A Security Tester's Toolbox
summary
Kali plus Nmap, Wi‑Fi Pineapple and cheap Alfa cards are used to find targets; Searchsploit/Exploit‑DB holds ~335,484 exploits and CVE feeds showed ~7,988 new vulns in 2015 (lots of Flash). A live demo hits a vulnerable FTP with Metasploit exploit for vsftpd 2.3.4 to get a root shell, Veil/Metasploit drops a meterpreter session, Reaver and WPS Pixie Dust crack recover Wi‑Fi keys, and internet scans take ~2.5 minutes to find new hosts — banks that enforce HSTS block the SSL‑strip attempt.
AI-written summary · about
chapters (13)
- 0:00Start
- 4:38reconnaissance phase
- 6:07show you some of the exploitation techniques
- 15:54offensive security
- 16:57write sequel injectable proof code
- 24:09inject your own code
- 33:42monitor mode
- 34:50turn into monitor mode
- 38:16turn off wps
- 39:09fire up metasploit
- 44:31to host an nmap scan
- 46:58exploit a windows 10 machine
- 47:54creating shell codes
related talks
01h 01mA security tester's toolkit
01h 41mAn introduction to Penetration Testing using Kali Linux
41mJust Another Live Hacking - How Insecure Is Secure Enough?
13mFreedom of Security
32mPicking the Low-Hanging Fruit – Easy Pentest Wins
36mWhat Is Metasploit? How Do I Use It to Test Project Security?
38mHackers Gonna Hack: Identifying and Fixing Vulnerabilities Proactively
31mConquer the Enterprise from Inside