Security

[Review] Kali Linux – Backtrack Evolved: Assuring Security by Penetration Testing

14 Comments

1/29 –Hey guys, Johnny here with another IT blog post. I had the privilege to be selected as a reviewer for PacktPub’s Kali Linux- Backtrack Evolved: Assuring and Security by penetration testing Video Lab by Shakeel Ali , Tedi Heriyanto and Lee Allen. Must say, coming from a diverse field of expertise in Information Technology with over 6+ years of experience and 15+ IT Certifications I can say this is a very down to earth and comprehensive guide to the world of Kali Linux and Penetration testing.

In today’s world, Information Security has been becoming one of the most demanding fields in the IT industry and based on the current trends it’s been a very hot topic with all the Information security breaches and vulnerabilities ranging from the NSA to the infamous Anonymous group. Having a Systems and Networking background and becoming more and more involved with Ethical Hacking and Security assessment I can vouch that PacktPub’s  Kali Linux- Backtrack Evolved: Assuring and Security by penetration testing has been one of the most down pack comprehensive labs ever.

Your skills can range from being today’s top notch blackhat hacker to a world class script kiddie or just starting to get your feet wet within security assessment field, by reviewing this Guide you’ll benefit on the all the topics and overall processes needed for penetration testing. Pat on the back for the Offensive Security Team for funding and maintaining the what I believe is one of the most useful Security Assessment tools out there “Kali Linux”. For you guys who are not aware, Offensive Security is a provider of world-class information security training and penetration testing services.

1-      Lab Preparation

Lets get down to business, Penetration testing is a politically correct term for Hacking with the proper paperwork and permissions.. When infiltrating a system without permission, you’re ideally breaking many laws in which if caught you’ll be facing lawsuits and possibly jail time.. Overall to avoid all the lawyer paperwork / lawsuits etc… this guide provides different methods on creating test labs .in which you’ll be able to virtualize all of the attacks on a closed network using today’s VT applications such as Oracle’s Virtualbox or Vmware player.

In order to start developing a network environment for penetration testing, you’ll need to obtain a wide variety  of Operating systems image files. (Different tastes in Linux distributions, and Windows OSes) distrowatch.com / technet.microsoft.com. Guide provides step by step instructions on compiling a more effective exploitable environment  by increasing the attack surface area. (Recommended to use older OSes that aren’t patched) ex: Win XP SP2 and turning off all the security features (firewalls / AV’s / Win Updates). You can also obtain Metasploitable which is intentionally vulnerable linux virtual machine which can be obtained from sourceforce.net, Metasploitable also has a couple of exploitable webapps which can be accessed through the VM’s IP address.

2-      Information Gathering and Reconnaissance

Before we even have contact with the target network you would want to gather as much information as possible eliminating the overall footprinting. This guide walks you through different methods in performing passive reconnaissance and information gathering.

Now and days many companies are more aware with information security, but usually this was never a case  if a company in the past practiced poor information security policies on one of their websites.  Archive.org is a tool which has a collection of archive websites. Within the guide you’ll be exposed other tools that are publicly available  In today’s world there are tons of ways to gather information and perform reconnaissance towards the target question. With all the social media applications  and companies getting more and more involved with these products Social engineering has become a breeze. Either uncovering names / roles / functions  and the types of systems used in the company by looking a Job Postings via the professional network  Linkedin  and or Social media giants like Facebook.

The  Google search engine is a very effective way to query very specific information; this is called Google hacking using different operators. To read more about Google hacking you can check exploit-db.com other tools mentioned serversniff.net  / geektools.com / network-tools.com / domaintools.com.  The guide provides a variety of tools within Kali Linux that dig deeper within the passive enumeration of systems in the target network.

3-      Getting into the water and swimming with the sharks

The book does a great job in digging deeper proving many techniques and tools to perform more hands on and  in depth exploitation,  which would involve  -Scanning and Enumeration -Vulnerability Mapping and using tools like Metasploit, Nmap, Nessus etc…. Having spent several hours performing assessments and running varies tools mentioned on the lab I’ve certainly added more knowledge to my IT Security arsenal.

