Third Edition of The Ultimate Kali Linux Book Released with Expanded OSINT and Pentesting Coverage
The publishing house Piter announces the release of the third international edition of The Ultimate Kali Linux Book: Mastering Nmap, Metasploit, Aircrack-ng and Empire for Pentesting.
The volume introduces readers to Kali Linux, the leading platform for advanced penetration testing. It equips cybersecurity specialists with the tools required to conduct complex assessments in corporate networks. The new edition has been substantially revised with an added chapter on OSINT, updated hands-on exercises and improved explanations of virtual laboratory setups.
The book addresses a broad audience, from novices to seasoned IT professionals who want to stay current with information security trends. As readers progress, they master the Kali Linux toolkit for vulnerability assessment, with emphasis on information gathering. They learn to identify target systems, detect security issues in devices, exploit network vulnerabilities and test web applications.
What readers will learn
- Build a solid foundation for a career in ethical hacking
- Install and configure Kali Linux
- Construct a penetration testing lab and perform vulnerability assessments
- Apply methodologies used in security evaluations
- Conduct open-source intelligence gathering (OSINT)
- Use Nmap to discover security weaknesses in target systems
- Master advanced wireless network penetration testing techniques
- Become proficient at exploiting vulnerable web applications
By the end of the book, practitioners are prepared to tackle complex corporate network testing challenges with increased confidence.
Glen Singh is an author, instructor and cybersecurity professional specializing in cyber operations, Red Team and Blue Team activities and enterprise networking. He holds an MSc degree and certifications from EC-Council, Cisco and Check Point. His publications cover vulnerability discovery, threat detection, intrusion analysis, incident response and network security.
The book is available on the publisher’s website. Purchasers of the print edition receive the electronic version by email. Habrahabr readers can apply a 25% discount using the code Kali Linux25.
Related articles
Context is Everything: How to Avoid Drowning in Security Incidents and Distinguish Employees from Attackers
The article explains that false positives in security systems often stem from missing business context rather than technical flaws. It outlines three levels of filtering that combine process rules, access logs, and job-specific behavior to rank risk accurately. Behavioral analysis tools like UEBA can help but require proper training and human oversight to avoid generating more noise. Key metrics focus on reducing false alerts, improving MTTD and MTTR, and minimizing daily administration time. For smaller companies without dedicated SOC teams, the guidance emphasizes starting with log collection, identifying existential risks, and aligning policies with real business processes. The piece stresses that technology alone cannot replace analysts who deeply understand company operations.
redb 4.0 Released: XML Routes, Lazy References, Unique Keys and WS-Trust Across the Ecosystem
The redb ecosystem has delivered a major simultaneous release across all core components, bringing redb.Core, redb.Route, redb.Tsak and redb.Identity to version 4.0.0. The update introduces declarative XML routing, lazy object references, unique key constraints, and a full WS-Trust SOAP facade while closing multiple security issues reported through external audits and community feedback. Seventy-six NuGet packages, seven container images and platform archives for Windows and Linux are now available, with the Pro edition remaining free and license-free throughout the 4.x line. Significant internal changes include a unified expression language, support for modern data formats such as Protobuf and Avro, and improved handling of distributed caches and OpenTelemetry metrics. Security hardening covers header sanitization in all identity facades, consent-page protections, dashboard access controls and a switch to bcrypt password hashing. Existing clusters must be stopped before upgrade because mixed versions are not supported, and large databases require a maintenance window for schema changes and partial index creation.
Astra Automation 2.1 Adds Dashboard to Quantify Automation ROI for IT Infrastructure
Group Astra has released Astra Automation 2.1, an updated version of its centralized IT infrastructure management platform. The key addition is the Automation Dashboard, which tracks job execution statistics including run frequency, duration, success rates, and scenario popularity to help organizations determine whether automation delivers measurable value. Built on Ansible, the platform supports automation of server, cloud, and network environments for tasks such as mass operations, configuration management, and software deployment. New economic metrics calculate time savings and ROI to assist executives in evaluating the return on automation investments. All components can now be deployed in containers, simplifying operations in modern corporate setups, while an enhanced Fast Fail mechanism performs pre-installation checks on time synchronization, network reachability, disk space, load balancers, and the Automation Gateway database.
Hashcat Password Cracking: Why Complex Passwords Like Summer2026! Often Fail First
Password cracking tools such as hashcat and John the Ripper exploit predictable human patterns when generating candidates, allowing structured passwords to be recovered faster than truly random strings. The process relies on comparing computed hashes against stored values without needing to reverse the one-way function. Modern password storage uses salted, computationally expensive algorithms including bcrypt, Argon2id, sha512crypt and yescrypt to increase the cost of each guess. Different formats require specific hashcat modes, and parameters such as cost factors or memory settings directly affect cracking speed. WordPress 6.8 introduced bcrypt with SHA-384 preprocessing while older phpass records remain supported. Audits must preserve full hash records, verify modes on test data, and combine dictionaries, rules, masks and statistical models to measure real risk. After testing, organizations should migrate to properly tuned Argon2id and enforce long unique passphrases managed by password managers.