2KKUU7ita

Cobb, Chey (author)
Network Security For Dummies,
118, 325, 328
code injection, 287–291
commands, disabling, 240
Common Vulnerabilities and Exposures
(website), 58, 320, 369
communication and messaging systems
about, 251
e-mail attacks, 252–268
messaging system vulnerabilities,
251–252
tools and resources, 360–361
Voice over IP (VoIP), 16, 268–276, 368–369
CommView (TamoSoft), 21, 111, 140, 152,
160, 167, 174, 275, 362, 368, 371
Completely Automated Public Turing test
to tell Computers and Humans Apart
(CAPTCHA), 255, 256, 299
compliance, 13, 347
Component Discovery (SiVuS),
271–273, 369
CompTIA Security (website), 356
Computer Fraud and Abuse Act
(website), 359
Computer Underground Digest (website),
358
computers, physical security
vulnerabilities, 88–91
configuration, of null sessions, 210–212
connection attacks, 254–255
content management systems (CMS), 294
COPS (website), 243
copyrighted materials, 32
cost, of being hacked, 342
Counter Mode with Cipher Block Chaining
Message Authentication Code Protocol
(CCMP), 167
countermeasures
account enumeration, 260–261
ARP poisoning, 150
attacks on unneeded services, 236–238
banner attacks, 257
banner-grabbing attacks, 136–137
buffer-overflow attacks, 244
connection attacks, 254–255
Index
default configuration settings
vulnerabilities, 183–184
default script attacks, 294
directory transversals, 283
DoS attacks, 153
e-mail attachment attacks, 253–254
encrypted traffic attacks, 170
file permission hacks, 242–243
firewall rulebase vulnerabilities, 139
general password-cracking, 114–117
header disclosures, 265
input attacks, 292–293
MAC address spoofing attacks, 150
MAC spoofing, 181
missing patch vulnerability exploits, 224
NetBIOS attacks, 208
network protocol vulnerabilities, 145
NFS attacks, 242
null session hacks, 212–213
password cracking, 195
password reset programs, 190–191
physical security attacks, 182, 245–246
ping sweeping, 132–133
port scanning, 132–133
.rhosts and hosts.equiv file attacks,
240–241
rogue wireless devices, 176–177
SMTP relay attacks, 264
SNMP attacks, 135
social engineering, 77–79
system scanning, 205, 233
unsecured login systems, 298–299
VoIP vulnerabilities, 276
vulnerable wireless workstations, 183
wireless network attacks, 163–164, 170,
172, 176–177, 181, 182, 183, 184
WPS PIN flaw, 172
Crack (website), 364
crackers, defined, 10
cracking passwords
about, 97
on databases, 308–309
defined, 93
with high-tech tools, 100–107
keystroke logging, 110
on laptops, 186–191
network analyzer, 111–112
375