Preface |
|
xiii | |
Chapter 1 Hacking Wireless Networks |
|
1 | (42) |
|
|
2 | (1) |
|
Introduction to Hacking Wireless Networks |
|
|
2 | (1) |
|
|
2 | (2) |
|
Wired Network Versus Wireless Network |
|
|
2 | (1) |
|
Effects of Wireless Attacks on Businesses |
|
|
3 | (1) |
|
Types of Wireless Networks |
|
|
3 | (1) |
|
Advantages and Disadvantages of a Wireless Network |
|
|
4 | (1) |
|
|
4 | (3) |
|
Wireless Standard: 802.11a |
|
|
5 | (1) |
|
Wireless Standard: 802.11b |
|
|
5 | (1) |
|
Wireless Standard: 802.11g |
|
|
5 | (1) |
|
Wireless Standard: 802.11i |
|
|
6 | (1) |
|
Wireless Standard: 802.11n |
|
|
6 | (1) |
|
Wireless Standard: 802.15.1 (Bluetooth) |
|
|
6 | (1) |
|
Wireless Standard: 802.16 (WiMAX) |
|
|
6 | (1) |
|
|
7 | (4) |
|
Related Technologies and Carrier Networks |
|
|
7 | (1) |
|
Service Set Identifier (SSID) |
|
|
8 | (1) |
|
Authentication and Association |
|
|
8 | (2) |
|
Authentication and (Dis) Association Attacks |
|
|
10 | (1) |
|
MAC Sniffing and AP Spoofing |
|
|
10 | (1) |
|
|
11 | (2) |
|
|
11 | (1) |
|
|
11 | (1) |
|
|
12 | (1) |
|
|
12 | (1) |
|
Wired Equivalent Privacy (WEP) |
|
|
13 | (3) |
|
Role of WEP in Wireless Communication |
|
|
13 | (1) |
|
|
13 | (1) |
|
|
13 | (1) |
|
|
14 | (1) |
|
|
15 | (1) |
|
|
15 | (1) |
|
|
16 | (1) |
|
|
16 | (1) |
|
|
16 | (1) |
|
|
16 | (1) |
|
Attacking WPA-Encrypted Networks |
|
|
16 | (1) |
|
|
17 | (3) |
|
Temporal Key Integrity Protocol (TKIP) |
|
|
17 | (1) |
|
LEAP: The Lightweight Extensible Authentication Protocol |
|
|
18 | (2) |
|
|
20 | (4) |
|
Techniques to Detect Open Wireless Networks |
|
|
20 | (1) |
|
Steps for Hacking Wireless Networks |
|
|
21 | (1) |
|
|
21 | (1) |
|
Man-in-the-Middle Attack (MITM) |
|
|
22 | (1) |
|
Denial-of-Service Attacks |
|
|
22 | (1) |
|
Hijacking and Modifying a Wireless Network |
|
|
23 | (1) |
|
|
24 | (4) |
|
|
24 | (1) |
|
|
24 | (1) |
|
|
25 | (1) |
|
|
25 | (1) |
|
|
25 | (3) |
|
|
28 | (2) |
|
|
28 | (1) |
|
|
28 | (1) |
|
Tools to Generate Rogue Access Points |
|
|
29 | (1) |
|
|
30 | (1) |
|
|
30 | (2) |
|
|
30 | (1) |
|
|
30 | (1) |
|
|
30 | (1) |
|
|
31 | (1) |
|
|
31 | (1) |
|
|
31 | (1) |
|
Wireless Security Auditor (WSA) |
|
|
31 | (1) |
|
|
32 | (1) |
|
|
32 | (1) |
|
eEye Retina Network Security Scanner |
|
|
32 | (1) |
|
|
32 | (1) |
|
|
32 | (4) |
|
|
32 | (1) |
|
|
33 | (1) |
|
|
34 | (1) |
|
|
34 | (1) |
|
|
35 | (1) |
|
|
35 | (1) |
|
|
