book

Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition

by Michael G. Solomon, Sean-Philip Oriyano

November 2022

Beginner

400 pages

15h 17m

English

Jones & Bartlett Learning

Read now

Unlock full access

ControlsThe Hacker MindsetMotivations of Hackers

The Role of Ethical HackingEthical Hackers and the C-I-A Triad
Performing a Penetration Test
A Look at the InterfaceBasic Linux NavigationImportant Linux DirectoriesCommonly Used CommandsThe Basic Command Structure of LinuxWildcard Characters in Linux
Special-Purpose Live CDs/DVDsVirtual Machines
The Role of ProtocolsLayer 1: Physical LayerLayer 2: Data Link LayerLayer 3: Network LayerLayer 4: Transport LayerLayer 5: Session LayerLayer 6: Presentation LayerLayer 7: Application LayerThe Role of EncapsulationMapping the OSI Model to Functions and ProtocolsOSI Model Layers and Services
Physical or Network Access LayerNetwork or Internet LayerHost-to-Host LayerApplication Layer
AuthenticationIntegrityNonrepudiation
Birthday Attacks
The Role of Certificate AuthoritiesRegistration AuthorityCertificate Revocation ListDigital CertificatesPKI Attacks
Manual Registrar QueryNslookupAutomatic Registrar QueryWhoisInternet Assigned Numbers AuthorityDetermining a Network RangeTraceroute
Using Social Networks
WardialingWardriving and Related ActivitiesPingingPort Scanning
NmapFree IP ScannerAngry IP ScannerAdvanced IP Scanner
Active OS FingerprintingPassive OS Fingerprinting
Analyzing the Results
Controlling AccessUsersGroupsSecurity IdentifiersCommonly Attacked and Exploited Services
NULL SessionWorking with nbtstatSuperScanSNScan
Passive Online AttacksActive Online AttacksOffline AttacksNontechnical AttacksUsing Password Cracking
Active@ Password ChangerReset Windows PasswordStopping Privilege Escalation
Using PsToolsRootkits
Disabling AuditingData Hiding
Malware’s LegalityTypes of MalwareMalware’s Targets
The History of VirusesTypes of VirusesPrevention Techniques
How Worms WorkStopping Worms
Use of TrojansTargets of TrojansKnown Symptoms of an InfectionDetection of TrojansDistribution Methods
SoftwareHardware
Methods of InfectionBundling with Software
Improper or Poor Web DesignBuffer OverflowDenial of Service AttackDistributed Denial of Service AttackBanner InformationPermissionsError MessagesUnnecessary FeaturesUser Accounts
Examining a SQL Injection Attack
Input ValidationCross-Site Scripting Attack
Insecure Logon SystemsScripting ErrorsSession Management IssuesEncryption Weaknesses
Types of DatabasesVulnerabilitiesLocating Databases on the NetworkDatabase Server Password CrackingLocating Vulnerabilities in Databases
Passive SniffingActive SniffingSniffing ToolsWhat Can Be Sniffed?
Identifying an Active SessionSeizing Control of a SessionSession Hijacking ToolsThwarting Session Hijacking Attacks
Types of DoS AttacksTools for DoS Attacks
Characteristics of DDoS AttacksTools for DDoS Attacks
EmanationsCommon Support and Availability
802.11802.11b802.11a802.11g802.11n802.11ac802.11axOther 802.11 VariantsOther Wireless Technologies
Bluetooth SecuritySecuring Bluetooth
CSMA/CD Versus CSMA/CARole of Access PointsService Set IdentifierAssociation with an APThe Importance of AuthenticationWorking with RADIUSNetwork Setup OptionsThreats to Wireless LANsCountermeasures to Wireless LAN Threats
HomedaleThe inSSIDer Program
Default AP SecurityPlacementDealing with EmanationsDealing with Rogue APsUse Protection for Transmitted DataMAC Filtering
Phone-Based AttacksDumpster DivingShoulder SurfingAttacks Through Social MediaPersuasion/CoercionReverse Social Engineering
The Browser as a Defense Against Social EngineeringOther Good Practices for Safe Computing
Know What the Web Knows About YouCreating and Managing Your PasswordsInvest in a Password Manager
Think Before You PostRisks Associated with Social Networking
Particular Concerns in a Corporate SettingMixing the Personal with the Professional
Incident Response Policies, Procedures, and GuidelinesPhases of an Incident and ResponseIncident Response TeamIncident Response PlansBusiness Continuity Plans
Recovering from a Security IncidentLoss Control and Damage AssessmentBusiness Impact Analysis
Preparation and Staging of Testing ProceduresFrequency of TestsAnalysis of Test Results
Evidence Collection TechniquesTypes of EvidenceChain of CustodyComputer or Device RemovalRules of Evidence
IDS ComponentsSetting Goals for an IDSAccountabilityLimitations of an IDS
How Firewalls WorkFirewall MethodologiesLimitations of a FirewallImplementing a FirewallAuthoring a Firewall Policy
Goals of HoneypotsLegal Issues
Administrative ControlsTechnical ControlsPhysical Controls
Security Information and Event ManagementSources for Guidance
Hard Drive and Mobile Device EncryptionFax Machines and PrintersVoice over Internet Protocol
FencesPerimeter Intrusion Detection and Assessment SystemsGatesBollards
Doors, Mantraps, and TurnstilesWalls, Ceilings, and FloorsWindowsGuards and DogsConstruction
LightingAlarms and Intrusion DetectionClosed-Circuit TV and Remote Monitoring
LocksTokens and Biometrics
Natural, Human, and Technical ThreatsPhysical Keystroke Loggers and SniffersWireless Interception and Rogue Access Points

Content preview from Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition

Password Cracking

Despite the depictions seen in movies, TV shows, and other media, password cracking isn’t as simple as a hacker sitting in front of a computer running some software that immediately returns a list of cracked passwords. Indeed, this process is much more involved. Password cracking can basically take one of four forms, all of which are designed to obtain a password that the attacker is not authorized to possess. An attacker can basically use four password cracking methods: