book

Hacking For Dummies, 5th Edition

Name: Hacking For Dummies, 5th Edition
Author: Kevin Beaver
ISBN: 9781119154686

by Kevin Beaver

December 2015

Beginner

408 pages

9h 18m

English

For Dummies

Read now

Unlock full access

Cover
Foreword
Introduction
Who Should Read This Book?About This BookHow to Use This BookWhat You Don’t Need to ReadFoolish AssumptionsHow This Book Is OrganizedIcons Used in This BookWhere to Go from Here
Part I: Building the Foundation for Security Testing
Chapter 1: Introduction to Ethical Hacking
Straightening Out the TerminologyRecognizing How Malicious Attackers Beget Ethical HackersUnderstanding the Need to Hack Your Own SystemsUnderstanding the Dangers Your Systems FaceObeying the Ethical Hacking PrinciplesUsing the Ethical Hacking Process
Chapter 2: Cracking the Hacker Mindset
What You’re Up AgainstWho Breaks into Computer SystemsWhy They Do ItPlanning and Performing AttacksMaintaining Anonymity
Chapter 3: Developing Your Ethical Hacking Plan
Establishing Your GoalsDetermining Which Systems to HackCreating Testing StandardsSelecting Security Assessment Tools
Chapter 4: Hacking Methodology
Setting the Stage for TestingSeeing What Others SeeScanning SystemsDetermining What’s Running on Open PortsAssessing VulnerabilitiesPenetrating the System
Part II: Putting Security Testing in Motion
Chapter 5: Information Gathering
Gathering Public InformationMapping the Network

