دانلود کتاب بش کلاه سیاه – اسکریپت نویسی بش برای هکرها و متخصصان تست نفوذ

This book begins by teaching you the foundations of bash syntax and scripting. It then applies those skills to each stage of a penetration test against a Linux-based target network, from initial access to data exfiltration. Along the way, you’ll explore the Linux operating system and enhance your bash hacking skills. Chapter 1: Bash Basics Provides a high-level overview of bash syntax, including assigning variables, using arithmetic operators, handling input and exit codes, and much more. Chapter 2: Flow Control and Text Processing Covers more advanced bash concepts, such as testing conditions, using loops, consolidating code into functions, and sending commands to the background. You’ll also learn some ways of customizing your bash environment for penetration testing. Chapter 3: Setting Up a Hacking Lab Walks you through building a lab to use throughout the rest of the book. You’ll rely on Kali Linux and a vulnerable Docker-based target environment to practice your bash hacking. Chapter 4: Reconnaissance Covers reconnaissance activities against a network from a black box point of view. You’ll combine hacking tools with bash scripting to automate information gathering. Chapter 5: Vulnerability Scanning and Fuzzing Explores ways of using bash to identify and exploit vulnerabilities. You’ll learn to write bash scripts for scanning and fuzzing tasks, crucial steps in any penetration test. Chapter 6: Gaining a Web Shell Dives into techniques for gaining a low-privileged foothold on a target system, with a particular focus on deploying web shells and performing OS command injections. You’ll also uncover various ways to upgrade limited shell environments, setting up a foundation for future attacks. Chapter 7: Reverse Shells Covers the establishment of reverse shells, an initial access technique that swaps the direction of the connection to remote servers. You’ll learn the theory behind how reverse shells work, then leverage them to gain stable access to a remote machine. Chapter 8: Local Information Gathering Explores ways of gathering information from a compromised Linux host without sending any packets across the network that could give your activities away. You’ll navigate the Linux file directory and permissions system, collect information about user sessions, explore installed software, and much more. Chapter 9: Privilege Escalation Discusses potential paths to privilege escalation, such as misconfigured permissions, shared resources, and other flaws. Chapter 10: Persistence Explores ways of making your access to a network resilient to environmental changes. You’ll steal credentials, modify service configurations, and more. Chapter 11: Network Probing and Lateral Movement Discusses livingoff- the-land approaches to reaching other servers on the target network. Chapter 12: Defense Evasion and Exfiltration Covers defensive security controls commonly seen in corporate environments. You’ll learn how to tamper with security