Chapter 1: Hacking Wireless Networks
- Introduction to Hacking Wireless Networks
o Wireless Networking
o Wired Network vs. Wireless Network
o Effects of Wireless Attacks on Business
o Types of Wireless Network
o Wireless Standard: 802.11a
o Wireless Standard: 802.11b – “WiFi”
o Wireless Standard: 802.11g
o Wireless Standard: 802.11i
o Wireless Standard: 802.11n
o Wireless Standard:802.15 (Bluetooth)
o Wireless Standard:802.16 (WiMax)
- WiMax Featured Companies
- WiMax Equipment Vendors
o Related Technology and Carrier Networks
o SSID
o Is the SSID a Secret
o Authentication and Association
o Authentication Modes
o The 802.1X Authentication Process
o 802.11 Specific Vulnerabilities
o Authentication and (Dis)Association Attacks
o MAC Sniffing and AP Spoofing
o Antennas
o Cantenna
o Wireless Access Points
o Beacon Frames
o Phone Jammers
- Wired Equivalent Privacy (WEP)
o WEP Issues
o WEP - Authentication Phase
o WEP - Shared Key Authentication
o WEP - Association Phase
o WEP Flaws
o Breaking WEP Encryption
o Steps to Break WEP Encryption
o What is WPA
o WPA Vulnerabilities
o WEP. WPA. and WPA2
o Wi-Fi Protected Access 2 (WPA2)
o Attacking WPA Encrypted Networks
o Evil Twin: Attack
o Temporal Key Integrity Protocol (TKIP)
- Working of TKIP
- Changing WEP to TKIP
o LEAP: The Lightweight Extensible Authentication Protocol
o LEAP Attacks
o LEAP Attack Tool: ASLEAP
o Techniques to Detect Open Wireless Networks
o Steps for Hacking Wireless Networks
- Step 1: Find Networks to Attack
- Step 2: Choose the Network to Attack
- Step 3: Analyzing the Network
- Step 4: Sniffing the Network
- Step 4-1: Sniffing Wireless Data
o Step 5: Cracking the WEP Key
o Super Bluetooth Hack
o Man-in-the-Middle Attack (MITM)
o Denial-of-Service Attacks
o Hijacking and Modifying a Wireless Network
o Automated WEP Crackers
o Pad-Collection Attacks
o XOR Encryption
o Stream Cipher
- Rogue Access Points
- Scanning Tools
- Sniffing Tools
- Wireless Security Tools
Chapter 2: Physical Security
- Introduction to Physical Security
o Physical Security
o Physical Security Challenges
- Authentications and Access Controls
o Authentication Mechanisms
o Smart Cards
o Security Token
o Keys and Locks
o Biometric Identification Techniques
o Biometric Hacking Tool: Biologger
o Biometrics Authentication
o Types of Biometrics Authentication
· Fingerprint-based Identification
· Hand Geometry-based Identification
· Retina Scanning
· Afghan Woman Recognized After 17 Years
· Face Recognition
· Face Code: Webcam Based Biometrics Authentication System
· TEMPEST
· Mantrap
- Attacks against Access Controls
o Authentication Mechanism Challenges: Biometrics
o Faking Fingerprints
o Locks
o Lock Picking
o Lock Picking Tools
o Housekeeping Procedures
o HVAC (Heating. Ventilating. and Air conditioning) Considerations
o Fire Prevention
- Auditing Fire Prevention Preparedness
- Fire Prevention Requirements
- Safeguards
- Physical Security Attacks
o Challenges in Ensuring Physical Security
o Spyware Technologies
o Spying Devices
o Wiretapping
o Remote Access
o Laptop Theft
o Laptop Security Tools
o Laptop Tracker - XTool Computer Tracker
o Tools to Locate Stolen Laptops
o Stop's Unique. Tamper-proof Patented Plate
o Tool: TrueCrypt
o Laptop Security Countermeasures
- Physical Security Checklist
o Company’s Surroundings
o Gates
o Security Guards
o Premises
o CCTV Cameras
o Reception
o Server
o Server Room
o Workstation Area
o Wireless Access Points
o Other Equipment
o FAX Security
· Procedures Governing FAX Security: Sending
· Procedures Governing FAX Security: Receiving
· Procedures Governing FAX Security: Storing
o Security Checklist
o Access Control
o Biometric Devices
o Computer Equipment Maintenance
o Facility Management Procedures
o Physical Security Policies
o Environmental Policy
o Air Conditioning Policy
Chapter 3: Evading IDS, Firewalls, and Honeypots
- Introduction to Evading IDS, Firewalls, and Honeypots
- Introduction to Intrusion Detection Systems
- Intrusion Detection Systems (IDS)
o IDS Placement
o Ways to Detect an Intrusion
o Types of Intrusion Detection Systems
