2KKUU7ita

Recommendations

Info

Hacking For Dummies ® , 4th Edition Published by John Wiley & Sons, Inc. 111 River Street Hoboken, NJ 07030-5774 www.wiley.com Copyright © 2013 by John Wiley & Sons, Inc., Hoboken, New Jersey Published by John Wiley & Sons, Inc., Hoboken, New Jersey Published simultaneously in Canada No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http:// www.wiley.com/go/permissions. Trademarks: Wiley, the Wiley logo, For Dummies, the Dummies Man logo, A Reference for the Rest of Us!, The Dummies Way, Dummies Daily, The Fun and Easy Way, Dummies.com, Making Everything Easier, and related trade dress are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates in the United States and other countries, and may not be used without written permission. All other trademarks are the property of their respective owners. John Wiley & Sons, Inc. is not associated with any product or vendor mentioned in this book. LIMIT OF LIABILITY/DISCLAIMER OF WARRANTY: THE PUBLISHER AND THE AUTHOR MAKE NO REPRESENTATIONS OR WARRANTIES WITH RESPECT TO THE ACCURACY OR COMPLETENESS OF THE CONTENTS OF THIS WORK AND SPECIFICALLY DISCLAIM ALL WARRANTIES, INCLUDING WITH- OUT LIMITATION WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE. NO WARRANTY MAY BE CREATED OR EXTENDED BY SALES OR PROMOTIONAL MATERIALS. THE ADVICE AND STRATEGIES CONTAINED HEREIN MAY NOT BE SUITABLE FOR EVERY SITUATION. THIS WORK IS SOLD WITH THE UNDERSTANDING THAT THE PUBLISHER IS NOT ENGAGED IN RENDERING LEGAL, ACCOUNTING, OR OTHER PROFESSIONAL SERVICES. IF PROFESSIONAL ASSISTANCE IS REQUIRED, THE SERVICES OF A COMPETENT PROFESSIONAL PERSON SHOULD BE SOUGHT. NEITHER THE PUBLISHER NOR THE AUTHOR SHALL BE LIABLE FOR DAMAGES ARISING HEREFROM. THE FACT THAT AN ORGANIZA- TION OR WEBSITE IS REFERRED TO IN THIS WORK AS A CITATION AND/OR A POTENTIAL SOURCE OF FURTHER INFORMATION DOES NOT MEAN THAT THE AUTHOR OR THE PUBLISHER ENDORSES THE INFORMATION THE ORGANIZATION OR WEBSITE MAY PROVIDE OR RECOMMENDATIONS IT MAY MAKE. FURTHER, READERS SHOULD BE AWARE THAT INTERNET WEBSITES LISTED IN THIS WORK MAY HAVE CHANGED OR DISAPPEARED BETWEEN WHEN THIS WORK WAS WRITTEN AND WHEN IT IS READ. For general information on our other products and services, please contact our Customer Care Department within the U.S. at 877-762-2974, outside the U.S. at 317-572-3993, or fax 317-572-4002. For technical support, please visit www.wiley.com/techsupport. Wiley publishes in a variety of print and electronic formats and by print-on-demand. Some material included with standard print versions of this book may not be included in e-books or in print-on-demand. If this book refers to media such as a CD or DVD that is not included in the version you purchased, you may download this material at http://booksupport.wiley.com. For more information about Wiley products, visit www.wiley.com. Library of Congress Control Number: 2012955723 ISBN 978-1-118-38093-2 (pbk); ISBN 978-1-118-38094-9 (ebk); ISBN 978-1-118-38095-6 (ebk); ISBN 978-1-118-38096-3 (ebk) Manufactured in the United States of America 10 9 8 7 6 5 4 3 2 1
About the Author Kevin Beaver is an independent information security consultant, expert witness, professional speaker, and author with Atlanta-based Principle Logic, LLC. He has two and a half decades of experience and specializes in performing information security assessments for corporations, security product vendors, independent software developers, universities, government agencies, and nonprofit organizations. Before starting his information security consulting practice in 2001, Kevin served in various information technology and security roles for several healthcare, e-commerce, financial, and educational institutions. Kevin has appeared on CNN television as an information security expert and has been quoted in The Wall Street Journal, Entrepreneur, Fortune Small Business, Women’s Health, and