Contents

Introduction
Assessment Test
Chapter 1: Getting Started with Ethical Hacking
Chapter 2: System Fundamentals
Chapter 3: Cryptography
Chapter 4: Footprinting and Reconnaissance
Chapter 5: Scanning Networks
Chapter 6: Enumeration of Services
Chapter 7: Gaining Access to a System
Chapter 8: Trojans, Viruses, Worms, and Covert Channels
Chapter 9: Sniffers
Chapter 10: Social Engineering
Chapter 11: Denial of Service
Chapter 12: Session Hijacking
Chapter 13: Web Servers and Web Applications
Chapter 14: SQL Injection
Chapter 15: Wireless Networking
Chapter 16: Evading IDSs, Firewalls, and Honeypots
Chapter 17: Physical Security
Appendix A: Answers to Review Questions
Appendix B: About the Additional Study Tools
Advertisement
End User License Agreement

List of Illustrations

FIGURE 1.1 Security versus convenience analysis
FIGURE 1.2 The hacking process
FIGURE 2.1 Bus topology
FIGURE 2.2 Ring topology
FIGURE 2.3 Star topology
FIGURE 2.4 Mesh topology
FIGURE 2.5 Hybrid topology
FIGURE 2.6 OSI TCP/IP comparative model
FIGURE 2.7 TCP three-way handshake
FIGURE 2.8 TCP sequencing
FIGURE 2.9 Residential network setup
FIGURE 2.10 Typical enterprise network
FIGURE 5.1 The three-way handshake
FIGURE 5.2 Half-open scan against closed and open ports
FIGURE 5.3 Xmas tree scan
FIGURE 5.4 An FIN scan against a closed port and an open port
FIGURE 5.5 A NULL scan against a closed and an open port
FIGURE 5.6 Results of a banner grab
FIGURE 5.7 A network map built by a network-mapping software package
FIGURE 8.1 JPS Virus Maker user interface
FIGURE 8.2 TCPView interface
FIGURE 9.1 TCP three-way handshake packet
FIGURE 9.2 Macof MAC flood
FIGURE 9.3 Cain and Abel
FIGURE 11.1 Basic program stack
FIGURE 11.2 Smashing the stack
FIGURE 11.3 Smashing the stack
FIGURE 12.1 Session hijack
FIGURE 12.2 Active attack
FIGURE 12.3 Passive attack
FIGURE 12.4 Spoofing
FIGURE 12.5 Source routing
FIGURE 12.6 Desynchronizing a connection
FIGURE 12.7 TCP three-way handshake
FIGURE 12.8 MITM attack
FIGURE 15.1 A Yagi antenna
FIGURE 15.2 A parabolic antenna
FIGURE 17.1 A drive degausser
FIGURE 17.2 A mantrap installed in a lobby
FIGURE 17.3 One kind of cipher lock
FIGURE 17.4 Lock-picking tools

List of Tables

TABLE 1.1 Available types of pen tests
TABLE 2.1 Hex, binary, and decimal
TABLE 2.2 Well-known ports
TABLE 2.3 Registered ports of interest
TABLE 3.1 Cracking times for 40- and 56-bit keys
TABLE 5.1 TCP flags
TABLE 5.2 Results of UDP scanning against closed and open ports
TABLE 5.3 Active vs. passive fingerprinting
TABLE 9.1 Wireshark filters
TABLE 9.2 Wireshark filter breakdown
TABLE 9.3 Wireshark CLI tools
TABLE 12.1 Dissected IDs
TABLE 15.1 Wireless standards
TABLE 15.2 Common wireless terms
Exercise 2.1 Finding the maC address
Exercise 4.1 Finding the IP Address of a Website
Exercise 4.2 Examining a Site
Exercise 7.1 Extracting Hashes from a System
Exercise 7.2 Creating Rainbow Tables
Exercise 7.3 Working with Rainbow Crack
Exercise 7.4 PSPV
Exercise 8.1 Creating a Simple Virus
Exercise 8.2 Using Netstat to Detect Open Ports
Exercise 8.3 Using TCPView to Track Port Usage
Exercise 9.1 Sniffing with Wireshark
Exercise 9.2 Sniffing with TCPdump
Exercise 9.3 Understanding Packet Analysis
Exercise 11.1 Performing a SYN Flood
Exercise 11.2 Seeing LOIC in Action
Exercise 12.1 Performing an MITM Attack
Exercise 13.1 Performing a Password Crack

Pages

Guide

Cover
Table of Contents
Begin Reading