Table Of Content

Hands-On Ethical Hacking and Network Defense Second Edition Michael T. Simpson, Kent Backman, and James E. Corley Australia(cid:129)Brazil(cid:129)Japan(cid:129)Korea(cid:129)Mexico(cid:129)Singapore(cid:129)Spain(cid:129)UnitedKingdom(cid:129)UnitedStates This is an electronic version of the print textbook. Due to electronic rights restrictions, some third party content may be suppressed. Editorial review has deemed that any suppressed content does not materially affect the overall learning experience. The publisher reserves the right to remove content from this title at any time if subsequent rights restrictions require it. For valuable information on pricing, previous editions, changes to current editions, and alternate formats, please visit www.cengage.com/highered to search by ISBN#, author, title, or keyword for materials in your areas of interest. Hands-OnEthicalHacking ©2011CourseTechnology,CengageLearning andNetworkDefense, ALLRIGHTSRESERVED.Nopartofthisworkcoveredbythecopyright SecondEdition hereinmaybereproduced,transmitted,stored,orusedinanyformorbyany MichaelT.Simpson,KentBackman,and meansgraphic,electronic,ormechanical,includingbutnotlimitedto JamesE.Corley photocopying,recording,scanning,digitizing,taping,Webdistribution, VicePresident,CareerandProfessional informationnetworks,orinformationstorageandretrievalsystems,except Editorial:DaveGarza aspermittedunderSection107or108ofthe1976UnitedStatesCopyright Act,withoutthepriorwrittenpermissionofthepublisher. DirectorofLearningSolutions:Matthew Kane Forproductinformationandtechnologyassistance,contactusat ExecutiveEditor:StephenHelba CengageLearningCustomer&SalesSupport,18003549706 ManagingEditor:MarahBellegarde Forpermissiontousematerialfromthistextorproduct, ProductManager:NataliePashoukos submitallrequestsonlineatcengage.com/permissions. DevelopmentalEditor:LisaM.Lord Furtherpermissionsquestionscanbeemailedto EditorialAssistant:MeghanOrvis [email protected] VicePresident,CareerandProfessional ® Marketing:JenniferAnnBaker Microsoft isaregisteredtrademarkofMicrosoftCorporation. ® MarketingDirector:DeborahS.Yarnell Novell isaregisteredtrademarkofNovell,Inc. ® SeniorMarketingManager:ErinCoffin Solaris isaregisteredtrademarkofSunMicrosystems,Inc. ® MarketingCoordinator:ShannaGibbs MacOSX isaregisteredtrademarkofApple,Inc. ProductionDirector:CarolynMiller LibraryofCongressControlNumber:2010922642 ProductionManager:AndrewCrouth ISBN13:9781435486096 SeniorContentProjectManager:Andrea Majot ISBN10:1435486099 SeniorArtDirector:JackPendleton ManufacturingBuyer:JulioEsperas CourseTechnology 20ChannelCenterStreet TechnicalEditor:JohnBosco Boston,MA02210 QualityAssurance:GreenPenQuality USA Assurance CengageLearningisaleadingproviderofcustomizedlearningsolutionswith Compositor:PrePressPMG officelocationsaroundtheglobe,includingSingapore,theUnitedKingdom, Australia,Mexico,BrazilandJapan.Locateyourlocalofficeat: international.cengage.com/region CengageLearningproductsarerepresentedinCanadabyNelsonEducation,Ltd. TolearnmoreaboutCourseTechnology,visitwww.cengage.com/ coursetechnology TolearnmoreaboutCengageLearning,visitwww.cengage.com Purchaseanyofourproductsatyourlocalcollegestoreoratourpreferred onlinestorewww.cengagebrain.com NoticetotheReader Publisherdoesnotwarrantorguaranteeanyoftheproductsdescribedhereinorperformanyindependentanalysisinconnectionwithanyoftheproductinformation containedherein.Publisherdoesnotassume,andexpresslydisclaims,anyobligationtoobtainandincludeinformationotherthanthatprovidedtoitbythemanufac turer.Thereaderisexpresslywarnedtoconsiderandadoptallsafetyprecautionsthatmightbeindicatedbytheactivitiesdescribedhereinandtoavoidallpotential hazards.Byfollowingtheinstructionscontainedherein,thereaderwillinglyassumesallrisksinconnectionwithsuchinstructions.Thepublishermakesnorepresenta tionsorwarrantiesofanykind,includingbutnotlimitedto,thewarrantiesoffitnessforparticularpurposeormerchantability,norareanysuchrepresentations impliedwithrespecttothematerialsetforthherein,andthepublishertakesnoresponsibilitywithrespecttosuchmaterial.Thepublishershallnotbeliableforany special,consequential,orexemplarydamagesresulting,inwholeorpart,fromthereaders’useof,orrelianceupon,thismaterial. Printed in the United States of America 2 3 4 512 11 10 Brief Table of Contents FOREWORD.. ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. xi INTRODUCTION .. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . xiii CHAPTER 1 EthicalHackingOverview.. .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. 1 CHAPTER 2 TCP/IPConcepts Review... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . 23 CHAPTER 3 NetworkandComputer Attacks.. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . 51 CHAPTER 4 FootprintingandSocialEngineering ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . 77 CHAPTER 5 PortScanning... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 109 CHAPTER 6 Enumeration. ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 131 CHAPTER 7 ProgrammingforSecurityProfessionals. ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 165 CHAPTER 8 DesktopandServerOSVulnerabilities.. ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 203 CHAPTER 9 EmbeddedOperatingSystems:TheHiddenThreat ... .. ... .. ... ... .. ... ... .. ... ... .. ... 239 CHAPTER 10 HackingWebServers.. ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 263 CHAPTER 11 HackingWirelessNetworks .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 303 CHAPTER 12 Cryptography... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 333 CHAPTER 13 NetworkProtection Systems . ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 371 APPENDIX A LegalResources . .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 401 APPENDIX B Resources... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 413 APPENDIX C Virtualization andEthicalHacking .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 423 GLOSSARY... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 437 INDEX . .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 445 iii Table of Contents FOREWORD.. ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. xi INTRODUCTION .. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . xiii CHAPTER 1 EthicalHackingOverview.. .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. 1 IntroductiontoEthicalHacking. .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 2 TheRoleofSecurityandPenetrationTesters. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 3 PenetrationTestingMethodologies .. ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... 