book

Hacking For Dummies, 5th Edition

Name: Hacking For Dummies, 5th Edition
Author: Kevin Beaver
ISBN: 9781119154686

by Kevin Beaver

December 2015

Beginner

408 pages

9h 18m

English

For Dummies

Read now

Unlock full access

Cover
Foreword
Introduction
Who Should Read This Book?About This BookHow to Use This BookWhat You Don’t Need to ReadFoolish AssumptionsHow This Book Is OrganizedIcons Used in This BookWhere to Go from Here
Part I: Building the Foundation for Security Testing
Chapter 1: Introduction to Ethical Hacking
Straightening Out the TerminologyRecognizing How Malicious Attackers Beget Ethical HackersUnderstanding the Need to Hack Your Own SystemsUnderstanding the Dangers Your Systems FaceObeying the Ethical Hacking PrinciplesUsing the Ethical Hacking Process
Chapter 2: Cracking the Hacker Mindset
What You’re Up AgainstWho Breaks into Computer SystemsWhy They Do ItPlanning and Performing AttacksMaintaining Anonymity
Chapter 3: Developing Your Ethical Hacking Plan
Establishing Your GoalsDetermining Which Systems to HackCreating Testing StandardsSelecting Security Assessment Tools
Chapter 4: Hacking Methodology
Setting the Stage for TestingSeeing What Others SeeScanning SystemsDetermining What’s Running on Open PortsAssessing VulnerabilitiesPenetrating the System
Part II: Putting Security Testing in Motion
Chapter 5: Information Gathering
Gathering Public InformationMapping the Network

