A

absolute addresses, nasm

ACCEPT target, Securing GNU/Linux Systems with netfilter/iptables

access control, Limiting Access, User Access Restriction, SSH Authentication, File Permissions, Remote File Access with SSH, Remote File Access with SSH

host hardening and, Limiting Access

remote login, SSH Authentication

SSH support, User Access Restriction, Remote File Access with SSH

SSH troubleshooting, File Permissions, Remote File Access with SSH

access points, 802.11 Network Basics, 802.11 Frames, 802.11 Frames, How Wireless Discovery Tools Work, Using Kismet, AirDefense Mobile , Airpwn, Airpwn Configuration Files, Installing Karma

adhoc mode networks and, 802.11 Frames

AirDefense Mobile tool, AirDefense Mobile

Airpwn tool and, Airpwn, Airpwn Configuration Files

creating associations, How Wireless Discovery Tools Work

default settings vulnerability, Using Kismet

defined, 802.11 Network Basics

infrastructure mode networks and, 802.11 Frames

Karma tool and, Installing Karma

ACCESS-POINT module (Karma), Basic Configuration

ACK packets (TCP), TCP Scanning, TCP Scan Types, An Example of Using Multiple Scan Types, Allowing Inbound Connections with BSD ipfw2/natd, Using tcpdump to Extract Packets

filtering, Using tcpdump to Extract Packets

Nmap support, An Example of Using Multiple Scan Types

purpose, TCP Scan Types

three-way handshake, TCP Scanning

tracking session state, Allowing Inbound Connections with BSD ipfw2/natd

ACK scan, Special TCP Scan Types in Nmap, An Example of Using Multiple Scan Types

active defense case study, Case Study: Active Defense

active fingerprinting, Fingerprinting LAN Hosts

Active Internet Connections section (netstat), Finding a Linux Backdoor with Netstat, Finding a Windows Backdoor with Netstat

ACT_GATHER_INFO category, Plug-in Code Example

AddHotKey function (IDC), Interacting with the IDA database

address translation, Network Address Translation

add_header option (SpamAssassin), SpamAssassin Variables, Administrator Settings

adhoc mode networks, 802.11 Frames

Adore-ng rootkit, Uninstalling a process you cannot see

advanced option (Metasploit), Hidden Options, Hidden Options

adware, Conclusion, Failed tests

AES (Advanced Encryption Standard), Encryption for BO2k Communications, Concealing the BO2k Protocol, Removing BO2k, The SSH-2 Protocol, GPG, Windows Filesystem Encryption with PGP Disk

BO2k communications, Encryption for BO2k Communications, Concealing the BO2k Protocol, Removing BO2k

GPG support, GPG

PGP Disk for Windows and, Windows Filesystem Encryption with PGP Disk

SSH-2 support, The SSH-2 Protocol

Afick file integrity checker, Comparing File Integrity Checkers

agent forwarding, Agent Forwarding

agents, The Local Side, Using the Mini-Shell, Bouncing Off an Installed Agent, Bouncing Off an Installed Agent, Mass Scale Exploitation

bouncing off, Bouncing Off an Installed Agent

Core Impact support, The Local Side, Using the Mini-Shell

surviving reboots, Bouncing Off an Installed Agent, Mass Scale Exploitation

Aggressive timing template, Unicornscan

Aide file integrity checker, Aide

aiding and abetting, Vulnerability Reporting, Vulnerability Reporting

Aircrack tool, Wireshark at a Glance, WEP and WPA Encryption

Aircrack-ng suite, Aircrack

AirDefense Mobile tool, AirDefense Mobile

AirMagnet Handheld Analyzer, AirMagnet Analyzers

AirMagnet Laptop Analyzer, AirMagnet Analyzers

airodump program, Linux Installation

Airopeek tool, Other Wardriving Tools

Airpwn tool, Shadow Browsing, WEP and WPA Encryption, Airpwn

airpwn_response function, Scripting with Airpwn

AIX operating system, Comparing File Integrity Checkers

Allison, Jeremy, Rainbow Cracking

AllowGroups option (SSH), User Access Restriction

AllowUsers option (SSH), User Access Restriction

allow_user rules option (SpamAssassin), Administrator Settings

alpha2 encoder, Disguising Shellcode, Metasploit Framework's msfencoder

alternate data streams, Sfind.exe: Discover Files Hidden in Alternate Data Streams, FileStat.exe: Very Detailed Data on a Specific File, File streams, Working with Alternate Data Streams, Streams: Find and Delete Data Hidden in Streams the Sysinternals Way

deleting hidden data, Streams: Find and Delete Data Hidden in Streams the Sysinternals Way

