Ethical Hacking - In Times Of Cybernetic Attacks And Digital Threats

Unit 3: Scanning, Enumeration Section 3.1: Network scanning, enumeration concepts Network Scanning Active system identification, open ports, services, firewall rules, etc. Network Layer analyze (network scanning)/ system (port scanning) Enumeration Determine user accounts, shared folders, etc. Direct interrogation: active connections Activities that implies target interaction Many request in order to obtain different types of information Live hosts, Open ports, Running service’s version Operating system, Network shares, Local users TheDepends on where you are scanning from (outside vs inside the network) European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 3: Scanning, Enumeration Section 3.2: Scanning tools ARP Ping - Determines only targets in local network (LAN) TCP Connect - Simple and fast method that creates complete TCP connections OS Fingerprinting Passive fingerprinting: Analyses the packets that are captured by a machine - Low precision Active fingerprinting: Send packets to the target to see how it react - High precision Banner Grabbing - Many services “present themselves” when we connect The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 3: Scanning, Enumeration Section 3.3: Spidering concept The first step in the process of attacking an application is gathering and examining some key information about it to gain a better understanding of what you are up against The mapping exercise begins by enumerating the application’s content and functionality in order to understand what the application does and how it behaves Much of this functionality is easy to identify, but some of it may be hidden, requiring a degree of guesswork and luck to discover Types of spidering: Automated: using tools (Burp, Paros Proxy, etc.) User directed: both manual and automated The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 4: System Hacking Section 4.1: Concepts Exploitation is a piece of programmed software or script which can allow hackers to take control over a system, exploiting its vulnerabilities. Exploit Payload Vulnerability Payload - the code to be executed after the vulnerability is activated, written as Assembly Language (ASM) Is platform dependent - special exploits for Windows, others for Linux, Android, Mac OS, etc Different types of payloads executes a command or program on remote system download/Upload a file from a URL and execute add user to system accounts shell – provide an interactive shell (Bind shell vs Reverse shell) The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 4: System Hacking Section 4.2: Cracking passwords The passwords are the most used in the authentication mechanism The passwords are vulnerable to some types of attacks Identity theft represents momentary the “computer crime” with the highest rate of growth When a user inserts a password, its hash is computed and compared with the one stored in the database If those two values are the same, the user is then authenticated Salting – the insertion of a random value in hashes’ computing process - increased level of security The salt value is stored together with the hash value in the database If two users have the same passwords, those will be represented as different encrypted values in the database (due to the different salt) The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 4: System Hacking Section 4.3: Types of Password attacks What’s the difference between online and offline password attacks? The difference between offline and online password attacks could be the thing that prevents your account from being hacked and your organization from being breached Online Brute force Easy to be detected Offline Implies gaining the hash values stored locally or transmitted through the network Requires system access Network sniffing - Using tools that identify the network packages received and transmitted and can be copied offline and inspected to be easily identified by hackers The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 5: Malware Threats Section 5.1: Malware concepts Malware typically consists of code developed by cyberattackers, designed to cause extensive damage to data and systems or to gain unauthorized access to a network Malware is typically delivered in the form of a link or file over email and requires the user to click on the link or open the file to execute the malware Malware has actually been a threat to individuals and organizations since the early 1970s when the Creeper virus first appeared. Since then, the world has been under attack from hundreds of thousands of different malware variants, all with the intent of causing the most disruption and damage as possible. The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 5: Malware Threats Section 5.2: Malicious programs concepts Malicious programs There are three categories: Trojans and rootkits, Viruses, Worms A computer virus can contaminate other files However, viruses can infect outside machines only with assistance of computer users Malware testing http://www.virustotal.com A service that analyses suspicious files and facilities the quick detection of viruses, worms, Trojans and all kinds of malware detected Free and independent service Uses multiple antivirus engines (57 at this moment, but the number is continually increasing) The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 5: Malware Threats Section 5.2: Malicious programs concepts (cont.) Potentially malicious actions may include: Attempts to open, view, delete, modify files Attempts to format disk drives, etc. Modification of system settings (start-up, etc.) Initiation of network communication, etc. Monitoring and Detection of Internet Worms Speed is a crucial aspect here: SQL Slammer worm, appeared in January 2003 and infected more than 90% of vulnerable computers in the internet within 10 minutes; Successful worm attack typically lasts several days infecting hundreds of thousands of computers (Code Red, Nimda, Blaster, etc.); Aim: early detection The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 5: Malware Threats Section 5.3: Countermeasures Install antivirus software that detects and remove infections as they appear Pay attention to the instructions while downloading files or any programs from the Internet Update the antivirus software as often as possible Schedule regular scans for all drives Integrates with the operating system of the host computer and monitors program behaviour in real-time for malicious actions Blocks potentially malicious actions before they affect the system The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 6: Sniffing and Session Hijacking Section 6.1: Sniffing concept A packet sniffer represents a system with a network interface card that operates in promiscuous/monitor mode and capture network packets in real time Used for: Troubleshooting problems (including the security ones) and network analysis Network logging for future analysis (forensics) Hacking tool for username and password interception The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 6: Sniffing and Session Hijacking Section 6.2: Sniffing tools These are the well known tools that can be used for sniffing and also you can see the operating systems where can be used: tcpdump (http://www.tcpdump.org) Unix platform Command line utility WinDump (http://www.winpcap.org/windump/) tcpdump Windows version Ethereal / Wireshark (http://www.wireshark.org/) Has a graphical interface The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 6: Sniffing and Session Hijacking Section 6.3: Session hijacking Concept Exploitation of a valid computer session to gain unauthorized access to information or services in a computer system over TCP/UDP protocols Methods Session fixation where the attacker sets a user's session id to one known to him, for example by sending the user an email with a link that contains a particular session id. The attacker now only has to wait until the user logs in Session sidejacking where the attacker uses packet sniffing to read network traffic between two parties to steal the session cookie The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Unit 6: Sniffing and Session Hijacking Section 6.3: Session hijacking Methods Cross-site scripting where the attacker tricks the user's computer into running code which is treated as trustworthy because it appears to belong to the server, allowing the attacker to obtain a copy of the cookie or perform other operations Malware and unwanted programs can use browser hijacking to steal a browser's cookie files without a user's knowledge, and then perform actions (like installing Android apps) without the user's knowledge Brute-forcing session information (Ex. Telnet, or cookie values over HTTP(S)) The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Bibliography and relevant links Virus testing tools https://www.virustotal.com Certified Ethical Hacker al-hacker-ceh/ Ethical and Unethical Hacking 0-29053-5 9 OWASP https://owasp.org Tools used in Ethical Hacking thical-hacking-tools-to-look-out-for/ The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

Thank you for your attention! The European Commission's support for the production of this publication does not constitute an endorsement of the contents, which reflect the views only of the authors, and the Commission cannot be held responsible for any use which may be made of the information contained therein.

4. System Hacking 3.1 Network scanning, enumeration concepts 3.2 Scanning tools 3.3 Spidering concepts 3. Scanning, Enumeration 1.1 Information security overview 1.2 Hacking concepts 1.3 Elements of Information security 1. Introduction to Ethical Hacking 5.1 Malware concepts 5.2 Malicious programs concepts 5.3 Countermeasures 5. Malware Threats