35 | (1) |
|
|
35 | (1) |
|
Microsoft Network Monitor |
|
|
35 | (1) |
|
|
36 | (2) |
|
|
36 | (1) |
|
AirMagnet Handheld Analyzer |
|
|
36 | (1) |
|
|
37 | (1) |
|
|
38 | (1) |
|
|
38 | (1) |
|
|
38 | (1) |
|
|
38 | (1) |
|
|
39 | (1) |
|
|
40 | (3) |
Chapter 2 Physical Security |
|
43 | (34) |
|
|
44 | (1) |
|
Introduction to Physical Security |
|
|
44 | (1) |
|
What Is the Need for Physical Security? |
|
|
44 | (1) |
|
|
45 | (9) |
|
|
45 | (2) |
|
|
47 | (6) |
|
|
53 | (1) |
|
Physical Security Personnel |
|
|
54 | (1) |
|
Physical Security Challenges |
|
|
54 | (19) |
|
Physical Security Threats |
|
|
54 | (2) |
|
|
56 | (1) |
|
|
56 | (5) |
|
Physical Security Checklists |
|
|
61 | (6) |
|
|
67 | (5) |
|
|
72 | (1) |
|
|
73 | (1) |
|
|
74 | (1) |
|
|
74 | (2) |
|
|
76 | (1) |
Chapter 3 Evading IDS, Firewalls and Detecting Honeypots |
|
77 | (58) |
|
|
78 | (1) |
|
Introduction to Evading IDS, Firewalls, and Detecting Honeypots |
|
|
78 | (1) |
|
Introduction to Intrusion Detection Systems |
|
|
78 | (30) |
|
Intrusion Detection System (IDS) |
|
|
79 | (3) |
|
Types of Intrusion Detection Systems |
|
|
82 | (3) |
|
|
85 | (1) |
|
Steps to Perform after an IDS Detects an Attack |
|
|
86 | (1) |
|
|
86 | (3) |
|
Intrusion Prevention Systems (IPS) |
|
|
89 | (4) |
|
|
93 | (6) |
|
|
99 | (5) |
|
|
104 | (4) |
|
Security Responses to Hacking Attacks |
|
|
108 | (1) |
|
|
109 | (21) |
|
|
109 | (1) |
|
|
109 | (1) |
|
Intrusion Detection Tools |
|
|
110 | (4) |
|
|
114 | (1) |
|
|
115 | (4) |
|
Tools to Breach Firewalls |
|
|
119 | (2) |
|
Common Tools for Testing Firewalls and IDS |
|
|
121 | (7) |
|
|
128 | (2) |
|
Tools to Detect Honeypots |
|
|
130 | (1) |
|
|
130 | (1) |
|
|
130 | (1) |
|
|
131 | (1) |
|
|
132 | (3) |
Chapter 4 Hacking Routers and Cable Modems |
|
135 | (18) |
|
|
136 | (1) |
|
Introduction to Hacking Routers and Cable Modems |
|
|
136 | (1) |
|
|
137 | (7) |
|
|
137 | (4) |
|
|
141 | (1) |
|
|
142 | (2) |
|
|
144 | (1) |
|
|
144 | (1) |
|
|
144 | (4) |
|
|
144 | (1) |
|
Router Identification Tools |
|
|
145 | (1) |
|
|
146 | (1) |
|
|
146 | (1) |
|
|
147 | (1) |
|
|
148 | (1) |
|
|
148 | (1) |
|
|
149 | (1) |
|
|
149 | (2) |
|
|
151 | (2) |
Chapter 5 Linux Hacking |
|
153 | (48) |
|
|
154 | (1) |
|
Introduction to Linux Hacking |
|
|
154 | (1) |
|
|
154 | (1) |
|
|
155 | (9) |
|
|
155 | (1) |
|
|
156 | (1) |
|
|
156 | (1) |
|
Linux Signals and Logging |
