[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-detail-129089-en":3,"doc-seo-129089-105":31,"detail-sidebar-cat-0-en-105":93},{"code":4,"msg":5,"data":6},0,"success",{"doc_id":7,"user_id":8,"nickname":9,"user_avatar":10,"doc_module":4,"category_id":11,"category_name":12,"doc_title":13,"doc_description":14,"doc_content":15,"file_id":16,"file_url":17,"file_type":18,"file_size":19,"view_count":20,"is_deleted":4,"is_public":21,"is_downloadable":21,"audit_status":21,"page_count":22,"language":23,"language_code":24,"site_id":25,"html_lang":24,"table_of_contents":26,"faqs":27,"seo_title":28,"seo_description":14,"update_tm":29,"read_time":30},129089,549768072016,"River Wang","https://ap-avatar.wpscdn.com/davatar_155a257f0dc6eb9ab79c44ca47cae57d",6,"Technology","PENETRATION TESTING STEP BY STEP GUIDE - 3 - Edition","Penetration Testing Step by Step Guide (3rd Edition) provides a structured, hands-on walkthrough of lab preparation and practical attack techniques. It covers Wi‑Fi penetration testing workflows, including packet capture, sniffing, de-authentication, and cracking WEP/WPA, plus EAPOL and rogue access points. The guide then expands into post-connection attacks such as NMAP, MiTM, ARP spoofing, encryption basics, server- and client-side exploitation, vulnerability scanning, social engineering, and browser/mobile penetration testing, concluding with defenses.","PENETRATION TESTING STEP BY STEP GUIDE 3rd Edition  \nRadhi Shatob  \nCopyright © 2024, Radhi Shatob  \nAll rights reserved. No part of this book may be reproduced in any form or by any electronic or mechanical means, including information storage and retrieval systems, without permission in writing from the publisher, except by reviewers, who may quote brief passages in review.  \nThis page is left Blank.  \nContents  \n1. Lab Setup preparations 15  \n1.1. Lab setup: 15  \n1.2. Install VirtualBox software 15  \n1.3. Installation of Attacker Machine (Kali Linux) 15 1.4. Installation of Victim-1 Machine (Metasploitable) 16  \n1.5. Installation of Victim-2 machine (windows 10) 16 1.6. Install VirtualBox Extension Pack and Guest addition 16 1.7. USB Wi-Fi Adapter 22  \n2. Wi-Fi Penetration Testing 26  \n2.1. Putting card in monitor mode 26  \n2.2. Over the air wireless data packets capture 28  \n2.3. Sniffing specific AP 30  \n2.4. De-authentication attacks 31  \n2.5. WEP encrypted networks crack. 35  \n2.6. WPA Encrypted Network crack. 39  \n2.7. EAPOL protocol 56  \n2.8. Fake access Point 58  \n2.9. Securing Wireless Network 63  \n3. Post Connection Attacks 66  \n3.1. Network discovering 66  \n3.2. Using NMAP tool 67  \n3.3. Man in the Middle Attacks (MiTM) 75  \n3.4. ARP Spoofing 76  \n3.5. MiTM with Bettercap tool 82  \n3.6. By Passing [HTTPS](HTTPS) 94  \n3.6. MITM DNS Spoofing 102  \n3.7. MiTM Java code injection 108  \n3.8. MIMT Attack in Real Network 111  \n3.9. Detecting ARP storms by Wireshark 113  \n3.10. Preventing ARP Poisoning 116  \n8.2. Making the malware process impersonate other process ID. 222  \n8.3. Controlling Victim file system 224  \n8.4. Maintaining Access 227  \n8.5. Key-logger and screenshots 230  \n4. Introduction to data encryption 118  \n4.1. The Primary Function of Data Encryption 118  \n4.2. How Does Encryption Work 118  \n4.3. Types of encryptions 118  \n4.4. Data Encryptions attacks 119  \n4.5. Data Encryption Solutions 119  \n4.6. Data Encryption Examples 120  \n4.7. Digital Certification 120  \n4.8. Filesystem and Device Encryption 121  \n4.9. How Hackers Try to Break Encryption 122  \n5. Gaining Access (Server Side) 126  \n5.1. Server-Side attacks 126  \n5.2. Exploiting Basic vulnerability 136  \n5.3. Code Execution vulnerabilities 140  \n6. Vulnerability Scanning 153  \n6.1. Basic Vulnerability detection methods 153  \n6.2. Vulnerability Scanning software. 