Ethical Hacking

Explaining the Certification, Introducing Security
Introducing Hacking, Introduction to Ethical Hacking

Defining Footprinting, Information Gathering Methodology
Locate the Network Range, Hacking Tools

Definition, Types, Objectives, Classification of Scanning
Scanning Methodology, Hacking Tool, Countermeasures

What is EnumerationNetBios Null Sessions
Hacking Tools, Enumerating User Accounts
Active Directory Enumeration and Countermeasures

Administrator Password Guessing
Manual Password Cracking Algorithm
Automated Password Cracking, Password Types
Types of Password Attacks, Hacking Tools

Effect on Business, What is a Trojan
Overt and Covert Channels
Indications of a Trojan Attack
Reverse Engineering Trojans, Backdoor Countermeasures

Definition of sniffing
How a Sniffer worksPassive Sniffing
Active Sniffing, Hacking Tools, Sniffing Countermeasures

What is Denial of Service?
The goal of DoS (Denial of Service)
Impact and Modes of Attack, DoS Attack Classification
Hacking Tools, Countermeasures for Reflected DoS
Tools for Detecting DDOS Attacks

What is Social EngineeringArt of Manipulation
Human Weakness, Common Types of Social Engineering
Human-Based Impersonation

Understanding Session Hijacking, Spoofing vs Hijacking
Steps in Session Hijacking, Types of Session Hijacking
Hacking Tools, Protection against Session Hijacking
Countermeasures: IP Security

Popular Web Servers and Common Security Threats
Apache Vulnerability, Attack against IIS Console
Hacking Tools, Countermeasures
Increasing Web Server Security

Web Application Hacking, Anatomy of an Attack
Web Application Threats, Carnivore, Google Hacking
Countermeasures

Authentication- Definition, Authentication Mechanisms
Password Guessing, Query String, Cookies
Password Crackers Available
Hacking Tools, Countermeasures

Attacking SQL Servers, SQL Server Resolution Service
Osql-L Probing, Port Scanning, SQL Server Talks
Preventive Measures

Wireless Basics, Components of Wireless Network
Access Point Positioning, Rogue Access Points
Tools to Generate Rogue Access Points
Scanning Tools, Sniffing Tools
Securing Wireless Networks

Virus Characteristics, Symptoms of ‘virus-like’ attack
Indications of a Virus Attack
Virus / Worms found in the wild
Virus writing tools, Virus Checkers, Virus Analyzers

Understanding & Factors Affecting Physical Security
Wiretapping, Lock Picking Techniques
Spying Technologies

Linux Basics, Linux Vulnerabilities, Scanning Networks
Scanning & Linux Security Tools
Intrusion Detection System
Linux Security Auditing Tool
Linux Security Countermeasures

Intrusion Detection Systems, Ways to Detect Intrusion
Types of Intrusion Detection System
Intrusion Detection Tools
Honeypot Project, Tools to Detect Honeypot

Buffer Overflows, How a Buffer Overflow Occurs
Shellcode, NOPS, Countermeasures

Introduction to Penetration Testing (PT)
Categories of security assessments
Vulnerability Assessment
Limitations of Vulnerability Assessment, Testing
Penetration Testing Tools, Threat
Other Tools Useful in Pen-Test
Phases of Penetration Testing
Post Attack Phase and Activities
Penetration Testing Deliverables Templates

Insider Attacks, What is Covert Channel
Security Breach
Why Do You Want to Use Covert Channel
The motivation of a Firewall Bypass, Covert Channels Scope
Covert Channel: Attack Techniques
Simple Covert Attacks
Advanced Covert Attacks, Standard Direct Connection
Reverse Shell (Reverse Telnet)

Introduction of Virus, Types of Viruses
Symptoms of a Virus Attack
Prerequisites for Writing Viruses
Required Tools and Utilities, Virus Infection FlowChart
Components of Viruses, Testing Virus Codes
Tips for Better Virus Writing

