In this hands-on beginner's guide, readers build a Kali Linux-based virtual lab to conduct a series of practice penetration tests. Next, Weidman walks them through finding and exploiting vulnerabilities in networks and operating systems using industry-standard tools like Wireshark, Metasploit, Nessus, Nmap, and more. Chapters on exploit development cover stack-based buffer overflows; structured exception handler overwrites; and fuzzing, porting exploits, and writing Metasploit modules.

Readers of Penetration Testing will learn how to:

Crack passwords with brute-force attacks and wordlists
Test web applications for vulnerabilities
Use the Metasploit Framework to launch exploits and write Metasploit modules
Automate social-engineering attacks to access secure networks
Bypass antivirus software
Secure successful penetration into a network during the post-exploitation phase
With its step-by-step discussions and coverage of key penetration testing tools, Penetration Testing is sure to be the go-to introduction to the field for anyone who wants to assess their own defenses or turn penetration testing into a career.

For more information or to request a review copy of Penetration Testing, contact William Pollock at No Starch Press (nostarchpr@oreilly.com, +1.415.863.9900 or visit www.nostarch.com).