Halton Wolf - Penetration testing : a survival guide, learning path

, Kali Linux 2: Windows Penetration Testing , starts by covering several ways to setting up Kali to perform different task before you find your way around your target network and determine known vulnerabilities to be able to exploit a Windows system remotely. You will then learn few techniques such as network sniffing, IP spoofing, and password attacks. You will also learn to get administrative privileges on a Windows server or workstation and then learn some devious ways of maintaining access and control of a Windows machine after you have gained access through the techniques you learned. Later on you will get familiar with other tools and techniques that Kali provides such as reverse engineering and stress testing. Finally, you will learn how forensic research is required to help you understand how one of your Windows devices was compromised.

, Web Penetration Testing withKali Linux, Second Edition , covers different testing methodologies and rules that security professionals follow when performing an assessment of a web application. You will learn to gather information using different tools that Kali provides such as the OS, application version, and additional information that help us in the later stages of the penetration test. You will then learn the different security flaws that affect web applications at various levels before gain a deep understanding of the command injection flaw and exploit it using Metasploit. Later on you will exploit clients using XSS and CSRF flaws, Social Engineering Toolkit (SET), and Browser exploitation framework (BeEF). Security issues affecting AJAX applications and web services is also covered before you finally learn the different ways in which fuzzing can identify flaws in web applications.

, Hacking Android , starts by building an arsenal of tools required for Android security at one place. You will be introduced to the basics of Android rooting before understanding how apps are being built, installed, and run. You will then understand the possible attacks your Android apps, devices, and other components in the application architecture might face. You will also look at Data storage, one of the most important elements of Android app development, and learn how to secure it. Later on it provides an overview of various server-side attacks, and also client-side attacks using both static and dynamic application testing. You will also learn the fundamental techniques typically used in creating and analyzing Android malware and will be creating one too. Finally, you will learn to secure yourself from attackers while performing everyday operations and also understand why it is dangerous to root Android devices and install unknown applications.

For the first module you would require: