book

Hands-On Ethical Hacking Tactics

Name: Hands-On Ethical Hacking Tactics
Author: Shane Hartman
ISBN: 9781801810081

by Shane Hartman

May 2024

Beginner to intermediate

464 pages

12h 34m

English

Packt Publishing

Read now

Unlock full access

Hands-On Ethical Hacking Tactics
ForewordContributorsAbout the authorAbout the reviewers
Preface
Who this book is forWhat this book coversTo get the most out of this bookDownload the example code filesConventions usedGet in touchShare Your ThoughtsDownload a free PDF copy of this book
Part 1:Information Gathering and Reconnaissance
Chapter 1: Ethical Hacking Concepts
Technical requirementsWhat is ethical hacking?Elements of information securityWhy do intrusions and attacks happen?MotiveMeansOpportunityTypes and profiles of attackers and defendersBlack hat hackersScript kiddiesHacktivistsCyber terrorists/cyber warriorsCyber criminalsWhite hat hackersAttack targets and typesNetworkApplicationHostThe anatomy of an attackReconnaissanceWeaponizationDeliveryExploitationInstallationCommand and controlActions on objectivesEthical hacking and penetration testingDefensive technologiesLab – setting up the testing labSetting up VirtualBoxSetting up Kali LinuxSetting up vulnerable hostsConfiguring the vulnerable Windows hostSetting up the vulnerable Linux hostFinal checksSummaryAssessmentAnswers
Chapter 2: Ethical Hacking Footprinting and Reconnaissance
Technical requirementsWhat is footprinting and reconnaissance?Keeping inventoryWeb searches and Google hacksExploring some useful Google hacksPreventing exploitation through Google searchesWHOIS database recordsAccessing WHOIS informationUnderstanding the name server entryThird-party sources of intelSources for collecting intelligenceAccessing hidden informationMaltegoGitHub and online forumsSpiderFoot toolDmitryShodanArchived informationLab – ReconnaissanceSummaryAssessmentAnswer
Chapter 3: Ethical Hacking Scanning and Enumeration
Comparing scanning and enumerationExploring scanning techniquesPingPing at scaleTracerouteUnderstanding service enumerationIntroducing portsHow do port scans work?Port scanning issuesScanning countermeasuresIntroducing the Nmap network scanning toolControlling Nmap scan speedsOutputting resultsThe NSEThe Nmap GUIMapping the networkLab – Scanning and enumerationSummaryAssessmentAnswer
Chapter 4: Ethical Hacking Vulnerability Assessments and Threat Modeling
Vulnerability assessment conceptsExplaining vulnerability assessmentsTypes of vulnerability assessmentsVulnerability assessment life cycleVulnerability scanning toolsIntroducing the Nessus vulnerability scannerBest practices for vulnerability assessmentsVulnerability assessment reportsThe elements of threat modelingThe findingThe kill chainThe single asset valueThe organizational asset valueThe estimated riskThreat modeling frameworksSTRIDEPASTAVASTAttack treesCVSSThreat modeling toolsThreat forecastingPhase 1 - ResearchPhase 2 - Implementation and analysisPhase 3 - Information sharing and buildingThreat model lab – personal computer securitySummaryAssessmentAnswer
Part 2:Hacking Tools and Techniques
Chapter 5: Hacking the Windows Operating System
Technical requirementsExploiting the Windows OSExploiting Windows device driversExploiting Windows networkingAddress Resolution ProtocolSimple network management protocolServer Message BlockNetBIOSExploiting Windows authenticationUser authentication and movementObtaining and extracting passwordsExploring password-cracking techniquesAuthentication spoofingPulling Windows account names via null sessionsTools for pulling account names via null sessionsPrivilege elevationExploiting Windows services and applicationsServer-side exploitsClient-side exploitsExploring the Windows RegistryWindows Registry exploitationExploiting the Windows logsSummaryLabBrute force password crackRainbow table crackAssessmentAnswers
Chapter 6: Hacking the Linux Operating System
Exploiting the Linux operating systemExploring the Linux filesystemExploiting the filesystemLinux hidden filesImportant filesExploiting Linux networkingExploiting Linux authenticationCracking passwordsLinux updates and patchingThe Linux logging systemExploiting the Linux kernelChecking your kernel versionExploiting the kernelLabSummaryAssessmentAnswers