Being part of the Ethical Hacking and information Security community has been a exciting privilege. I love to say thanks to Kraig Lewis and the PacktPub team for selecting me as a reviewer for their Kali Linux- Backtrack Evolved: Assuring and Security by penetration testing  book and video lab.  If you’re a hacker enthusiast or a professional Penetration tester I highly recommend what PacktPub has to offer with this product. You learn something new everyday and you can not put a price on education. Hope everyone enjoyed the article although I did not go in depth with everything that’s covered in the book,  but I assure you if you have access to it you’ll expand your expertise in Penetration testing and all the techniques provided.

Video Lab : http://www.packtpub.com/kali-linux-backtrack-evolved-assuring-security-by-penetration-testing/video by Justin Hutchens

-Johnny

Follow me:

Twitter
Linkedin

14 thoughts on “[Review] Kali Linux – Backtrack Evolved: Assuring Security by Penetration Testing”

  1. Great review Johnny, I was debating whether I should purchase this product or not. Thanks’ to your review I will go ahead an do so.

    Reply

  4. This is a great review Johnny, even for someone that may not even be involved in this world of penetration testing whatsoever.

    I especially enjoyed how you broke down the book into the three numerical sections in this review you posted. Almost like reading a mini-summary or compressed version of the guide you speak of itself.

    Reply

  5. Very well written, Johnny. I’m just starting to learn all the different factors in this field, and the article has definitely expanded my knowledge.

    I appreciate you writing this for someone such as myself, who can study and absorb this information quite easily. Cheers!

    Reply

  7. Great review! Well written, It gives enough information to those of us who are interested in this field and are looking to learn more. I didn’t know this was available until I read your article. I will definitely look into Kali Linux- Backtrack .

    Reply

  8. While you desperately need an editor, the information was very good, and easy to understand even for someone that isn’t particularly savvy with network security.

    Reply

  9. This was an enjoyable read. The article was very lucid and inspires a person to want to learn more…great review Johnny!

    Reply

  10. This was a great review. I work in the IT Security field and I think that this book would be very valuable in my job. I will certainly strongly considering checking this out.

    Reply

  12. This is a really good review! Very informative and definitely opened my eyes to stuff I didn’t know about Info Security. Will definitely look into purchasing the book to learn more.

    Reply

  13. Very informative review of a fascinating product. I’ve been tinkering around with a couple of machines and distros for a while and this seems like an exciting new project to try.

    Reply

  17. Many thanks, A good amount of forum posts.
    http://canadianpharmaciesnnm.com/
    canadian pharmacies without prescriptions canada drugs international pharmacies that ship to the usa canada online pharmacies
    canadian prescriptions
    pharmacy prescription
    online canadian pharmacy
    canadian pharmacy viagra
    best online canadian pharcharmy
    mail order pharmacies

    Reply

  26. Wow all kinds of beneficial facts!
    http://canadianpharmacysilo.com/
    best canadian pharmacies canada pharmacy online best canadian mail order pharmacies aarp approved canadian online pharmacies
    compare prescription prices
    canadian pharmacies that are legit
    prescription drug price comparison
    top rated online canadian pharmacies
    canada drug pharmacy
    mexican pharmacies

    Reply

  27. You actually revealed this really well!
    http://canadianpharmaciescubarx.com/
    online pharmacy reviews canada drugs pharmacy cost comparison canadian pharmacy
    online canadian discount pharmacy
    canada pharmacies online pharmacy
    online canadian pharmacies
    mexican pharmacies shipping to usa
    web medical information
    buy prescription drugs online

    Reply

  29. With thanks, I like this.
    http://canadianpharmaciescubarx.com/
    reputable canadian mail order pharmacies top rated canadian pharmacies online canadian online pharmacy reviews top rated canadian pharmacies online
    canadian pharmacy online canada
    drugs online
    rx online
    canadian pharmacy viagra brand
    pharmacy drug store
    online pharmacy no prescription

