You're reading from PowerShell for Penetration Testing Explore the capabilities of PowerShell for pentesters across multiple platforms

Product type Paperback

Published in May 2024

Publisher Packt

ISBN-13 9781835082454

Length 298 pages

Edition 1st Edition

Languages

PowerShell

Tools

PowerShell

Concepts

Penetration Testing

Author (1):

Dr. Andrew Blyth

View More author details

Table of Contents (23) Chapters

Preface

1. Part 1: Introduction to Penetration Testing and PowerShell

2. Chapter 1: Introduction to Penetration Testing FREE CHAPTER

3. Chapter 2: Programming Principles in PowerShell

4. Part 2: Identification and Exploitation

5. Chapter 3: Network Services and DNS

6. Chapter 4: Network Enumeration and Port Scanning

7. Chapter 5: The WEB, REST, and SOAP

8. Chapter 6: SMB, Active Directory, LDAP and Kerberos

9. Chapter 7: Databases: MySQL, PostgreSQL, and MSSQL

10. Chapter 8: Email Services: Exchange, SMTP, IMAP, and POP

11. Chapter 9: PowerShell and FTP, SFTP, SSH, and TFTP

12. Chapter 10: Brute Forcing in PowerShell

13. Chapter 11: PowerShell and Remote Control and Administration

14. Part 3: Penetration Testing on Azure and AWS cloud Environments

15. Chapter 12: Using PowerShell in Azure

16. Chapter 13: Using PowerShell in AWS

17. Part 4: Post Exploitation and Command and Control

18. Chapter 14: Command and Control

19. Chapter 15: Post-Exploitation in Microsoft Windows

20. Chapter 16: Post-Exploitation in Linux

21. Index

Why subscribe?

22. Other Books You May Enjoy

Using PowerShell tools for port scanning

There are several open source PowerShell tools that support TCP/UDP port scanning. The following is an example of a PowerShell Scanning tool: https://github.com/BornToBeRoot/PowerShell_IPv4PortScanner.

The IPv4PortScan is an asynchronous TCP scanning tool that allows a user to define the port range to be scanned. The command line for the tool is as follows:

.\IPv4PortScan.ps1 [-ComputerName] <String> [[-StartPort] <Int32>] [[-EndPort] <Int32>] [[-Threads] <Int32>] [[-Force]] [<CommonParameters>]

In the following, we will use this tool to scan the first 500 ports on the computer www.snowcapcyber.com:

PS> .\IPv4PortScan.ps1 -ComputerName www.snowcapcyber.com -EndPort 500
Port Protocol ServiceName  ServiceDescription   Status
---- -------- -----------  ------------------   ------
  53  tcp     domain &...