Home > Computing and Information Technology > Computer security > Data encryption > Hack I.T. - Security Through Penetration Testing
24%
Hack I.T. - Security Through Penetration Testing

Hack I.T. - Security Through Penetration Testing

          
5
4
3
2
1

Out of Stock


Premium quality
Premium quality
Bookswagon upholds the quality by delivering untarnished books. Quality, services and satisfaction are everything for us!
Easy Return
Easy return
Not satisfied with this product! Keep it in original condition and packaging to avail easy return policy.
Certified product
Certified product
First impression is the last impression! Address the book’s certification page, ISBN, publisher’s name, copyright page and print quality.
Secure Checkout
Secure checkout
Security at its finest! Login, browse, purchase and pay, every step is safe and secured.
Money back guarantee
Money-back guarantee:
It’s all about customers! For any kind of bad experience with the product, get your actual amount back after returning the product.
On time delivery
On-time delivery
At your doorstep on time! Get this book delivered without any delay.
Notify me when this book is in stock
Add to Wishlist

About the Book

"This book covers not just the glamorous aspects such as the intrusion act itself, but all of the pitfalls, contracts, clauses, and other gotchas that can occur. The authors have taken their years of trial and error, as well as experience, and documented a previously unknown black art." --From the Foreword by Simple Nomad, Senior Security Analyst, BindView RAZOR Team Penetration testing--in which professional, "white hat" hackers attempt to break through an organization's security defenses--has become a key defense weapon in today's information systems security arsenal. Through penetration testing, I.T. and security professionals can take action to prevent true "black hat" hackers from compromising systems and exploiting proprietary information. Hack I.T. introduces penetration testing and its vital role in an overall network security plan. You will learn about the roles and responsibilities of a penetration testing professional, the motivation and strategies of the underground hacking community, and potential system vulnerabilities, along with corresponding avenues of attack.Most importantly, the book provides a framework for performing penetration testing and offers step-by-step descriptions of each stage in the process. The latest information on the necessary hardware for performing penetration testing, as well as an extensive reference on the available security tools, is included. Comprehensive in scope Hack I.T. provides in one convenient resource the background, strategies, techniques, and tools you need to test and protect your system--before the real hackers attack. Specific topics covered in this book include: *Hacking myths *Potential drawbacks of penetration testing *Announced versus unannounced testing *Application-level holes and defenses *Penetration through the Internet, including zone transfer, sniffing, and port scanning *War dialing *Enumerating NT systems to expose security holes *Social engineering methods *Unix-specific vulnerabilities, such as RPC and buffer overflow attacks *The Windows NT Resource kit *Port scanners and discovery tools *Sniffers and password crackers *Web testing tools *Remote control tools *Firewalls and intrusion detection systems *Numerous DoS attacks and tools 0201719568B01042002

