دانلود کتاب دسترسی اولیه با متااسپلویت و مترپرتر -مقدمه‌ای عملی بر تکنیک‌های متااسپلویت

As a university professor, I have been asked this question many times by many students over many years. This book is part of my answer to those that want to learn more about the hands-on, practical side of cyber operations. The book is aimed at readers who are learning on their own and want a thorough grounding in hands-on fundamentals. It is also aimed at college students who have taken their first courses in computer science and want to learn the practical skills that are needed to advance in the field. This book assumes that the reader is familiar with the basics of Windows, Linux, and networking, but has not really looked deeply into what that means from a security perspective. The book introduces Metasploit as a vector for initial access to a target system. This focus on initial access methods allows the reader to learn Metasploit and Meterpreter with specific direct examples that readers can run in their own testing laboratory. It is not a complete discussion of Metasploit; rather, it covers Metasploit and Meterpreter fundamental techniques. The reader starts by gaining access to Windows systems with Metasploit and Meterpreter by using known credentials. The reader then learns about Meterpreter, its reconnaissance tools, how it can be used to control the target, how it is managed and detected, and how it can be extended. Attackers generally don’t start with credentials, so the book continues with brute force attacks, starting with Metasploit, then NetExec and CrackMapExec, and custom solutions. Metasploit provides several modules for phishing attacks. The book begins with a discussion of document phishing attacks against LibreOffice and Apache OpenOffice. This continues with web delivery scripts that can be used in web pages and emails. Microsoft Office is examined, and the user learns how to construct Microsoft Office phishing documents and the defensive mechanisms that Microsoft has included to defend against these attacks. The reader not only learns the Metasploit commands to launch and run these attacks but also studies the corresponding source code in PowerShell or Python. Another common vector for initial access is malware. The reader learns how to use Metasploit to generate and use simple malware in several formats for both Windows and Linux. Metasploit can generate malware source code that can be incorporated into custom-written malware; this is illustrated for both Windows and Linux. Defenders that encounter malware often want to analyze it; the reader learns how to use simple static tools, dynamic Linux tools, and Ghidra for reverse engineering. Malware and phishing attacks are often blocked by antivirus solutions. The text covers Windows Defender Antivirus – how it works, how it is configured, and how it can be disabled or bypassed. The text includes more than 150 exercises at various levels of difficulty that can be used by an instructor using the book as a textbook or by a motivated reader who wants to practice the topics covered in the text.