Hacking and Security: Understanding Active Attacks, Password Hacking, and Physical Attacks, Lecture notes of Logic

Download Hacking and Security: Understanding Active Attacks, Password Hacking, and Physical Attacks and more Lecture notes Logic in PDF only on Docsity!

HackingHacking

Beginner to Expert Guide to Computer Hacking, Basic Security, andBeginner to Expert Guide to Computer Hacking, Basic Security, and

Penetration Testing Penetration Testing

By James PattersonBy James Patterson

Introduction

I want to thank you and congratulate you for downloading the book, “Hacking: Beginner's Guide to Computer Hacking, Basic Security, and Penetration Testing. ” This book will teach you how you can protect yourself from most common hacking attacks -- by knowing how hacking actually works! After all, in order to prevent your system from being compromised, you need to stay a step ahead of any criminal hacker. You can do that by learning how to hack and how to do a counter-hack. Within this book are techniques and tools that are used by both criminal and ethical hackers – all the things that you will find here will show you how information security can be compromised and how you can identify an attack in a system that you are trying to protect. At the same time, you will also learn how you can minimize any damage in your system or stop an ongoing attack. Thanks again for downloading this book. I hope you enjoy it!

Table of Contents

Introduction Table of Contents Chapter 1: Hacking 101 Who Hacks? Is Hacking for Everyone? What You Will Get Here Is It Difficult to Learn and Understand? Skills That You Need to Have Chapter 2: How Hackers Find Their Targets Things That Hackers Search For Establishing a Hacking Plan Setting Goals Chapter 3: Mapping Out Your Hacks Organizing Your Project When Should You Start Hacking? What Do Others See? Mapping the Network Doing System Scans A Look at System Vulnerabilities Chapter 4: About Attacks What is a Passive Attack? What is an Active Attack? Chapter 5: Hacking Tools Chapter 6: How to Fool Targets Spoofing Man-in-the-Middle Attacks Chapter 7: Hacking Passwords How to Crack Passwords Notes on Password Encryption Other Ways to Uncover Passwords Chapter 8: Hacking Network Connections Hacking a WEP Connection The Evil Twin Hack

Chapter 9: Introduction to Mobile Hacking Hacking Mobile Apps Exploiting a Mobile Device Remotely Chapter 10: Social Engineering Social Engineering as Art and Science How Social Engineering Happens Types of Social Engineering Attacks What You Can Do Against Social Engineering Chapter 11: Physical Attacks Why Physical Attacks Work Discovering Vulnerabilities Securing the Periphery Conclusion

ChaChapter 1pter 1: Hacking 101: Hacking 101

Whenever you encounter the wordWhenever you encounter the word hackinghacking, you probably associate it with sending an encrypted program, you probably associate it with sending an encrypted program to another user, and then being able to get unauthorized access on a remote computer.to another user, and then being able to get unauthorized access on a remote computer. However, the termHowever, the term hackinghacking^ was used to define any act of tinkering a computer’s hardware or softwarewas used to define any act of tinkering a computer’s hardware or software other than its intended use, in order to improve it and find out how electronic devices can workother than its intended use, in order to improve it and find out how electronic devices can work electronically.electronically. While that definition technically still holds true, hacking has definitely made a whole new turn especiallyWhile that definition technically still holds true, hacking has definitely made a whole new turn especially when it comes to how another person can access someone else’s computer. Before you think that hackingwhen it comes to how another person can access someone else’s computer. Before you think that hacking is all about getting past securities to wreak havoc on somebody else’s digital device, you might need tois all about getting past securities to wreak havoc on somebody else’s digital device, you might need to know the typknow the types ofes of hackers that exist nowadays.hackers that exist nowadays.

Is Hacking for Everyone?

