February 2002
Intermediate to advanced
544 pages
11h 24m
English
Overview
"This book covers not just the glamorous aspects such as the
intrusion act itself, but all of the pitfalls, contracts, clauses,
and other gotchas that can occur. The authors have taken their
years of trial and error, as well as experience, and documented a
previously unknown black art."
--From the Foreword by Simple Nomad, Senior Security Analyst,
BindView RAZOR Team
Penetration testing--in which professional, "white hat" hackers attempt to break through an organization's security defenses--has become a key defense weapon in today's information systems security arsenal. Through penetration testing, I.T. and security professionals can take action to prevent true "black hat" hackers from compromising systems and exploiting proprietary information.
Hack I.T. introduces penetration testing and its vital role in an overall network security plan. You will learn about the roles and responsibilities of a penetration testing professional, the motivation and strategies of the underground hacking community, and potential system vulnerabilities, along with corresponding avenues of attack. Most importantly, the book provides a framework for performing penetration testing and offers step-by-step descriptions of each stage in the process. The latest information on the necessary hardware for performing penetration testing, as well as an extensive reference on the available security tools, is included.
Comprehensive in scope Hack I.T. provides in one convenient resource the background, strategies, techniques, and tools you need to test and protect your system--before the real hackers attack.
Specific topics covered in this book include:
Hacking myths
Potential drawbacks of penetration testing
Announced versus unannounced testing
Application-level holes and defenses
Penetration through the Internet, including zone transfer, sniffing, and port scanning
War dialing
Enumerating NT systems to expose security holes
Social engineering methods
Unix-specific vulnerabilities, such as RPC and buffer overflow attacks
The Windows NT Resource kit
Port scanners and discovery tools
Sniffers and password crackers
Web testing tools
Remote control tools
Firewalls and intrusion detection systems
Numerous DoS attacks and tools
0201719568B01042002
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.