FileStat support, FileStat.exe: Very Detailed Data on a Specific File

hidden files in, Sfind.exe: Discover Files Hidden in Alternate Data Streams, File streams

working with, Working with Alternate Data Streams

AMD virtualization technology, Sandboxing with OS Virtualization

AMP (Assessment Management Platform), Assessment Management Platform (AMP)

AnalyseArea function (IDC), Interacting with the IDA database

anti-circumvention rules (DMCA), Reverse Engineering, Contracts, and Trade Secret Law, Reverse Engineering and Anti-Circumvention Rules

anti-virus software, Network Scan, Windows Rootkit: Hacker Defender, Making hxdef harder to detect, Norton Antivirus, Installation Test, Configuration Tuning, Procmail

detecting hxdef, Windows Rootkit: Hacker Defender, Making hxdef harder to detect

Norton Antivirus, Norton Antivirus

Procmail, Procmail

testing, Installation Test, Configuration Tuning

testing remote servers and, Network Scan

AOL Instant Messenger, Sniffing Plain-Text Passwords

APIs, Differentiating Call Results, Windows Rootkit Detectors, Functionalities of IceSword, The Spike API

filtering, Differentiating Call Results

IceSword and, Functionalities of IceSword

Rootkit Revealer and, Windows Rootkit Detectors

Spike framework and, The Spike API

Apple Mail program, Encryption and Signature with S/MIME

application layer, Tracerouting: A Step-by-Step Example, File and Email Signing and Encryption, Stunnel

encryption at, File and Email Signing and Encryption, Stunnel

tracerouting and, Tracerouting: A Step-by-Step Example

applications, How Scanners Work, UDP Scan Types, Application Fingerprinting

fingerprinting, UDP Scan Types, Application Fingerprinting

networked scanning, How Scanners Work

ArchiveBlockMax option (clamd/clamdscan), On-Access Scanning

ArchiveMaxCompressionRatio option (clamd/clamdscan), On-Access Scanning

ArchiveMaxFiles option (clamd/clamdscan), On-Access Scanning

ArchiveMaxFileSize option (clamd/clamdscan), On-Access Scanning

ArchiveMaxRecursion option (clamd/clamdscan), On-Access Scanning

arithmetic expressions, Score

ARP poisoning, Using ettercap and arpspoof on a Switched Network, Packet-Crafting Examples with Scapy, SSH Man-in-the-Middle Attacks

ARP protocol, Dealing with Blocked Pings, Running arpspoof from the dsniff suite, Dealing with Static ARP Tables, Navigating Between Layers, Examples of creating Scapy add-ons, Fuzzing, esic, isic, icmpsic, tcpsic, udpsic, and multisic, isic, icmpsic, tcpsic, udpsic, and multisic, Berkeley Packet Filter (BPF)

esic tool and, esic

ettercap support, Running arpspoof from the dsniff suite

ISIC support, isic, icmpsic, tcpsic, udpsic, and multisic, isic, icmpsic, tcpsic, udpsic, and multisic

Nmap support, Dealing with Blocked Pings

Scapy program, Navigating Between Layers, Examples of creating Scapy add-ons

sliced network scan and, Fuzzing

static tables, Dealing with Static ARP Tables

tcpdump and, Berkeley Packet Filter (BPF)

ARP spoofing, Using ettercap and arpspoof on a Switched Network

Arpd daemon, Implementing Honeyd

arpspoof program, Running ettercap, Running arpspoof from the dsniff suite, Dealing with Static ARP Tables, Sniffing Plain-Text Passwords, ARP Cache Poisoning

