دانلود کتاب اسکریپت نویسی شل لینوکس برای هکرها

The art of penetration testing is a vital component of today’s security architecture. It involves teams of security professionals trying to break into corporate and government computer networks, but not for malicious purposes. Rather, penetration testers break into networks in order to find the security weaknesses and to show the network owners how to fix the weaknesses. Our objective is to show you ways to accomplish this goal. We’ve written this book in a way that benefits both beginner and experienced penetration testers. If you’re a beginner, you’ll see that we’ve explained the basic concepts that you’ll need to build a good foundation. Experienced penetration testers will see ways to help automate and streamline their workflows. There are plenty of handson exercises throughout that will help reinforce the learning process. In Part 1, you’ll see how to set up your lab environment, using Kali Linux and Metasploitable2 virtual machines running under VirtualBox. You’ll also learn the basics of bash shell scripting and see how you can use it to help automate repetitive penetration testing processes. Learning these skills will provide you with the foundational knowledge that you’ll need for the rest of the book. Network reconnaissance and web application scanning are important components of penetration testing. In Part 2, you’ll learn various techniques that will help you find web servers on a target network and scan the web applications for possible vulnerabilities. You’ll see several examples of bash shell scripts that help automate the process. In Part 3, you’ll learn how to identify and exploit vulnerabilities on improperly configured Linux servers. After an overview of password cracking techniques, you’ll see ways to compromise an unprivileged user account and then escalate to root user privileges. You’ll then learn how to maintain persistent root user access to the victims’ servers. Finally, you’ll see how to use shell scripts with the Metasploit Framework to help automate the exploitation process. Part 4 is where we show you the more advanced concepts. In Chapter 9, you’ll first learn the concepts of hacking Wi-Fi networks, and about ways to defend against these types of attacks. Chapter 10 contains various shell scripts that help you audit your systems for abnormal activity, and to harden the systems against attack. When you’ve completed the penetration test, you’ll need to create a report of your findings to give to your client. Chapter 11 shows you ways to create visually appealing reports that effectively convey the vital information. Finally, Chapter 12 wraps everything up with a realistic end-to-end penetration test that’s automated with shell scripts.