Base 10 System, Base 2 System
Decimal 0 to 15 in Binary
Binary Addition (C stands for Canary)
Hexadecimal Number, Hex Example, Hex Conversion
Nibble, Computer memory, Characters Coding
ASCII & UNICODE, CPU, Machine Language
Compilers, Clock Cycle, Original Registers
Instruction Pointer
Pentium Processor, Interrupts, Interrupt handler
External interrupts and Internal interrupts, Handlers
Machine & Assembly Language, Assembler
Assembly Language Vs High-level Language
Assembly Language Compilers, Instruction operands
MOV instruction, ADD instruction, SUB instruction
INC and DEC instructions, Directive, Preprocessor
equ directive, %define directive, Data directives
Labels, Input and output, C Interface, Call
Creating a Program
Assembling & Compiling the C code
Linking the object files
Understanding an assembly listing file
Big and Little Endian Representation, Skeleton File
Working with Integers, Signed integers
Signed Magnitude, Two’s Complement
If statements, Do while loops
Indirect addressing, Subprogram
The Stack, The SS segment
ESP, The Stack Usage, The CALL, and RET Instructions
General subprogram form, Local variables on the stack
General subprogram form with local variables
The multi-module program, Saving registers
Labels of functions
Calculating addresses of local variables

Exploits Overview, Purpose of Exploit Writing
Prerequisites for Writing Exploits and Shellcodes
Types of Exploits, Stack Overflow, Heap Corruption
The Proof-of-Concept and Commercial Grade Exploit
Converting a Proof of Concept Exploit to Commercial Grade
Attack Methodologies, Socket Binding Exploits
Tools for Exploit Writing, Steps for Writing an Exploit
Difference Between Windows & Linux Exploit, Shellcode
NULL Byte, Types of Shellcodes
Steps for Writing a Shellcode
Tools Used for Shellcode Development
Issues Involved With Shellcode Writing

What is a BufferStatic Vs Dynamic Variables
Stack Buffers, Data Region, Memory Process Regions
What Is A StackWhy Do We Use A Stack
The Stack Region, Stack frame, Stack pointer
Procedure Call, Compiling the code to assembly
Call Statement, Return Address (RET), Word Size, Stack
Buffer Overflows
Why do we get a segmentation violation
Segmentation Error, Instruction Jump
Guess Key Parameters, Calculation, Shell Code

Buffer & Stack overflow
Writing Windows Based Exploits
Exploiting stack-based buffer overflow
OpenDataSource Buffer Overflow Vulnerability Details
Simple Proof of Concept, Windbg.exe
Analysis, EIP Register
Execution Flow, But where can we jump to?
Offset Address, The Query, Finding jmp esp
exe, listdlls.exe, Msvcrt.dll, Out.sql, The payload
ESP, Limited Space, Memory Address
Getting Windows API/function absolute address
Other Addresses, Compile the program, Final Code

Positive Applications of Reverse Engineering
Ethical Reverse Engineering, World War Case Study
DMCA Act, What is Disassembler
Why do you need to decompile
Professional Disassembler Tools, Decompilers
Program Obfuscation
Convert Assembly Code to C++ code
Machine Decompilers

Network Devices, Identifying a Router
HTTP Configuration Arbitrary Administrative Access Vulnerability, ADMsnmp, Solarwinds MIB Browser
Brute-Forcing Login Services, Hydra
Analyzing the Router Config
Cracking the Enable Password
Tool: Cain and Abel, Implications of a Router Attack
Types of Router Attacks, Router Attack Topology
Denial of Service (DoS) Attacks
Packet “Mistreating” Attacks
Cisco Router, Eigrp-tool, Tool: Zebra
Tool: Yersinia for HSRP, CDP, and other layers 2 attacks
Tool: Cisco Torch, Monitoring SMTP (port25) Using SLcheck
Monitoring HTTP(port 80) Cable Modem Hacking

Different OS in Mobile Phone
Different OS Structure in Mobile Phone
Evolution of Mobile Threat, What Can A Hacker Do
Vulnerabilities in Different Mobile Phones, Malware
Spyware, Blackberry, PDA, iPod, Viruses, Antivirus
Mobile: Is It a Breach of Enterprise Security
Security Tools, Defending Cell Phones and PDAs Against Attack, Mobile Phone Security Tips

Bluetooth Introduction, Security Issues in Bluetooth
Security Attacks in Bluetooth Devices
Bluetooth hacking tools, Bluetooth Viruses, and Worms
Bluetooth Security tools, Countermeasures

What is VoIP, VoIP Hacking Step, Footprinting
Scanning, Enumeration, Steps to Exploit the Network
Covering Tracks

Techniques used by Spammers
How Spamming is performed
Ways of Spamming, Statistics, Worsen ISP: Statistics
Top Spam Affected Countries: Statistics
Type of Spam Attacks, Spamming Tool
Anti-Spam Techniques, Anti-Spamming Tool
Countermeasures

