Web Penetration Testing with Kali Linux

✍ Scribed by Joseph Muniz, Aamir Lakhani

Publisher: Packt Publishing
Year: 2013
Tongue: English
Leaves: 342
Category: Library

No coin nor oath required. For personal study only.

✦ Synopsis

Kali Linux is built for professional penetration testing and security auditing. It is the next-generation of BackTrack, the most popular open-source penetration toolkit in the world. Readers will learn how to think like real attackers, exploit systems, and expose vulnerabilities.

Even though web applications are developed in a very secure environment and have an intrusion detection system and firewall in place to detect and prevent any malicious activity, open ports are a pre-requisite for conducting online business. These ports serve as an open door for attackers to attack these applications. As a result, penetration testing becomes essential to test the integrity of web-applications. Web Penetration Testing with Kali Linux is a hands-on guide that will give you step-by-step methods on finding vulnerabilities and exploiting web applications.

"Web Penetration Testing with Kali Linux" looks at the aspects of web penetration testing from the mind of an attacker. It provides real-world, practical step-by-step instructions on how to perform web penetration testing exercises.

You will learn how to use network reconnaissance to pick your targets and gather information. Then, you will use server-side attacks to expose vulnerabilities in web servers and their applications. Client attacks will exploit the way end users use web applications and their workstations. You will also learn how to use open source tools to write reports and get tips on how to sell penetration tests and look out for common pitfalls.

On the completion of this book, you will have the skills needed to use Kali Linux for web penetration tests and expose vulnerabilities on web applications and clients that access them.

Perform vulnerability reconnaissance to gather information on your targets
Expose server vulnerabilities and take advantage of them to gain privileged access
Exploit client-based systems using web application protocols
Learn how to use SQL and cross-site scripting (XSS) attacks
Steal authentications through session hijacking techniques
Harden systems so other attackers do not exploit them easily
Generate reports for penetration testers
Learn tips and trade secrets from real world penetration testers

✦ Table of Contents

Preface
Chapter 1: Penetration Testing and Setup
Chapter 2: Reconnaissance
Chapter 3: Server-side Attacks
Chapter 4: Client-side Attacks
Chapter 5: Attacking Authentication
Chapter 6: Web Attacks
Chapter 7: Defensive Countermeasures
Chapter 8: Penetration Test Executive Report
Index

Preface

Chapter 1: Penetration Testing and Setup
    Web application Penetration Testing concepts
    Penetration Testing methodology
        Calculating risk
    Kali Penetration Testing concepts
        Step 1 – Reconnaissance
        Step 2 – Target evaluation
        Step 3 – Exploitation
        Step 4 – Privilege Escalation
        Step 5 – maintaining a foothold
    Introducing Kali Linux
    Kali system setup
        Running Kali Linux from external media
        Installing Kali Linux
        Kali Linux and VM image first run
    Kali toolset overview
    Summary

Chapter 2: Reconnaissance
    Reconnaissance objectives
    Initial research
        Company website
        Web history sources
        Regional Internet Registries (RIRs)
        Electronic Data Gathering, Analysis, and Retrieval (EDGAR)
        Social media resources
        Trust
        Job postings
        Location
        Shodan
        Google hacking
        Google Hacking Database
        Researching networks
            HTTrack – clone a website
            ICMP Reconnaissance techniques
            DNS Reconnaissance techniques
            DNS target identification
            Maltego – Information Gathering graphs
        Nmap
            FOCA – website metadata Reconnaissance
    Summary

Chapter 3: Server-side Attacks
    Vulnerability assessment
        Webshag
        Skipfish
        ProxyStrike
        Vega
        Owasp-Zap
        Websploit
    Exploitation
        Metasploit
        w3af
    Exploiting e-mail systems
    Brute-force attacks
        Hydra
        DirBuster
        WebSlayer
    Cracking passwords
        John the Ripper
    Man-in-the-middle
        SSL strip
            Starting the attack – redirection
            Setting up port redirection using Iptables
    Summary

Chapter 4: Client-side Attacks
    Social engineering
    Social Engineering Toolkit (SET)
        Using SET to clone and attack
    MitM Proxy
    Host scanning
        Host scanning with Nessus
            Installing Nessus on Kali
            Using Nessus
    Obtaining and cracking user passwords
        Windows passwords
            Mounting Windows
            Linux passwords
    Kali password cracking tools
        Johnny
        hashcat and oclHashcat
        samdump2
        chntpw
        Ophcrack
        Crunch
    Other tools available in Kali
        Hash-identifier
        dictstat
        RainbowCrack (rcracki_mt)
        findmyhash
        phrasendrescher
        CmosPwd
        creddump
    Summary

Chapter 5: Attacking Authentication
    Attacking session management
        Clickjacking
    Hijacking web session cookies
    Web session tools
        Firefox plugins
        Firesheep – Firefox plugin
        Web Developer – Firefox plugin
        Greasemonkey – Firefox plugin
        Cookie Injector – Firefox plugin
        Cookies Manager+ – Firefox plugin
        Cookie Cadger
        Wireshark
        Hamster and Ferret
        Man-in-the-middle attack
        dsniff and arpspoof
        Ettercap
        Driftnet
    SQL Injection
        sqlmap
    Cross-site scripting (XSS)
    Testing cross-site scripting
    XSS cookie stealing / Authentication hijacking
    Other tools
        urlsnarf
        acccheck
        hexinject
        Patator
        DBPwAudit
    Summary

Chapter 6: Web Attacks
    Browser Exploitation Framework – BeEF
    FoxyProxy – Firefox plugin
    BURP Proxy
    OWASP – ZAP
    SET password harvesting
    Fimap
    Denial of Services (DoS)
        THC-SSL-DOS
        Scapy
        Slowloris
    Low Orbit Ion Cannon
    Other tools
        DNSCHEF
        SniffJoke
        Siege
        Inundator
        TCPReplay
    Summary

Chapter 7: Defensive Countermeasures
    Testing your defenses
        Baseline security
        STIG
        Patch management
        Password policies
    Mirror your environment
        HTTrack
        Other cloning tools
    Man-in-the-middle defense
        SSL strip defense
    Denial of Service defense
    Cookie defense
    Clickjacking defense
    Digital forensics
        Kali Forensics Boot
            Filesystem analysis with Kali
        dc3dd
        Other forensics tools in Kali
            chkrootkit
            Autopsy
            Binwalk
            pdf-parser
            Foremost
            Pasco
            Scalpel
            bulk_extractor
    Summary

Chapter 8: Penetration Test Executive Report
    Compliance
    Industry standards
    Professional services
    Documentation
    Report format
        Cover page
        Confidentiality statement
        Document control
        Timeline
        Executive summary
        Methodology
        Detailed testing procedures
        Summary of findings
        Vulnerabilities
        Network considerations and recommendations
        Appendices
        Glossary
    Statement of Work (SOW)
        External Penetration Testing
        Additional SOW material
    Kali reporting tools
        Dradis
        KeepNote
        Maltego CaseFile
        MagicTree
        CutyCapt
        Sample reports
    Summary

Index

📜 SIMILAR VOLUMES