Hacking For Dummies

Description

While you’re reading this, a hacker could be prying and spying his way into your company’s IT systems, sabotaging your operations, stealing confidential information, shutting down your Web site, or wreaking havoc in other diabolical ways. Hackers For Dummies helps you hack into a hacker’s mindset and take security precautions to help you avoid a hack attack. It outlines computer hacker tricks and techniques you can use to assess the security of your own information systems, find security vulnerabilities, and fix them before malicious and criminal hackers can exploit them. It covers: Hacking methodology and researching public information to see what a hacker can quickly learn about your operationsSocial engineering (how hackers manipulate employees to gain information and access), physical security, and password vulnerabilitiesNetwork infrastructure, including port scanners, SNMP scanning, banner grabbing, scanning, and wireless LAN vulnerabilitiesOperating systems, including Windows, Linux, and Novell NetWareApplication hacking, including malware (Trojan horses, viruses, worms, rootkits, logic bombs, and more), e-mail and instant messaging, and Web applicationsTests, tools (commercial, shareware, and freeware), and techniques that offer the most bang for your ethical hacking buck With this guide you can develop and implement a comprehensive security assessment plan, get essential support from management, test your system for vulnerabilities, take countermeasures, and protect your network infrastructure. You discover how to beat hackers at their own game, with: A hacking toolkit, including War dialing software, password cracking software, network scanning software, network vulnerability assessment software, a network analyzer, a Web application assessment tool, and moreAll kinds of countermeasures and ways to plug security holesA list of more than 100 security sites, tools, and resources Ethical hacking helps you fight hacking with hacking, pinpoint security flaws within your systems, and implement countermeasures. Complete with tons of screen shots, step-by-step instructions for some countermeasures, and actual case studies from IT security professionals, this is an invaluable guide, whether you’re an Internet security professional, part of a penetration-testing team, or in charge of IT security for a large or small business. Hacking for Dummies Cover Table of Contents Foreword Introduction Who Should Read This Book? About This Book How to Use This Book What You Don't Need to Read Foolish Assumptions How This Book Is Organized Part I: Building the Foundation for Ethical Hacking Part II: Putting Ethical Hacking in Motion Part III: Network Hacking Part IV: Operating System Hacking Part V: Application Hacking Part VI: Ethical Hacking Aftermath Part VII: The Part of Tens Part VIII: Appendixes Icons Used in This Book Where to Go from Here Part I: Building the Foundation for Ethical Hacking Chapter 1: Introduction to Ethical Hacking How Hackers Beget Ethical Hackers Defining hacker Ethical Hacking 101 Understanding the Need to Hack Your Own Systems Understanding the Dangers Your Systems Face Nontechnical attacks Network-infrastructure attacks Operating-system attacks Application and other specialized attacks Obeying the Ethical hacking Commandments Working ethically Respecting privacy Not crashing your systems The Ethical hacking Process Formulating your plan Selecting tools Executing the plan Evaluating results Moving on Chapter 2: Cracking the Hacker Mindset What You're Up Against Who Hacks Why Hackers Hack Planning and Performing Attacks Maintaining Anonymity Chapter 3: Developing Your Ethical Hacking Plan Getting Your Plan Approved Establishing Your Goals Determining What Systems to Hack Creating Testing Standards Timing Specific tests Blind versus knowledge assessments Location Reacting to major exploits that you find Silly assumptions Selecting Tools Chapter 4: Hacking Methodology Setting the Stage Seeing What Others See Gathering public information Mapping the network Scanning Systems Hosts Modems and open ports Determining What's Running on Open Ports Assessing Vulnerabilities Penetrating the System Part II: Putting Ethical Hacking in Motion Chapter 5: Social Engineering Social Engineering 101 Before You Start Why Hackers Use Social Engineering Understanding the Implications Performing Social-Engineering Attacks Fishing for information Building trust Exploiting the relationship Social-Engineering Countermeasures Policies User awareness Chapter 6: Physical Security Physical-Security Vulnerabilities What to Look For Building infrastructure Utilities Office layout and usage Network components and computers Chapter 7: Passwords Password Vulnerabilities Organizational password vulnerabilities Technical password vulnerabilities Cracking Passwords Cracking passwords the old-fashioned way High-tech password cracking General password-hacking countermeasures Password-protected files Other ways to crack passwords Securing Operating