The Experts below are selected from a list of 57 Experts worldwide ranked by ideXlab platform

Patrick Engebretson - One of the best experts on this subject based on the ideXlab platform.

  • The Basics of Hacking and Penetration Testing: Ethical Hacking and Penetration Testing Made Easy, -2/E.
    Syngress, 2014
    Co-Authors: Patrick Engebretson
    Abstract:

    The Basics of Hacking and Penetration Testing, 2nd Ed. serves as an introduction to the steps required to complete a penetration test or perform an ethical hack from beginning to end. No prior hacking experience is needed. You will learn how to properly utilize and interpret the results of modern day hacking tools, which are required to complete a penetration test. Tool coverage includes Backtrack and Kali Linux, Google reconnaissance, MetaGooFil, DNS interrogation, Nmap, Nessus, Metasploit, the Social Engineer Toolkit (SET) , w3af, Netcat, post exploitation tactics, the Hacker Defender rootkit, and more. The book provides a simple and clean explanation of how to effectively utilize the tools and introduces a four-step methodology for conducting a penetration test or hack. You will be provided with the know-how required to jump start your career or gain a better understanding of offensive security. The book walks through each of the steps and tools in a structured, orderly manner, allowing readers to understand how the output from each tool can be fully utilized in the subsequent phases of the penetration test. This process allows readers to clearly see how the tools and phases function and relate. • The second edition includes updated information covering Kali Linux as well as focusing on the seminal tools required to complete a penetration test • New tools added including the Social Engineer Toolkit, Meterpreter, w3af and more! • Each chapter contains hands-on examples and exercises that are designed to teach you how to interpret the results and utilize those results in later phases • Written by an author who works in the field as a Penetration Tester and who teaches Offensive Security, Penetration Testing, and Ethical Hacking, and Exploitation classes at Dakota State Universit

  • Post Exploitation and Maintaining Access with Backdoors, Rootkits, and Meterpreter
    The Basics of Hacking and Penetration Testing, 2013
    Co-Authors: Patrick Engebretson
    Abstract:

    This chapter focuses on the importance of writing the penetration testing report and includes some specific details about what needs to be included and potential pitfalls for hackers who have never written a penetration testing report. The importance of presenting a quality report to the client is emphasized. The chapter concludes with suggestions about what the readers can do to further enhance their hacking skills once they have completed the book. Specific recommendations for getting advanced training and becoming part of the security community are outlined.

Ryan Linn - One of the best experts on this subject based on the ideXlab platform.

  • Chapter 10 – Postexploitation scripting
    Coding for Penetration Testers, 2017
    Co-Authors: Jason Andress, Ryan Linn
    Abstract:

    Once the shells come back, we have a bit more work to do. This chapter discusses what happens after we’ve gotten in. Working from information gathering under Windows, and moving toward maintaining access through creating users using the Windows command line, this chapter looks at how to query and manipulate Windows systems from the command line. Once we’ve gotten the hang of it, this chapter works to convert that hard work into a Meterpreter script using Ruby where we can easily run these commands through Metasploit. After exploiting a Web application, we don’t want the database to feel left out, so this chapter ends with manipulating SQL injection vulnerabilities to gain access to applications, dump data, and even get a shell. While looking at capabilities of MySQL and Microsoft SQL Server, this chapter helps develop postexploitation abilities that will start a basic Web application tester on the road to becoming an advanced one.

  • Post-exploitation scripting
    Coding for Penetration Testers, 2012
    Co-Authors: Jason Andress, Ryan Linn
    Abstract:

    Once a penetration tester has found his or her way into a machine, the next step is to gather information regarding a found asset and use that information to gain further access to the network or other resources. Shell scripting can help in gathering information once an exploit has been successful, and Meterpreter scripting can be employed to gain even further access. Then, once the network post-exploitation is complete, the tester can use database vulnerabilities to mine data and get shell access. This chapter takes readers through the steps of basic shell scripting, Meterpreter scripting, data mining, and shell access. Navigating the Windows operating system from the command line is explored in detail; because many of the commands used when gathering Windows information are similar on Linux, Linux network information gathering is also explored. The chapter also looks at SQL injection vulnerabilities and the basics behind their exploitation and post-exploitation.

Vincent Liu - One of the best experts on this subject based on the ideXlab platform.

  • Extending Metasploit II
    Penetration Tester's Open Source Toolkit, 2005
    Co-Authors: James C. Foster, Vincent Liu
    Abstract:

    This chapter covers the advanced features of the Metasploit Framework that distinguishes it as an advanced technology demonstration platform. Many cutting-edge exploitation and post-exploitation technologies are written and integrated with the framework, and the features of each with walkthroughs of selected examples are discussed. The open and well-documented nature of the framework encourages development of advanced feature extensions. The chapter examines the Meterpreter payload system and developes a completely new extension that will integrate fluidly with the Metasploit Framework. This extension is made available with the Metasploit Framework distribution in future releases. A number of advanced features of Metasploit Framework are discussed. It also covers the steps required to build a customized Meterpreter extension by walking through two case studies: (1) of the Sys extension, and (2) of the SAM extension. The Sys extension is one of the default modules included with the framework, and the SAM extension is a custom-designed extension that dumps the password hashes from the remote machine. By analyzing the source code behind each extension, a user can see the way it is easy to write a new library or extend an existing dynamic link library.

