book

Hacking Exposed 7, 7th Edition

by Stuart McClure, Joel Scambray, George Kurtz

July 2012

Intermediate to advanced

720 pages

21h 47m

English

McGraw-Hill

Read now

Unlock full access

Case StudyIAAAS—It’s All About Anonymity, StupidTor-menting the Good Guys
What Is FootprintingWhy Is Footprinting NecessaryInternet FootprintingStep 1: Determine the Scope of Your ActivitiesStep 2: Get Proper AuthorizationStep 3: Publicly Available InformationStep 4: WHOIS & DNS EnumerationStep 5: DNS InterrogationStep 6: Network ReconnaissanceSummary

Determining If the System Is AliveARP Host DiscoveryICMP Host DiscoveryTCP/UDP Host DiscoveryDetermining Which Services Are Running or ListeningScan TypesIdentifying TCP and UDP Services RunningDetecting the Operating SystemMaking Guesses from Available PortsActive Stack FingerprintingPassive Stack FingerprintingProcessing and Storing Scan DataManaging Scan Data with MetasploitSummary
Service FingerprintingVulnerability ScannersBasic Banner GrabbingEnumerating Common Network ServicesSummary
Case Study: International Intrigue
OverviewWhat’s Not CoveredUnauthenticated AttacksAuthentication Spoofing AttacksRemote Unauthenticated ExploitsAuthenticated AttacksPrivilege EscalationExtracting and Cracking PasswordsRemote Control and Back DoorsPort RedirectionCovering TracksGeneral Countermeasures to Authenticated CompromiseWindows Security FeaturesWindows FirewallAutomated UpdatesSecurity CenterSecurity Policy and Group PolicyMicrosoft Security EssentialsThe Enhanced Mitigation Experience ToolkitBitlocker and the Encrypting File SystemWindows Resource ProtectionIntegrity Levels, UAC, and PMIEData Execution Prevention (DEP)Windows Service HardeningCompiler-based EnhancementsCoda: The Burden of Windows SecuritySummary
The Quest for RootA Brief ReviewVulnerability MappingRemote Access vs. Local AccessRemote AccessData-driven AttacksI Want My ShellCommon Types of Remote AttacksLocal AccessAfter Hacking RootRootkit RecoverySummary
What Is an APTOperation AuroraAnonymousRBNWhat APTs Are NOTExamples of Popular APT Tools and TechniquesCommon APTs IndicatorsSummary
Case Study: Read It and WEP
Preparing to Dial UpWardialingHardwareLegal IssuesPeripheral CostsSoftwareBrute-Force Scripting—The Homegrown WayA Final Note About Brute-Force ScriptingPBX HackingVoicemail HackingVirtual Private Network (VPN) HackingBasics of IPSec VPNsHacking the Citrix VPN SolutionVoice over IP AttacksAttacking VoIPSummary
BackgroundFrequencies and ChannelsSession EstablishmentSecurity MechanismsEquipmentWireless AdaptersOperating SystemsMiscellaneous GoodiesDiscovery and MonitoringFinding Wireless NetworksSniffing Wireless TrafficDenial of Service AttacksEncryption AttacksWEPAuthentication AttacksWPA Pre-Shared KeyWPA EnterpriseSummary
Physical Access: Getting in the DoorHacking DevicesDefault ConfigurationsOwned Out of the BoxStandard PasswordsBluetoothReverse Engineering HardwareMapping the DeviceSniffing Bus DataSniffing the Wireless InterfaceFirmware ReversingICE ToolsSummary
Case Study
Web Server HackingSample FilesSource Code DisclosureCanonicalization AttacksServer ExtensionsBuffer OverflowsDenial of ServiceWeb Server Vulnerability ScannersWeb Application HackingFinding Vulnerable Web Apps with Google (Googledorks)Web CrawlingWeb Application AssessmentCommon Web Application VulnerabilitiesDatabase HackingDatabase DiscoveryDatabase VulnerabilitiesOther ConsiderationsSummary
Hacking AndroidAndroid FundamentalsHacking Your AndroidHacking Other AndroidsAndroid as a Portable Hacking PlatformDefending Your AndroidiOSKnow Your iPhoneHow Secure Is iOSJailbreaking: Unleash the Fury!Hacking Other iPhones: Fury Unleashed!Summary
General Strategies(Re)move the AssetSeparation of DutiesAuthenticate, Authorize, and AuditLayeringAdaptive EnhancementOrderly FailurePolicy and TrainingSimple, Cheap, and EasyExample ScenariosDesktop ScenariosServer ScenariosNetwork ScenariosWeb Application and Database ScenariosMobile ScenariosSummary
Countermeasures

Content preview from Hacking Exposed 7, 7th Edition

PART IIIInfrastructure Hacking

CASE STUDY: READ IT AND WEP

Wireless technology is evident in almost every part of our lives—from the infrared (IR) remote on your TV to the wireless laptop you roam around the house with to the Bluetooth keyboard used to type this very text. Wireless access is here to stay. This newfound freedom is amazingly liberating; however, it is not without danger. As is generally the case, new functionality, features, or complexities often lead to security problems. The demand for wireless access has been so great that both vendors and security practitioners have been unable to keep up. Thus, the first incarnations of 802.11 devices have had a slew of fundamental design flaws down to their core or protocol level. Here, we ...