|
|
157 | (1) |
|
|
157 | (1) |
|
|
157 | (2) |
|
|
159 | (1) |
|
|
159 | (1) |
|
|
160 | (3) |
|
|
163 | (1) |
|
Installing, Configuring, and Compiling the Linux Kernel |
|
|
164 | (1) |
|
Step 1: Download the Latest Kernel |
|
|
164 | (1) |
|
Step 2: Configure the Kernel |
|
|
164 | (1) |
|
Step 3: Compile the Kernel |
|
|
164 | (1) |
|
Step 4: Clean Files Made During Compilation |
|
|
164 | (1) |
|
Step 5: Make a Bootable Linux Image |
|
|
164 | (1) |
|
Step 6: Configure the Boot Manager |
|
|
164 | (1) |
|
How to Install a Kernel Patch |
|
|
165 | (1) |
|
Compiling Programs in Linux |
|
|
165 | (2) |
|
GNU Compiler Collection (GCC) |
|
|
165 | (1) |
|
|
166 | (1) |
|
|
167 | (7) |
|
|
169 | (1) |
|
|
170 | (1) |
|
|
171 | (2) |
|
Port Scan Detection Tools |
|
|
173 | (1) |
|
Password Cracking in Linux |
|
|
174 | (1) |
|
Firewall in Linux: IPTables |
|
|
174 | (3) |
|
|
175 | (1) |
|
|
176 | (1) |
|
|
177 | (1) |
|
Basic Linux Operating System Defense |
|
|
177 | (16) |
|
Tool: SARA (Security Auditor's Research Assistant) |
|
|
178 | (1) |
|
|
179 | (1) |
|
|
179 | (1) |
|
|
180 | (1) |
|
|
181 | (1) |
|
|
182 | (1) |
|
|
183 | (1) |
|
|
184 | (1) |
|
|
184 | (1) |
|
|
184 | (1) |
|
|
185 | (1) |
|
|
185 | (1) |
|
|
185 | (1) |
|
|
186 | (1) |
|
|
186 | (1) |
|
|
186 | (1) |
|
Linux Loadable Kernel Modules |
|
|
187 | (1) |
|
|
188 | (1) |
|
|
188 | (1) |
|
|
188 | (1) |
|
|
189 | (1) |
|
|
189 | (1) |
|
Rootkits: Tuxit, Adore, and Ramen |
|
|
190 | (1) |
|
|
190 | (1) |
|
|
190 | (3) |
|
Linux Tools: Application Security |
|
|
193 | (1) |
|
|
193 | (1) |
|
|
193 | (1) |
|
Advanced Intrusion Detection Environment (AIDE) |
|
|
193 | (1) |
|
|
194 | (1) |
|
|
194 | (1) |
|
|
194 | (1) |
|
|
194 | (1) |
|
Linux Tools: Log and Traffic Monitors |
|
|
194 | (2) |
|
MRTG (Multi-Router Traffic Grapher) |
|
|
194 | (1) |
|
|
195 | (1) |
|
|
195 | (1) |
|
|
195 | (1) |
|
|
195 | (1) |
|
|
195 | (1) |
|
Linux Security Auditing Tool (LSAT) |
|
|
195 | (1) |
|
Linux Security Countermeasures |
|
|
196 | (1) |
|
|
196 | (1) |
|
|
196 | (1) |
|
|
196 | (1) |
|
Steps for Hardening Linux |
|
|
197 | (1) |
|
|
197 | (1) |
|
|
197 | (1) |
|
|
198 | (1) |
|
|
199 | (2) |
Chapter 6 Mac OS X Hacking |
|
201 | (16) |
|
|
202 | (1) |
|
Introduction to Mac OS X Hacking |
|
|
202 | (1) |
|
|
202 | (1) |
|
Vulnerabilities in Mac OS X |
|
|
203 | (4) |
|
Crafted URL Vulnerability |
|
|
203 | (1) |
|
