Hacker Tracking â A Case Study - Tracking Hackers

Recommendations

Info

¡ Let's Find Him Things we know about our hacker A Hotmail Email address ¡ We know where he keeps his tools ¡ How all of his tools work ¡ We have full access to his tool cache
Let's Find the <strong>Hacker</strong> Modify his rootkit installation script to send us an email each time he uses it Modify the email to be HTML instead of plaintext, hotmail doesn't differentiate so the hacker probably won't notice Embed an http call, in the email, to a web server we control Http call is to a PERL script that records all user agent data and returns and invisible 1x1 pixel gif
Page 1 and 2: Hacker Tracking - A Case Study Gide
Page 3 and 4: What is a Research Honeypot? A syst
Page 5 and 6: The Servers Default but patched ins
Page 7 and 8: Network Traffic Monitoring SNORT Si
Page 10 and 11: Case Study Red Hat 6.2 System (the
Page 12 and 13: The log begins from: Nov 9 19:44:42
Page 14 and 15: lpd 6295 root cwd DIR 3,1 4096 8897
Page 16 and 17: lpd 6372 root 424u IPv4 26262 TCP *
Page 18: added:/usr/bin/kidz/emech-2.8.1/con
Page 22 and 23: #!/bin/sh clear echo "Educational p
Page 24 and 25: #!/bin/sh echo "+------------------
Page 28 and 29: Modified 'install' script From: cat
Page 30 and 31: Following the Hacker
Page 32 and 33: Zombie Attacks Victim
Page 34 and 35: Victim Sends Email Notification to
Page 36 and 37: Attacker's Browser Contacts our Ser
Page 38 and 39: Embedded HTTP cgi calls Date: Wed,
Page 40 and 41: Next Steps Create legal consensus o
Page 42: Thank You Gideon J. Lenkey, CISSP 1

Hacker Tracking â A Case Study - Tracking Hackers

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?

Hacker Tracking â A Case Study - Tracking Hackers