BackTrack 5 Cookbook
This is a cookbook with the necessary explained commands and code to learn BackTrack thoroughly. It smoothes your learning curve through organized recipes. This book is for anyone who desires to come up to speed in using BackTrack 5 or for use as a reference for seasoned penetration testers.
简介
This is a cookbook with the necessary explained commands and code to learn BackTrack thoroughly. It smoothes your learning curve through organized recipes. This book is for anyone who desires to come up to speed in using BackTrack 5 or for use as a reference for seasoned penetration testers.
版权
出版社Packt Publishing
出版时间2012年12月
字数221,039
分类计算机-编程设计
热门划线
BackTrack 5 Cookbook
Willie Pritchett David De Smet
- coverpage
- BackTrack 5 Cookbook
- Credits
- About the Authors
- About the Reviewers
- www.PacktPub.com
- Support files, eBooks, discount offers and more
- Preface
- What this book covers
- What you need for this book
- Who this book is for
- Conventions
- Reader feedback
- Customer support
- Chapter 1. Up and Running with BackTrack
- Introduction
- Installing BackTrack to a hard disk drive
- Installing BackTrack to a USB drive with persistent memory
- Installing BackTrack on VirtualBox
- Installing BackTrack using VMware Tools
- Fixing the splash screen
- Changing the root password
- Starting network services
- Setting up the wireless network
- Chapter 2. Customizing BackTrack
- Introduction
- Preparing kernel headers
- Installing Broadcom drivers
- Installing and configuring ATI video card drivers
- Installing and configuring NVIDIA video card drivers
- Applying updates and configuring extra security tools
- Setting up ProxyChains
- Directory encryption
- Chapter 3. Information Gathering
- Introduction
- Service enumeration
- Determining the network range
- Identifying active machines
- Finding open ports
- Operating system fingerprinting
- Service fingerprinting
- Threat assessment with Maltego
- Mapping the network
- Chapter 4. Vulnerability Identification
- Introduction
- Installing, configuring, and starting Nessus
- Nessus – finding local vulnerabilities
- Nessus – finding network vulnerabilities
- Nessus – finding Linux-specific vulnerabilities
- Nessus – finding Windows-specific vulnerabilities
- Installing, configuring, and starting OpenVAS
- OpenVAS – finding local vulnerabilities
- OpenVAS – finding network vulnerabilities
- OpenVAS – finding Linux-specific vulnerabilities
- OpenVAS – finding Windows-specific vulnerabilities
- Chapter 5. Exploitation
- Introduction
- Implementing exploits from BackTrack
- Installing and configuring Metasploitable
- Mastering Armitage – the graphical management tool for Metasploit
- Mastering the Metasploit Console (MSFCONSOLE)
- Mastering the Metasploit CLI (MSFCLI)
- Mastering Meterpreter
- Metasploitable MySQL
- Metasploitable PostgreSQL
- Metasploitable Tomcat
- Metasploitable PDF
- Implementing the browser_autopwn module
- Chapter 6. Privilege Escalation
- Introduction
- Using impersonation tokens
- Local privilege escalation attack
- Mastering the Social-Engineer Toolkit (SET)
- Collecting victims data
- Cleaning up the tracks
- Creating a persistent backdoor
- Man-in-the-middle attack (MITM)
- Chapter 7. Wireless Network Analysis
- Introduction
- Cracking a WEP wireless network
- Cracking a WPA/WPA2 wireless network
- Automating wireless network cracking
- Accessing clients using a fake AP
- URL traffic manipulation
- Port redirection
- Sniffing network traffic
- Accessing an e-mail by stealing cookies
- Chapter 8. Voice over IP (VoIP)
- Introduction
- Using Svmap
- Finding valid extensions
- Monitoring, capturing, and eavesdropping on VoIP traffic
- Using VoIPong
- Mastering UCSniff
- Mastering Xplico
- Capturing SIP authentication
- Mastering VoIP Hopper
- Causing a denial of service
- Attacking VoIP using Metasploit
- Sniffing DECT phones
- Chapter 9. Password Cracking
- Introduction
- Online password attacks
- Cracking HTTP passwords
- Gaining router access
- Password profiling
- Cracking a Windows password using John the Ripper
- Using dictionary attacks
- Using rainbow tables
- Using NVIDIA Compute Unified Device Architecture (CUDA)
- Using ATI Stream
- Physical access attacks
- Chapter 10. BackTrack Forensics
- Introduction
- Intrusion detection and log analysis
- Recursive directory encryption/decryption
- Scanning for signs of rootkits
- Recovering data from a problematic source
- Retrieving a Windows password
- Resetting a Windows password
- Looking at the Windows registry entries
- Index