Inc. magazine’s technology site IncTechnology. com. Kevin’s work has also been referenced by the PCI Council in their Data Security Standard Wireless Guidelines. Kevin has been a top-rated speaker, giving hundreds of presentations and panel discussions for IT and security seminars, conferences, and webcasts over the past decade. Kevin has authored/coauthored 10 information security books, including Hacking Wireless Networks For Dummies, Implementation Strategies for Fulfilling and Maintaining IT Compliance (Realtimepublihers.com), and The Practical Guide to HIPAA Privacy and Security Compliance (Auerbach). Kevin has written more than 30 whitepapers and 600 articles and is a regular contributor to SearchCompliance.com, SearchEnterpriseDesktop.com, and Security Technology Executive magazine. Kevin is the creator and producer of the Security On Wheels audiobooks, which provide security learning for IT professionals on the go (securityonwheels.com), and the Security On Wheels blog (securityonwheels.com/blog). He also covers information security and related matters on Twitter (@kevinbeaver) and YouTube (PrincipleLogic). Kevin earned his bachelor’s degree in Computer Engineering Technology from Southern College of Technology and his master’s degree in Management of Technology from Georgia Tech. He has obtained his CISSP certification in 2001 and also holds MCSE, Master CNE, and IT Project+ certifications. Kevin can be reached through his website, www.principlelogic.com, and you can connect to him via LinkedIn at www.linkedin.com/in/ kevinbeaver.
Page 3: Hacking FOR DUMmIES‰ 4TH EDITION
Page 7 and 8: Mega thanks to Queensrÿche, Rush,
Page 9 and 10: Contents at a Glance Introduction .
Page 11 and 12: Table of Contents Introduction ....
Page 13 and 14: Table of Contents Performing Social
Page 15 and 16: Table of Contents Gathering Informa
Page 17 and 18: Table of Contents Part VI: Ethical
Page 19 and 20: Introduction W elcome to Hacking Fo
Page 21 and 22: Introduction Before you start hacki
Page 23 and 24: Introduction well-known vulnerabili
Page 25 and 26: Part I Building the Foundation for
Page 27 and 28: Chapter 1 Introduction to Ethical H
Page 29 and 30: Chapter 1: Introduction to Ethical
Page 35 and 36: Obeying the Ethical Hacking Command
Page 37 and 38: Formulating your plan Chapter 1: In
Page 43 and 44: Chapter 2 Cracking the Hacker Minds
Page 45 and 46: Malicious attackers often think and
Page 47 and 48: Chapter 2: Cracking the Hacker Mind
Page 53 and 54: In This Chapter Chapter 3 Developin
Page 55 and 56:
Chapter 3: Developing Your Ethical
Page 57 and 58:
Attack tree analysis is the process
Page 59 and 60:
Timing Chapter 3: Developing Your E
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
In This Chapter Chapter 4 Hacking M
Page 67 and 68:
Chapter 4: Hacking Methodology no o
Page 69 and 70:
Chapter 4: Hacking Methodology ✓
Page 71 and 72:
Chapter 4: Hacking Methodology One
Page 73 and 74:
Chapter 4: Hacking Methodology test
Page 75 and 76:
Figure 4-1: Netcraft’s web server
Page 77 and 78:
Chapter 4: Hacking Methodology docu
Page 79 and 80:
Penetrating the System Chapter 4: H
Page 81 and 82:
Part II Putting Ethical Hacking in
Page 83 and 84:
In This Chapter ▶ Discovering soc
Page 85 and 86:
Chapter 5: Social Engineering A cas
Page 87 and 88:
Chapter 5: Social Engineering Socia
Page 89 and 90:
Chapter 5: Social Engineering Regar
Page 91 and 92:
Chapter 5: Social Engineering years
Page 93 and 94:
✓ Threatening reprimands if reque
Page 95 and 96:
Chapter 5: Social Engineering In so
Page 97 and 98:
Chapter 5: Social Engineering reque
Page 99 and 100:
In This Chapter Chapter 6 Physical
Page 101 and 102:
Chapter 6: Physical Security A Q&A
Page 103 and 104:
Chapter 6: Physical Security ✓ Do
Page 105 and 106:
Chapter 6: Physical Security ✓ Do
Page 107 and 108:
Chapter 6: Physical Security cellul
Page 109 and 110:
Chapter 6: Physical Security ✓ Ke
