Master the Metasploit Framework and become an expert in penetration testing.
Key Features
- Gain a thorough understanding of the Metasploit Framework
- Develop the skills to perform penetration testing in complex and highly secure environments
- Learn techniques to integrate Metasploit with the industry's leading tools
Book Description
Most businesses today are driven by their IT infrastructure, and the tiniest crack in this IT network can bring down the entire business. Metasploit is a pentesting network that can validate your system by performing elaborate penetration tests using the Metasploit Framework to secure your infrastructure.
This Learning Path introduces you to the basic functionalities and applications of Metasploit. Throughout this book, you'll learn different techniques for programming Metasploit modules to validate services such as databases, fingerprinting, and scanning. You'll get to grips with post exploitation and write quick scripts to gather information from exploited systems. As you progress, you'll delve into real-world scenarios where performing penetration tests are a challenge. With the help of these case studies, you'll explore client-side attacks using Metasploit and a variety of scripts built on the Metasploit Framework.
By the end of this Learning Path, you'll have the skills required to identify system vulnerabilities by using thorough testing.
This Learning Path includes content from the following Packt products:
- Metasploit for Beginners by Sagar Rahalkar
- Mastering Metasploit - Third Edition by Nipun Jaswal
What you will learn
- Develop advanced and sophisticated auxiliary modules
- Port exploits from Perl, Python, and many other programming languages
- Bypass modern protections such as antivirus and IDS with Metasploit
- Script attacks in Armitage using the Cortana scripting language
- Customize Metasploit modules to modify existing exploits
- Explore the steps involved in post-exploitation on Android and mobile platforms
Who this book is for
This Learning Path is ideal for security professionals, web programmers, and pentesters who want to master vulnerability exploitation and get the most of the Metasploit Framework. Basic knowledge of Ruby programming and Cortana scripting language is required.
Table of Contents
- Introduction to Metasploit and Supporting Tools
- Setting up Your Environment
- Metasploit Components and Environment Configuration
- Information Gathering with Metasploit
- Vulnerability Hunting with Metasploit
- Client-side Attacks with Metasploit
- Web Application Scanning with Metasploit
- Antivirus Evasion and Anti-Forensics
- Cyber Attack Management with Armitage
- Extending Metasploit & Exploit Development
- Approaching a Penetration Test Using Metasploit
- Reinventing Metasploit
- The Exploit Formulation Process
- Porting Exploits
- Testing Services with Metasploit
- Virtual Test Grounds and Staging
- Client-Side Exploitation
- Metasploit Extended
- Evasion with Metasploit
- Metasploit for Secret Agents
- Visualizing with Armitage
- Tips and Tricks
Sagar Rahalkar is a seasoned information security professional having 12 years experience in various verticals of IS. His domain expertise is in Cybercrime investigations, Forensics, AppSec, VA/PT, Compliance, IT GRC etc. He has a master's degree in computer science and several certifications such as Cyber Crime Investigator, CEH, ECSA, ISO 27001 LA, IBM AppScan Certified, CISM, and PRINCE2. He has been associated with Indian law enforcement agencies for around 4 years dealing with cybercrime investigations and related training. He has received several awards and appreciations from senior officials of the police and defense organizations in India. He has also been a reviewer and author for various books and online publications.
Nipun Jaswal is an International Cyber Security Author and an award-winning IT security researcher with a decade of experience in penetration testing, vulnerability research, surveillance and monitoring solutions, and RF and wireless hacking. He is currently working as an Associate Partner in Lucideus where he is leading services such as red teaming and vulnerability research along with other enterprise customer services. He has authored Metasploit Bootcamp and Mastering Metasploit, and co-authored the Metasploit Revealed set of books. In addition to this, he has authored numerous articles and exploits that can be found on popular security databases, such as Packet Storm and Exploit-DB. Please feel free to contact him at @nipunjaswal.