154  \n6.3. Vulnerability Database 155  \n6.4. Vulnerability Management with Tanable Nessus 156  \n7. Gaining Access (Client Site Attacks) 174  \n7.1 Using Veil Evasion Framework 174  \n7.2 Installing Veil 3.1 In Kali Linux 175  \n7.3. How Anti-Malware work 182  \n7.4. Setting up Kali to listen for Incoming connection 184  \n7.5. Delivery Method 187  \n7.6. Creating Backdoors and Control hacked Devices with GUI software 197  \n7.7. Embedding Malware into PDF and JPG files 205  \n7.8. Protecting against smart delivery methods 216  \n8. Post exploitation 219 8.1. working with Metasploit meterpreter commands. 219  \n9. Social Engineering 233  \n9.1. Maltego 233  \n9.2. Email spoofing 238  \n10. Browser exploitation 244  \n10.1. Using BeEF to send backdoor to hooked machine 257  \n10.2. Hooking up a Mobile phone 264  \n11. Detecting Trojans 266  \n11.1. How Trojans works 266  \n11.2. Trojan Types 266  \n11.3. Protect against Trojans 267  \n11.4. Manual Trojans detection 268  \n11.5. Using Sandbox 268  \n12. Gaining access in real network 271 12.1. Configuring the router to forward incoming traffic. 271  \n13. Website penetration testing 277  \n13.1. Website (web Applications) components 277  \n13.2. Website Information Gathering 277  \n13.3. Discovering websites in the same Server 282  \n13.4. Subdomains 282  \n13.5. Finding Files and Directories 284  \n13.6. File uploads, code execution and file exclusion 289  \n13.7. Preventing above vulnerabilities 311  \n14. SQL injection 313  \n14.1. Discovering SQL injection 315  \n14.2. Injecting a code in webpage 320  \n14.3. Discovering SQL injection in GET 324  \n14.4. Reading Database Info","cbCaigay1d6mg4XA","https://ap.wps.com/l/cbCaigay1d6mg4XA","pdf",70849748,7,1,570,"English","en",105,"# Lab Setup preparations\n## Lab setup\n## Install VirtualBox software\n## Installation of Attacker Machine (Kali Linux)\n## Installation of Victim-1 Machine (Metasploitable)\n## Installation of Victim-2 machine (windows 10)\n## Install VirtualBox Extension Pack and Guest addition\n## USB Wi-Fi Adapter\n# Wi-Fi Penetration Testing\n## Putting card in monitor mode\n## Over the air wireless data packets capture\n## Sniffing specific AP\n## De-authentication attacks\n## WEP encrypted networks crack\n## WPA Encrypted Network crack\n## EAPOL protocol\n## Fake access Point\n## Securing Wireless Network\n# Post Connection Attacks\n## Network discovering\n## Using NMAP tool\n## Man in the Middle Attacks (MiTM)\n## ARP Spoofing\n## MiTM with Bettercap tool\n## By Passing HTTPS\n## MITM DNS Spoofing\n## MiTM Java code injection\n## Detecting ARP storms by Wireshark\n## Preventing ARP Poisoning\n# Encryption, Access, and Vulnerability Workflows\n## Introduction to data encryption\n## Gaining Access (Server Side)\n## Vulnerability Scanning\n## Gaining Access (Client Site Attacks)\n# Web and Mobile Security Testing\n## Social Engineering\n## Browser exploitation\n## Detecting Trojans\n## Gaining access in real network\n## Website penetration testing\n## SQL injection\n## Cross Site Scripting XSS\n## OWASP ZAP Web Site Penetration testing tool\n## Mobile phone penetration testing","[{\"question\":\"What topics are covered in the Wi‑Fi penetration testing section?\",\"answer\":\"It explains putting the wireless card into monitor mode, capturing wireless data packets, sniffing specific access points, running de-authentication attacks, and cracking WEP and WPA networks, along with EAPOL and rogue access points and how to secure wireless networks afterward.\"},{\"question\":\"How does the guide approach post-connection attacks after initial access?\",\"answer\":\"It walks through network discovery and NMAP usage, then moves into man-in-the-middle attacks, ARP spoofing, Bettercap-based MiTM, and various HTTPS and DNS spoofing techniques, followed by detection of ARP storms and prevention of ARP poisoning.\"},{\"question\":\"Which web application vulnerabilities does the book include, and what tools are mentioned?\",\"answer\":\"The web testing coverage includes SQL injection, Cross-Site Scripting (XSS), and OWASP ZAP web site penetration testing. It also discusses discovering and exploiting these weaknesses and provides protections against them.