Web Penetration Testing with Kali Linux

by Joseph Muñiz, Aamir Lakhani

Testing web security is best done through simulating an attack. Kali Linux lets you do this to professional standards and this is the book you need to be fully up-to-speed with this powerful open-source toolkit. Overview In Detail Kali Linux is built for professional penetration testing and security auditing. It is the next-generation of BackTrack, the most popular open-source penetration toolkit in the world. Readers will learn how to think like real attackers, exploit systems, and expose vulnerabilities. Even though web applications are developed in a very secure environment and have an intrusion detection system and firewall in place to detect and prevent any malicious activity, open ports are a pre-requisite for conducting online business. These ports serve as an open door for attackers to attack these applications. As a result, penetration testing becomes essential to test the integrity of web-applications. Web Penetration Testing with Kali Linux is a hands-on guide that will give you step-by-step methods on finding vulnerabilities and exploiting web applications. "Web Penetration Testing with Kali Linux" looks at the aspects of web penetration testing from the mind of an attacker. It provides real-world, practical step-by-step instructions on how to perform web penetration testing exercises. You will learn how to use network reconnaissance to pick your targets and gather information. Then, you will use server-side attacks to expose vulnerabilities in web servers and their applications. Client attacks will exploit the way end users use web applications and their workstations. You will also learn how to use open source tools to write reports and get tips on how to sell penetration tests and look out for common pitfalls. On the completion of this book, you will have the skills needed to use Kali Linux for web penetration tests and expose vulnerabilities on web applications and clients that access them. What you will learn from this book Approach "Web Penetration Testing with Kali Linux" contains various penetration testing methods using BackTrack that will be used by the reader. It contains clear step-by-step instructions with lot of screenshots. It is written in an easy to understand language which will further simplify the understanding for the user.

Genres: Hackers, Computer Science

342 pages, Paperback

First published January 1, 2013

Reviews

[Jason · Rating 4 out of 5]

This book is a decent introduction to pen testing wit Kali.

Pros:

- Discusses numerous tools
- Lists several other study tools to learn Kali
- Easy to understand

Cons:

- The authors don't get in depth with each tool. Only a few options are used per tool.

Aside from this one con, it was a good, informative read. I recommend for new Kali users.

[Ayoub · Rating 1 out of 5]

These books serve as info sec newsletter nothing more, provide you with common and somehow latest tools to make your job easier and shorten reconnaissance. Would suggest to eliminate those chapters discussing the methodology as becoming too repetitive and exact replica for peter kim's ones or whoever was first to put it in that order.

[F · Rating 2 out of 5]

I was hoping for an in-depth study into what the title advertises, Web penetration with Kali. Instead, the book reads more like a very high level survey of tools available to a Web penetration tester. More time was spent on how to install, configure, and run the tools than on how Web pentesters use them in attacks.

A large portion of the content was padded with screenshots and step-by-step instructions on how to get the tools up and running. Most of the first half of the book covers pretty standard fare on what penetration testers do regardless of their focus, like recon, social engineering, and cracking passwords

[Mostafa Siraj · Rating 1 out of 5]

Useless book. Just go through Kali tools and take a screenshot with a brief description of the tool. Well you can install Kali yourself and go through the tools and check them. Doesn't add value to neither beginners nor professionals.

[AISV6 SENIOR LIBRARY]

GG6 DL026664

[Delhi Irc]

Location: GG6 IRC
Accession no: DL026664

[Adel Algbawi · Rating 1 out of 5]

Neither good nor bad, just some screenshot with brief description about Kali tools.