An introduction to Penetration Testing using Kali Linux
summary
Hands-on Kali session that scans the 192.168.1.x lab with nmap -sP/-sV, extracts EXIF from a webpage image, and brute forces an HTTP password with Hydra+rockyou (rockyou is 14M lines; the useful entry “elite” appears ~25k in). SQLmap auto-detects a MySQL backend and dumps users (Ramses), whose base64→MD5 hash is cracked with John/hashcat; SSH on port 777 accepts the creds. Final escalation uses a writable backup and a setuid procwatch binary to spawn a root shell.
AI-written summary · about
chapters (5)
- 0:00Start
- 32:42crack the password a bit
- 59:52test for other types of payloads for different databases
- 1:17:30install software
- 1:34:39create our own user accounts
related talks
01h 01mA security tester's toolkit
01h 00mA Security Tester's Toolbox
39mHow to think like a hacker
01h 06mHow hacking works
22mIntegrating Security Measures Throughout Development
59mHack Yourself First
41mJust Another Live Hacking - How Insecure Is Secure Enough?
57mEnterprise Ethical Hacking Cloud Applications