Ethical Hacking and Penetration Testing Guide

Index

A

Active information gathering, 53

Active sniffing, 140

Acunetix vulnerability scanner, 62

Address resolution protocol (ARP)

attack vectors, 143–144

basics, 142

poisoning attack, 309

with Cain and Abel, 153–155

with ettercap, 150–152

spoofing attack

denial of service attack, 144–145

Dsniff, 145

to perform MITM attacks, 145–147

poisoning, 144

schematic illustration, 144

working of, 142

Adobe PDF Embedded Exe, 210–211

Aircrack-ng

tools, 293

WEP with, 298

WPA/WPA2 using, 302

Airodump-ng, 295

ARP packets, 300–301

attacking target, 299

speeding up cracking process, 300

target determination, 299–302

WEP, 301–302

Alpha card, 294

Apache server, hacking

bypassing open_basedir using CGI shell, 476–477

bypassing open_basedir using mod_perl, mod_python, ...