Mastering Metasploit : Take your penetration testing and IT security skills to a whole new level with the secrets of Metasploit, 3/e (Paperback)
暫譯: 精通 Metasploit:利用 Metasploit 的秘密將您的滲透測試和 IT 安全技能提升到全新水平,第三版(平裝本)

Nipun Jaswal

相關主題

商品描述

Discover the next level of network defense with the Metasploit framework

Key Features

  • Gain the skills to carry out penetration testing in complex and highly-secured environments
  • Become a master using the Metasploit framework, develop exploits, and generate modules for a variety of real-world scenarios
  • Get this completely updated edition with new useful methods and techniques to make your network robust and resilient

Book Description

We start by reminding you about the basic functionalities of Metasploit and its use in the most traditional ways. You'll get to know about the basics of programming Metasploit modules as a refresher and then dive into carrying out exploitation as well building and porting exploits of various kinds in Metasploit.

In the next section, you'll develop the ability to perform testing on various services such as databases, Cloud environment, IoT, mobile, tablets, and similar more services. After this training, we jump into real-world sophisticated scenarios where performing penetration tests are a challenge. With real-life case studies, we take you on a journey through client-side attacks using Metasploit and various scripts built on the Metasploit framework.

By the end of the book, you will be trained specifically on time-saving techniques using Metasploit.

What you will learn

  • Develop advanced and sophisticated auxiliary modules
  • Port exploits from PERL, Python, and many more programming languages
  • Test services such as databases, SCADA, and many more
  • Attack the client side with highly advanced techniques
  • Test mobile and tablet devices with Metasploit
  • Bypass modern protections such as an AntiVirus and IDS with Metasploit
  • Simulate attacks on web servers and systems with Armitage GUI
  • Script attacks in Armitage using CORTANA scripting

Who This Book Is For

This book is a hands-on guide to penetration testing using Metasploit and covers its complete development. It shows a number of techniques and methodologies that will help you master the Metasploit framework and explore approaches to carrying out advanced penetration testing in highly secured environments.

Table of Contents

  1. Approaching a Penetration Test Using Metasploit
  2. Reinventing Metasploit
  3. The Exploit Formulation Process
  4. Porting Exploits
  5. Offstage Access to Testing Services
  6. Virtual Test Grounds and Staging
  7. Sophisticated Client-side Attacks
  8. Metasploit Extended and Speeding Up Penetration Testing
  9. Antivirus Evasion with Metasploit
  10. Metasploit and Offense / Metasploit for Secret agents
  11. Visualizing with Armitage
  12. Tips and Tricks

商品描述(中文翻譯)

**探索使用 Metasploit 框架的下一級網路防禦**

**主要特點**

- 獲得在複雜且高度安全環境中進行滲透測試的技能
- 成為 Metasploit 框架的高手,開發漏洞利用程式,並為各種真實場景生成模組
- 獲得這本完全更新的版本,包含新的有用方法和技術,使您的網路更加穩健和具韌性

**書籍描述**

我們首先提醒您 Metasploit 的基本功能及其最傳統的使用方式。您將了解 Metasploit 模組編程的基礎知識,作為複習,然後深入進行漏洞利用的執行,以及在 Metasploit 中構建和移植各種漏洞利用程式。

在接下來的部分,您將發展出對各種服務進行測試的能力,例如資料庫、雲端環境、物聯網、行動裝置、平板電腦等服務。在這次訓練之後,我們將進入真實世界的複雜場景,進行滲透測試的挑戰。透過真實案例研究,我們將帶您探索使用 Metasploit 及其各種腳本進行的客戶端攻擊。

在書籍結尾,您將專門接受使用 Metasploit 的省時技術訓練。

**您將學到的內容**

- 開發高級且複雜的輔助模組
- 從 PERL、Python 及其他多種程式語言移植漏洞利用程式
- 測試資料庫、SCADA 等服務
- 使用高度先進的技術攻擊客戶端
- 使用 Metasploit 測試行動裝置和平板電腦
- 使用 Metasploit 繞過現代防護措施,如防毒軟體和入侵偵測系統
- 使用 Armitage GUI 模擬對網頁伺服器和系統的攻擊
- 在 Armitage 中使用 CORTANA 腳本進行攻擊腳本編寫

**本書適合誰**

本書是一本使用 Metasploit 進行滲透測試的實用指南,涵蓋其完整的開發過程。它展示了多種技術和方法論,將幫助您掌握 Metasploit 框架,並探索在高度安全環境中進行高級滲透測試的方法。

**目錄**

1. 使用 Metasploit 進行滲透測試的接近方式
2. 重新定義 Metasploit
3. 漏洞利用程式的制定過程
4. 移植漏洞利用程式
5. 測試服務的幕後訪問
6. 虛擬測試場地和階段
7. 複雜的客戶端攻擊
8. 擴展 Metasploit 及加速滲透測試
9. 使用 Metasploit 繞過防毒軟體
10. Metasploit 與攻擊 / Metasploit 用於秘密特工
11. 使用 Armitage 進行可視化
12. 提示與技巧