Metasploit, 2nd Edition

Dave Kennedy, founder of Binary Defense and TrustedSec, is a cybersecurity leader who advised on the Emmy-winning series Mr. Robot. Mati Aharoni, OffSec founder, is a veteran penetration tester who has uncovered major security flaws. Devon Kearns co-founded the Exploit Database and Kali Linux. Jim O’Gorman heads the Kali Linux project at OffSec. Daniel G. Graham is a professor of computer science at the University of Virginia and a former program manager at Microsoft.

"Metasploit, 2nd Edition is a solid update to a book that’s been a staple in the infosec community."—Help Net Security"This is an excellent book to help familiarize testers with one of the most popular security tools ever created. It will help guide you through familiar concepts and how they integrate into the broader security framework of Metasploit. An absolutely fantastic addition to any penetration tester's bookshelf." —Menachem Rothbart, Principal Security Consultant, Hacker, OSCE3"The Metasploit Framework has enrichments and features that can enhance your offensive security journey, and they're all covered in this book. Many users are acquainted with the pre-built exploitation and initial access use cases covered in the first edition, but this update includes new vulnerabilities, their associated modules, and the new frontier of cloud penetration testing. A practitioner's toolkit and environment may change, but the methodology remains the same." —Billy Trobbiani, @billycontra, Red Team Engineer at Toast, Inc."Not just another Metasploit tutorial. The second edition of this comprehensive book walks you through each stage of a simulated penetration test, and shows you how to use Metasploit to its full potential. Plus, it is logically ordered and easy to follow."—Andy “ApexPredator” Poole, OSEE, GSE"[P]rovides invaluable insights for penetration testers seeking to enhance their skills and understanding using Metasploit. However, its benefits extend beyond penetration testers. In contrast, blue teamers can also leverage the same techniques and knowledge in this book to go behind enemy lines and identify gaps in their own security controls before they can be exploited by attackers using the same toolset." —Josh Tristram, @jdtristram, Healthcare Blue Teamer "An easy read that is more than a metasploit book. It covers beginner and intermediate concepts anyone interested in the offensive side of security should understand."—Dave Curtin, security consultant, LRQA

• Foreword by HD MooreChapter 1: The Absolute Basics of Penetration TestingChapter 2: Metasploit FundamentalsChapter 3: Intelligence GatheringChapter 4: Vulnerability AnalysisChapter 5: The Joy of ExploitationChapter 6: MeterpreterChapter 7: Avoiding DetectionChapter 8: Client-Side AttacksChapter 9: Auxiliary ModulesChapter 10: Social EngineeringChapter 11: Wireless AttacksChapter 12: Porting Exploits to the FrameworkChapter 13: Building Your Own ModulesChapter 14: Creating Your Own ExploitsChapter 15: Simulated Penetration TestChapter 16: Pentesting the CloudAppendix A: Configuring Your Lab EnvironmentAppendix B: Cheat Sheet