book

Hacking For Dummies, 8th Edition

Name: Hacking For Dummies, 8th Edition
Author: Kevin Beaver
ISBN: 9781394348121

by Kevin Beaver

October 2025

Beginner

416 pages

10h 15m

English

For Dummies

Read now

Unlock full access

Cover
Table of Contents
Title Page
Copyright
Introduction
About This BookFoolish AssumptionsIcons Used in This BookBeyond the BookWhere to Go from Here
Part 1: Building the Foundation for Security Testing
Chapter 1: Introduction to Vulnerability and Penetration Testing
Straightening Out the TerminologyRecognizing How Malicious Attackers Beget Ethical HackersUnderstanding the Need to Hack Your Own SystemsUnderstanding the Dangers Your Systems FaceFollowing the Security Assessment PrinciplesUsing the Vulnerability and Penetration Testing Process
Chapter 2: Cracking the Hacker Mindset
What You’re Up AgainstWho Breaks into Computer Systems?Why They Do ItPlanning and Performing AttacksMaintaining Anonymity
Chapter 3: Developing Your Security Testing Plan
Establishing Your GoalsDetermining Which Systems to TestCreating Testing StandardsSelecting Security Assessment Tools
Chapter 4: Hacking Methodology
Setting the Stage for TestingSeeing What Others SeeScanning SystemsDetermining What’s Running on Open PortsAssessing VulnerabilitiesPenetrating the System
Part 2: Putting Security Testing in Motion

Chapter 5: Information Gathering
Gathering Public InformationMapping the Network
Chapter 6: Social Engineering
Introducing Social EngineeringStarting Your Social Engineering TestsKnowing Why Attackers Use Social EngineeringUnderstanding the ImplicationsPerforming Social Engineering AttacksSocial Engineering Countermeasures
Chapter 7: Physical Security
Identifying Basic Physical Security VulnerabilitiesPinpointing Physical Vulnerabilities in Your Office
Chapter 8: Passwords
Understanding Password VulnerabilitiesCracking PasswordsGeneral Password Cracking CountermeasuresSecuring Operating Systems
Part 3: Hacking Network Hosts
Chapter 9: Network Infrastructure Systems
Understanding Network Infrastructure VulnerabilitiesChoosing ToolsScanning, Poking, and Prodding the NetworkDetecting Common Router, Switch, and Firewall WeaknessesPutting Up General Network Defenses
Chapter 10: Wireless Networks
Understanding the Implications of Wireless Network VulnerabilitiesChoosing Your ToolsDiscovering Wireless NetworksDiscovering Wireless Network Attacks and Taking CountermeasuresUnderstanding How AI Can Help with Wireless Network Security
Chapter 11: Mobile Devices
Sizing Up Mobile VulnerabilitiesCracking Laptop PasswordsCracking Phones and Tablets
Part 4: Hacking Operating Systems
Chapter 12: Windows
Introducing Windows VulnerabilitiesChoosing ToolsGathering Information About Your Windows VulnerabilitiesDetecting Null SessionsChecking Share PermissionsExploiting Missing PatchesRunning Authenticated Scans
Chapter 13: Linux and macOS
Understanding Linux VulnerabilitiesChoosing ToolsGathering Information About Your System VulnerabilitiesFinding Unneeded and Unsecured ServicesSecuring the .rhosts and hosts.equiv FilesAssessing the Security of NFSChecking File PermissionsFinding Buffer Overflow VulnerabilitiesChecking Physical SecurityPerforming General Security TestsPatching
Part 5: Hacking Applications
Chapter 14: Email Systems
Introducing Email System VulnerabilitiesRecognizing and Countering Email AttacksGeneral Best Practices for Minimizing Email Security Risks
Chapter 15: Web Applications and Mobile Apps
Choosing Your Web Security Testing ToolsSeeking Out Web VulnerabilitiesMinimizing Web Security RisksUncovering Mobile App Flaws
Chapter 16: Databases and Storage Systems
Diving into DatabasesFollowing Best Practices for Minimizing Database Security RisksOpening Up About Storage SystemsFollowing Best Practices for Minimizing Storage Security Risks
Part 6: Security Testing Aftermath
Chapter 17: Reporting Your Results
Pulling the Results TogetherPrioritizing VulnerabilitiesCreating Reports
Chapter 18: Plugging Your Security Holes
Turning Your Reports into ActionPatching for PerfectionHardening Your SystemsAssessing Your Security Infrastructure
Chapter 19: Managing Security Processes
Automating the Security Assessment ProcessMonitoring Malicious UseOutsourcing Security AssessmentsInstilling a Security-Aware MindsetKeeping Up with Other Security Efforts
Part 7: The Part of Tens
Chapter 20: Ten Tips for Getting Security Buy-In
Cultivate an Ally and a SponsorDon’t Be a FUDdy-DuddyDemonstrate That the Organization Can’t Afford to Be HackedOutline the General Benefits of Security TestingShow How Security Testing Specifically Helps the OrganizationGet Involved in the BusinessEstablish Your CredibilitySpeak on Management’s LevelShow Value in Your EffortsBe Flexible and Adaptable
Chapter 21: Ten Reasons Hacking Is the Only Effective Way to Test
The Bad Guys Use Good Tools and Develop New MethodsIT Governance and Compliance Are More Than High-Level AuditsTesting Complements Audits and Security EvaluationsCustomers and Partners Will Ask How Secure Your Systems AreThe Law of Averages Works Against BusinessesSecurity Assessments Improve Understanding of Business RisksIf a Breach Occurs, You Have Something to Fall Back OnIn-Depth Testing Brings Out the Worst in Your SystemsCombined Vulnerability Scanning and Penetration Testing Is KeyProper Testing Can Uncover Overlooked Weaknesses
Chapter 22: Ten Deadly Mistakes
Not Getting ApprovalAssuming That You Can Find All VulnerabilitiesAssuming That You Can Eliminate All VulnerabilitiesPerforming Tests Only OnceThinking That You Know It AllRunning Your Tests Without Looking at Things from a Hacker’s ViewpointNot Testing the Right SystemsNot Using the Right ToolsOutsourcing the Fox to Guard Your HenhouseOutsourcing Testing and Not Staying Involved
Index
About the Author
Connect with Dummies
End User License Agreement

Content preview from Hacking For Dummies, 8th Edition

Chapter 21

Ten Reasons Hacking Is the Only Effective Way to Test

IN THIS CHAPTER

Uncovering overlooked weaknesses

Understanding business threats with security assessments

Approaching your security testing from the perspective of a hacker isn’t just for fun or show. For numerous business reasons, it’s the only effective way to find the security vulnerabilities that matter in your organization.

The Bad Guys Use Good Tools and Develop New Methods

If you’re going to keep up with external attackers and malicious insiders, you have to stay current on the latest attack methods and tools that they’re using. I cover many of the latest tricks, techniques, and tools throughout this book.

IT Governance and Compliance Are More Than High-Level Audits

With all the government and industry regulations in place, your business likely doesn’t have a choice in the matter. You have to address security. The problem is that being “compliant” with these laws and regulations doesn’t mean that your network and information are secure. Payment Card Industry Data Security Standard (PCI DSS) comes to mind here. Systems within your PCI DSS cardholder data environment might be secure but someone might be able to drive a truck through your ERP application. Countless businesses run their vulnerability scans, ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781394348121

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design