o Network Intrusion Detection System (NIDS)
o NIDS Evasion Technique
o System Integrity Verifiers (SIV)
o Indications of Intrusion
o General Indications of System Intrusions
o General Indications of File System Intrusions
o General Indications of Network Intrusions
o Intrusion Detection Tools
· Snort Console
§ Testing Snort
§ Configuring Snort (snort.conf)
§ Snort Rules
§ Set up Snort to Log to the Event Logs and to Run as a Service
§ Using EventTriggers.exe for Eventlog Notifications
o Steps to Perform after an IDS Detects an Attack
o Evading IDS Systems
o Ways to Evade IDS
- Intrusion Prevention Systems (IPS)
- Firewall
o What is a Firewall
o What does a Firewall do
o Packet Filtering
o What can't a Firewall do
o How does a Firewall Work
o Hardware Firewall
o Software Firewall
o Types of Firewalls
- Packet Filtering Firewall
- IP Packet Filtering Firewall
- Circuit-Level Gateway
- TCP Packet Filtering Firewall
- Application-Level Firewall
- Application Packet Filtering Firewall
- Stateful Multilayer Inspection Firewall
o Firewall Countermeasures
o Firewall Identification
o Firewalking
o Banner Grabbing
o Breaching Firewalls
o Bypassing a Firewall Using HTTP Tunnel
o Placing Backdoors through Firewalls
o Hiding behind a Covert Channel: LOKI
o What is a Honeypot
o The Honeynet Project
o Types of Honeypots
o Advantages and Disadvantages of a Honeypot
o Where to Place a Honeypot
o Honeypots
o How to Set Up a Honey Pot
o Honeypot-SPECTER
o Honeypot - honeyd
o Honeypot – KFSensor
o Sebek
o Google Hack Honeypot (GHH)
o Physical and Virtual Honeypots
- Security Responses to Hacking Attacks
- Tools
o Tripwire (www.tripwire.com)
o Tool: NCovert
o ACK Tunneling
o Tools to Breach Firewalls
o Common Tool for Testing Firewall and IDS
- Tomahawk
- RedSeal Network Advisor
- IDS Testing Tool – Traffic IQ Gateway
- IDS Tool: EMERALD
- IDS Tool: BlackICE
- BlackICE: Screenshot
- IDS Tool: Next-Generation Intrusion Detection Expert System (NIDES)
- IDS Tool: SecureHost
- IDS Tool: Snare
- IDS Testing Tool: Traffic IQ Professional
- IDS Testing Tool: TCPOpera
- Atelier Web Firewall Tester
Chapter 4: Cryptography
- Introduction to Cryptography
o Cryptography: Introduction
o Symmetric and Asymmetric Key Cryptosystems
o Algorithms and Security
o Types of Cryptography Algorithms
o A Hybrid Cryptographic Scheme: Example
§ Private Key Cryptography
o Data Encryption Standard (DES)
o DES Challenge III. II. I
o AES (RIJNDAEL)
o AES (RIJNDAEL)
o Related-key Cryptanalysis of the Full AES-192 and AES-256
o RC4. RC5. RC6. Blowfish
o RC5
o The DSA and related signature schemes
o RSA (Rivest Shamir Adleman)
o Example of RSA Algorithm
o The RSA Signature Scheme
o Possible Attack on RSA Signatures: Integer Factorization
o RSA Attacks
o RSA Challenge
o Elliptic Curve Cryptography (ECC)
o ECC and RSA Key Comparison
o Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS Systems
o Digital Signature Algorithm Validation System (DSAVS)
o Digital Signature Assurance Methodology
o Digital Signature Assurance Reference Model
o Digital Signed Record
o Entrust: Securing Digital Identities and Information
o Attacks on Digital Signatures
- Meet-in-the-Middle Attack
- Rabin Public-key Signature Scheme
- Algebraic Attacks on the Crypto-1 Stream Cipher in MiFare
o Message Digest Functions
o One-way Bash Functions
o MD5
o MD5: Timeline
o SHA (Secure Hash Algorithm)
o distributed.net
o Server-Gated Cryptography (SGC)
o SSL (Secure Sockets Layer)
o Secure Shell (SSH)
o Disk Encryption
o Encryption-Breaking Initiatives
§ Cryptographic Attacks
o Brute-Force Attack
o Code Breaking: Methodologies
o Cryptography Attacks
o The Full Cost of Cryptanalytic Attacks
o Types of Attacks on Signature Schemes
o Magic Lantern
o WEPCrack: Screenshot
o Cracking S/MIME Encryption Using Idle CPU Time
o Attacking and defending the McEliece cryptosystem
o PGP
o Cryptomathic Authenticator
o Cryptographic Algorithm Validation Program (CAVP)
o Cryptographic Module Testing
o Cleversafe Grid Builder
o PGP (Pretty Good Privacy)
o CypherCalc
o Command Line Scriptor
o CryptoHeaven
- Microsoft Cryptography Tools