4 CertificationProgramsforNetworkSecurityPersonnel .. ... .. ... ... .. ... ... .. ... ... .. ... 5 WhatYouCanDoLegally . ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 9 LawsoftheLand ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 10 IsPortScanningLegal?.. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 11 FederalLaws... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 13 WhatYouCannotDoLegally .. .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 14 GetItinWriting. ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 15 EthicalHackinginaNutshell .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 16 ChapterSummary.. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 17 KeyTerms ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 17 ReviewQuestions.. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 19 CaseProjects.. ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 22 CHAPTER 2 TCP/IPConcepts Review... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . 23 OverviewofTCP/IP .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 24 TheApplicationLayer .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 25 TheTransportLayer . .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 26 TheInternetLayer... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 36 IPAddressing.. ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 38 PlanningIPAddressAssignments ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 39 IPv6Addressing . ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 39 OverviewofNumberingSystems .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 40 ReviewingtheBinaryNumberingSystem . .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 40 ReviewingtheOctalNumberingSystem.. .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 43 ReviewingtheHexadecimalNumberingSystem .. ... .. ... .. ... ... .. ... ... .. ... ... .. .. 44 ChapterSummary.. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 45 KeyTerms ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 46 ReviewQuestions.. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 46 CaseProjects.. ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 49 CHAPTER 3 NetworkandComputer Attacks.. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... . 51 MaliciousSoftware(Malware).. .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... 52 Viruses.. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 52 MacroViruses .. ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 57 Worms.. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 59 TrojanPrograms. ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 60 Spyware . .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 61 Adware.. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. .. 62 v vi TableofContents ProtectingAgainstMalwareAttacks .. ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 63 EducatingYourUsers . ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 63 IntruderAttacksonNetworksandComputers. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 65 DenialofServiceAttacks .. ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 65 DistributedDenialofServiceAttacks... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 66 BufferOverflowAttacks... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 66 PingofDeathAttacks . ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 68 SessionHijacking .. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 68 AddressingPhysicalSecurity .. .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 68 Keyloggers. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 69 BehindLockedDoors.. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 71 ChapterSummary. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 71 KeyTerms .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 72 ReviewQuestions. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 73 CaseProjects. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 76 CHAPTER 4 Footprinting andSocialEngineering .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... .. ... .. 77 UsingWebToolsforFootprinting ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 78 ConductingCompetitiveIntelligence .. ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 80 AnalyzingaCompany’sWebSite .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 80 UsingOtherFootprintingTools . .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 83 UsingEmailAddresses. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 85 UsingHTTPBasics . .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 86 OtherMethodsofGatheringInformation.. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 90 UsingDomainNameSystemZoneTransfers.. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 91 IntroductiontoSocialEngineering. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... . 93 TheArtofShoulderSurfing. ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 97 TheArtofDumpsterDiving ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 98 TheArtofPiggybacking... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 99 Phishing .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 100 ChapterSummary. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... 102 KeyTerms .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... 102 ReviewQuestions. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... 103 CaseProjects. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... 106 CHAPTER 5 PortScanning.. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... .. ... . 109 IntroductiontoPortScanning . .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... 110 TypesofPortScans. .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 112 UsingPortScanningTools ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... 113 Nmap.. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 113 Unicornscan... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 116 NessusandOpenVAS . ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 116 ConductingPingSweeps.. ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... 118 Fping.. .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 118 Hping . .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 119 CraftingIPPackets . .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 121 UnderstandingScripting.. ... .. ... ... .. ... .. ... ... .. ... ... .. ... ... .. ... .. ... ... 122 ScriptingBasics. ... .. ... ... .. ... .. ... ... .. ... ... .. ... .. ... ... .. ... ... .. ... 123

Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture PDF

484 Pages·2010·27.649 MB·English

by Michael T. Simpson, Kent Backman, James Corley,

Checking for file health...

Save to my drive

Quick download

Download

Upgrade Premium

Most books are stored in the elastic cloud where traffic is expensive. For this reason, we have a limit on daily download.

Download Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture PDF Free - Full Version

by Michael T. Simpson, Kent Backman, James Corley,| 2010| 484 pages| 27.649| English

Download Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture by Michael T. Simpson, Kent Backman, James Corley, in PDF format completely FREE. No registration required, no payment needed. Get instant access to this valuable resource on PDFdrive.to!

Free Download PDF

About Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture

No description available for this book.

Detailed Information

Author:	Michael T. Simpson, Kent Backman, James Corley,
Publication Year:	2010
Pages:	484
Language:	English
File Size:	27.649
Format:	PDF
Price:	FREE

Download Free PDF

Safe & Secure Download - No registration required

Why Choose PDFdrive for Your Free Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture Download?

100% Free: No hidden fees or subscriptions required for one book every day.
No Registration: Immediate access is available without creating accounts for one book every day.
Safe and Secure: Clean downloads without malware or viruses
Multiple Formats: PDF, MOBI, Mpub,... optimized for all devices
Educational Resource: Supporting knowledge sharing and learning

Frequently Asked Questions

Is it really free to download Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture PDF?

Yes, on https://PDFdrive.to you can download Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture by Michael T. Simpson, Kent Backman, James Corley, completely free. We don't require any payment, subscription, or registration to access this PDF file. For 3 books every day.

How can I read Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture on my mobile device?

After downloading Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture PDF, you can open it with any PDF reader app on your phone or tablet. We recommend using Adobe Acrobat Reader, Apple Books, or Google Play Books for the best reading experience.

Is this the full version of Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture?

Yes, this is the complete PDF version of Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture by Michael T. Simpson, Kent Backman, James Corley,. You will be able to read the entire content as in the printed version without missing any pages.

Is it legal to download Hands-On Ethical Hacking and Network Defense Modeling to Orchestration and Service Oriented Architecture PDF for free?

https://PDFdrive.to provides links to free educational resources available online. We do not store any files on our servers. Please be aware of copyright laws in your country before downloading.

The materials shared are intended for research, educational, and personal use in accordance with fair use principles.