2KKUU7ita

Table of Contents
Performing Social Engineering Attacks .......................................................70
Seeking information .............................................................................70
Building trust ........................................................................................73
Exploiting the relationship .................................................................74
Social Engineering Countermeasures .........................................................77
Policies ..................................................................................................77
User awareness and training ..............................................................78
Chapter 6: Physical Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .81
Identifying Basic Physical Security Vulnerabilities ...................................81
Pinpointing Physical Vulnerabilities in Your Office ..................................84
Building infrastructure ........................................................................84
Utilities ..................................................................................................85
Office layout and usage .......................................................................86
Network components and computers ...............................................88
Chapter 7: Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .93
Understanding Password Vulnerabilities ...................................................94
Organizational password vulnerabilities ..........................................94
Technical password vulnerabilities ..................................................96
Cracking Passwords ......................................................................................97
Cracking passwords the old-fashioned way .....................................97
Cracking passwords with high-tech tools.......................................100
Cracking password-protected files ..................................................108
Understanding other ways to crack passwords ............................109
General Password-Cracking Countermeasures .......................................114
Storing passwords .............................................................................115
Creating password policies ..............................................................115
Taking other countermeasures ........................................................116
Securing Operating Systems ......................................................................118
Windows..............................................................................................118
Linux and UNIX ...................................................................................119
Part III: Hacking Network Hosts ................................ 121
Chapter 8: Network Infrastructure . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123
Understanding Network Infrastructure Vulnerabilities ..........................125
Choosing Tools ............................................................................................126
Scanners and analyzers.....................................................................126
Vulnerability assessment ..................................................................127
Scanning, Poking, and Prodding the Network ..........................................127
Scanning ports....................................................................................128
Scanning SNMP ..................................................................................133
Grabbing banners ..............................................................................135
Testing firewall rules .........................................................................137
Analyzing network data.....................................................................139
xi