Hacking expose network security secret&solutions 4th

  !"#$ %&  &' ()*)+,-./ 012"314.5657,(8 * 9/:01;<=>?,(./ $.5 @6.>;21 ! !"6A? 2,B(  C(2>6*;3431.D3>E*9 <F.+G3H>3$ >3;$ / <CIF C (H;)":C ',J31F !H "3I>.5HK+ > ;L6H/ ;LI6H C)?+M6H<C.16C*61C,:31N3H;O C )HF31(>.P"93Q 2*)+ C"31>!1C9R:,S I T*3"<U.L !I H"3I#$  9 C&"CH*)+<=: !H" H":V*WU.5$++61C,:316 ;!XK*6 1C66@N33(Y"95 .P69<="4H3I1C9 C&"2H#L 4ZZZ 1CHH"#$ V*WU)[&"5LK> !6<PH.%.L,:!V*1C,JH<\#H" #6H)] !N3.**<CP)"#L-3I P.T  ;I)OC++V*#$ 6:..H)L<CPH* #$ 6H6H:.*^_%H1C0O* ++ ;$5&I )L  !"#$ @ 9TF`.OH"8 *9<*  "1aH. _++b* H)C c*^_.%,1V*1C)OC*++ H3#6db;.2!$X1C & F1C e] ! ;!6.I )L3*<H$8 *.O ;!3.I  )L 1CH1K>! 1C1)$Tf35Tf61C8 *961 g.T6. ;O3"3Ih' ijk*U.P<\#_6l6b++N' $IV*ij H)C c*^_.%,1V*1C)OC*++ H3#6db;.2!$X1C & F1C e] ! ;!6.I )L3*<H$8 *.O ;!3.I  )L 1CH1K>! 1C1)$Tf35Tf61C8 *961 g.T6. ;O3"3Ih'  ;!XK*?1 m<C.1 eL  ;!XK* e] !! :3H*U$8 *_<+ ;3' njeOC ;$,:3.L ;! eL  ;! e] ! ;! e] ! !"#$ &/O.L1CH3 HHJ#.?J&:H".o)L$.PKH. MO O H;6,T.o,S8 *#" 8 *9$8 *.OH.%?)] !V*#$  ! "#$ T2,()5)B)KH.3I0O,: !V*1C ;$53g2/8 *9)"LO  .P p !"#$ $_++ 5&I )] !)H* .L !"#$ $ ++q*+'6;F"^! 3 ! "#$ 8 *)OC++ ;!XK*<=.P.I! Or 2.I &)5) &6(gX,(23I !" #$ ,s3452,(5Lg,.O3,*()H *  ;$6;^":H,(,:F,5L 6>? !"#$ 5&I H,1H .o.PU#3H,1H;.o.P.I!<( aH.3.2V*, #./ $KH.3.26U.2 !"3I #$  t:,O.PH",:V*WU%";, C >!*;-*;_++5LFF*2HY  1 31 !"3I#$ 6(3V*5 es.LV*31 !"#$ ,K+WU, C K>!5*u+,$)"ZZZ6"TH*u+,;  &2<C",W?F*95,*$ *u+, $8 *6H$I$8 *NF*5L*):.P1 CT\*V*9$H;VN H#*)+8 *>v5 wAf#$  w)OPH"F* !.0 wH3$$8 *V*#$  w.1 w.*^$ w.*^+* w?<H,:!6)L ,:! wH)OC.OHn+,<+3+)H5$8 * O+31*):Ho vV**n+,6&I " )"K &1$*n+,.P&& &)]o  v6#Ls.&;i6H[V*"Y;&$ 31K+ v@x+<=*&I /<3(+3!; F*$HK*u+,.53K+F@x+ h* )$U Ho vV**u+,F*<=5.P" /O./ $V*#$  A1O+F*:K+*n+,.5.P YsH;V ZZZZ6 $,*$ H;VZZZZ A(,*$ $IZZZ "31;1*;.o&F*,sHH;4)O$ **3<*y+N "31;.C3(H+4310)z.:$F*<= )".I!<> .O3&.I;Y* t(pi1)$H+u){ +*' t(;F*:4.PH; Y$IV*#$ 6 52<CH*,*): wmmuuu+u)<  wmmuuu*+ H*;X(YB|||.P.28 ;I)L<HH $I5. "{ 6 wmmuuu++ wmmuuu*+ wmmuuu++mNN 1*;5&I H*)H.P.28 ;I)L<HH$ I5. ")HN GH*5. "<* f$H8 C*4.P)L<H ,s1C$IV*?8 C*.5%V*3f.5 c>;2<C3?#)&;H"V*H*u+, 8 *mmuuu++m b*uuu3*++ }+@ {* }+<*  ;+6i* hjn~}eb' •p•p<+}* hx+6Ajpp€p dh b**+Aj~i_{{ j<*3+*  ;+6i* •A{a•{n_' ‚;* •p•p<+}* hx+6Ajpp€p dh ƒ„7…|7…ƒ†p|@*Kƒ„7…|7…ƒ†p| +** +u)h <6ii~h… ~}k' <+<+3+‚+u)< < 7p„„n**)b3+ +6Ajp„ƒ…7„p€ dh …rrr…•†p…|•ƒ€@*K€ƒ…†7†…†•p„ }++K+<•…j …p„„ƒ }++*+7„…‡ …p„„† b**,*<+*< *+p…~…p„„†„7„|pp{b b*<+3+<<++ hƒn~}ib_~p••rpp€7ƒ hrn~}ib_~p••rpp€7r }{k_h}ˆn~_h n<h+3+A+<7 b**+<+*+*<*u,++<++ u*; @@++++<*<kmmuuu++@ +*+ @* b**+Aj~i_{{ }+<*{n~}eh~id_~h6ii n<h+3+u<+u)< < }+@+*d}immuuu+u)< < *+h+3+hƒn~}ib_~ *+h+3+hrn~}ib_~ h* <}{k_h}j}…i~e d*+b*+7…* …p„„† +*b*+•…* …p„„7 {K*b*+•…* …p„„ƒ ‰‰‰i*< *+@u<**,*<+6~p„„†r€|†{b ŠŠŠ F*5L4$H"V*Aj$ *mmuuu+u)<  ~*+_++j<<+ ,+<j ; ~_b_jj j+<<†•ƒ•j*;n*;6h +77„ ;**+}+; h*+3j <*+|„p|p…••|€  ;dh +}*+„„„…p€€p€€p€€ _b}„„„mr +*+}{h{}A{b…| +*+{……„…„…„… *+ +;+_jj}+<+3+ + }+b*+ d*+p„„p…„|…p ~j, <+*+_jj…_…j}_ ~j, <+*+_++*@j<<+*+<*  ,+ ~j, <++w…7„…7„…€rp„ ~j, <+{**, <+‚** ~+*+_jj…_…j}_ ~+*+_++*@j<<+*+<* ,+ ~++w…7„…7„…€rp„ ~+{**, <+‚** tJH;F*5L4.PH"<CV* *mmuuu8 *** b*uuu8 *** }+@ {* }+<* *+<+* b+ ~tKrp„•ƒ A* 3+6nj|r•rp dh }+<*b~h{} b**+•djjij~ +*+7…‡d…„7 {K+<7…‡d…„€ i*<d*+€…‡d…„† j<*3+6+** * b+6*+<+< ‚*+<+ *+<+* b+ ~tKrp„•ƒ A* 3+6nj|r•rp dh 7•„p€7pp„ b*<+3+<<++ hd}{bh~ hpd}{bh~ {@n<_@* }{k_h}ˆn~_h n<h+3+A+<7 b**+<+*+*<*u,++<++ u*; @@++++<*<kmmuuu++@ +*+ @* b**+•djjij~ }+<*b~h{}6_ n<h+3+u<<+ }+@+*d}immuuu<+ *+h+3+hd}{bh~ *+h+3+hpd}{bh~ h* <j_A{ d*+b*+€…‹ …p„„† +*b*+7…‹ …p„„7 {K*b*+7…‹ …p„„€ ‰‰‰i*< *+@u<**,*<+6~p„„†r€|†{b ŠŠŠ F*5L4$H"V*8 ***$ *mmuuu+u)<  •djjij~ ••€„•7€ }+;+ _+*+u)h+3+<j…„•…p„„{…••…€„…„…„…' ••€„„„…••€p€€p€€ b<+_j…h{…b~h{}…„€7{…••…€„…•…7p…' ••€„•7p…••€„••7   t(7&3&bhbh_+*' h* ).oKH..PH$I5$8 *F*,-./ ,(  ;3&1CH$I.51CH$I.PK>;03 <\#.L<-KOH.*^_.OH<O 1C$I& 4)"*6.I .55L.L2*H"3IWU 2YŒ$9V*T8 :1C• T)"58 ;I ;!1C3 ;L:H"3I1 C$I  ;L:H"3I1C$I•<+3+#5L! !H"3I1<sY1 V*IX<+3+? 2<CH<+3+1C$I& 4,:!)"C$.o  ;L:H"3IIV*4,&U*.5)95;$ /  H";I )U*.0Y"&!;:V*W UH2,26.*^H:_N o;*):23,1HF*5LK+ ;L:H "$I3H"5L P.P ;$1 *;5&I H1?5L01.PUB; c/ $F*o;\3(1<)  A?# <)  Ž,*<••<)  b+@* h+3+<+K*,++ j+<<„„p„p ‰<+3+p•rp h+3+<+K*,++ j+<<„„„p *+*++ *+ j+<<p•rp ‰‰<+;+‘*; ‰‰<…+ *+‰‰mm’+“  c/ $F*;3(1<) e1;.P05 F*,O$V*<+3+bh.*;h+3+bh;5LH; V8 :`$IV*";F*%H;VV* & 3#++_h > 1<+;+‘*;•F*K+5,*$ ,:V*bh 5<” > 1<••F*1)$&:H,:* > 1mm’+“ •F* ;L.WH,:V*3f 3IH;?V*43<* .5F*5LK+K+5",W ?)" ;$2<CH"#$ )"•F*  ;L3f A?#(.>;5? [...]... exposure o( the systems we are targeting For example, if port 139 is open on a Windows NT server, it may be exposed to a great deal of risk Chapter 5 discusses the inherent Liệt kê hoặc điểm danh (Enumeration) ***Phần này không có trong cuốn Hacking Expose: network security secret&solutions 4th nhưng nó chắc là vẫn có ích cho các bạn nên tôi post lên ***Phần này được Tham khảo từ bài viết của tác... tên miền, lúc đó bạn sẽ làm gì???? Hoặc giả sử bạn sẽ là một quản trị mạng, bạn sẽ là thế nào để bảo vệ được mạng của bạn trước các nguy cơ từ internet Hãy nghiên cứu tài liệu Hacking Expose: network security secret&solutions 4th và tự rút ra kinh nghiệm cho mình CHƯƠNG II Quét (SCANNING) Giới thiệu về Scanning Nếu như footprinting là xác định các thông tin mục tiêu thì Scanning là công cụ dùng để quét... scanning techniques beyond what strobe can provide, we must dig deeper into our toolkit udp_scan Since strobe only covers TCP scanning, we can use udp_scan, originally from SATAN (Security Administrator Tool for Analyzing Networks), written by Dan Farmer and Wietse Venema in 1995 While SATAN is a bit dated, its tools still work quite well In addition, newer versions of SATAN, now called SAINT, have... SNMP (Simple Network Management