Hacker Tracking â A Case Study - Tracking Hackers

Recommendations

Info

Our Research Solution Linux PCs running apache web servers OpenBSD layer 2 bridge Packet Filter FW Snort NIDS AIDE file system integrity application Tcpdump Ethereal protocol analyzer
The Servers Default but patched installations RedHat Linux 6.2 (the lower bar) RedHat Linux 7.0 (the higher bar) Neither showed vulnerable services when scanned with the Nessus vulnerability scanner Default apache web page showing All devices time synchronized using NTP
Page 1 and 2: Hacker Tracking - A Case Study Gide
Page 3: What is a Research Honeypot? A syst
Page 7 and 8: Network Traffic Monitoring SNORT Si
Page 10 and 11: Case Study Red Hat 6.2 System (the
Page 12 and 13: The log begins from: Nov 9 19:44:42
Page 14 and 15: lpd 6295 root cwd DIR 3,1 4096 8897
Page 16 and 17: lpd 6372 root 424u IPv4 26262 TCP *
Page 18: added:/usr/bin/kidz/emech-2.8.1/con
Page 22 and 23: #!/bin/sh clear echo "Educational p
Page 24 and 25: #!/bin/sh echo "+------------------
Page 26 and 27: ¡ Let's Find Him Things we know ab
Page 28 and 29: Modified 'install' script From: cat
Page 30 and 31: Following the Hacker
Page 32 and 33: Zombie Attacks Victim
Page 34 and 35: Victim Sends Email Notification to
Page 36 and 37: Attacker's Browser Contacts our Ser
Page 38 and 39: Embedded HTTP cgi calls Date: Wed,
Page 40 and 41: Next Steps Create legal consensus o
Page 42: Thank You Gideon J. Lenkey, CISSP 1

Hacker Tracking â A Case Study - Tracking Hackers

Create successful ePaper yourself

Delete template?

Save as template?

Hacker Tracking â A Case Study - Tracking Hackers