book

Hacking For Dummies, 5th Edition

Name: Hacking For Dummies, 5th Edition
Author: Kevin Beaver
ISBN: 9781119154686

by Kevin Beaver

December 2015

Beginner

408 pages

9h 18m

English

For Dummies

Read now

Unlock full access

Cover
Foreword
Introduction
Who Should Read This Book?About This BookHow to Use This BookWhat You Don’t Need to ReadFoolish AssumptionsHow This Book Is OrganizedIcons Used in This BookWhere to Go from Here
Part I: Building the Foundation for Security Testing
Chapter 1: Introduction to Ethical Hacking
Straightening Out the TerminologyRecognizing How Malicious Attackers Beget Ethical HackersUnderstanding the Need to Hack Your Own SystemsUnderstanding the Dangers Your Systems FaceObeying the Ethical Hacking PrinciplesUsing the Ethical Hacking Process
Chapter 2: Cracking the Hacker Mindset
What You’re Up AgainstWho Breaks into Computer SystemsWhy They Do ItPlanning and Performing AttacksMaintaining Anonymity
Chapter 3: Developing Your Ethical Hacking Plan
Establishing Your GoalsDetermining Which Systems to HackCreating Testing StandardsSelecting Security Assessment Tools
Chapter 4: Hacking Methodology
Setting the Stage for TestingSeeing What Others SeeScanning SystemsDetermining What’s Running on Open PortsAssessing VulnerabilitiesPenetrating the System
Part II: Putting Security Testing in Motion
Chapter 5: Information Gathering
Gathering Public InformationMapping the Network

