see
Elitewrap
ARP (Address Resolution Protocol) poisoning,
Ettercap, 562??“563
ARROW keys, 49
Audit checks, Pluto, 427
726
Practical Hacking Techniques and Countermeasures
Autopartition, Red Hat Linux, 43??“44
AutoScan, 482??“490, 719
B
Back Orifice,
see
BO (Back Orifice)
Banner alteration, as countermeasure, 109, 117
Banner identification, 63??“86
amap, 79??“83
banner.c, 84??“85
netcat, 67??“72
references, 671
Scanline, 73??“74
social engineering and, 86
Telnet, 65??“66
tool syntax, 675??“678
Xprobe 2, 75??“78
Banner.c
banner identification, 84??“86
reference for, 671
syntax, 671
Bastion computers, as countermeasure
netcat, 588
Nikto, 451
Retina, 392
Solar Winds, 386
WHAX, 474
WHCC, 507
X-Scan, 397
Bastion servers/workstations, as
countermeasure
Back Orifice, 519
CGI (Common Gateway Interface) Scanner,
171??“177
DoS (Denial-of-Service) and attack, 645
DoS smurf attack, 650
DoS SYN (Synchronize) attack, 650
DoS UDP (User Datagram Protocol) flood
attack, 660
Hydra, 178??“186
Metasploit, 429
NetBus, 534
NETWOX/NETWAG, 301
PsExec, 633
SAINT, 359
Sniffit, 249
SuperScan, 163??“165
WGateScan, 187??“191
Beenhacked directory, 177
Berkley Packet Filter (BPF), and ngrep, 213
BO (Back Orifice), 519??“533
on attacker??™s computer, 528??“533
how it works, 519
installing remotely, 533
syntax, 719
on target (server), 519??“528
Boot Disk screen, Red Hat Version 8, 52
Boot Loader configuration, Red Hat Version 8,
45??“47
BPF,
see
Berkley Packet Filter, and ngrep
Brute force, 299??“356
BruteFTP (File Transfer Protocol),
346??“353
brute-force FTP password connection with,
346
execute, 353
install, 346??“350
select target, 351??“352
CHNTPW, 325??“336
boot from CD, 326??“328
change password, 331??“334
changing administrator password with, 325
follow on-screen instructions, 328??“330
gain physical access to computer, 325??“326
reboot, 335??“336
FGDump, 309??“312
John the Ripper, 337??“345
brute-force passwords with, 337
configure, 337
execute, 342??“345
LC5, 313??“324
cracking password hashes with, 313
execute, 319??“324
install, 313??“315
select parameters, 316??“319
start, 316
NETWOX/NETWAG, 299??“303
TSGrinder II, 354??“356
BruteFTP, 346??“353
brute force FTP password with, 347
execute, 353
install, 346??“350
select target, 351??“352
syntax, 716
C
Case sensitivity, of Linux, 59
CD-ROMs
accompanying book, 60
disabling autorun, 6
installing virtual Red Hat Version 8, 39
installing virtual Windows 2000, 15
Cerberus, 468??“473, 719
CERT (Certification), 359
CGI (Common Gateway Interface) Scanner,
171??“177
entering target IP address, 172
how it works, 171
running, 173??“177
starting, 171??“172
syntax, 696
Index
727
Chargen (character generator service), 74
CHNTPW (Change NT Password), 325??“336
boot from CD, 326??“328
change password, 331??“334
gain physical access to computer, 325??“326
how it works, 325
on-screen instructions, 328??“330
reboot, 335??“336
CIAC,
see
Computer Incident Advisory Centre
Computer Incident Advisory Centre (CIAC), 359
Connectivity, detecting target, 105??“106
Cryptcat, 161
Ctrl/Alt keys, 29??“30, 55??“56
D
Date & Time settings, Windows 2000, 24
Daytime protocol, 74
Default Shares, disabling, 135??“138, 694
Denial of service,
see
DoS (Denial-of-Service)
Disable Default Shares, 135??“138, 694
Disk size, virtual machines, 14, 38
DNS (Domain Name System), 123
Domain Name System,
see
DNS
DoS (Denial-of-Service), 643??“669
land attack, 645??“649
land attack - SYN attack, 655??“659
smurf attack, 650??“654
Trash2.
Pages:
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289