  • Chapter 12 – Extending Metasploit III
    Writing Security Tools and Exploits, 2005
    Co-Authors: James C. Foster, Vincent Liu
    Abstract:

    Publisher Summary This chapter covers the advanced features of the Metasploit Framework that distinguishes it as an advanced technology demonstration platform. Many cutting-edge exploitation and post-exploitation technologies are written and integrated with the framework, and the features of each with walkthroughs of selected examples are discussed. The open and well-documented nature of the framework encourages development of advanced feature extensions. The chapter examines the Meterpreter payload system and developes a completely new extension that will integrate fluidly with the Metasploit Framework. This extension is made available with the Metasploit Framework distribution in future releases. A number of advanced features of Metasploit Framework are discussed. It also covers the steps required to build a customized Meterpreter extension by walking through two case studies: (1) of the Sys extension, and (2) of the SAM extension. The Sys extension is one of the default modules included with the framework, and the SAM extension is a custom-designed extension that dumps the password hashes from the remote machine. By analyzing the source code behind each extension, a user can see the way it is easy to write a new library or extend an existing dynamic link library.

Mohammad Tabatabai Irani - One of the best experts on this subject based on the ideXlab platform.

  • Automation of Post-Exploitation (Focused on MS-Windows Targets)
    2015
    Co-Authors: Mohammad Tabatabai Irani
    Abstract:

    Abstract. Pentesting is becoming an important activity even for smaller companies. One of the most important economic pressures is the cost of such tests. In order to automate pentests, tools such as Metasploit can be used. Post-exploitation activities can, however, not be automated easily. Our contribution is to extend Meterpreter-scripts so that post-exploitation can be scripted. Moreover, using a multi-step approach (piv-oting), we can automatically exploit machines that are not directly routable: Once the first machine is exploited, the script continues to then auto-maticall launch an attack on the next machine, etc. Key words: Pentesting, security, exploits

  • FGIT-SecTech - Automation of Post-exploitation
    Security Technology, 2009
    Co-Authors: Mohammad Tabatabai Irani, Edgar R. Weippl
    Abstract:

    Pentesting is becoming an important activity even for smaller companies. One of the most important economic pressures is the cost of such tests. In order to automate pentests, tools such as Metasploit can be used. Post-exploitation activities can, however, not be automated easily. Our contribution is to extend Meterpreter-scripts so that post-exploitation can be scripted. Moreover, using a multi-step approach (pivoting), we can automatically exploit machines that are not directly routable: Once the first machine is exploited, the script continues to then automatically launch an attack on the next machine, etc.

  • Automation of post‐exploitation
    International Journal of Web Information Systems, 2009
    Co-Authors: Mohammad Tabatabai Irani, Edgar R. Weippl
    Abstract:

    Purpose – The purpose of this paper is to describe the improvements achieved in automating post‐exploit activitiesDesign/methodology/approach – Based on existing frameworks such as Metasploit and Meterpreter the paper develops a prototype and uses this to automate typical post‐exploitation activities.Findings – Using a multi‐step approach of pivoting this paper can automate the cascaded attacks on computers not directly routable.Practical implications – Based on the findings and developed prototypes penetration tests can be made more efficient since many manual exploitation activities can now be scripted.Original/value – The main contribution of the paper is to extend Metapreter‐scripts so that post‐exploitation can be scripted. Moreover, using a multi‐step approach (pivoting), it can automatically exploit machines that are not directly routable

  • REGULAR PAPERS Automation of post-exploitation
    2009
    Co-Authors: Mohammad Tabatabai Irani, Edgar R. Weippl
    Abstract:

    Purpose – The purpose of this paper is to describe the improvements achieved in automating post-exploit activities Design/methodology/approach – Based on existing frameworks such as Metasploit and Meterpreter the paper develops a prototype and uses this to automate typical post-exploitation activities. Findings – Using a multi-step approach of pivoting this paper can automate the cascaded attacks on computers not directly routable. Practical implications – Based on the findings and developed prototypes penetration tests can be made more efficient since many manual exploitation activities can now be scripted. Original/value – The main contribution of the paper is to extend Metapreter-scripts so that post-exploitation can be scripted. Moreover, using a multi-step approach (pivoting), it can automatically exploit machines that are not directly routable

Grajales Puerta, Juan Fernando - One of the best experts on this subject based on the ideXlab platform.