Chapter 7: Ethical Hacking of Web Servers
Web servers’ architecture, configuration, and vulnerabilitiesAdding processing logicThreats, vulnerabilities, and exploits to web servicesWeb server authenticationBasic authenticationOAuthSome real-world web servers and ways to combat attacksIIS hardening tasksApache web server hardening tasksTypes of web server/website attacksWebsite defacementDoS/DDoS attackHTTP response-splitting attackCross-Site Request ForgeryDeep linkingDirectory traversal attackMan-in-the-Middle/sniffing attackCookie tamperingCookie-based session attacksSession hijackingDNSLabSummaryAssessmentAnswer
Chapter 8: Hacking Databases
Finding databases on the networkDiscovering databases on the networkMitigating database discoveryExploring databases and database structuresDatabase threats and vulnerabilitiesNetwork-based database attacksDatabase engine faults and bugsBrute-force attacks on weak or default passwordsMisconfigurationsRemote code executionIndirect attacksHidden database serversAccessible backupsPrivilege escalationInsecure system architectureDatabase server password crackingMethods of attacking database serversScanning for vulnerabilitiesAttacking the System Administrator accountExploit module attacksGoogle hacksPerusing website source codeSQL replay attackProtecting databasesHidden or unknown databasesHow insecure databases are createdWeak auditing and insufficient loggingLab – Database hackingSetupExercise 1Exercise 2SummaryAssessmentAnswer
Chapter 9: Ethical Hacking Protocol Review
Exploring communication protocolsIntroducing the OSI modelIntroducing IPIntroducing TCPThe three-way handshakeUDPICMPComparing TCP and UDPWell-known portsUnderstanding protocol attacksTCP attacksUDP attacksICMP attacksAn overview of IPv6The setup and configuration of IPv6Reconnaissance and attack toolsDefending IPv4 networksDefending IPv6 networksLabExercise 1Exercise 2SummaryAssessmentAnswers
Chapter 10: Ethical Hacking for Malware Analysis
Technical requirementsWhy does malware exist and who are its sources?Exploring types of malwareVirusWormsTrojansRansomwareBots/botnetsAdwareSpywareMalvertisingFileless malwareBackdoorsRootkitsHow does malware get onto machines?Analyzing a sampleSetting up a malware analysis labStatic analysisDynamic analysisDetecting malware and removing itPerimeter monitoringMalware preventionSummaryLabAssessmentAnswers
Part 3:Defense, Social Engineering, IoT, and Cloud
Chapter 11: Incident Response and Threat Hunting
What is an incident?The incident response planThe incident response processThe preparation phaseDetection phaseAnalysis phaseContainment and eradication phaseRecovery phasePost-incident activities (postmortem)Information sharing and coordinationIncident response team structureIntroducing indicators of incidentsTypes of indicatorsIOC toolsIntroducing threat huntingThreat hunting toolsGetting Started with the Threat hunting processBest practices for threat huntingPractical aspects of threat huntingLab: Security incident response simulationExercise 2: Threat HuntSummaryAssessmentAnswers
Chapter 12: Social Engineering
Introducing social engineeringPhases of a social engineering attackSocial engineering attack techniquesPhysical-based social engineeringElectronic-based social engineeringSocial engineering toolsSocial-Engineer ToolkitBrowser Exploitation FrameworkSocial engineering defensesProtecting businesses’ strategiesProtecting businesses’ policies and practicesProtecting individualsThe impact of AI on social engineeringLabActivitiesSummaryAssessmentAnswers
Chapter 13: Ethical Hacking of the Internet of Things
What is IoT?Understanding IoT communicationIoT communication layersIoT communication modelsIoT communication protocolsAttack vectors for IoT devicesAccess controlFirmware attacksWeb attacksNetwork service/communication protocol attacksUnencrypted local data storageConfidentiality and integrity issuesCloud computing attacksMalicious updatesInsecure APIsMobile application threatsOther attacksAn IoT hacking methodologyUnderstanding OTAn OT hacking methodologyBest practices for securing IoT/OTLab – discovering IoT devicesSummaryAssessmentAnswers
Chapter 14: Ethical Hacking in the Cloud
Understanding cloud service typesIaaSPaaSSaaSCloud deployment modelsNIST Cloud Computing Reference ArchitectureUnderstanding virtual machines / virtualizationUnderstanding containersComparing containers and VMsIntroducing serverless computingCloud threats and attacksData loss/breachAbusing Cloud ServiceInsecure interfaces and APIsInadequate identity and access managementService hijackingSession hijackingDomain name system attacksImplementing cloud securityImplementing policies, procedures, and awarenessEnsuring perimeter securityApplication securityMaintaining computing storage and information securityCloud security logsAzure CloudAWSGoogle Cloud Platform (GCP)SummaryAssessmentAnswers
Index
Why subscribe?
Other Books You May EnjoyPackt is searching for authors like youShare Your ThoughtsDownload a free PDF copy of this book

Content preview from Hands-On Ethical Hacking Tactics

5 Hacking the Windows Operating System

Up until now, in our journey, we have spent time mostly on ideas and theory at a 10,000-foot view of security and exploitation. Here, we begin to dive into the details and operations of compromising and defending the Windows operating system (OS). Before we begin, it is important to reiterate that this chapter assumes the groundwork discussed in the earlier chapters is complete, including footprinting, scanning, and enumeration.

Attacking Windows systems involves four key aspects: the Windows OS, Windows Networking, Windows Services and Applications, and Windows Authentication. Once one of these areas has been compromised and access has been gained, the second part of exploitation begins; this includes ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Publisher Resources

ISBN: 9781801810081

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Hands-On Ethical Hacking Tactics

by Shane Hartman

5

Hacking the Windows Operating System

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.