Chapter 6: Social Engineering
Introducing Social EngineeringStarting Your Social Engineering TestsWhy Attackers Use Social EngineeringUnderstanding the ImplicationsPerforming Social Engineering AttacksSocial Engineering Countermeasures
Chapter 7: Physical Security
Identifying Basic Physical Security VulnerabilitiesPinpointing Physical Vulnerabilities in Your Office
Chapter 8: Passwords
Understanding Password VulnerabilitiesCracking PasswordsGeneral Password Cracking CountermeasuresSecuring Operating Systems
Part III: Hacking Network Hosts
Chapter 9: Network Infrastructure Systems
Understanding Network Infrastructure VulnerabilitiesChoosing ToolsScanning, Poking, and Prodding the NetworkDetecting Common Router, Switch, and Firewall WeaknessesPutting Up General Network Defenses
Chapter 10: Wireless Networks
Understanding the Implications of Wireless Network VulnerabilitiesChoosing Your ToolsDiscovering Wireless NetworksDiscovering Wireless Network Attacks and Taking Countermeasures
Chapter 11: Mobile Devices
Sizing Up Mobile VulnerabilitiesCracking Laptop PasswordsCracking Phones and Tablets
Part IV: Hacking Operating Systems
Chapter 12: Windows
Introducing Windows VulnerabilitiesChoosing ToolsGathering Information About Your Windows VulnerabilitiesDetecting Null SessionsChecking Share PermissionsExploiting Missing PatchesRunning Authenticated Scans
Chapter 13: Linux
Understanding Linux VulnerabilitiesChoosing ToolsGathering Information About Your Linux VulnerabilitiesFinding Unneeded and Unsecured ServicesSecuring the .rhosts and hosts.equiv FilesAssessing the Security of NFSChecking File PermissionsFinding Buffer Overflow VulnerabilitiesChecking Physical SecurityPerforming General Security TestsPatching Linux
Part V: Hacking Applications
Chapter 14: Communication and Messaging Systems
Introducing Messaging System VulnerabilitiesRecognizing and Countering E-Mail AttacksUnderstanding Voice over IP
Chapter 15: Web Applications and Mobile Apps
Choosing Your Web Security Testing ToolsSeeking Out Web VulnerabilitiesMinimizing Web Security RisksUncovering Mobile App Flaws
Chapter 16: Databases and Storage Systems
Diving Into DatabasesFollowing Best Practices for Minimizing Database Security RisksOpening Up About Storage SystemsFollowing Best Practices for Minimizing Storage Security Risks
Part VI: Security Testing Aftermath
Chapter 17: Reporting Your Results
Pulling the Results TogetherPrioritizing VulnerabilitiesCreating Reports
Chapter 18: Plugging Security Holes
Turning Your Reports into ActionPatching for PerfectionHardening Your SystemsAssessing Your Security Infrastructure
Chapter 19: Managing Security Processes
Automating the Ethical Hacking ProcessMonitoring Malicious UseOutsourcing Security AssessmentsInstilling a Security-Aware MindsetKeeping Up with Other Security Efforts
Part VII: The Part of Tens
Chapter 20: Ten Tips for Getting Security Buy-In
Cultivate an Ally and a SponsorDon’t Be a FUDdy DuddyDemonstrate How the Organization Can’t Afford to Be HackedOutline the General Benefits of Security TestingShow How Security Testing Specifically Helps the OrganizationGet Involved in the BusinessEstablish Your CredibilitySpeak on Management’s LevelShow Value in Your EffortsBe Flexible and Adaptable
Chapter 21: Ten Reasons Hacking Is the Only Effective Way to Test
The Bad Guys Think Bad Thoughts, Use Good Tools, and Develop New MethodsIT Governance and Compliance Are More than High-Level Checklist AuditsHacking Complements Audits and Security EvaluationsCustomers and Partners Will Ask, ‘How Secure Are Your Systems?’The Law of Averages Works Against BusinessesSecurity Assessments Improve the Understanding of Business ThreatsIf a Breach Occurs, You Have Something to Fall Back OnIn-Depth Testing Brings Out the Worst in Your SystemsCombining the Best of Penetration Testing and Vulnerability Assessments Is What You NeedProper Testing Can Uncover Weaknesses That Might Go Overlooked for Years
Chapter 22: Ten Deadly Mistakes
Not Getting Prior ApprovalAssuming You Can Find All Vulnerabilities During Your TestsAssuming You Can Eliminate All Security VulnerabilitiesPerforming Tests Only OnceThinking You Know It AllRunning Your Tests Without Looking at Things from a Hacker’s ViewpointNot Testing the Right SystemsNot Using the Right ToolsPounding Production Systems at the Wrong TimeOutsourcing Testing and Not Staying Involved
Appendix: Tools and Resources
Advanced MalwareBluetoothCertificationsDatabasesDenial of Service ProtectionExploitsGeneral Research ToolsHacker StuffKeyloggersLaws and RegulationsLinuxLive ToolkitsLog AnalysisMessagingMiscellaneousMobileNetworksPassword CrackingPatch ManagementSecurity Education and Learning ResourcesSecurity Methods and ModelsSocial Enginering and PhishingSource Code AnalysisStatisticsStorageSystem HardeningUser Awareness and TrainingVoice over IPVulnerability DatabasesWebsites and ApplicationsWindowsWireless Networks
About the Author
Cheat Sheet
Connect with Dummies
End User License Agreement

Content preview from Hacking For Dummies, 5th Edition

Chapter 19

Managing Security Processes

In This Chapter

Automating tasks

Watching for misbehavior

Outsourcing your security testing

Keeping security on everyone’s mind

Information security is an ongoing process that you must manage effectively to be successful. This management goes beyond periodically applying patches and hardening systems. Performing your security tests repeatedly is critical; information security vulnerabilities emerge constantly. To put it another way, security tests are just a snapshot of your overall information security, so you have to perform your tests continually to keep up with the latest issues. Ongoing vigilance is required not only for compliance with various laws and regulations but also for minimizing business risks related to your information systems.

Automating the Ethical Hacking Process

You can run a large portion of the following ethical hacking tests in this book automatically:

Ping sweeps and port scans to show what systems are available and what’s running
Password cracking tests to attempt access to external web applications, remote access ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781119154686Purchase book

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Hacking For Dummies, 5th Edition

by Kevin Beaver

Managing Security Processes

Automating the Ethical Hacking Process

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.