ARP cache poisoning, ARP Cache Poisoning

dsniff support, Running arpspoof from the dsniff suite, Dealing with Static ARP Tables

fingerprinting hosts, Sniffing Plain-Text Passwords

overview, Running ettercap

arrays, global variables and, Faking global variables with arrays

AS (Autonomous System) numbers, Tracerouting: A Step-by-Step Example

as application (Unix), Looking for Hooks

ASCII character set, Metasploit Framework's msfencoder, Encryption and Signature with GPG, File Signature, Email Encryption and Signature, Advanced Dump Display, Basic Wireshark Display Filters, Basic Wireshark Display Filters, Editing packet payloads, Riot

digital signatures and, File Signature

email encryption and, Email Encryption and Signature

file encryption and, Encryption and Signature with GPG

Netdude support, Editing packet payloads

Riot support, Riot

tcpdump support, Advanced Dump Display

UTF-16 encoding and, Metasploit Framework's msfencoder

Wireshark support, Basic Wireshark Display Filters, Basic Wireshark Display Filters

AskAddr function (IDC), Interacting with the IDA database

AskFile function (IDC), Interacting with the IDA database

AskLong function (IDC), Interacting with the IDA database

AskStr function (IDC), Interacting with the IDA database

AskYN function (IDC), Interacting with the IDA database

assembly language, GNU Compiler Collection, Building shellcode from assembly language, ShellForge, Searching for immediate values

building shellcode from, Building shellcode from assembly language

GCC support, GNU Compiler Collection

reverse engineering and, Searching for immediate values

ShellForge support, ShellForge

Assessment Management Platform (AMP), Assessment Management Platform (AMP)

association request frames, How Wireless Discovery Tools Work

association response frames, How Wireless Discovery Tools Work

asymmetric keys, The SSH-2 Protocol, Theory of Operations

AT&T Research Lab, VNC

attack surface area of hosts, Allowing limited inbound connections

authentication, WebInspect Scan, WebInspect Scan, 802.11 Frames, Capturing Packets and Decrypting Traffic with Kismet, VNC, Consolidating the Backdoor, Encryption plug-in, Configuring a BO2k Client, Using the BO2k Backdoor, The Hijack listener, Allowing limited inbound connections, Verifying Your Coverage, The SSH-2 Protocol, The User Authentication Layer, The User Authentication Layer, SSH Authentication, Source Code Transfer, PuTTY, The Do-It-Yourself Way with rpmverify, Samhain, Fuzzing Web Applications

base keys and, Samhain

BO Peep support, The Hijack listener

BO2k support, Encryption plug-in, Configuring a BO2k Client, Using the BO2k Backdoor

firewalls and, Allowing limited inbound connections

HMAC and, The Do-It-Yourself Way with rpmverify

host hardening and, Verifying Your Coverage

infrastructure mode networks and, 802.11 Frames

keyboard-interactive method, The User Authentication Layer

MAC addresses and, Capturing Packets and Decrypting Traffic with Kismet

NTLM, WebInspect Scan, Fuzzing Web Applications

PuTTY support, PuTTY

SSH support, The SSH-2 Protocol, The User Authentication Layer, SSH Authentication, Source Code Transfer

VNC and, VNC, Consolidating the Backdoor

WebInspect support, WebInspect Scan

authentication request frames, 802.11 Frames

authentication response frames, 802.11 Frames

authorization, Computer Trespass Laws: No "Hacking" Allowed, What Is Adequate Authorization to Access a Computer?, Common Law Computer Trespass, Law and Ethics: Protecting Yourself from Computer Trespass Claims

adequate for computer access, What Is Adequate Authorization to Access a Computer?, Common Law Computer Trespass

computer trespass and, Computer Trespass Laws: No "Hacking" Allowed, Law and Ethics: Protecting Yourself from Computer Trespass Claims

authorized_keys file, User's Public Key Distribution, SSH Troubleshooting

auth_null.dll plug-in, Encryption plug-in, Configuring a BO2k Client

Auto-Protect feature (Norton), Configuration Tuning

Autodafé fuzzer, Next-Generation Fuzzing

Autonomous System (AS) numbers, Tracerouting: A Step-by-Step Example

Autoruns tool (Sysinternals), Autoruns: What Runs Without Your Help?

Autoruns utility, Controlling Services

autossh package, Perpetual Tunneling with autossh

Ava application (Adore-ng), Installing Adore

avalanche effect, File Integrity Hashing