Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Save more on your purchases! discount-offer-chevron-icon
Savings automatically calculated. No voucher code required.
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletter Hub
Free Learning
Arrow right icon
timer SALE ENDS IN
0 Days
:
00 Hours
:
00 Minutes
:
00 Seconds
Arrow up icon
GO TO TOP
Kali Linux 2:  Windows Penetration Testing

You're reading from   Kali Linux 2: Windows Penetration Testing Kali Linux: a complete pentesting toolkit facilitating smooth backtracking for working hackers

Arrow left icon
Product type Paperback
Published in Jun 2016
Publisher Packt
ISBN-13 9781782168492
Length 422 pages
Edition 1st Edition
Arrow right icon
Toc

Table of Contents (17) Chapters Close

Kali Linux 2: Windows Penetration Testing
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Preface
1. Sharpening the Saw FREE CHAPTER 2. Information Gathering and Vulnerability Assessment 3. Exploitation Tools (Pwnage) 4. Web Application Exploitation 5. Sniffing and Spoofing 6. Password Attacks 7. Windows Privilege Escalation 8. Maintaining Remote Access 9. Reverse Engineering and Stress Testing 10. Forensics Index

Spoofing network traffic


There are several definitions for spoofing on the Internet:

  • Email spoofing: This is the most common definition related to masquerading as a different person by using a fake email address. This works well when attempting a phishing attack, where the victim is sent an email that purports to be from their bank or a retail store.

  • Domain spoofing: It is possible to spoof a domain, and this is where you poison the route table on their network or individual workstation. How that works is that the domain the user types into the address bar is misaligned to point at a false IP address. When the victim goes to http://bankarmenia.com/, they end up at a phishing site that looks exactly like the Bank of Armenia site, but it is not. This is used to collect credentials from users for purposes of theft.

  • Domain error spoofing: Hackers buy domains that are common errors for popular sites, such as Yaahoo.com. They build a site that looks like www.yahoo.com and benefit from all the...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at £13.99/month. Cancel anytime
Visually different images