Penetration Testing

Penetration testers simulate cyber attacks to find security weaknesses in networks, operating systems, and applications. This book introduces the core skills and techniques that are needed. Using a virtual machine-based lab that includes Kali Linux and vulnerable operating systems, it runs through a series of practical lessons with tools like Wireshark, Nmap, and Burp Suite. It shows the key stages of an actual assessment--including information gathering, finding exploitable vulnerabilities, gaining access to systems, post exploitation, and more. The reader will learn how to: crack passwords and wireless network keys with brute-forcing and wordlists; test web applications for vulnerabilities; use the Metasploit Framework to launch exploits and write Metasploit modules; automate social-engineering attacks; bypass antivirus software; turn access to one machine into total control of the enterprise in the post exploitation phase; explore mobile hacking with the author's tool, the Smartphone Pentest Framework. --