Page 111 and 112:
In This Chapter ▶ Identifying pas
Page 113 and 114:
Chapter 7: Passwords A case study i
Page 115 and 116:
Chapter 7: Passwords The National V
Page 117 and 118:
Chapter 7: Passwords they should’
Page 119 and 120:
Chapter 7: Passwords ✓ John the R
Page 121 and 122:
Chapter 7: Passwords Dictionary att
Page 123 and 124:
Chapter 7: Passwords this password
Page 125 and 126:
Chapter 7: Passwords Cracking UNIX/
Page 127 and 128:
Chapter 7: Passwords The financial
Page 129 and 130:
Chapter 7: Passwords (www.identityf
Page 131 and 132:
Chapter 7: Passwords Weak BIOS pass
Page 133 and 134:
Storing passwords Chapter 7: Passwo
Page 135 and 136:
Chapter 7: Passwords your systems.
Page 137 and 138:
Linux and UNIX Chapter 7: Passwords
Page 139 and 140:
Part III Hacking Network Hosts
Page 141 and 142:
In This Chapter ▶ Selecting tools
Page 143 and 144:
Chapter 8: Network Infrastructure U
Page 145 and 146:
Chapter 8: Network Infrastructure
Page 147 and 148:
Chapter 8: Network Infrastructure I
Page 149 and 150:
Chapter 8: Network Infrastructure 3
Page 151 and 152:
Figure 8-3: NetScan- Tools Pro OS F
Page 153 and 154:
Figure 8-5: Management interface us
Page 155 and 156:
Chapter 8: Network Infrastructure W
Page 157 and 158:
Chapter 8: Network Infrastructure C
Page 159 and 160:
Figure 8-8: Connecting a network an
Page 161 and 162:
Figure 8-9: OmniPeek can help uncov
Page 163 and 164:
Chapter 8: Network Infrastructure N
Page 165 and 166:
Figure 8-12: Selecting your victim
Page 167 and 168:
UNIX-based systems Chapter 8: Netwo
Page 169 and 170:
Chapter 8: Network Infrastructure W
Page 171 and 172:
Chapter 8: Network Infrastructure C
Page 173 and 174:
Figure 8-14: Cisco Global Exploiter
Page 175 and 176:
In This Chapter ▶ Understanding r
Page 177 and 178:
A case study with Joshua Wright on
Page 179 and 180:
Discovering Wireless LANs Figure 9-
Page 181 and 182:
Figure 9-3: NetStumbler displays de
Page 183 and 184:
You undoubtedly have various Blueto
Page 185 and 186:
Chapter 9: Wireless LANs Airodump a
Page 187 and 188:
Figure 9-8: Using Elcomsoft Wireles
Page 189 and 190:
Figure 9-10: The Reaver startup win
Page 191 and 192:
Figure 9-12: NetStumbler showing po
Page 193 and 194:
Figure 9-15: CommView for Wifi show
Page 195 and 196:
Chapter 9: Wireless LANs ✓ If pos
Page 197 and 198:
Figure 9-17: Looking for the MAC ad
Page 199 and 200:
Figure 9-19: Ensure that your SSID
Page 201 and 202:
Chapter 9: Wireless LANs encryption
Page 203 and 204:
In This Chapter Chapter 10 Mobile D
Page 205 and 206:
Chapter 10: Mobile Devices You have
Page 207 and 208:
Figure 10-3: Usernames extracted vi
Page 209 and 210:
Chapter 10: Mobile Devices Power-on
Page 211 and 212:
Figure 10-5: iOS Forensic Toolkit
Page 213 and 214:
Chapter 10: Mobile Devices So, havi
Page 215 and 216:
Part IV Hacking Operating Systems
Page 217 and 218:
In This Chapter ▶ Port scanning W
Page 219 and 220:
Choosing Tools Chapter 11: Windows
Page 221 and 222:
Chapter 11: Windows Windows XP SP2
Page 223 and 224:
Figure 11-2: Gathering detailed vul
Page 225 and 226:
Figure 11-5: Using LanGuard to scan
Page 227 and 228:
Figure 11-6: Mapping a null session
Page 229 and 230:
✓ Local usernames ✓ Drive share
Page 231 and 232:
Figure 11-9: Default local security
Page 233 and 234:
Figure 11-10: Using LanGuard’s sh
Page 235 and 236:
Figure 11-11: Exploitable vulnerabi
Page 237 and 238:
Figure 11-13: Browsing the availabl
Page 239 and 240:
Figure 11-17: Checking final parame
Page 241 and 242:
Figure 11-19: Metasploit Pro’s gr
Page 243 and 244:
Running Authenticated Scans Figure
Page 245 and 246:
In This Chapter ▶ Examining Linux
Page 247 and 248:
Chapter 12: Linux A tool such as Qu
Page 249 and 250:
Figure 12-3: LanGuard revealing use
Page 251 and 252:
Figure 12-6: Using NetScan Tools Pr
Page 253 and 254:
Figure 12-7: Using Nmap to check ap
Page 255 and 256:
Figure 12-9: Viewing the process ID