CoreText Uninitialized Pointer Vulnerability |
|
|
203 | (1) |
|
ImageIO Integer Overflow Vulnerability |
|
|
203 | (1) |
|
DirectoryService Vulnerability |
|
|
203 | (1) |
|
iChat UPnP Buffer Overflow Vulnerability |
|
|
204 | (1) |
|
ImageIO Memory Corruption Vulnerability |
|
|
204 | (1) |
|
Code Execution Vulnerability in Safari |
|
|
204 | (1) |
|
UFS Integer Overflow Vulnerability |
|
|
204 | (1) |
|
Kernel "fpathconfO" System Call Vulnerability |
|
|
205 | (1) |
|
UserNotificationCenter Privilege Escalation Vulnerability |
|
|
205 | (1) |
|
Other Vulnerabilities in Mac OS |
|
|
206 | (1) |
|
How a Malformed Installer Package Can Crack Mac OS X |
|
|
206 | (1) |
|
Worms and Viruses in Mac OS X |
|
|
207 | (2) |
|
|
207 | (1) |
|
|
208 | (1) |
|
Viruses in Macs: Macro Viruses |
|
|
208 | (1) |
|
Antivirus Applications in Mac OS X |
|
|
209 | (1) |
|
|
209 | (1) |
|
|
209 | (1) |
|
Sophos Endpoint Security and Control |
|
|
210 | (1) |
|
|
210 | (1) |
|
|
210 | (2) |
|
|
210 | (1) |
|
|
211 | (1) |
|
|
211 | (1) |
|
|
212 | (1) |
|
|
212 | (1) |
|
|
213 | (1) |
|
|
213 | (1) |
|
|
213 | (2) |
|
|
215 | (2) |
Chapter 7 Hacking Mobile Phones, PDAs, and Handheld Devices |
|
217 | (20) |
|
|
218 | (1) |
|
Introduction to Hacking Mobile Phones, PDAs, and Handheld Devices |
|
|
218 | (1) |
|
Types of Handheld Devices |
|
|
218 | (4) |
|
|
219 | (1) |
|
|
219 | (1) |
|
Smartphone: Samsung Galaxy Series |
|
|
219 | (1) |
|
|
220 | (1) |
|
|
221 | (1) |
|
|
221 | (1) |
|
Amazon Kindle and Kindle Fire |
|
|
221 | (1) |
|
|
221 | (1) |
|
|
221 | (1) |
|
Common Operating Systems in Handheld Devices |
|
|
222 | (1) |
|
Mobile Phone Operating Systems |
|
|
222 | (1) |
|
Vulnerabilities in Handheld Devices |
|
|
223 | (1) |
|
Evolution of the Mobile Threat |
|
|
223 | (1) |
|
|
224 | (1) |
|
|
224 | (6) |
|
Mobile Malware Propagation |
|
|
224 | (1) |
|
|
225 | (1) |
|
|
225 | (1) |
|
BlackBerry Attacks: Blackjacking |
|
|
226 | (1) |
|
|
226 | (2) |
|
|
228 | (1) |
|
|
229 | (1) |
|
Defending Handheld Devices |
|
|
230 | (3) |
|
|
230 | (1) |
|
Protecting an Organization from Mobile Vulnerabilities |
|
|
231 | (1) |
|
|
232 | (1) |
|
|
233 | (1) |
|
|
233 | (1) |
|
|
234 | (1) |
|
|
234 | (2) |
|
|
236 | (1) |
Chapter 8 Hacking Portable Devices |
|
237 | (24) |
|
Section 1: Hacking USB Devices |
|
|
237 | (1) |
|
|
238 | (1) |
|
Introduction to Hacking USB Devices |
|
|
238 | (1) |
|
