- Mastering Metasploit
- Mastering Metasploit
- Credits
- Foreword
- About the Author
- About the Reviewer
- www.PacktPub.com
- Preface
- 1. Approaching a Penetration Test Using Metasploit
- Organizing a penetration test
- Preinteractions
- Intelligence gathering/reconnaissance phase
- Predicting the test grounds
- Setting up Kali Linux in virtual environment
- The fundamentals of Metasploit
- Conducting a penetration test with Metasploit
- Benefits of penetration testing using Metasploit
- Penetration testing an unknown network
- Using databases in Metasploit
- Modeling threats
- Vulnerability analysis of VSFTPD 2.3.4 backdoor
- Vulnerability analysis of PHP-CGI query string parameter vulnerability
- Vulnerability analysis of HFS 2.3
- Maintaining access
- Clearing tracks
- Revising the approach
- Summary
- 2. Reinventing Metasploit
- Ruby – the heart of Metasploit
- Developing custom modules
- Building a module in a nutshell
- Understanding the existing modules
- Disassembling existing HTTP server scanner module
- Writing out a custom FTP scanner module
- Writing out a custom SSH authentication brute forcer
- Writing a drive disabler post exploitation module
- Writing a credential harvester post exploitation module
- Breakthrough meterpreter scripting
- Working with RailGun
- Summary
- 3. The Exploit Formulation Process
- The absolute basics of exploitation
- Exploiting stack-based buffer overflows with Metasploit
- Exploiting SEH-based buffer overflows with Metasploit
- Bypassing DEP in Metasploit modules
- Other protection mechanisms
- Summary
- 4. Porting Exploits
- 5. Testing Services with Metasploit
- 6. Virtual Test Grounds and Staging
- Performing a penetration test with integrated Metasploit services
- Summary
- 7. Client-side Exploitation
- 8. Metasploit Extended
- 9. Speeding up Penetration Testing
- 10. Visualizing with Armitage
Adrian Pruteanu is a senior consultant who specializes in penetration testing and reverse engineering. With over 10 years of experience in the security industry, Adrian has provided services to all major financial institutions in Canada, as well as countless other companies around the world. You can find him on Twitter as @waydrian, or on his seldom updated blog https://bittherapy.net.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.