Kali Linux web penetration testing cookbook: over 80 recipes on how to identify, exploit, and test web application security with Kali Linux 2

297 Pages·2016·11.809 MB·English

by  Nájera-Gutiérrez, Gilberto

Kali Linux
Web Penetration
Testing Cookbook
Over 80 recipes on how to identify, exploit, and test
web application security with Kali Linux 2
Gilberto Nájera-Gutiérrez
BIRMINGHAM - MUMBAI
Kali Linux Web Penetration
Testing Cookbook
Copyright © 2016 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system,
or transmitted in any form or by any means, without the prior written permission of the
publisher, except in the case of brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the
information presented. However, the information contained in this book is sold without
warranty, either express or implied. Neither the author, nor Packt Publishing, and its
dealers and distributors will be held liable for any damages caused or alleged to be
caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the
companies and products mentioned in this book by the appropriate use of capitals.
However, Packt Publishing cannot guarantee the accuracy of this information.
First published: February 2016
Production reference: 1220216
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham B3 2PB, UK.
ISBN 978-1-78439-291-8
www.packtpub.com
Credits
Author Copy Editor
Gilberto Nájera-Gutiérrez Sneha Singh
Reviewers Project Coordinator
Gregory Douglas Hill Nikhil Nair
Nikunj Jadawala
Proofreader
Abhinav Rai
Safis Editing
Commissioning Editor
Indexer
Julian Ursell
Rekha Nair
Acquisition Editors
Graphics
Tushar Gupta
Abhinash Sahu
Usha Iyer
Production Coordinator
Content Development Editor
Manu Joseph
Arun Nadar
Cover Work
Technical Editor
Manu Joseph
Pramod Kumavat
About the Author
Gilberto Nájera-Gutiérrez leads the Security Testing Team (STT) at Sm4rt Security Services,
one of the top security firms in Mexico.
He is also an Offensive Security Certified Professional (OSCP), an EC-Council Certified Security
Administrator (ECSA), and holds a master's degree in computer science with specialization in
artificial intelligence.
He has been working as a Penetration Tester since 2013 and has been a security
enthusiast since high school; he has successfully conducted penetration tests on networks
and applications of some of the biggest corporations in Mexico, such as government agencies
and financial institutions.
To Leticia, thanks for your love, support and encouragement; this wouldn't
have been possible without you. Love you Mi Reina!
To my team: Daniel, Vanessa, Rafael, Fernando, Carlos, Karen, Juan Carlos,
Uriel, Iván, and Aldo. Your talent and passion inspire me to do things like
this and to always look for new challenges. Thank you guys, keep it going!
About the Reviewers
Gregory Douglas Hill is an ethical hacking student from Abertay University, Scotland,
who also works for an independent web application developer focusing on security. From
several years of programming and problem solving experience, along with the invaluable
level of specialized training that Abertay delivers to their students, security has become
an integral part of his life. He has written several white papers ranging from IDS evasion
to automated XSS fuzzing and presented talks on SQL injection and social engineering to
the local ethical hacking society.
I would like to thank my friends and family for the inspiration I needed to
help produce this book, especially with my increasing academic workload.
Nikunj Jadawala is a security consultant at Cigital. He has over 2 years of experience in
the security industry in a variety of roles, including network and web application penetration
testing and also computer forensics.
At Cigital, he works with a number of Fortune 250 companies on compliance, governance,
forensics projects, conducting security assessments, and audits. He is a dedicated security
evangelist, providing constant security support to businesses, educational institutions, and
governmental agencies, globally.
I would like to thank my family for supporting me throughout the book-writing
process. I'd also like to thank my friends who have guided me in the InfoSec
field and my colleagues at Cigital for being there when I needed help and
support.
Abhinav Rai has been associated with information security, and has experience of
application security and network security as well. He has performed security assessments
on various applications built on different platforms. He is currently working as an information
security analyst.
He has completed his degree in Computer Science and his post-graduate diploma in IT
Infrastructure System and Security. He also holds a certificate in communication protocol
design and testing.
He can be reached at [email protected].
www.PacktPub.com
eBooks, discount offers, and more
Did you know that Packt offers eBook versions of every book published, with PDF and ePub
files available? You can upgrade to the eBook version at www.PacktPub.com and as a print
book customer, you are entitled to a discount on the eBook copy. Get in touch with us at
[email protected] for more details.
At www.PacktPub.com, you can also read a collection of free technical articles, sign up
for a range of free newsletters and receive exclusive discounts and offers on Packt books
and eBooks.
TM
https://www2.packtpub.com/books/subscription/packtlib
Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book
library. Here, you can search, access, and read Packt's entire library of books.
Why subscribe?
f Fully searchable across every book published by Packt
f Copy and paste, print, and bookmark content
f On demand and accessible via a web browser

Table of Contents
Preface v
Chapter 1: Setting Up Kali Linux 1
Introduction 1
Updating and upgrading Kali Linux 1
Installing and running OWASP Mantra 4
Setting up the Iceweasel browser 7
Installing VirtualBox 9
Creating a vulnerable virtual machine 11
Creating a client virtual machine 15
Configuring virtual machines for correct communication 18
Getting to know web applications on a vulnerable VM 22
Chapter 2: Reconnaissance 27
Introduction 27
Scanning and identifying services with Nmap 28
Identifying a web application firewall 31
Watching the source code 33
Using Firebug to analyze and alter basic behavior 35
Obtaining and modifying cookies 38
Taking advantage of robots.txt 40
Finding files and folders with DirBuster 42
Password profiling with CeWL 45
Using John the Ripper to generate a dictionary 47
Finding files and folders with ZAP 48
i