    Reply

  32. Seriously plenty of useful material!
    http://canadianpharmaciescubarx.com/
    prescription drug price comparison canadian pharmacies that ship to us canadian online pharmacy reviews canada pharmaceutical online ordering
    canadadrugs.com pharmacy
    best canadian prescription prices
    canada online pharmacy
    walgreens pharmacy
    no prescription online pharmacy
    overseas pharmacies

    Reply

  35. Nicely put. Cheers.
    http://www.canadianpharmacymsn.com/
    online pharmacy no prescription north west pharmacy canada prescription drugs online without mexican pharmacies shipping to usa
    no prescription pharmacy
    canadian cialis
    best online international pharmacies
    top rated online canadian pharmacies
    best online pharmacies canada
    canadian pharmacy online canada

    Reply

  39. Thank you! Plenty of posts.
    http://canadianpharmaciesnnm.com/
    online canadian pharcharmy canada pharmaceutical online ordering walgreens pharmacy top rated canadian pharmacies online
    pain meds online without doctor prescription
    cheap canadian drugs
    best online pharmacies canada
    canadian rx
    cialis canadian pharmacy
    canada pharmacy online

    Reply

  45. You definitely made the point.
    http://canadianpharmacymim.com/
    canadian pharmacy online canada canada pharmacy online best price prescription drugs canada pharmaceuticals online
    canada pharmacy online reviews
    trust pharmacy canada
    ed meds online
    canada pharmacy no prescription
    us pharmacy no prior prescription
    canadian prescription drugstore

    Reply

  46. You actually said that adequately.
    http://www.canadianpharmacymsn.com/
    best canadian mail order pharmacies online pharmacies of canada canada online pharmacies canada pharmaceuticals online
    meds online
    best canadian online pharmacy
    online pharmacy without prescription
    northwest pharmacy canada
    canadian mail order pharmacies
    canada pharmacy no prescription

    Reply

  49. Wow lots of excellent knowledge.
    https://nicktambone.com/
    no prescription online pharmacy canadian pharmacies online prescription pricing canadian online pharmacies
    internet pharmacy
    mexican pharmacies shipping to usa
    the canadian pharmacy
    discount pharmaceuticals
    <a href="http://governart.com/?s=+Thanks%21+I+value+this.+http%3A%2F%2Fcanadianpharmaciescubarx.com%2F+mail+order+pharmacy+northwest+pharmacy+medication+costs+canada+pharmaceutical+online+ordering+%0D%0Aprescription+cost+%0D%0Aonline+rx+pharmacy+%0D%0Acialis+online+%0D%0Aonline+pharmacy+without+a+prescription+%0D%0Aonline+canadian+pharmacies+%0D%0Acanadian+prescription”>canadian pharmacy no prescription needed
    canada drugs

    Reply

  53. You’ve made your stand extremely clearly..
    http://www.canadianpharmacymsn.com/
    canadian pharmacy online canada canadian pharmacy canada pharmacies without script northwest pharmacy
    canadian pharmacies that ship to us
    canadian drug stores online
    prescription prices comparison
    canadian pharmacy no prescription needed
    cheap prescription drugs
    <a href="http://www.era.ks.ua/guestbook/show_item_add_form/?__myform_unique=a9a6586fb97dbafacb4beb1e32aba504&common=meds+online+bica&common=lucasSnusy%40gmail.com&common=+Very+well+voiced+of+course.+.+http%3A%2F%2Ftalahicc.com%2F+drug+price+canada+pharmaceutical+online+ordering+%0D%0Acanadian+pharmacies+without+prescriptions+%0D%0Acanadian+online+pharmacy&commoncaptcha]=&submit=%D0%9E%D1%82%D0%BF%D1%80%D0%B0%D0%B2%D0%B8%D1%82%D1%8C”>canadian prescriptions

    Reply

  65. Really a good deal of good data.
    http://canadianpharmaciesnnm.com/
    buy prescription drugs canada canadian pharmacy online legitimate canadian mail order pharmacies north west pharmacy canada
    canadian online pharmacy reviews
    international pharmacies that ship to the usa
    mexican pharmacy online
    discount prescription drug
    prescription price comparison
    online drugstore

    Reply

Leave a Reply

Your email address will not be published. Required fields are marked *