A practical, hands-on tutorial with step-by-step instructions. The book will follow a smooth and easy-to-follow tutorial approach, covering the essentials and then showing the readers how to write more sophisticated exploits.This book targets exploit developers, vulnerability analysts and researchers, network administrators, and ethical hackers looking to gain advanced knowledge in exploitation development and identifying vulnerabilities. The primary goal is to take readers wishing to get into more advanced exploitation discovery and reaching the next level.Prior experience exploiting basic stack overflows on both Windows and Linux is assumed. Some knowledge of Windows and Linux architecture is expected.

Table of Contents:
Preface Chapter 1: Lab Setup Chapter 2: Metasploit Framework Organization Chapter 3: Exploitation Basics Chapter 4: Meterpreter Basics Chapter 5: Vulnerability Scanning and Information Gathering Chapter 6: Client-side Exploitation Chapter 7: Post Exploitation Chapter 8: Post Exploitation Privilege Escalation Chapter 9: Post Exploitation Cleaning Up Traces Chapter 10: Post Exploitation Backdoors Chapter 11: Post Exploitation Pivoting and Network Sniffing Chapter 12: Exploit Research with Metasploit Chapter 13: Using Social Engineering Toolkit and Armitage Index Preface Up Chapter 1: Lab Setup Installing Oracle VM VirtualBox Installing WindowsXP on Oracle VM VirtualBox Installing BackTrack5 R2 on Oracle VM Virtual Box Summary Up Chapter 2: Metasploit Framework Organization Metasploit interfaces and basics Exploit modules Auxiliary modules Payloads in-depth Summary References Up Chapter 3: Exploitation Basics Basic terms of exploitation How does exploitation work? A typical process for compromising a system Finding exploits from online databases Summary References Up Chapter 4: Meterpreter Basics Working of the Meterpreter Meterpreter in action Summary References Up Chapter 5: Vulnerability Scanning and Information Gathering Information Gathering through Metasploit Active Information Gathering Working with Nmap Nmap discovery options Nmap advanced scanning options Port scanning options Working with Nessus Report importing in Metasploit Summary References Up Chapter 6: Client-side Exploitation What are client-side attacks? Browser exploits Tutorial Internet Explorer shortcut icon exploit Internet Explorer malicious VBScript code execution exploit Summary References Up Chapter 7: Post Exploitation What is post exploitation? Phases of post exploitation Tutorial Summary References Up Chapter 8: Post Exploitation Privilege Escalation Understanding Privilege Escalation Exploiting the victim's system Privilege escalation by post exploitation Summary References Up Chapter 9: Post Exploitation Cleaning Up Traces Disabling firewalls and other network defenses Disabling firewalls through VBScript Antivirus killing and log deletion Summary References Up Chapter 10: Post Exploitation Backdoors What is a backdoor? Payload tools Creating an EXE backdoor Creating a fully undetectable backdoor Metasploit persistent backdoor Summary References Up Chapter 11: Post Exploitation Pivoting and Network Sniffing What is pivoting? Pivoting in a network Sniffing in a network Espia Extension Summary References Up Chapter 12: Exploit Research with Metasploit Exploit writing tips and tricks Important points Format for an exploit Exploit mixins The Auxiliary::Report mixin Widely used exploit mixins Editing an exploit module Working with payloads Writing exploits Scripting with Metasploit Summary References Up Chapter 13: Using Social Engineering Toolkit and Armitage Understanding the Social Engineering Toolkit Attack options Armitage Working with Hail Mary Meterpreter access option Summary References