|
Course Description
This class will immerse the student into an interactive environment where they will be shown how to scan, test, hack and secure their own systems. The lab intensive environment gives each student in-depth knowledge and practical experience with the current essential security systems. Students will begin by understanding how perimeter defenses work and then be lead into scanning and attacking their own networks, no real network is harmed. Students then learn how intruders escalate privileges and what steps can be taken to secure a system. Students will also learn about Intrusion Detection, Policy Creation, Social Engineering, DDoS Attacks, Buffer Overflows and Virus Creation. When a student leaves this intensive 5 day class they will have hands on understanding and experience in Ethical Hacking. This course prepares you for EC-Council CNDA exam 312-99 Who Should Attend This course will significantly benefit security officers, auditors, security professionals, site administrators, and anyone who is concerned about the integrity of the network infrastructure.
Duration:
Certification
Legal Agreement Course Outline Version 5 Module 1: Introduction to Ethical Hacking
§ Types of Hacker Attacks o Operating System attacks o Application-level attacks o Shrink Wrap code attacks o Misconfiguration attacks § Hacktivism § Hacker Classes § Hacker Classes and Ethical Hacking § What Do Ethical Hackers Do? § Can Hacking be Ethical? § How to Become an Ethical Hacker? § Skill Profile of an Ethical Hacker § What is Vulnerability Research? § Why Hackers Need Vulnerability Research? § Vulnerability Research Tools § Vulnerability Research Websites § How to Conduct Ethical Hacking? § Approaches to Ethical Hacking § Ethical Hacking Testing § Ethical Hacking Deliverables § Computer Crimes and Implications § Legal Perspective
Module 2: Footprinting § Revisiting Reconnaissance § Defining of Footprinting § Information Gathering Methodology § Unearthing Initial Information § Finding a Company’s URL § Internal URL § Extracting Archive 0f a Website § Google Search for Company’s Info. § People Search § Footprinting Through Job Sites § Passive Information Gathering § Competitive Intelligence Gathering § Why Do You Need Competitive Intelligence? § Companies Providing Competitive Intelligence Services § Competitive Intelligence
§ Public and Private Websites § Tools
o Wikito Footprinting Tool o Web Data Extractor Tool o Whois o Nslookup o Necrosoft o ARIN o Traceroute o Neo Trace o GEOSpider o Geowhere o GoogleEarth o VisualRoute Trace o Kartoo Search Engine o Touchgraph Visual Browser o SmartWhois o VisualRoute Mail Tracker o eMailTrackerPro o Read Notify o HTTrack Web Site Copier o Web Ripper o robots.txt o Website watcher o E-mail Spider o Power E-mail Collector Tool § Steps to Perform Footprinting
Module 3: Scanning
· ICMP Scanning · Angry IP · HPING2 · Ping Sweep · Firewalk o Check for open ports · Nmap · TCP Communication Flags · Three Way Handshake · SYN Stealth / Half Open Scan · Stealth Scan · Xmas Scan · FIN Scan · NULL Scan · IDLE Scan · ICMP Echo Scanning/List Scan · TCP Connect / Full Open Scan · FTP Bounce Scan · FTP Bounce Attack · SYN/FIN Scanning Using IP Fragments · UDP Scanning · Reverse Ident Scanning · RPC Scan · Window Scan · Blaster Scan · PortScan Plus, Strobe · IPSecScan · NetScan Tools Pro · WUPS – UDP Scanner · SuperScan · IPScanner · MegaPing · Global Network Inventory Scanner · Net Tools Suite Pack · FloppyScan · War Dialer Technique · Why War Dialing? · Wardialing · PhoneSweep · THC Scan · SandTrap Tool o Banner grabbing/OS Fingerprinting · OS Fingerprinting · Active Stack Fingerprinting · Passive Fingerprinting · Active Banner Grabbing Using Telnet · GET REQUESTS · p0f – Banner Grabbing Tool · p0f for Windows · Httprint Banner Grabbing Tool · Active Stack Fingerprinting ¨ XPROBE2 ¨ RING V2 · Netcraft · Disabling or Changing Banner ¨ Apache Server ¨ IIS Server · IIS Lockdown Tool · ServerMask · Hiding File Extensions · PageXchanger 2.0 o Identify Service o Scan for Vulnerability · Bidiblah Automated Scanner · Qualys Web-based Scanner · SAINT · ISS Security Scanner · Nessus · GFI LANGuard · SATAN (Security Administrator’s Tool for Analyzing Networks) · Retina · NIKTO · SAFEsuite Internet Scanner · IdentTCPScan o Draw network diagrams of Vulnerable hosts · Cheops · FriendlyPinger o Prepare proxies · Proxy Servers · Use of Proxies for Attack · SocksChain · Proxy Workbench · ProxyManager Tool · Super Proxy Helper Tool · Happy Browser Tool (Proxy-based) · MultiProxy · TOR Proxy Chaining Software o Anonymizers · Primedius Anonymizer · Browzar · Torpark Browser · G-Zapper - Google Cookies o SSL Proxy Tool o HTTP Tunneling Techniques o HTTPort o Spoofing IP Address - Source Routing o Detecting IP Spoofing o Despoof Tool o Scanning Countermeasures o Tool: SentryPC
Module 4: Enumeration § Overview of System Hacking Cycle § What is Enumeration? § Techniques for Enumeration § Netbios Null Sessions § Tool o DumpSec o NetBIOS Enumeration Using Netview o Nbtstat o SuperScan4 o Enum o sid2user o user2sid o GetAcct
Module 5: System Hacking
o Non-Technical Attacks o Password Mitigation o Permanent Account Lockout – Employee Privilege Abuse o Administrator Password Guessing o Manual Password Cracking Algorithm o Automatic Password Cracking Algorithm o Performing Automated Password Guessing o Tools · NAT · Smbbf (SMB Passive Brute Force Tool) · SmbCrack Tool · Legion · LOphtcrack o Microsoft Authentication - LM, NTLMv1, and NTLMv2 o Kerberos Authentication o What is LAN Manager Hash? o Salting o Tools · PWdump2 and Pwdump3 · Rainbowcrack · KerbCrack · NBTDeputy · NetBIOS DoS Attack · John the Ripper o Password Sniffing o How to Sniff SMB Credentials? o Sniffing Hashes Using LophtCrack o Tools · ScoopLM · SMB Replay Attacks · Replay Attack Tool: SMBProxy · Hacking Tool: SMB Grind · Hacking Tool: SMBDie o SMBRelay Weaknesses & Countermeasures o Password Cracking Countermeasures o LM Hash Backward Compatibility o How to Disable LM HASH? o Tools · Password Brute-Force Estimate Tool · Syskey Utility
o Privilege Escalation o Cracking NT/2000 Passwords o Active@ Password Changer o Change Recovery Console Password o Privilege Escalation Tool: x.exe
o Tool: · Psexec · Remoexec · Alchemy Remote Executor · Keystroke Loggers · E-mail Keylogger · Spytector FTP Keylogger · IKS Software Keylogger · Ghost Keylogger · Hardware Keylogger · Keyboard Keylogger: KeyGhost Security Keyboard · USB Keylogger:KeyGhost USB Keylogger o What is Spyware? o Tools · Spyware: Spector · Remote Spy · eBlaster · Stealth Voice |