Contents in Detail. Acknowledgments

Transcription

1 Acknowledgments xix Introduction What s in This Book... xxii What Is Ethical Hacking?... xxiii Penetration Testing... xxiii Military and Espionage... xxiii Why Hackers Use Linux... xxiv Linux Is Open Source.... xxiv Linux Is Transparent.... xxiv Linux Offers Granular Control.... xxiv Most Hacking Tools Are Written for Linux... xxiv The Future Belongs to Linux/Unix... xxiv Downloading Kali Linux...xxv Virtual Machines... xxvi Installing VirtualBox.... xxvi Setting Up Your Virtual Machine... xxvii Installing Kali on the VM... xxix Setting Up Kali... xxxi xxi 1 Getting Started with the Basics 1 Introductory Terms and Concepts... 1 A Tour of Kali... 3 The Terminal The Linux Filesystem Basic Commands in Linux... 5 Finding Yourself with pwd... 6 Checking Your Login with whoami... 6 Navigating the Linux Filesystem... 6 Getting Help Referencing Manual Pages with man... 9 Finding Stuff... 9 Searching with locate Finding Binaries with whereis Finding Binaries in the PATH Variable with which Performing More Powerful Searches with find Filtering with grep Modifying Files and Directories Creating Files Creating a Directory Copying a File... 15

2 Renaming a File Removing a File Removing a Directory Go Play Now! Exercises Text Manipulation 19 Viewing Files Taking the Head Grabbing That Tail Numbering the Lines Filtering Text with grep Hacker Challenge: Using grep, nl, tail, and head Using sed to Find and Replace Viewing Files with more and less Controlling the Display with more Displaying and Filtering with less Summary Exercises Analyzing and Managing Networks 29 Analyzing Networks with ifconfig Checking Wireless Network Devices with iwconfig Changing Your Network Information Changing Your IP Address Changing Your Network Mask and Broadcast Address Spoofing Your MAC Address Assigning New IP Addresses from the DHCP Server Manipulating the Domain Name System Examining DNS with dig Changing Your DNS Server Mapping Your Own IP Addresses Summary Exercises Adding and Removing Software 39 Using apt to Handle Software Searching for a Package Adding Software Removing Software Updating Packages Upgrading Packages Adding Repositories to Your sources.list File Using a GUI-based Installer Installing Software with git Summary Exercises xii

3 5 Controlling File and Directory Permissions 49 Different Types of Users Granting Permissions Granting Ownership to an Individual User Granting Ownership to a Group Checking Permissions Changing Permissions Changing Permissions with Decimal Notation Changing Permissions with UGO Giving Root Execute Permission on a New Tool Setting More Secure Default Permissions with Masks Special Permissions Granting Temporary Root Permissions with SUID Granting the Root User s Group Permissions SGID The Outmoded Sticky Bit Special Permissions, Privilege Escalation, and the Hacker Summary Exercises Process Management 61 Viewing Processes Filtering by Process Name Finding the Greediest Processes with top Managing Processes Changing Process Priority with nice Killing Processes Running Processes in the Background Moving a Process to the Foreground Scheduling Processes Summary Exercises Managing User Environment Variables 71 Viewing and Modifying Environment Variables Viewing All Environment Variables Filtering for Particular Variables Changing Variable Values for a Session Making Variable Value Changes Permanent Changing Your Shell Prompt Changing Your PATH Adding to the PATH Variable How Not to Add to the PATH Variable Creating a User-Defined Variable Summary Exercises xiii

4 8 Bash Scripting 81 A Crash Course in Bash Your First Script: Hello, Hackers-Arise! Setting Execute Permissions Running HelloHackersArise Adding Functionality with Variables and User Input Your Very First Hacker Script: Scan for Open Ports Our Task A Simple Scanner Improving the MySQL Scanner Common Built-in Bash Commands Summary Exercises Compressing and Archiving 93 What Is Compression? Tarring Files Together Compressing Files Compressing with gzip Compressing with bzip Compressing with compress Creating Bit-by-Bit or Physical Copies of Storage Devices Summary Exercises Filesystem and Storage Device Management 101 The Device Directory /dev How Linux Represents Storage Devices Drive Partitions Character and Block Devices List Block Devices and Information with lsblk Mounting and Unmounting Mounting Storage Devices Yourself Unmounting with umount Monitoring Filesystems Getting Information on Mounted Disks Checking for Errors Summary Exercises The Logging System 111 The rsyslog Logging Daemon The rsyslog Configuration File The rsyslog Logging Rules xiv

5 Automatically Cleaning Up Logs with logrotate Remaining Stealthy Removing Evidence Disabling Logging Summary Exercises Using and Abusing Services 121 Starting, Stopping, and Restarting Services Creating an HTTP Web Server with the Apache Web Server Starting with Apache Editing the index.html File Adding Some HTML Seeing What Happens OpenSSH and the Raspberry Spy Pi Setting Up the Raspberry Pi Building the Raspberry Spy Pi Configuring the Camera Starting to Spy Extracting Information from MySQL Starting MySQL Interacting with MySQL Setting a MySQL Password Accessing a Remote Database Connecting to a Database Database Tables Examining the Data PostgreSQL with Metasploit Summary Exercises Becoming Secure and Anonymous 139 How the Internet Gives Us Away The Onion Router System How Tor Works Security Concerns Proxy Servers Setting Proxies in the Config File Some More Interesting Options Security Concerns Virtual Private Networks Encrypted Summary Exercises xv

6 14 Understanding and Inspecting Wireless Networks 153 Wi-Fi Networks Basic Wireless Commands Wi-Fi Recon with aircrack-ng Detecting and Connecting to Bluetooth How Bluetooth Works Bluetooth Scanning and Reconnaissance Summary Exercises Managing the Linux Kernel and Loadable Kernel Modules 165 What Is a Kernel Module? Checking the Kernel Version Kernel Tuning with sysctl Managing Kernel Modules Finding More Information with modinfo Adding and Removing Modules with modprobe Inserting and Removing a Kernel Module Summary Exercises Automating Tasks with Job Scheduling 173 Scheduling an Event or Job to Run on an Automatic Basis Scheduling a Backup Task Using crontab to Schedule Your MySQLscanner crontab Shortcuts Using rc Scripts to Run Jobs at Startup Linux Runlevels Adding Services to rc.d Adding Services to Your Bootup via a GUI Summary Exercises Python Scripting Basics for Hackers 183 Adding Python Modules Using pip Installing Third-Party Modules Getting Started Scripting with Python Variables Comments Functions xvi

7 Lists Modules Object-Oriented Programming (OOP) Network Communications in Python Building a TCP Client Creating a TCP Listener Dictionaries, Loops, and Control Statements Dictionaries Control Statements Loops Improving Our Hacking Scripts Exceptions and Password Crackers Summary Exercises Index 205 xvii