Chapter 6: Social Engineering
Introducing Social EngineeringStarting Your Social Engineering TestsWhy Attackers Use Social EngineeringUnderstanding the ImplicationsPerforming Social Engineering AttacksSocial Engineering Countermeasures
Chapter 7: Physical Security
Identifying Basic Physical Security VulnerabilitiesPinpointing Physical Vulnerabilities in Your Office
Chapter 8: Passwords
Understanding Password VulnerabilitiesCracking PasswordsGeneral Password Cracking CountermeasuresSecuring Operating Systems
Part III: Hacking Network Hosts
Chapter 9: Network Infrastructure Systems
Understanding Network Infrastructure VulnerabilitiesChoosing ToolsScanning, Poking, and Prodding the NetworkDetecting Common Router, Switch, and Firewall WeaknessesPutting Up General Network Defenses
Chapter 10: Wireless Networks
Understanding the Implications of Wireless Network VulnerabilitiesChoosing Your ToolsDiscovering Wireless NetworksDiscovering Wireless Network Attacks and Taking Countermeasures
Chapter 11: Mobile Devices
Sizing Up Mobile VulnerabilitiesCracking Laptop PasswordsCracking Phones and Tablets
Part IV: Hacking Operating Systems
Chapter 12: Windows
Introducing Windows VulnerabilitiesChoosing ToolsGathering Information About Your Windows VulnerabilitiesDetecting Null SessionsChecking Share PermissionsExploiting Missing PatchesRunning Authenticated Scans
Chapter 13: Linux
Understanding Linux VulnerabilitiesChoosing ToolsGathering Information About Your Linux VulnerabilitiesFinding Unneeded and Unsecured ServicesSecuring the .rhosts and hosts.equiv FilesAssessing the Security of NFSChecking File PermissionsFinding Buffer Overflow VulnerabilitiesChecking Physical SecurityPerforming General Security TestsPatching Linux
Part V: Hacking Applications
Chapter 14: Communication and Messaging Systems
Introducing Messaging System VulnerabilitiesRecognizing and Countering E-Mail AttacksUnderstanding Voice over IP
Chapter 15: Web Applications and Mobile Apps
Choosing Your Web Security Testing ToolsSeeking Out Web VulnerabilitiesMinimizing Web Security RisksUncovering Mobile App Flaws
Chapter 16: Databases and Storage Systems
Diving Into DatabasesFollowing Best Practices for Minimizing Database Security RisksOpening Up About Storage SystemsFollowing Best Practices for Minimizing Storage Security Risks
Part VI: Security Testing Aftermath
Chapter 17: Reporting Your Results
Pulling the Results TogetherPrioritizing VulnerabilitiesCreating Reports
Chapter 18: Plugging Security Holes
Turning Your Reports into ActionPatching for PerfectionHardening Your SystemsAssessing Your Security Infrastructure
Chapter 19: Managing Security Processes
Automating the Ethical Hacking ProcessMonitoring Malicious UseOutsourcing Security AssessmentsInstilling a Security-Aware MindsetKeeping Up with Other Security Efforts
Part VII: The Part of Tens
Chapter 20: Ten Tips for Getting Security Buy-In
Cultivate an Ally and a SponsorDon’t Be a FUDdy DuddyDemonstrate How the Organization Can’t Afford to Be HackedOutline the General Benefits of Security TestingShow How Security Testing Specifically Helps the OrganizationGet Involved in the BusinessEstablish Your CredibilitySpeak on Management’s LevelShow Value in Your EffortsBe Flexible and Adaptable
Chapter 21: Ten Reasons Hacking Is the Only Effective Way to Test
The Bad Guys Think Bad Thoughts, Use Good Tools, and Develop New MethodsIT Governance and Compliance Are More than High-Level Checklist AuditsHacking Complements Audits and Security EvaluationsCustomers and Partners Will Ask, ‘How Secure Are Your Systems?’The Law of Averages Works Against BusinessesSecurity Assessments Improve the Understanding of Business ThreatsIf a Breach Occurs, You Have Something to Fall Back OnIn-Depth Testing Brings Out the Worst in Your SystemsCombining the Best of Penetration Testing and Vulnerability Assessments Is What You NeedProper Testing Can Uncover Weaknesses That Might Go Overlooked for Years
Chapter 22: Ten Deadly Mistakes
Not Getting Prior ApprovalAssuming You Can Find All Vulnerabilities During Your TestsAssuming You Can Eliminate All Security VulnerabilitiesPerforming Tests Only OnceThinking You Know It AllRunning Your Tests Without Looking at Things from a Hacker’s ViewpointNot Testing the Right SystemsNot Using the Right ToolsPounding Production Systems at the Wrong TimeOutsourcing Testing and Not Staying Involved
Appendix: Tools and Resources
Advanced MalwareBluetoothCertificationsDatabasesDenial of Service ProtectionExploitsGeneral Research ToolsHacker StuffKeyloggersLaws and RegulationsLinuxLive ToolkitsLog AnalysisMessagingMiscellaneousMobileNetworksPassword CrackingPatch ManagementSecurity Education and Learning ResourcesSecurity Methods and ModelsSocial Enginering and PhishingSource Code AnalysisStatisticsStorageSystem HardeningUser Awareness and TrainingVoice over IPVulnerability DatabasesWebsites and ApplicationsWindowsWireless Networks
About the Author
Cheat Sheet
Connect with Dummies
End User License Agreement

Content preview from Hacking For Dummies, 5th Edition

Chapter 4

Hacking Methodology

In This Chapter

Examining steps for successful ethical hacking

Gleaning information about your organization from the Internet

Scanning your network

Looking for vulnerabilities

Before you dive in head first with your security testing, it’s critical to have a methodology to work from. Vulnerability assessments and penetration testing involves more than just poking and prodding a system or network. Proven techniques can help guide you along the hacking highway and ensure that you end up at the right destination. Using a methodology that supports your testing goals separates you from the amateurs. A methodology also helps ensure that you make the most of your time and effort.

Setting the Stage for Testing

In the past, a lot of security assessment techniques involved manual processes. Now, certain vulnerability scanners can automate various tasks, from testing to reporting to remediation validation (the process of determining whether a vulnerability was fixed). Some vulnerability scanners can even help you take corrective actions. These tools allow you to ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781119154686Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Hacking For Dummies, 5th Edition

by Kevin Beaver

Hacking Methodology

Setting the Stage for Testing

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.