Systems Windows Linux and UNIX Part III: Network Hacking Chapter 8: War Dialing War Dialing Modem safety General telephone-system vulnerabilities Attacking Countermeasures Chapter 9: Network Infrastructure Network Infrastructure Vulnerabilities Choosing Tools Scanners Vulnerability assessment Scanning, Poking, and Prodding Port scanners SNMP scanning Banner grabbing Firewall rules Looking through a network analyzer The MAC-daddy attack Denial of service General network defenses Chapter 10: Wireless LANs Understanding the Implications of Wireless Network Vulnerabilities Choosing Your Tools Wireless LAN Discovery Checking for worldwide recognition Scanning your local airwaves Wireless Network Attacks Encrypted traffic Countermeasures Rogue networks Countermeasures Physical-security problems Countermeasures Vulnerable wireless workstations Countermeasures Default configuration settings Countermeasures Part IV: Operating System Hacking Chapter 11: Windows Windows Vulnerabilities Choosing Tools Essential tools Free Microsoft tools All-in-one assessment tools Task-specific tools Information Gathering System scanning NetBIOS RPC Enumeration Countermeasures Null Sessions Hacks Countermeasures Share Permissions Windows defaults Testing General Security Tests Windows Update Microsoft Baseline Security Analyzer (MBSA) LANguard Chapter 12: Linux Linux Vulnerabilities Choosing Tools Information Gathering System scanning Countermeasures Unneeded Services Searches Countermeasures .rhosts and hosts equiv Files Hacks Countermeasures NFS Hacks Countermeasures File Permission Hacks Countermeasures Buffer Overflows Attacks Countermeasures Physical Security Hacks Countermeasures General Security Tests Patching Linux Distribution updates Multiplatform update managers Chapter 13: Novell NetWare NetWare Vulnerabilities Choosing Tools Getting Started Server access methods Port scanning NCPQuery Countermeasures Authentication Rconsole Server-console access Intruder detection Rogue NLMs Clear-text packets General Best Practices for Minimizing NetWare Security Risks Rename admin Disable eDirectory browsing Removing bindery contexts System auditing TCP/IP parameters Patching Part V: Application Hacking Chapter 14: Malware Implications of Malware Attacks Types of Malware Trojan horses Viruses Worms Rootkits Spyware Built-in programming interfaces Logic bombs Security tools How Malware Propagates Automation E-mail Hacker backdoors Testing Vulnerable malware ports Manual assessment Antivirus software testing Network scanning Behavioral-analysis tools Malware Countermeasures General system administration E-mails Files Chapter 15: Messaging Systems Messaging-System Vulnerabilities E-Mail Attacks E-mail bombs Banners SMTP attacks General best practices for minimizing e-mail security risks Instant Messaging Vulnerabilities Countermeasures Chapter 16: Web Applications Web-Application Vulnerabilities Choosing Your Tools Insecure Login Mechanisms Testing Countermeasures Directory Traversal Testing Countermeasures Input Filtering Input attacks Countermeasures Default Scripts Attacks Countermeasures URL Filter Bypassing Bypassing filters Countermeasures Automated Scans Nikto WebInspect General Best Practices for Minimizing Web-Application Security Risks Obscurity Firewalls Part VI: Ethical Hacking Aftermath Chapter 17: Reporting Your Results Pulling the Results Together Prioritizing Vulnerabilities Reporting Methods Chapter 18: Plugging Security Holes Turning Your Reports into Action Patching for Perfection Patch management Patch automation Hardening Your Systems Assessing Your Security Infrastructure Chapter 19: Managing Security Changes Automating the Ethical Hacking Process Monitoring Malicious Use Outsourcing Ethical Hacking Instilling a Security-Aware Mindset Keeping Up with Other Security Issues Part VII: The Part of Tens Chapter 20: Ten Tips for Getting Upper Management Buy-In Cultivate an Ally and Sponsor Don't Be a FUDdy Duddy Demonstrate How the Organization Can't Afford to Be Hacked Outline the General Benefits of Ethical Hacking Show How Ethical Hacking Specifically Helps the Organization Get Involved in the Business Establish Your Credibility Speak on Their Level Show Value in Your Efforts Be Flexible and Adaptable Chapter 21: Ten Deadly Mistakes Not Getting Approval in Writing Assuming That You Can Find All Vulnerabilities During Your Tests Assuming That You Can Eliminate All Security Vulnerabilities Performing Tests Only Once Pretending to Know It All Running Your Tests without Looking at Things from a Hacker's Viewpoint Ignoring Common Attacks Not Using the Right Tools Pounding Production Systems at the Wrong Time Outsourcing Testing and Not Staying Involved Part VIII: Appendixes Appendix A: Tools and Resources Awareness and Training Dictionary Files and Word Lists General Research Tools Hacker Stuff Linux Log Analysis Malware Messaging NetWare Networks Password Cracking War Dialing Web Applications Windows Wireless Networks Appendix B: About the Book Web Site Index Team DDU