List of Sidebars

Module 5: System Hacking

Module Objective
Administrator Password Guessing
Performing automated password guessing
Tool: Legion
Hacking tool: NTInfoScan (now CIS)
Password guessing Countermeasures
Monitoring Event Viewer Logs
Password Sniffing
Hacking Tool: LOphtcrack
Hacking Tool: KerbCrack
Privilege Escalation
Tool: GetAdmin
Tool: hk.exe
Manual Password Cracking Algorithm
Automatic Password Cracking Algorithm
Password Types
Types of Password Attacks
Cracking NT/2000 passwords
Redirecting SMB Logon to the Attacker
Hacking Tool: SMB Relay
SMBRelay man-in-the-middle Scenario
SMBRelay Weakness & Countermeasures
Hacking Tool: SMB Grind
Hacking Tool: SMBDie
Hacking Tool: NBTDeputy
NetBIOS DoS Attack
Hacking Tool: John the Ripper
What is LanManager Hash?
Password Cracking Countermeasures
Keystroke Loggers
Spy ware: Spector (www.spector.com)
Hacking Tool: eBlaster (www.spector.com)
IKS Software Keylogger
Hacking Tool: Hardware Key Logger (www.keyghost.com)
Anti Spector (www.antispector.de)
Hacking Tool: RootKit
Planting the NT/2000 Rootkit
Rootkit Countermeasures
Covering Tracks
Disabling Auditing
Clearing the Event log
Tool: elsave.exe
Hacking Tool: WinZapper
Evidence Eliminator
Hiding Files
Creating Alternate Data Streams
Tools: ADS creation and detection
NTFS Streams countermeasures
Stealing Files using Word Documents
Field Code Counter measures
What is Steganography?
Tool: Image Hide
Tool: Mp3Stego
Tool: Snow.exe
Tool: Camera/Shy
Steganography Detection
Tool: dskprobe.exe
Buffer overflows
Outlook Buffer Overflow
List of Buffer Overflow Cases
Protection against Buffer Overflows
Summary

Module 6: Trojans and Backdoors

Module 9: Social Engineering

Module Objective
What is Social Engineering?
Art of Manipulation.
Human Weakness
Common Types of Social Engineering
Human based - Impersonation
Example
Example
Computer Based Social Engineering
Reverse Social Engineering
Policies and Procedures
Security Policies - Checklist
Summary

Module 10: Session Hijacking

Module Objective
Understanding session hijacking
Spoofing Vs Hijacking
Spoofing Vs Hijacking
Steps in Session Hijacking
Types of session Hijacking
Sequence Numbers
Programs that perform Session Hijacking
Hacking Tool: Juggernaut
Hacking Tool: Hunt
Hacking Tool: TTY Watcher
Hacking Tool: IP watcher
T-Sight
Remote TCP Session Reset Utility
Protecting against Session Hijacking
Summary

Module 11: Hacking Web Servers

Module Objective
How Web Servers Work
Popular Web Servers and Common Security Threats
Apache Vulnerability
Attacks against IIS
IIS Components
ISAPI DLL Buffer Overflows
IPP Printer Overflow
Hacking Tool: IISHack.exe
IPP Buffer Overflow Countermeasures
ISAPI DLL Source disclosures
ISAPI.DLL Exploit
IIS Directory Traversal
Unicode
IIS Logs
Hacking Tool: IISxploit.exe
Hacking Tool: execiis-win32.exe
Hacking Tool: Unicodeuploader.pl
Hacking Tool: cmdasp.asp
Escalating Privileges on IIS
Hacking Tool: iiscrack.dll
Hacking Tool: ispc.exe
Unspecified Executable Path Vulnerability
Hacking Tool: CleanIISLog
File System Traversal Counter measures
Solution: UpdateExpert
cacls.exe utility
Network Tool: Whisker
Network Tool: Stealth HTTP Scanner
Hacking Tool: WebInspect
Network Tool: Shadow Security Scanner
Countermeasures
Summary

Module 14: SQL Injection

Module Objective
Introduction - SQL Injection
OLE DB Errors
Input Validation attack
Login Guessing & Insertion
Shutting Down SQL Server
Extended Stored Porcedures
SQL Server Talks!
Hacking Tool: SQLDict
Hacking Tool: SQLExec
Hacking Tool: sqlbf
Hacking Tool: SQLSmack
Hacking Tool: SQL2.exe
Preventive Measures
Summary

Module 16: Viruses

Module Objective
W32.CIH.Spacefiller (a.k.a chernobyl)
Win32/Explore.Zip Worm
I Love You Virus
What is SQL Insertion Vulnerability?
Melissa Virus
Pretty Park
BugBear Virus
Klez
SirCam Worm
Nimda Virus
Code Red Worm
Writing your own simple virus
Hacking Tool: Senna Spy Internet Worm Generator 2000
MS Blaster
Anti-Virus Software
Summary

Module 17: Novell Hacking

Module Objectives
Novell Netware Basics
Default Accounts and Settings
Valid Account names on Novell Netware
Hacking Tool: Chknull.exe
Access the password file in Novell Netware
Tool: NOVELBFH.EXE & NWPCRACK.EXE
Hacking Tool: Bindery.exe & BinCrack.exe
Hacking Tool: SETPWD.NLM
Other Tools
Hacking Tool: Getit
Hacking Tool: Burglar, SetPass
Hacking Tool: Spooflog, Novelffs
Hacking Tool: Gobbler
Hacking Tool: Pandora
Pandora Countermeasure
Summary

Module 19: Evading IDS, Firewalls and Honeypots

Module Objectives
Intrusion Detection Systems (IDS)
System Integrity Verifiers (SIV)
Intrusion Detection
How does an IDS match signatures with incoming traffic?
Protocol Stack Verification
Application Protocol Verification
What happens after an IDS detects an attack?
IDS Software Vendors
Snort (http://www.snort.org)
Evading IDS Systems
Complex IDS Evasion
Hacking Tool: fragrouter
Hacking Tool: Tcpreplay
Hacking Tool: SideStep.exe
Hacking Tool: Anzen NIDSbench
Hacking Tool: ADMutate
Tools to inject strangely formatted packets on to the wire
What do I do when I have been hacked?
Hacking through firewalls
Bypassing Firewall using Httptunnel
Placing Backdoors through Firewalls
Hiding Behind Covert Channel: Loki
Hacking Tool: 007 Shell
Hacking Tool: ICMP Shell
ACK Tunneling
Hacking Tool: AckCmd
Honey pots
Honeypot Software Vendors
Honeypot-KFSensor
Summary