  • Detección conjunta de malware entre usuarios y dispositivos a partir de la validación de firmas digitales y/o la correlación de eventos en dispositivos Android
    Maestría en Seguridad Informática, 2018
    Co-Authors: Grajales Puerta, Juan Fernando
    Abstract:

    Para la detección de software malicioso que compromete aplicaciones en teléfonos inteligentes con sistema operativo Android, los controles convencionales, utilizados entre el año 2012 y hasta el primer semestre del año 2018, requieren de una muestra de malware para realizar la detección. Estos controles de seguridad ejecutan el análisis de aplicaciones en la nube y no localmente en el dispositivo. La mayoría de los controles se limitan a las aplicaciones ofrecidas en la tienda de Google (Play Store) y, para que la neutralización sea efectiva, la mayoría de ellos requiere de habilidades especiales que no todo usuario final de Android posee. En este proyecto se hizo un análisis de estas técnicas, se compararon sus formas de detección y se registraron sus falencias. Con la información obtenida, se diseñó e implementó una aplicación para sistemas operativos Android en dispositivos móviles llamada CAM (Control de Aplicaciones Móviles), para asegurar la integridad de las aplicaciones y revisar si han sido intervenidas con malware, por medio de la validación de firmas digitales y la correlación de eventos. CAM propone una estrategia de corresponsabilidad entre los desarrolladores de aplicaciones para móviles y la comunidad de usuarios del sistema operativo, basada en defensa activa para que la seguridad se convierta en un atributo del sistema y no complemento. La estrategia de corresponsabilidad busca que los desarrolladores y usuarios publiquen bases de datos de listas blancas de los principales eventos operativos de sus aplicaciones, para contrastarlas con la información que generen dichos eventos, con el fin de detectar y mitigar amenazas cibernéticas como el espionaje, la fuga de información, la suplantación de identidad, el robo de contraseñas y el control remoto del dispositivo por medio de troyanos (bots). También pretende brindar educación en materia de ciberseguridad a los usuarios, apoyándose en la entrega de alertas eficientes. Para el desarrollo de este trabajo de grado, se utilizaron los registros estadísticos de dispositivos móviles con sistema operativo Android más usado entre el 2015 y el 2018 y se realizó un laboratorio de máquinas virtuales para simular dichas distribuciones de Android, se examinaron sus principales características y eventos operativos tales como: permisos, firmas y tráfico, se intervino las aplicaciones seleccionadas con el paquete de Meterpreter para Android del framework Metasploit. Para la detección de los indicadores de compromiso en las aplicaciones infectadas se usaron aplicaciones como: Package Info, RL Permissions y Network Connections entre otras. Estos resultados hicieron posible el desarrollo de la plataforma CAM para Android con arquitectura cliente-servidor. La plataforma CAM se encarga de almacenar y correlacionar los eventos operativos validos de las aplicaciones legítimas, en una lista blanca y posteriormente brindar al usuario un informe eficiente que le permita evitar e identificar cuando una aplicación móvil genera una ciber-amenaza en un teléfono inteligenteFor malicious software detection that compromises applications in smartphones with Android Operating System, conventional controls, used between 2012 the first half of 2018, require a sample of malware to perform the detection. Most security controls run the applications analysis in the cloud, and not locally on the device. Other controls are limited to the applications offered in the Google Play Store. In addition, for the neutralization to be effective, most controls require special abilities most end user of Android doesn’t have. In this project, an analysis of these techniques is made, their forms of detection are compared, and their shortcomings are recorded. With the information obtained from these analyses, an application for Android operating systems is designed and implemented on mobile devices: CAM (Control for Mobile Applications). To ensure the applications integrity, it is checked if they have been intervened with malware, through the digital signatures' validation and events’ correlation. CAM proposes a strategy of co-responsibility between the mobile application developers and the operating system community users, based on active defense, so that security becomes systems attribute instead of just being a complementary service. The co-responsibility strategy aims for developers and users publishing their application main operational events white-list databases, to contrast them with the information generated by those applications' events. That way, the collected information may improve detection and mitigation of cyber threats such as espionage, information leakage, identity theft, password stealing, and remote device control through trojans (bots). The co-responsibility strategy also aims to provide education on cyber security to users, based on the delivery of efficient alerts. For the development of this degree work, statistical records of mobile devices with the most used Android operating system between 2015 and 2018, and a laboratory of virtual machines, were made to simulate said distributions of Android, its main features and operational events such as: permits, signatures, and traffic were examined. The selected applications were intervened with the Meterpreter for Android Package of the Metasploit framework. For the commitment indicators detection in the infected applications, applications such as Package Info, RL Permissions and Network Connections, among others were used. The results of these experiments made possible the development of the CAM platform for Android with client-server architecture development. The CAM platform is responsible for storing and correlating the legitimate applications valid operational events in a white list. This white list is used to provide efficient reports to users, so they are able to identify and avoid when a mobile application generates a cyber-threat on a smartphoneMagister en Seguridad Informátic