Who is the Intended Audience for This Book?
How is This Book Different from Book ‘x’?
What Do I Need to Follow Along?
Chapter 1. What is Penetration Testing?
Introduction to Kali and Backtrack Linux: Tools. Lots of Tools
Working with Your Attack Machine: Starting the Engine
The Use and Creation of a Hacking Lab
Google Directives: Practicing Your Google-Fu
The Harvester: Discovering and Leveraging E-mail Addresses
Extracting Information from DNS
Fierce: What to Do When Zone Transfers Fail
Extracting Information from E-mail Servers
ThreatAgent: Attack of the Drones
Sifting Through the Intel to Find Attackable Targets
Using Nmap to Perform a TCP Connect Scan
Using Nmap to Perform an SYN Scan
Using Nmap to Perform UDP Scans
Using Nmap to Perform an Xmas Scan
Using Nmap to Perform Null Scans
The Nmap Scripting Engine: From Caterpillar to Butterfly
Medusa: Gaining Access to Remote Services
Metasploit: Hacking, Hugh Jackman Style!
JtR: King of the Password Crackers
Linux Password Cracking and a Quick Example of Privilege Escalation
Password Resetting: The Building and the Wrecking Ball
Wireshark: Sniffing Network Traffic
Macof: Making Chicken Salad Out of Chicken Sh∗t
Armitage: Introducing Doug Flutie of Hacking
Why Learn Five Tools When One Works Just as Well?
Chapter 6. Web-Based Exploitation
Nikto: Interrogating Web Servers
w3af: More than Just a Pretty Face
Spidering: Crawling Your Target’s Website
Intercepting Requests with Webscarab
Cross-Site Scripting: Browsers that Trust Sites
ZED Attack Proxy: Bringing It All Together Under One Roof
Chapter 7. Post Exploitation and Maintaining Access with Backdoors, Rootkits, and Meterpreter
Netcat’s Cryptic Cousin: Cryptcat
Hacker Defender: It is Not What You Think
Detecting and Defending Against Rootkits
Meterpreter: The Hammer that Turns Everything into a Nail
Chapter 8. Wrapping Up the Penetration Test
Writing the Penetration Testing Report