book

Hacking Exposed 7, 7th Edition

by Stuart McClure, Joel Scambray, George Kurtz

July 2012

Intermediate to advanced

720 pages

21h 47m

English

McGraw-Hill

Read now

Unlock full access

Case StudyIAAAS—It’s All About Anonymity, StupidTor-menting the Good Guys
What Is FootprintingWhy Is Footprinting NecessaryInternet FootprintingStep 1: Determine the Scope of Your ActivitiesStep 2: Get Proper AuthorizationStep 3: Publicly Available InformationStep 4: WHOIS & DNS EnumerationStep 5: DNS InterrogationStep 6: Network ReconnaissanceSummary

Determining If the System Is AliveARP Host DiscoveryICMP Host DiscoveryTCP/UDP Host DiscoveryDetermining Which Services Are Running or ListeningScan TypesIdentifying TCP and UDP Services RunningDetecting the Operating SystemMaking Guesses from Available PortsActive Stack FingerprintingPassive Stack FingerprintingProcessing and Storing Scan DataManaging Scan Data with MetasploitSummary
Service FingerprintingVulnerability ScannersBasic Banner GrabbingEnumerating Common Network ServicesSummary
Case Study: International Intrigue
OverviewWhat’s Not CoveredUnauthenticated AttacksAuthentication Spoofing AttacksRemote Unauthenticated ExploitsAuthenticated AttacksPrivilege EscalationExtracting and Cracking PasswordsRemote Control and Back DoorsPort RedirectionCovering TracksGeneral Countermeasures to Authenticated CompromiseWindows Security FeaturesWindows FirewallAutomated UpdatesSecurity CenterSecurity Policy and Group PolicyMicrosoft Security EssentialsThe Enhanced Mitigation Experience ToolkitBitlocker and the Encrypting File SystemWindows Resource ProtectionIntegrity Levels, UAC, and PMIEData Execution Prevention (DEP)Windows Service HardeningCompiler-based EnhancementsCoda: The Burden of Windows SecuritySummary
The Quest for RootA Brief ReviewVulnerability MappingRemote Access vs. Local AccessRemote AccessData-driven AttacksI Want My ShellCommon Types of Remote AttacksLocal AccessAfter Hacking RootRootkit RecoverySummary
What Is an APTOperation AuroraAnonymousRBNWhat APTs Are NOTExamples of Popular APT Tools and TechniquesCommon APTs IndicatorsSummary
Case Study: Read It and WEP
Preparing to Dial UpWardialingHardwareLegal IssuesPeripheral CostsSoftwareBrute-Force Scripting—The Homegrown WayA Final Note About Brute-Force ScriptingPBX HackingVoicemail HackingVirtual Private Network (VPN) HackingBasics of IPSec VPNsHacking the Citrix VPN SolutionVoice over IP AttacksAttacking VoIPSummary
BackgroundFrequencies and ChannelsSession EstablishmentSecurity MechanismsEquipmentWireless AdaptersOperating SystemsMiscellaneous GoodiesDiscovery and MonitoringFinding Wireless NetworksSniffing Wireless TrafficDenial of Service AttacksEncryption AttacksWEPAuthentication AttacksWPA Pre-Shared KeyWPA EnterpriseSummary
Physical Access: Getting in the DoorHacking DevicesDefault ConfigurationsOwned Out of the BoxStandard PasswordsBluetoothReverse Engineering HardwareMapping the DeviceSniffing Bus DataSniffing the Wireless InterfaceFirmware ReversingICE ToolsSummary
Case Study
Web Server HackingSample FilesSource Code DisclosureCanonicalization AttacksServer ExtensionsBuffer OverflowsDenial of ServiceWeb Server Vulnerability ScannersWeb Application HackingFinding Vulnerable Web Apps with Google (Googledorks)Web CrawlingWeb Application AssessmentCommon Web Application VulnerabilitiesDatabase HackingDatabase DiscoveryDatabase VulnerabilitiesOther ConsiderationsSummary
Hacking AndroidAndroid FundamentalsHacking Your AndroidHacking Other AndroidsAndroid as a Portable Hacking PlatformDefending Your AndroidiOSKnow Your iPhoneHow Secure Is iOSJailbreaking: Unleash the Fury!Hacking Other iPhones: Fury Unleashed!Summary
General Strategies(Re)move the AssetSeparation of DutiesAuthenticate, Authorize, and AuditLayeringAdaptive EnhancementOrderly FailurePolicy and TrainingSimple, Cheap, and EasyExample ScenariosDesktop ScenariosServer ScenariosNetwork ScenariosWeb Application and Database ScenariosMobile ScenariosSummary
Countermeasures

Content preview from Hacking Exposed 7, 7th Edition

To my amazing boys (who hack me on a daily basis), I love you beyond words. FANMW… URKSHI. To my Dawn, for her seemingly endless patience and love—I never knew the meaning of both until you. And to the new girls in my life, Jessica and Jillian… I love you.—Stuart McClure

To Austin, TX, my new home and a great place to live; hopefully we’re helping keep it weird.—Joel Scambray

To my loving family, Anna, Alexander, and Allegra who provide inspiration and support, allowing me to follow my passion. To the late Joe Petrella, for always reminding me “many are called—few are chosen…”—George Kurtz

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Start your free trial

Hacking: The Art of Exploitation, 2nd Edition

Publisher Resources

ISBN: 9780071780285

Hacking Exposed 7, 7th Edition

by Stuart McClure, Joel Scambray, George Kurtz

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

You might also like

Hacking: The Art of Exploitation, 2nd Edition

Hands on Hacking

Gray Hat Hacking: The Ethical Hacker's Handbook, Sixth Edition, 6th Edition

Security in Computing, 6th Edition

Publisher Resources

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,and much more.

You might also like

Hacking: The Art of Exploitation, 2nd Edition

Hands on Hacking

Gray Hat Hacking: The Ethical Hacker's Handbook, Sixth Edition, 6th Edition

Security in Computing, 6th Edition

Publisher Resources

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.