From the course: Performing a Technical Security Audit and Assessment

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Penetration testing tool demo

Penetration testing tool demo

From the course: Performing a Technical Security Audit and Assessment

Start my 1-month free trial Buy for my team

Penetration testing tool demo

“

- [Instructor] To demonstrate penetration testing, I'll use Kali Linux and the Legion tool. Legion can conduct port and service discovery on target systems. I've already run Legion against a Metasploitable system and the discovered services and ports are displayed in the services tab. I'll scroll through the services to see if anything catches my attention. I see MySQL, a database server, running on port 3306. Databases can contain interesting information, so let's examine this one. When I right click on that port, I see options to explore the service further, including open with MySQL client as root. When I click on that option, Legion will open a terminal window and prompt for a password. I'll check to see if it has a blank password by hitting Enter. I'm now at a MySQL prompt showing that I have successfully connected to the database server as root. Obviously, this would be a significant finding during a security assessment. I'll run the show databases command to see what I can…

Contents