What is Google hacking
What a hacker can do with a vulnerable site
Anonymity with Caches, Using Google as a Proxy Server
Traversal Techniques, Extension Walking, Site Operator
Locating Public Exploit Sites
Locating Vulnerable Targets
Directory Listings, Web Server Software Error Messages
Application Software Error Messages, Default Pages
Searching for Passwords

Ways of Getting Email Account Information
Vulnerabilities
Email Hacking Tools, Securing Email Accounts

Public-key Cryptography, Working of Encryption
Digital Signature, RSA (Rivest Shamir Adleman)
RC4, RC5, RC6, Blowfish, Algorithms, and Security
Brute-Force Attack, RSA Attacks
Message Digest Functions
SHA (Secure Hash Algorithm) SSL (Secure Sockets Layer)
What is SSH, Government Access to Keys (GAK) RSA Challenge, Distributed.net, Code Breaking: Methodologies
Cryptography Attacks, Disk Encryption, Magic Lantern
WEPCrack, Cracking S/MIME Encryption Using Idle CPU Time

Components of RFID Systems, RFID Collision, RFID Risks
HACKING USB DEVICES
Electrical, Software, USB Attack on Windows
Viruses & Worm
Hacking Tools, USB Security Tools, Countermeasures
HACKING DATABASE SERVERS
Hacking Oracle Database Server & SQL Server
Security Tools
SQL Server Security Best Practices: Administrator and Developer Checklists

Introduction to Internet Filter
Key Features of Internet Filters
Pros & Cons of Internet Filters
Internet Content Filtering Tool
Internet Safety Guidelines for Children

Internet, Proxy, Spyware, Email privacy, Cookies
Examining Information in Cookies
How Internet Cookies Work
How Google Stores Personal Information
Google Privacy Policy, Web Browsers, Web Bugs
Downloading Freeware, Internet Relay Chat
Pros and Cons of Internet Relay Chat
Electronic Commerce
Internet Privacy Tools: Anonymizers, Firewall Tools
Best Practices, Countermeasures

Statistics for Stolen & Recovered Laptops
Statistics on Security
Percentage of Organization Following the Security Measures, Laptop threats, Laptop Theft
Fingerprint Reader
Protecting Laptops Through Face Recognition
Bluetooth in Laptops
Securing from Physical Laptop Thefts
Hardware Security for Laptops
Protecting the Sensitive Data
Preventing Laptop Communications from Wireless Threats, Security Tips
Protecting the Stolen Laptops from Being Used

Security policies, Key Elements of Security Policy
Defining the Purpose and Goals of Security Policy
Role of Security Policy, Classification of Security Policy
Design of Security Policy, Contents of Security Policy
Configurations & Implementing Security Policies
Types of Security Policies, Policy Statements
Basic Document Set of Information Security Policies
E-mail, Software Security & Software License Policy
Points to Remember While Writing a Security Policy

Process of Software Activation, Piracy
Software Copy Protection Backgrounders
Warez, Tools

How Web Browsers Work
How Web Browsers Access HTML Documents
Protocols for an URL, Hacking Firefox, Firefox Security
Hacking Internet Explorer, Internet Explorer Security
Hacking Opera, Security Features of Opera
Hacking & Securing Safari, Hacking & Securing Netscape

Working of Proxy Server, Types of Proxy Server
Socks Proxy, Free Proxy Servers
Use of Proxies for Attack, How Does MultiProxy Work
TOR Proxy Chaining Software, AnalogX Proxy, NetProxy
Proxy+, ProxySwitcher Lite, Tool: JAP, Proxomitron
SSL Proxy Tool, How to Run SSL Proxy

Causes of Data Loss, How to Prevent Data Loss
Impact Assessment for Data Loss Prevention, Tools

Computer Forensics, What is Computer Forensics
Need for Computer Forensics
Objectives of Computer Forensics
Stages of Forensic Investigation in Tracking Cyber Criminals
Key Steps in Forensic Investigations
List of Computer Forensics Tools, Incident Handling
Incident Management
Why don’t Organizations Report Computer Crimes
Estimating Cost of an Incident
Whom to Report an Incident, Incident Reporting
Vulnerability Resources, CSIRT: Goals and Strategy

Hardware and Software Firewalls
Windows & Mac OS X Firewalls