Chapter 6: Social Engineering
Introducing Social EngineeringStarting Your Social Engineering TestsWhy Attackers Use Social EngineeringUnderstanding the ImplicationsPerforming Social Engineering AttacksSocial Engineering Countermeasures
Chapter 7: Physical Security
Identifying Basic Physical Security VulnerabilitiesPinpointing Physical Vulnerabilities in Your Office
Chapter 8: Passwords
Understanding Password VulnerabilitiesCracking PasswordsGeneral Password Cracking CountermeasuresSecuring Operating Systems
Part III: Hacking Network Hosts
Chapter 9: Network Infrastructure Systems
Understanding Network Infrastructure VulnerabilitiesChoosing ToolsScanning, Poking, and Prodding the NetworkDetecting Common Router, Switch, and Firewall WeaknessesPutting Up General Network Defenses
Chapter 10: Wireless Networks
Understanding the Implications of Wireless Network VulnerabilitiesChoosing Your ToolsDiscovering Wireless NetworksDiscovering Wireless Network Attacks and Taking Countermeasures
Chapter 11: Mobile Devices
Sizing Up Mobile VulnerabilitiesCracking Laptop PasswordsCracking Phones and Tablets
Part IV: Hacking Operating Systems
Chapter 12: Windows
Introducing Windows VulnerabilitiesChoosing ToolsGathering Information About Your Windows VulnerabilitiesDetecting Null SessionsChecking Share PermissionsExploiting Missing PatchesRunning Authenticated Scans
Chapter 13: Linux
Understanding Linux VulnerabilitiesChoosing ToolsGathering Information About Your Linux VulnerabilitiesFinding Unneeded and Unsecured ServicesSecuring the .rhosts and hosts.equiv FilesAssessing the Security of NFSChecking File PermissionsFinding Buffer Overflow VulnerabilitiesChecking Physical SecurityPerforming General Security TestsPatching Linux
Part V: Hacking Applications
Chapter 14: Communication and Messaging Systems
Introducing Messaging System VulnerabilitiesRecognizing and Countering E-Mail AttacksUnderstanding Voice over IP
Chapter 15: Web Applications and Mobile Apps
Choosing Your Web Security Testing ToolsSeeking Out Web VulnerabilitiesMinimizing Web Security RisksUncovering Mobile App Flaws
Chapter 16: Databases and Storage Systems
Diving Into DatabasesFollowing Best Practices for Minimizing Database Security RisksOpening Up About Storage SystemsFollowing Best Practices for Minimizing Storage Security Risks
Part VI: Security Testing Aftermath
Chapter 17: Reporting Your Results
Pulling the Results TogetherPrioritizing VulnerabilitiesCreating Reports
Chapter 18: Plugging Security Holes
Turning Your Reports into ActionPatching for PerfectionHardening Your SystemsAssessing Your Security Infrastructure
Chapter 19: Managing Security Processes
Automating the Ethical Hacking ProcessMonitoring Malicious UseOutsourcing Security AssessmentsInstilling a Security-Aware MindsetKeeping Up with Other Security Efforts
Part VII: The Part of Tens
Chapter 20: Ten Tips for Getting Security Buy-In
Cultivate an Ally and a SponsorDon’t Be a FUDdy DuddyDemonstrate How the Organization Can’t Afford to Be HackedOutline the General Benefits of Security TestingShow How Security Testing Specifically Helps the OrganizationGet Involved in the BusinessEstablish Your CredibilitySpeak on Management’s LevelShow Value in Your EffortsBe Flexible and Adaptable
Chapter 21: Ten Reasons Hacking Is the Only Effective Way to Test
The Bad Guys Think Bad Thoughts, Use Good Tools, and Develop New MethodsIT Governance and Compliance Are More than High-Level Checklist AuditsHacking Complements Audits and Security EvaluationsCustomers and Partners Will Ask, ‘How Secure Are Your Systems?’The Law of Averages Works Against BusinessesSecurity Assessments Improve the Understanding of Business ThreatsIf a Breach Occurs, You Have Something to Fall Back OnIn-Depth Testing Brings Out the Worst in Your SystemsCombining the Best of Penetration Testing and Vulnerability Assessments Is What You NeedProper Testing Can Uncover Weaknesses That Might Go Overlooked for Years
Chapter 22: Ten Deadly Mistakes
Not Getting Prior ApprovalAssuming You Can Find All Vulnerabilities During Your TestsAssuming You Can Eliminate All Security VulnerabilitiesPerforming Tests Only OnceThinking You Know It AllRunning Your Tests Without Looking at Things from a Hacker’s ViewpointNot Testing the Right SystemsNot Using the Right ToolsPounding Production Systems at the Wrong TimeOutsourcing Testing and Not Staying Involved
Appendix: Tools and Resources
Advanced MalwareBluetoothCertificationsDatabasesDenial of Service ProtectionExploitsGeneral Research ToolsHacker StuffKeyloggersLaws and RegulationsLinuxLive ToolkitsLog AnalysisMessagingMiscellaneousMobileNetworksPassword CrackingPatch ManagementSecurity Education and Learning ResourcesSecurity Methods and ModelsSocial Enginering and PhishingSource Code AnalysisStatisticsStorageSystem HardeningUser Awareness and TrainingVoice over IPVulnerability DatabasesWebsites and ApplicationsWindowsWireless Networks
About the Author
Cheat Sheet
Connect with Dummies
End User License Agreement

Content preview from Hacking For Dummies, 5th Edition

Chapter 5

Information Gathering

In This Chapter

Gleaning information about your organization from the Internet

Web resources

Seeking out information you (and others) can benefit from

One of the most important aspects in determining how your organization is at risk is to find out what information is publically available about your business and your systems. Gathering this information is such an important part of your overall methodology that I thought the subject deserves a dedicated chapter. In this chapter, I outline some free and easy ways to see what the world sees about you and your organization. You may be tempted to bypass this exercise in favor of the cooler and sexier technical security flaws, but don’t fall into the trap. Gathering this type of information is critical and often where most security breaches begin.

Gathering Public Information

The amount of information you can gather about an organization’s business and information systems that is widely available on the Internet is staggering. To see for yourself, the techniques outlined in the following sections can be used to gather information about your own organization.

Social media

Social media sites are the new ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781119154686Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Hacking For Dummies, 5th Edition

by Kevin Beaver

Information Gathering