Table of Contents:
Preface. Introduction. 1. Hacking Today. 2. Defining the Hacker. Hacker Skill Levels. First-Tier Hackers. Second-Tier Hackers. Third-Tier Hackers. Information Security Consultants. Hacker Myths. Information Security Myths. 3. Penetration for Hire. Ramifications of Penetration Testing. Requirements for a Freelance Consultant. Skill Set. Knowledge. Tool Kit. Hardware. Record Keeping. Ethics. Announced vs. Unannounced Penetration Testing. Definitions. Pros and Cons of Both Types of Penetration Testing. Documented Compromise. 4. Where the Exposures Lie. Application Holes. Berkeley Internet Name Domain (BIND) Implementations. Common Gateway Interface (CGI). Clear Text Services. Default Accounts. Domain Name Service (DNS). File Permissions. FTP and telnet. ICMP. IMAP and POP. Modems Lack of Monitoring and Intrusion Detection. Network Architecture. Network File System (NFS). NT Ports 135n139. NT Null Connection. Poor Passwords and User IDs. Remote Administration Services. Remote Procedure Call (RPC). sendmail. Services Started by Default. Simple Mail Transport Protocol (SMTP). Simple Network Management Protocol (SNMP) Community Strings. Viruses and Hidden Code. Web Server Sample Files. Web Server General Vulnerabilities. Monitoring Vulnerabilities. 5. Internet Penetration. Network Enumeration/Discovery. Whois Query. Zone Transfer. Ping Sweeps. Traceroute. Vulnerability Analysis. OS Identification. Port Scanning. Application Enumeration. Internet Research. Exploitation. Case Study: Dual-Homed Hosts. 6. Dial-In Penetration. War Dialing. War Dialing Method. Dialing Login. Login Screens. Gathering Numbers. Precautionary Methods. War Dialing Tools. ToneLoc. THC-Scan. TeleSweep. PhoneSweep. Case Study: War Dialing. 7. Internal Penetration Testing. Scenarios. Network Discovery. NT Enumeration. UNIX. Searching for Exploits. Sniffing. Remotely Installing a Hacker Tool Kit. Vulnerability Scanning. Case Study: Snoop the User Desktop. 8. Social Engineering. The Telephone. Technical Support. Disgruntled Customer. Get Help Logging In. Additional Methods. Dumpster Diving. Desktop Information. Common Countermeasures. 9. UNIX Methods. UNIX Services. inetd Services. r Services. Remote Procedure Call Services. Buffer Overflow Attacks. File Permissions. Applications. Mail Servers. Web Servers. X Windows. DNS Servers. Misconfigurations. UNIX Tools. Datapipe.c. QueSO. Cheops. nfsshell. XSCAN. Case Study: UNIX Penetration. 10. The Tool Kit. Hardware. Software. Windows NT Workstation. Linux. VMware. 11. Automated Vulnerability Scanners. Definition. Testing Use. Shortfalls. Network-Based and Host-Based Scanners. Tools. Network-Based Scanners. Network Associates CyberCop Scanner. ISS Internet Scanner. Nessus. Symantec (Formerly Axent Technologies) NetRecon. Bindview HackerShield (bv-control for Internet Security). Host-Based Scanners. Symantec (Formerly Axent Technologies) Enterprise Security Manager (ESM). Pentasafe VigilEnt. Conclusion. 12. Discovery Tools. WS_Ping ProPack. NetScanTools. Sam Spade. Rhino9 Pinger. VisualRoute. Nmap. Whatis running. 13. Port Scanners. Nmap. 7th Sphere Port Scanner. Strobe. SuperScan. 14. Sniffers. Dsniff. Linsniff. Tcpdump. BUTTSniffer. SessionWall-3 (Now eTrust Intrusion Detection). AntiSniff. 15. Password Crackers. L0phtCrack. pwdump2. John the Ripper. Cain. ShowPass. 16. Windows NT Tools. NET USE. Null Connection. NET VIEW. NLTEST. NBTSTAT. epdump. NETDOM. Getmac. Local Administrators. Global (iDomain Adminsi). Usrstat. DumpSec. user2Sid/sid2User. NetBIOS Auditing Tool (NAT). SMBGrind. SRVCHECK. SRVINFO. AuditPol. REGDMP. Somarsoft DumpReg. Remote. Netcat. SC. AT. FPipe. Case Study: Weak Passwords. Case Study: Internal Penetration to Windows. 17. Web-Testing Tools. Whisker SiteScan. THC Happy Browser. wwwhack. Web Cracker. Brutus. Case Study: Compaq Management Agents Vulnerability. 18. Remote Control. pcAnywhere. Virtual Network Computing. NetBus. Back Orifice 2000. 19. Intrusion Detection Systems. Definition. IDS Evasion. Stealth Port Scanning. Aggressive Techniques. Pitfalls. Traits of Effective IDSs. IDS Selection. RealSecure NetProwler. Secure Intrusion Detection. eTrust Intrusion Detection. Network Flight Recorder. Dragon. Snort. 20. Firewalls. Definition. Monitoring. Configuration. Change Control. Firewall Types. Packet-Filtering Firewalls. Stateful-Inspection Firewalls. Proxy-Based Firewalls. Network Address Translation. Evasive Techniques. Firewalls and Virtual Private Networks. Case Study: Internet Information Server ExploitoMDAC. 21. Denial-of-Service Attacks. Resource Exhaustion Attacks. Papasmurf. Trash2. Igmpofdeath.c. Fawx. OBSD_fun. Port Flooding. Mutilate. Pepsi5. SYN Flooding. Synful. Synk4. Naptha. IP Fragmentation Attacks. Jolt2. Teardrop. Syndrop. Newtear. Distributed Denial-of-Service Attacks. Tribe Flood Network 2000. Trin00. Stacheldraht. Usage. Application-Based DoS Attacks. Up Yours. Wingatecrash. WinNuke. BitchSlap. DOSNuke. Shutup. Web Server DoS Attacks. Concatenated DoS Tools. CyberCop. ISS Internet Scanner. Toast. Spike.sh5.3. Summary. 22. Wrapping It Up. Countermeasures. Keeping Current. Web Sites. Mailing Lists. 23. Future Trends. Authentication. Two- and Three-Factor Authentication. Biometrics. Token-Based Authentication. Directory Services. Encryption. Public Key Infrastructure. Distributed Systems. Forensics. Government Regulation. Hacking Techniques. Countermeasures. Cyber-Crime Insurance. Appendix A. Appendix B. The Twenty Most Critical Internet Security Vulnerabilities—The Experts' Consensus. Index. 0201719568T01172002


Best Sellers


Product Details
  • ISBN-13: 9780201719567
  • Publisher: Pearson Education (US)
  • Publisher Imprint: Addison Wesley
  • Depth: 32
  • Height: 189 mm
  • No of Pages: 544
  • Series Title: English
  • Sub Title: Security Through Penetration Testing
  • Width: 234 mm
  • ISBN-10: 0201719568
  • Publisher Date: 26 Feb 2002
  • Binding: SA
  • Edition: PAP/CDR
  • Language: English
  • Returnable: Y
  • Spine Width: 32 mm
  • Weight: 907 gr


Similar Products

How would you rate your experience shopping for books on Bookswagon?

