtyone

Passive operating system identification with p0f

Operating system identification with xProbe2

Operating system identification with Nmap

Operating system identification with Scapy

Service identification with Amap

Service identification with Nmap

Banner grabbing with Amap

Banner grabbing with Nmap NSE

Banner grabbing with Dmitry

Banner grabbing with Python sockets

Banner grabbing with Netcat

Chapter 4. Fingerprinting

Zombie scanning with Nmap

Zombie scanning with Scapy

TCP port scanning with Netcat

Connect scanning with Dmitry

Connect scanning with Metasploit

Connect scanning with Nmap

Connect scanning with Scapy

Stealth scanning with hping3

Stealth scanning with Metasploit

Stealth scanning with Nmap

Stealth scanning with Scapy

UDP scanning with Metasploit

UDP scanning with Nmap

UDP scanning with Scapy

TCP port scanning

UDP port scanning

Chapter 3. Port Scanning

Using hping3 to perform layer 4 discovery

Using Nmap to perform layer 4 discovery

Using Scapy to perform layer 4 discovery

Using hping3 to perform layer 3 discovery

Using fping to perform layer 3 discovery

Using Nmap to perform layer 3 discovery

Using Scapy to perform layer 3 discovery

Using ICMP ping to perform layer 3 discovery

Using Metasploit to perform layer 2 discovery

Using NetDiscover to perform layer 2 discovery

Using Nmap to perform layer 2 discovery

Using ARPing to perform layer 2 discovery

Using Scapy to perform layer 2 discovery

Chapter 2. Discovery Scanning

Using text editors (VIM and Nano)

Configuring Burp Suite on Kali Linux

Installing Nessus on Kali Linux

Configuring and using SSH

Installing Kali Linux

Increasing the Windows attack surface

Installing Windows Server

Installing Metasploitable2

Installing Ubuntu Server

Configuring a security lab with VMware Fusion (Mac OS X)

Configuring a security lab with VMware Player (Windows)

Chapter 1. Getting Started

Customer support

Reader feedback

Conventions

Who this book is for

What you need for this book

What this book covers

Preface

Disclaimer

Support files eBooks discount offers and more

www.PacktPub.com

About the Reviewers

About the Author

Credits

版权页

封面

封面

版权页

Credits

About the Author

About the Reviewers

www.PacktPub.com

Support files eBooks discount offers and more

Disclaimer

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Chapter 1. Getting Started

Configuring a security lab with VMware Player (Windows)

Configuring a security lab with VMware Fusion (Mac OS X)

Installing Ubuntu Server

Installing Metasploitable2

Installing Windows Server

Increasing the Windows attack surface

Installing Kali Linux

Configuring and using SSH

Installing Nessus on Kali Linux

Configuring Burp Suite on Kali Linux

Using text editors (VIM and Nano)

Chapter 2. Discovery Scanning

Using Scapy to perform layer 2 discovery

Using ARPing to perform layer 2 discovery

Using Nmap to perform layer 2 discovery

Using NetDiscover to perform layer 2 discovery

Using Metasploit to perform layer 2 discovery

Using ICMP ping to perform layer 3 discovery

Using Scapy to perform layer 3 discovery

Using Nmap to perform layer 3 discovery

Using fping to perform layer 3 discovery

Using hping3 to perform layer 3 discovery

Using Scapy to perform layer 4 discovery

Using Nmap to perform layer 4 discovery

Using hping3 to perform layer 4 discovery

Chapter 3. Port Scanning

UDP port scanning

TCP port scanning

UDP scanning with Scapy

UDP scanning with Nmap

UDP scanning with Metasploit

Stealth scanning with Scapy

Stealth scanning with Nmap

Stealth scanning with Metasploit

Stealth scanning with hping3

Connect scanning with Scapy

Connect scanning with Nmap

Connect scanning with Metasploit

Connect scanning with Dmitry

TCP port scanning with Netcat

Zombie scanning with Scapy

Zombie scanning with Nmap

Chapter 4. Fingerprinting

Banner grabbing with Netcat

Banner grabbing with Python sockets

Banner grabbing with Dmitry

Banner grabbing with Nmap NSE

Banner grabbing with Amap

Service identification with Nmap

Service identification with Amap

Operating system identification with Scapy

Operating system identification with Nmap

Operating system identification with xProbe2

Passive operating system identification with p0f

SNMP analysis with Onesixtyone

SNMP analysis with SNMPwalk

Firewall identification with Scapy

Firewall identification with Nmap

Firewall identification with Metasploit

Chapter 5. Vulnerability Scanning

Vulnerability scanning with Nmap Scripting Engine

Vulnerability scanning with MSF auxiliary modules

Creating scan policies with Nessus

Vulnerability scanning with Nessus

Command-line scanning with Nessuscmd

Validating vulnerabilities with HTTP interaction

Validating vulnerabilities with ICMP interaction

Chapter 6. Denial of Service

Fuzz testing to identify buffer overflows

Remote FTP service buffer overflow DoS

Smurf DoS attack

DNS amplification DoS attack

SNMP amplification DoS attack

NTP amplification DoS attack

SYN flood DoS attack

Sock stress DoS attack

DoS attacks with Nmap NSE

DoS attacks with Metasploit

DoS attacks with the exploit database

Chapter 7. Web Application Scanning

Web application scanning with Nikto

SSL/TLS scanning with SSLScan

SSL/TLS scanning with SSLyze

Defining a web application target with Burp Suite

Using Burp Suite Spider

Using Burp Suite engagement tools

Using Burp Suite Proxy

Using the Burp Suite web application scanner

Using Burp Suite Intruder

Using Burp Suite Comparer

Using Burp Suite Repeater

Using Burp Suite Decoder

Using Burp Suite Sequencer

GET method SQL injection with sqlmap

POST method SQL injection with sqlmap

Requesting a capture SQL injection with sqlmap

Automating CSRF testing

Validating command injection vulnerabilities with HTTP traffic

Validating command injection vulnerabilities with ICMP traffic

Chapter 8. Automating Kali Tools

Nmap greppable output analysis

Nmap port scanning with targeted NSE script execution

Nmap NSE vulnerability scanning with MSF exploitation

Nessuscmd vulnerability scanning with MSF exploitation

Multithreaded MSF exploitation with reverse shell payload

Multithreaded MSF exploitation with backdoor executable

Multithreaded MSF exploitation with ICMP verification

Multithreaded MSF exploitation with admin account creation