Penetration Testing with the Bash shell

Penetration Testing with the Bash shell
eBook: $13.99
Formats: PDF, PacktLib, ePub and Mobi formats
save 15%!
Print + free eBook + free PacktLib access to the book: $36.98    Print cover: $22.99
save 38%!
Free Shipping!
UK, US, Europe and selected countries in Asia.
Also available on:
Table of Contents
Sample Chapters
  • Utilize the command line to create, run, and execute tests
  • Learn useful command line based information processing utilities and unlock the problem solving power of a Linux terminal
  • Practical demonstrations using in-depth explanations and screenshots to help you use the Linux Bash terminal to tackle a collection of common security-related problems.

Book Details

Language : English
Paperback : 150 pages [ 235mm x 191mm ]
Release Date : May 2014
ISBN : 1849695105
ISBN 13 : 9781849695107
Author(s) : Keith Makan
Topics and Technologies : All Books, Networking and Servers

Table of Contents

Chapter 1: Getting to Know Bash
Chapter 2: Customizing Your Shell
Chapter 3: Network Reconnaissance
Chapter 4: Exploitation and Reverse Engineering
Chapter 5: Network Exploitation and Monitoring
  • Chapter 1: Getting to Know Bash
    • Getting help from the man pages
    • Navigating and searching the filesystem
      • Navigating directories
      • Listing directory contents
      • Searching the filesystem
        • File testing options
        • File action options
    • Using I/O redirection
      • Redirecting output
      • Redirecting input
    • Using pipes
    • Getting to know grep
      • Regular expression language – a crash course
      • Regular expression matcher selection options
      • Regular expression matching control options
      • Output control options
      • File selection options
    • Summary
    • Further reading
  • Chapter 2: Customizing Your Shell
    • Formatting the terminal output
    • The prompt string
      • Prompt string customizations
    • Aliases
    • Customizing the command history
      • Protecting sensitive information from leakage
    • Customizing tab completion
    • Summary
    • Further reading
  • Chapter 3: Network Reconnaissance
    • Interrogating the Whois servers
    • Interrogating the DNS servers
      • Using Dig
      • Using dnsmap
    • Enumerating targets on the local network
      • Host discovery with Arping
      • Target enumeration with Nmap
    • Summary
    • Further reading
  • Chapter 4: Exploitation and Reverse Engineering
    • Using the Metasploit command-line interface
      • Getting started with msfcli
      • Using invocation modes with msfcli
      • Bash hacks and msfcli
    • Preparing payloads with Metasploit
    • Creating and deploying a payload
    • Disassembling binaries
      • Disassembling with Objdump
      • A note about the reverse engineering assembler code
    • Debugging binaries for dynamic analysis
      • Getting started with GDB
      • Setting execution breakpoints and watch points
      • Inspecting registers, memory values, and runtime information
    • Summary
    • Further reading
  • Chapter 5: Network Exploitation and Monitoring
    • MAC and ARP abuse
      • Spoofing MAC addresses
      • Abusing address resolution
    • Man-in-the-middle attacks
      • Ettercap DNS spoofing
    • Interrogating servers
      • SNMP interrogation
      • SMTP server interrogation
    • Brute-forcing authentication
      • Using Medusa
    • Traffic filtering with TCPDump
      • Getting started with TCPDump
      • Using the TCPDump packet filter
    • Assessing SSL implementation security
      • Using SSLyze
      • Bash hacks and SSLyze
    • Automated web application security assessment
      • Scanning with SkipFish
      • Scanning with Arachni
    • Summary
    • Further reading

Keith Makan

Keith Makan is the lead author of Android Security Cookbook, Packt Publishing. He is an avid computer security enthusiast and a passionate security researcher. Keith has published numerous vulnerabilities in Android applications, WordPress plugins, and popular browser security software such as Firefox's NoScript and Google Chrome's XSS Auditor. His research has also won him numerous listings on the Google Application Security Hall of Fame. Keith has been working as a professional security assessment specialist, penetration tester, and security advisory for over 2 years.

Sorry, we don't have any reviews for this title yet.

Code Downloads

Download the code and support files for this book.

Submit Errata

Please let us know if you have found any errors not listed on this list by completing our errata submission form. Our editors will check them and add them to this list. Thank you.

Sample chapters

You can view our sample chapters and prefaces of this title on PacktLib or download sample chapters in PDF format.

Frequently bought together

Penetration Testing with the Bash shell +    Building Probabilistic Graphical  Models with Python =
50% Off
the second eBook
Price for both: £13.85

Buy both these recommended eBooks together and get 50% off the cheapest eBook.

What you will learn from this book

  • Perform network enumeration techniques with Dig, whois, dnsenum, dnsmap, and others
  • Learn how to fuzz and reverse engineer using the Kali Linux command line tools
  • Exploit common web application vulnerabilities using skipfish, arcachi, and sqlmap
  • Accomplish man-in-the-middle attacks straight from your command line
  • Assess SSL security using sslyze and openssl
  • Carry out network traffic analysis using tcpdump

In Detail

This book teaches you to take your problem solving capabilities to the next level with the Bash shell, to assess network and application level security by leveraging the power of the command-line tools available with Kali Linux.

The book begins by introducing some of the fundamental bash scripting and information processing tools. Building on this, the next few chapters focus on detailing ways to customize your Bash shell using functionalities such as tab completion and rich text formatting. After the fundamental customization techniques and general purpose tools have been discussed, the book breaks into topics such as the command-line-based security tools in the Kali Linux operating system. The general approach in discussing these tools is to involve general purpose tools discussed in previous chapters to integrate security assessment tools. This is a one stop solution to learn Bash and solve information security problems.


An easy-to-understand, step-by-step practical guide that shows you how to use the Linux Bash terminal tools to solve information security problems.

Who this book is for

If you are a penetration tester, system administrator, or developer who would like an enriching and practical introduction to the Bash shell and Kali Linux command-line-based tools, this is the book for you.

Code Download and Errata
Packt Anytime, Anywhere
Register Books
Print Upgrades
eBook Downloads
Video Support
Contact Us
Awards Voting Nominations Previous Winners
Judges Open Source CMS Hall Of Fame CMS Most Promising Open Source Project Open Source E-Commerce Applications Open Source JavaScript Library Open Source Graphics Software
Open Source CMS Hall Of Fame CMS Most Promising Open Source Project Open Source E-Commerce Applications Open Source JavaScript Library Open Source Graphics Software