Page 257 and 258:
Chapter 12: Linux Hacks using the .
Page 259 and 260:
Chapter 12: Linux ✓ Block spoofed
Page 261 and 262:
Chapter 12: Linux Manual testing Th
Page 263 and 264:
Figure 12-11: /etc/inittab showing
Page 265 and 266:
Figure 12-13: Partial output of the
Page 267 and 268:
Part V Hacking Applications
Page 269 and 270:
In This Chapter ▶ Attacking e-mai
Page 271 and 272:
E-mail bombs Chapter 13: Communicat
Page 273 and 274:
Figure 13-1: Limiting the number of
Page 275 and 276:
Figure 13-4: smtpscan gathers versi
Page 277 and 278:
Figure 13-7: Using EmailVerify to v
Page 279 and 280:
Chapter 13: Communication and Messa
Page 281 and 282:
Manual testing Chapter 13: Communic
Page 283 and 284:
Figure 13-11: Critical information
Page 285 and 286:
Page 287 and 288:
Page 289 and 290:
Page 291 and 292:
Figure 13-15: SiVuS discovered seve
Page 293 and 294:
Figure 13-16: Using Cain & Abel to
Page 295 and 296:
In This Chapter Chapter 14 Websites
Page 297 and 298:
Chapter 14: Websites and Applicatio
Page 299 and 300:
Figure 14-1: Using HTTrack to crawl
Page 301 and 302:
Countermeasures against directory t
Page 303 and 304:
Figure 14-2: Using Firefox Web Deve
Page 305 and 306:
Figure 14-3: Using SPI Proxy to fin
Page 307 and 308:
Figure 14-4: WebInspect discovered
Page 309 and 310:
Figure 14-7: Script code reflected
Page 311 and 312:
Page 313 and 314:
Figure 14-9: URL returns an error w
Page 315 and 316:
Figure 14-11: The Brutus tool for t
Page 317 and 318:
Page 319 and 320:
Page 321 and 322:
Figure 14-13: Using CxDeveloper to
Page 323 and 324:
Chapter 15 Databases and Storage Sy
Page 325 and 326:
The Situation Chapter 15: Databases
Page 327 and 328:
Figure 15-2: Using Cain & Abel to c
Page 329 and 330:
Chapter 15: Databases and Storage S
Page 331 and 332:
Figure 15-3: Using FileLocator Pro
Page 333 and 334:
Chapter 15: Databases and Storage S
Page 335 and 336:
Part VI Ethical Hacking Aftermath
Page 337 and 338:
In This Chapter Chapter 16 Reportin
Page 339 and 340:
Chapter 16: Reporting Your Results
Page 341 and 342:
✓ Summary of the vulnerabilities
Page 343 and 344:
In This Chapter Chapter 17 Plugging
Page 345 and 346:
Patch management Chapter 17: Pluggi
Page 347 and 348:
I was once involved in an incident
Page 349 and 350:
Chapter 18 Managing Security Proces
Page 351 and 352:
Chapter 18: Managing Security Proce
Page 353 and 354:
Page 355 and 356:
Page 357 and 358:
Part VII The Part of Tens
Page 359 and 360:
Chapter 19 Ten Tips for Getting Upp
Page 361 and 362:
Chapter 19: Ten Tips for Getting Up
Page 363 and 364:
Chapter 19: Ten Tips for Getting Up
Page 365 and 366:
Chapter 20 Ten Reasons Hacking Is t
Page 367 and 368:
Chapter 20: Ten Reasons Hacking Is
Page 369 and 370:
Chapter 21 Ten Deadly Mistakes S ev
Page 371 and 372:
Thinking That You Know It All Chapt
Page 373 and 374:
Appendix Tools and Resources T o st
Page 375 and 376:
Exploits Appendix: Tools and Resour
Page 377 and 378:
Keyloggers Appendix: Tools and Reso
Page 379 and 380:
mailsnarf — www.monkey.org/~dugso
Page 381 and 382:
Appendix: Tools and Resources PortS
Page 383 and 384:
Appendix: Tools and Resources pwdum
Page 385 and 386:
Source Code Analysis Storage Checkm
Page 387 and 388:
Appendix: Tools and Resources NIST
Page 389 and 390:
Windows Appendix: Tools and Resourc
Page 391 and 392:
• A • aboveboard, 11 Abuse.net
Page 393 and 394:
Cobb, Chey (author) Network Securit
Page 395 and 396:
802.11 encryption protocols, 165, 1
Page 397 and 398:
Health Insurance Portability and Ac
Page 399 and 400:
malware, 151, 266-267, 355 Managing
Page 401 and 402:
• P • packet filtering, 156 Pan
Page 403 and 404:
Remember icon, 6 remote access serv
Page 405 and 406:
SUSE, 247 SUSE Linux Security Alert
Page 407 and 408:
Virtual Private Network (VPN) servi
Page 409 and 410:
Apple & Mac iPad 2 For Dummies, 3rd
show all

2KKUU7ita

Create successful ePaper yourself

Delete template?

Save as template?