D

Damn Vulnerable Web Application (DVWA)

Grendel-Scan

241

Nmap scan

233–234 , 234f

penetration testing targets

22

Database administrator (DBA)

database installation

192

Microsoft SQL Server, password creation

194

Oracle databases

202–204

Database hacking

audit log files

193

basic terminology

190

CGI vulnerability testing

223

communication

193

core technologies

190

enterprise applications

294 , 298

hacking case study

212 , 213f–216f

hands-on challenge

215

installation

191

Nmap enterprise application testing

300

objective

189

passwords

192

sample database

191t

system resources

193

Database management systems (DBMSs)

see alsoMicrosoft SQL Server ; MySQL ; Oracle database management system

vs. database

190

Database owner (DBO), Microsoft SQL Server

roles and permissions

195

users

194

Database query injection attacks

enterprise applications

298

soapUI enterprise application testing

313

sqlmap

245

WAFWOOF

234

web application assessment

232

Grendel-Scan

238–239

SQLix

243–245

web server testing case study

252 , 253f

Database server

database query injection attacks

232

enterprise applications

case study

314t

hands-on challenge

318

Metasploit

313

multi-tier architecture

293 , 294f

Netstat

301

Nmap scan

300

real-time interfaces

297f

scalability issues

293

hands-on challenge

215

internal pen-test lab

383

mssql_payload

198

SIDs discovery

193

Data capture

GPS tip

210

GPS under Linux

211

phishing

147

proxy servers

240

Data Encryption Standard (DES), LEAP attacks

227

Data transfer, pen-test lab security

378

DBA

seeDatabase administrator (DBA)

DBMSs

seeDatabase management systems (DBMSs)

DBO

seeDatabase owner (DBO)

Deauthentication attack

Aireplay-ng

345 , 347f

basic considerations

346

CoWPAtty

358

wireless penetration case study

368–369

Debian, Operator

19

Decibels (dB), antenna gain

326

“Deep packet inspection” firewall, definition

265

“Default deny rule bases,” definition

219–220

Default pages, vulnerability testing

basic approach

223

exploitation basics

230

overview

221

De-ICE.net PenTest disks, penetration testing targets

22

Demilitarized Zone (DMZ), external pen-test lab

383

Denial of service (DoS)

bandwidth issues

114

Cisco Global Exploiter

280

HSRP

282 , 283f

Nmap stealth scanning

106

noisy (IDS) testing case study

136

scanning and enumeration

97

scanning process

98

WLAN vulnerabilities

324

Department of Defense, pen-test lab hard drive sanitization

380

DES

seeData Encryption Standard (DES)

“Desk scans,” before brute forcing

207

DHCP

seeDynamic Host Configuration Protocol (DHCP)

Dictionary attacks

BackTrack

285–286

CoWPAtty

358–359 , 361

enterprise application integrations

299

enterprise applications

299

Fast-Track

201–202

ike-scan

123

LEAP attacks

330

list file format

359

Oracle Password Guesser

208–209

wireless penetration testing tools

324–325

WLAN vulnerabilities

321–324

WPA attacks

330

WPA-PSK networks

320

DigDug

footprinting

65–67

footprinting case study

90f

Dig tool

domain record extraction

57

examples

63f

footprinting

61

options list

63t

DirBuster

configuration

247f

web directory scanning

245

Direct data integrations, enterprise applications

298–299

Directional antenna, WLAN discovery

325–326

Directory traversal attacks, web application assessment

231

Disassembler, web server testing

223

DMZ

seeDemilitarized Zone (DMZ)

DNS

seeDomain name system (DNS)

Dnsenum.pl, footprinting

62–65

Dnsmap, verification

84 , 92f

DNS Name Server (NS)

footprinting

basic approach

55–56

DNS

50

domain record extraction

57

intelligence gathering, TLD

39

Dnsreverse.py, DNS server brute forcing

65

DOC files, Trojan horses

150

Documentation, pen-test lab

design

373

findings

380–381

installs

388–389

results

389

Documentation management, enterprise applications

292

Domain name expansion

intelligence gathering

38–40

Netcraft wildcard DNS query example

40f

Domain Name Registrar

DNS footprinting

50

footprinting

54

Domain name registries, footprinting

54

Domain name space, DNS footprinting

50

Domain name system (DNS)

BiLE suite tld-expand.pl

48

cyberworld target definition

30

enumeration, definition

110

external penetration test

129

footprinting

basic considerations

49–53

DigDug

65

dig tool

61

dnsenum.pl

62–64

DNS query diagram

51f

DNS usage tips

52–53

domain record extraction

57

forward DNS brute force

57–58

host command

61

nslookup

60–61

record types

52t

SMTP

54–55

WHOIS proxies

60

zone transfer attempt

56–57

intelligence gathering

case study

87–89

goals

33

link analysis

38

real-world intelligence

36

internal penetration test case study

131 , 134

IPv6 penetration

267

Live Hacking CD

14

network device case study

284

network device footprinting

268

Nikto scan

236

Nmap ICMP options

103

reconnaissance phase

authorized targets

31

TLDs

39

verification

74–75 , 78

vs. assigned Internet numbers

78

banners and web sites

80

basic approach

76

case study

90

dnsmap

80

reverse DNS verification

79–80

DoS

seeDenial of service (DoS)

DVD

BackTrack toolkit creation case study

24

LiveCD ISO images

6

LiveCDs

4

pen-test lab

data transfer

378

destruction and sanitization

379

labeling

379

toolkit booting

3

DVWA

seeDamn Vulnerable Web Application (DVWA)

Dynagen, pen-test lab

395–396 , 401

Dynamic domain name system (DynDNS)

external penetration test

129

internal penetration test case study

134

Dynamic Host Configuration Protocol (DHCP)

ASS

274

DHCPv6, and IPv6

266

internal pen-test lab

382–383

Dynamips, pen-test lab

395–396 , 401

DynDNS

seeDynamic domain name system (DynDNS)