\"}]","PENETRATION TESTING STEP BY STEP GUIDE - 3 - Edition | PDF",1786007887,1436,{"code":4,"msg":32,"data":33},"ok",{"site_id":25,"language":24,"slug":34,"title":13,"keywords":35,"description":14,"schema_data":36,"social_meta":88,"head_meta":90,"extra_data":92,"updated_unix":29},"penetration-testing-step-by-step-guide-3-edition","",{"@graph":37,"@context":87},[38,55,70],{"@type":39,"itemListElement":40},"BreadcrumbList",[41,45,49,52],{"item":42,"name":43,"@type":44,"position":21},"https://docshare.wps.com","Home","ListItem",{"item":46,"name":47,"@type":44,"position":48},"https://docshare.wps.com/document/","Document",2,{"item":50,"name":12,"@type":44,"position":51},"https://docshare.wps.com/document/technology/",3,{"item":53,"name":13,"@type":44,"position":54},"https://docshare.wps.com/document/penetration-testing-step-by-step-guide-3-edition/129089/",4,{"url":53,"name":13,"@type":56,"author":57,"headline":13,"publisher":59,"fileFormat":62,"inLanguage":24,"description":14,"dateModified":63,"datePublished":64,"encodingFormat":62,"isAccessibleForFree":65,"interactionStatistic":66},"DigitalDocument",{"name":9,"@type":58},"Person",{"url":42,"name":60,"@type":61},"DocShare","Organization","application/pdf","2026-08-28","2026-08-06",true,{"@type":67,"interactionType":68,"userInteractionCount":20},"InteractionCounter",{"@type":69},"ViewAction",{"@type":71,"mainEntity":72},"FAQPage",[73,79,83],{"name":74,"@type":75,"acceptedAnswer":76},"What topics are covered in the Wi‑Fi penetration testing section?","Question",{"text":77,"@type":78},"It explains putting the wireless card into monitor mode, capturing wireless data packets, sniffing specific access points, running de-authentication attacks, and cracking WEP and WPA networks, along with EAPOL and rogue access points and how to secure wireless networks afterward.","Answer",{"name":80,"@type":75,"acceptedAnswer":81},"How does the guide approach post-connection attacks after initial access?",{"text":82,"@type":78},"It walks through network discovery and NMAP usage, then moves into man-in-the-middle attacks, ARP spoofing, Bettercap-based MiTM, and various HTTPS and DNS spoofing techniques, followed by detection of ARP storms and prevention of ARP poisoning.",{"name":84,"@type":75,"acceptedAnswer":85},"Which web application vulnerabilities does the book include, and what tools are mentioned?",{"text":86,"@type":78},"The web testing coverage includes SQL injection, Cross-Site Scripting (XSS), and OWASP ZAP web site penetration testing. It also discusses discovering and exploiting these weaknesses and provides protections against them.","https://schema.org",{"og:url":53,"og:type":89,"og:title":13,"og:site_name":60,"og:description":14},"article",{"robots":91,"canonical":53},"index,follow",{"doc_id":7,"site_id":25},{"code":4,"msg":5,"data":94},[95,99,103,107,112,115,119,124,129,132,136],{"id":21,"doc_module":4,"doc_module_name":47,"category_name":96,"show_sort_weight":97,"slug":98},"Story & Novel",90,"story-novel",{"id":48,"doc_module":4,"doc_module_name":47,"category_name":100,"show_sort_weight":101,"slug":102},"Literature",80,"literature",{"id":54,"doc_module":4,"doc_module_name":47,"category_name":104,"show_sort_weight":105,"slug":106},"Exam",70,"exam",{"id":108,"doc_module":4,"doc_module_name":47,"category_name":109,"show_sort_weight":110,"slug":111},5,"Comic",60,"comic",{"id":11,"doc_module":4,"doc_module_name":47,"category_name":12,"show_sort_weight":113,"slug":114},50,"technology",{"id":20,"doc_module":4,"doc_module_name":47,"category_name":116,"show_sort_weight":117,"slug":118},"Healthcare",40,"healthcare",{"id":120,"doc_module":4,"doc_module_name":47,"category_name":121,"show_sort_weight":122,"slug":123},8,"Research & Report",30,"research-report",{"id":125,"doc_module":4,"doc_module_name":47,"category_name":126,"show_sort_weight":127,"slug":128},9,"Religion & Spirituality",20,"religion-spirituality",{"id":127,"doc_module":4,"doc_module_name":47,"category_name":130,"show_sort_weight":127,"slug":131},"World Cup","world-cup",{"id":133,"doc_module":4,"doc_module_name":47,"category_name":134,"show_sort_weight":133,"slug":135},10,"Lifestyle","lifestyle",{"id":137,"doc_module":4,"doc_module_name":47,"category_name":138,"show_sort_weight":108,"slug":139},19,"General","general"]