Protocol )**** Một hệ thống NT đang chạy các tác nhân NT SNMP có thể truy cập bằng các chuỗi cộng đồng ngầm định như "public".Việc điểm danh các user NT thông qua SNMP là một điều dễ dàng khi dùng trình duyệt SNMP snmputil trong NTRK.Tuy nhiên, công cụ này lại cung cấp rất nhiều số liệu được coi là "lùng bùng, khó nhớ, khó hiểu".Do đó, để tránh rắc rối (hacking có quá... 135:UNKNOWN: Netcat Another excellent utility is netcat or nc, written by Hobbit (hobbit@avian.org) This utility can perform so many tasks that everyone in the industry calls it the Swiss army knife of security While we will discuss many of its advanced features throughout the book, nc will provide basic TCP and UDP port scanning capabilities The -v and -vv options provide verbose and very verbose output,... open [192.168.1.1] 21(f'tp) open [tsunami] no -u -v -z -w2 192.168.1.1 1-140 [192.168.1.1] 135 (ntportmap) open [192.168.1.1] 123 (ntp) open [192.168.1.1] 53 (domain) open [192.168.1.1] 42 (name) open Network Mapper (nmap) Chúng ta hãy quay lại và thảo luận về công cụ quét cơ bản đó là nmap Công cụ này, như đã đề cập ở phía trên, được viết bởi Fyodor (http:/ /www.insecure.org/nmap) Nmap cung cấp các... Never do DNS resolution/Always resolve [defaul: sometimes resolve] -oN/ -oM Output normal/machine parsable scan logs to -iL Get targets from file; Use '-' for stdin * -S /-e Specify source address or network interface interactive Go into interactive mode (then press h for help) [tsunami] IDap -sS 192.168.1.1 -Starting nmap V 2.53 by fyodor@insecure.org Interesting ports on (192.168.1.11): (The 1504... we can actually determine the owner of each process The astute reader may have noticed that the web server is running as "root" instead of as an unprivileged user such as "nobody." This is a very poor security practice Thus, by performing an ident scan, we know that if the H1TP service were to be compromised by allowing an unauthorized user to execute commands, attackers would be rewarded with instant... 514/tcp shell like exec, but automatic 192.168.1.10 ssh 22/tcp Secure Shell 192.168.1.10 telnet 23/tcp Telnet [112,JBP] 192.168.1.10 smtp 25/tcp Simple Mail Transfer [102,JBP] 192.168.1.10 nfs 2049/tcp networked file system 192.168.1.10 lockd 4045/tcp 192.168.1.10 unknown 32772/tcp unassigned 192.168.1,10 unknown 32773/tcp unassigned 192.168.1.10 unknown 32778/tcp unassigned 192.168.1.10 unknown 32799/tcp... để trích các tài khoản hợp lệ hoặc các tài nguyên từ hệ thống Ở Part III này, tôi sẽ nêu chi tiết các phương pháp thông dụng nhất, và các công cụ cơ bản của kỹ thuật điểm danh - buớc thứ ba trong basic hacking Sự khác biệt chính giữa các kỹ thuật thu thập thông tin ở part I ( Foot Printing) và part II (scanning) và kỹ thuật enumeration dưới đây nằm ở cấp xâm nhập của hacker Điểm danh liên quan đến các