While hacking is typically attributed to people who know how to code, everyone can learn how to hack. At the same time, it is also best to keep in mind that there is no one way of learning how to hack – hacks to improve or attack systems are created through continuous evolution of a user’s knowledge on how a system should perform. As you read this, you can count on that possibility that a new way to protect or attack a device or a network has already been created. If you have a computer or a mobile phone, then you are the best candidate for being a hacker. You have the right motivation to learn how to tinker with a system and improve the way you use it. Since you connect with other users out there through downloads, messages, online purchases, or uploads, you need to pay extra attention to how you can secure your own system. To do this, you need to learn how a black hat hacker thinks, starting from the motivation that they have in attacking a system, to the rudiments of an attack. From that point, you will understand that you have plenty of preventive measures when it comes to stopping an unauthorized intrusion and even launch a counter attack.

What You Will Get Here

This book will tell you about the strategies commonly used by black hat hackers, which will enable you to test your own system’s vulnerabilities and how you can fall into different traps that are laid out for most users out there. Here, you will learn how people become candidates to become potential victims of criminal hackers and how you can protect yourself from such attacks. At this point, you get the idea – you are on your way to become an ethical hacker. Since your main concern is your own security and making it a point that you understand why attacks go through different systems, you will also need to learn how attacks are performed in the first place. You will be able to figure out how criminal hackers penetrate devices by learning tools, techniques, and attacks that they use in their trade. Once you understand how an electronic device can be compromised, you will have a better idea on what you can do to prevent that from happening.

Skills That You Need to Have

To become a good ethical hacker, you need to have the following skills:

1. Intermediate computer skills This means that you need to have skills that go beyond creating a Word document or being able to surf the web. To be a hacker, you need to know how to use different Windows command lines, set up a network, or edit your computer’s registry.
2. Good networking skills Since many, if not most, of hacker attacks are done online, you need to master networking concepts and terms, such as: WEP versus WPS passwords NAT MAC addresses Routers Ports VPN IPv DNS Subnetting DHCP Private and public IPs IPv OSI modelling Packets TCP/IP
3. Using a Linux operating system Almost all hackers will have to use the Linux OS because it allows programs and tweaks that are not possible in Windows and Mac operating systems. Almost all hacking tools that you can find also make use of this operating system.
4. Virtualization

Before you even try testing an attack on a live system, you need to make sure that you know what you are doing. To make sure that you are doing things right, you might want to try out a hack first on a virtualization software package, such as the VMWare Workstation. Using virtual workstations will provide you a safe environment for your hack tests and prevent you from unintentionally causing damage to your own device.

5. Tcpdump or Wireshark The tcpdump is known as a command line protocol analyser or a sniffer, while Wireshark is known as the most popular tool available that does the same function.
6. Knowledge of Security Technologies and Concepts Any hacker should be able to understand the most important concepts and technologies related to information technology. For this reason, you need to be familiar with wireless technology and concepts, such as Secure Sockets Layer (SSL), firewalls, Intrusion Detection System (IDS), Public Key Infrastructure (PKI), and so on.
7. Scripting Skills Having the ability to create and edit scripts allows you to create your own tools and manage to be independent from the tools developed by other hackers. By being able to build your own tools, you enable yourself to develop better defenses as criminal hackers create better hacks. To do this, you need to become a pro at using at least one of the commonly used scripting languages, such as Ruby on Rails or Python.
8. Database Skills If you want to understand how hackers infiltrate your system’s databases, you need to see to it that you know how databases work. This means that you need to master a database management system such as Oracle or MySQL.
9. Reverse Engineering Reverse engineering enables you to convert a piece of malware or similar exploit into a more advanced hacking tool. With this skill comes the understanding that almost all exploits done by hackers come from other existing exploits – once you understand how a malware or exploit feature works, you will have a better understanding of how other hacks work against a system.
10. Cryptography Cryptography, as a skill, enables you to understand how hackers conceal activities and cover their tracks while performing hacks. It also helps you understand the strengths and weaknesses of different algorithms used to decrypt personal information, such as stored passwords.