Add Photo
Add Photo

Customer Reviews

REVIEWS           
Click Here To Be The First to Review this Product
Hack I.T. - Security Through Penetration Testing
Pearson Education (US) -
Hack I.T. - Security Through Penetration Testing
Writing guidlines
We want to publish your review, so please:
  • keep your review on the product. Review's that defame author's character will be rejected.
  • Keep your review focused on the product.
  • Avoid writing about customer service. contact us instead if you have issue requiring immediate attention.
  • Refrain from mentioning competitors or the specific price you paid for the product.
  • Do not include any personally identifiable information, such as full names.

Hack I.T. - Security Through Penetration Testing

Required fields are marked with *

Review Title*
Review
    Add Photo Add up to 6 photos
    Would you recommend this product to a friend?
    Tag this Book
    Read more
    Does your review contain spoilers?
    What type of reader best describes you?
    I agree to the terms & conditions
    You may receive emails regarding this submission. Any emails will include the ability to opt-out of future communications.

    CUSTOMER RATINGS AND REVIEWS AND QUESTIONS AND ANSWERS TERMS OF USE

    These Terms of Use govern your conduct associated with the Customer Ratings and Reviews and/or Questions and Answers service offered by Bookswagon (the "CRR Service").


    By submitting any content to Bookswagon, you guarantee that:
    • You are the sole author and owner of the intellectual property rights in the content;
    • All "moral rights" that you may have in such content have been voluntarily waived by you;
    • All content that you post is accurate;
    • You are at least 13 years old;
    • Use of the content you supply does not violate these Terms of Use and will not cause injury to any person or entity.
    You further agree that you may not submit any content:
    • That is known by you to be false, inaccurate or misleading;
    • That infringes any third party's copyright, patent, trademark, trade secret or other proprietary rights or rights of publicity or privacy;
    • That violates any law, statute, ordinance or regulation (including, but not limited to, those governing, consumer protection, unfair competition, anti-discrimination or false advertising);
    • That is, or may reasonably be considered to be, defamatory, libelous, hateful, racially or religiously biased or offensive, unlawfully threatening or unlawfully harassing to any individual, partnership or corporation;
    • For which you were compensated or granted any consideration by any unapproved third party;
    • That includes any information that references other websites, addresses, email addresses, contact information or phone numbers;
    • That contains any computer viruses, worms or other potentially damaging computer programs or files.
    You agree to indemnify and hold Bookswagon (and its officers, directors, agents, subsidiaries, joint ventures, employees and third-party service providers, including but not limited to Bazaarvoice, Inc.), harmless from all claims, demands, and damages (actual and consequential) of every kind and nature, known and unknown including reasonable attorneys' fees, arising out of a breach of your representations and warranties set forth above, or your violation of any law or the rights of a third party.


    For any content that you submit, you grant Bookswagon a perpetual, irrevocable, royalty-free, transferable right and license to use, copy, modify, delete in its entirety, adapt, publish, translate, create derivative works from and/or sell, transfer, and/or distribute such content and/or incorporate such content into any form, medium or technology throughout the world without compensation to you. Additionally,  Bookswagon may transfer or share any personal information that you submit with its third-party service providers, including but not limited to Bazaarvoice, Inc. in accordance with  Privacy Policy


    All content that you submit may be used at Bookswagon's sole discretion. Bookswagon reserves the right to change, condense, withhold publication, remove or delete any content on Bookswagon's website that Bookswagon deems, in its sole discretion, to violate the content guidelines or any other provision of these Terms of Use.  Bookswagon does not guarantee that you will have any recourse through Bookswagon to edit or delete any content you have submitted. Ratings and written comments are generally posted within two to four business days. However, Bookswagon reserves the right to remove or to refuse to post any submission to the extent authorized by law. You acknowledge that you, not Bookswagon, are responsible for the contents of your submission. None of the content that you submit shall be subject to any obligation of confidence on the part of Bookswagon, its agents, subsidiaries, affiliates, partners or third party service providers (including but not limited to Bazaarvoice, Inc.)and their respective directors, officers and employees.

    Accept

    New Arrivals


    Inspired by your browsing history


    Your review has been submitted!

    You've already reviewed this product!
    ASK VIDYA