Introduction to USB Devices |
|
|
238 | (1) |
|
|
238 | (1) |
|
|
239 | (1) |
|
|
239 | (1) |
|
|
239 | (1) |
|
Windows Buffer Overflow Attack |
|
|
240 | (1) |
|
|
240 | (1) |
|
|
240 | (1) |
|
Section 2: Bluetooth Hacking |
|
|
241 | (1) |
|
|
241 | (1) |
|
Introduction to Bluetooth Hacking |
|
|
242 | (1) |
|
Bluetooth Security Issues |
|
|
242 | (1) |
|
Attacks Against Bluetooth |
|
|
243 | (3) |
|
|
243 | (1) |
|
|
243 | (1) |
|
|
243 | (1) |
|
Short Pairing Code Attacks |
|
|
243 | (1) |
|
|
244 | (1) |
|
Online PIN Cracking Attack |
|
|
244 | (1) |
|
|
245 | (1) |
|
|
245 | (1) |
|
|
245 | (1) |
|
|
245 | (1) |
|
|
245 | (1) |
|
|
245 | (1) |
|
|
246 | (1) |
|
|
246 | (1) |
|
|
247 | (1) |
|
|
247 | (1) |
|
Introduction to RFID Hacking |
|
|
248 | (1) |
|
RFID (Radio Frequency Identification) |
|
|
248 | (1) |
|
Components of RFID Systems |
|
|
248 | (2) |
|
|
248 | (1) |
|
|
249 | (1) |
|
|
249 | (1) |
|
|
249 | (1) |
|
|
250 | (1) |
|
|
250 | (1) |
|
|
250 | (1) |
|
|
250 | (1) |
|
|
250 | (1) |
|
|
251 | (4) |
|
|
251 | (1) |
|
Business Intelligence Risk |
|
|
252 | (1) |
|
|
252 | (2) |
|
|
254 | (1) |
|
RFID Security and Privacy Threats |
|
|
255 | (2) |
|
|
255 | (1) |
|
|
255 | (1) |
|
|
255 | (1) |
|
|
256 | (1) |
|
Denial-of-Service Attacks |
|
|
256 | (1) |
|
Vulnerabilities in RFID-Enabled Credit Cards |
|
|
256 | (1) |
|
Countermeasures Used to Avoid RFID Attacks |
|
|
257 | (1) |
|
|
257 | (1) |
|
|
257 | (1) |
|
|
257 | (1) |
|
|
257 | (1) |
|
|
257 | (1) |
|
|
258 | (1) |
|
|
258 | (1) |
|
|
259 | (1) |
|
|
259 | (1) |
|
|
260 | (1) |
Chapter 9 Cryptography |
|
261 | (32) |
|
|
262 | (1) |
|
Introduction to Cryptography |
|
|
262 | (1) |
|
|
262 | (5) |
|
|
264 | (1) |
|
|
265 | (2) |
|
Message-Digest (Hash) Functions |
|
|
267 | (2) |
|
|
268 | (1) |
|
SHA-1 (Secure Hash Algorithm) |
|
|
268 | (1) |
|
SSL (Secure Sockets Layer) |
|
|
269 | (2) |
|
|
270 | (1) |
|
SSL Handshake Protocol Flow |
|
|
270 | (1) |
|
|
271 | (1) |
|
|
272 | (1) |
|
Encryption-Breaking Initiatives |
|
|
272 | (1) |
|
|
272 | (1) |
|
|
273 | (1) |
|
Encryption Countermeasures |
|
|
273 | (3) |
|
Code-Breaking Methodologies |
|
|
273 | (1) |
|
|
274 | (2) |
|
|
276 | (3) |
|
Encryption-Cracking Tools |
|
|
276 | (1) |
|
|
277 | (1) |
|
PGP (Pretty Good Privacy) |
|
|
277 | (2) |
|
|
279 | (1) |
|
|
280 | (1) |
|
|
280 | (2) |
|
|
282 | (11) |
Glossary |
|
293 | (2) |
Index |
|
295 | |