Difference between revisions of "Metasploit - The Penetration Tester's Guide"
Jump to navigation
Jump to search
Stuffsyncbot (talk | contribs) (Automatic literature creation) |
Stuffsyncbot (talk | contribs) (Automatic literature update) |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
{{Literature|device_name=Metasploit - The Penetration Tester's Guide|image_link=https://stuff.elvis.science/uploads/accessories/accessory-image-6DZHVlJPCZ.png|type=Book|author=David Kennedy, Jim | {{Literature|device_name=Metasploit - The Penetration Tester's Guide|image_link=https://stuff.elvis.science/uploads/accessories/accessory-image-6DZHVlJPCZ.png|type=Book|author=David Kennedy, Jim O'Gorman, Devon Kearns, and Mati Aharoni|language=English|isbn=9781593272883|publisher=No Starch Press (2011)|pages=328|references=https://nostarch.com/metasploit|description= | ||
The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless. But while Metasploit is used by security professionals everywhere, the tool can be hard to grasp for first-time users. Metasploit: The Penetration Tester | 'The best guide to the Metasploit Framework.' --HD Moore, Founder of the Metasploit Project | ||
Once you | |||
Learn how to: | The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless. But while Metasploit is used by security professionals everywhere, the tool can be hard to grasp for first-time users. Metasploit: The Penetration Tester's Guide fills this gap by teaching you how to harness the Framework and interact with the vibrant community of Metasploit contributors. | ||
Once you've built your foundation for penetration testing, you'll learn the Framework's conventions, interfaces, and module system as you launch simulated attacks. You'll move on to advanced penetration testing techniques, including network reconnaissance and enumeration, client-side attacks, wireless attacks, and targeted social-engineering attacks. | |||
'''Learn how to:''' | |||
* Find and exploit unmaintained, misconfigured, and unpatched systems | |||
* Perform reconnaissance and find valuable information about your target | |||
* Bypass anti-virus technologies and circumvent security controls | |||
* Integrate Nmap, NeXpose, and Nessus with Metasploit to automate discovery | |||
You | * Use the Meterpreter shell to launch further attacks from inside the network | ||
* Harness standalone Metasploit utilities, third-party tools, and plug-ins | |||
* Learn how to write your own Meterpreter post exploitation modules and scripts | |||
You'll even touch on exploit discovery for zero-day research, write a fuzzer, port existing exploits into the Framework, and learn how to cover your tracks. Whether your goal is to secure your own networks or to put someone else's to the test, Metasploit: The Penetration Tester's Guide will take you there and beyond.}} | |||
Latest revision as of 17:49, 1 February 2024
| Type | Book |
| Author | David Kennedy, Jim O'Gorman, Devon Kearns, and Mati Aharoni |
| Language | English |
| Publisher | No Starch Press (2011) |
| ISBN | 9781593272883 |
| Pages | 328 |
Book Description
'The best guide to the Metasploit Framework.' --HD Moore, Founder of the Metasploit Project
The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless. But while Metasploit is used by security professionals everywhere, the tool can be hard to grasp for first-time users. Metasploit: The Penetration Tester's Guide fills this gap by teaching you how to harness the Framework and interact with the vibrant community of Metasploit contributors. Once you've built your foundation for penetration testing, you'll learn the Framework's conventions, interfaces, and module system as you launch simulated attacks. You'll move on to advanced penetration testing techniques, including network reconnaissance and enumeration, client-side attacks, wireless attacks, and targeted social-engineering attacks.
Learn how to:
- Find and exploit unmaintained, misconfigured, and unpatched systems
- Perform reconnaissance and find valuable information about your target
- Bypass anti-virus technologies and circumvent security controls
- Integrate Nmap, NeXpose, and Nessus with Metasploit to automate discovery
- Use the Meterpreter shell to launch further attacks from inside the network
- Harness standalone Metasploit utilities, third-party tools, and plug-ins
- Learn how to write your own Meterpreter post exploitation modules and scripts
You'll even touch on exploit discovery for zero-day research, write a fuzzer, port existing exploits into the Framework, and learn how to cover your tracks. Whether your goal is to secure your own networks or to put someone else's to the test, Metasploit: The Penetration Tester's Guide will take you there and beyond.