unit-1.pptx
Download as PPTX, PDF0 likes35 views
This document provides an overview of the topic of ethical hacking. It is divided into six units that cover concepts like footprinting, scanning networks, enumeration, system hacking, password cracking, malware threats, sniffing, social engineering, and session hijacking. It defines ethical hacking as hacking performed by white hat hackers to find security vulnerabilities and prevent attacks from black hat hackers. In comparison, unethical or black hat hacking is done illegally and maliciously by cybercriminals. The document also distinguishes between the surface web, deep web, and dark web, with the dark web requiring special software and protocols to access anonymously.
unit-1.pptx
- 1. ETHICAL HACKING BY DR. V. PRASHANTHI Senior Assistant Professor Dept-CSE-CYS,DS and AI&DS
- 2. UNIT- I: Introduction to Ethical Hacking: Hacking, Ethical Hacking, Difference between the Ethical Hacking and Unethical Hacking. Types of Hackers, Three parts of the web. Foot printing: Objectives of Foot Printing, Understanding Foot Printing concepts, Types of Foot printing, Foot Printing through search engines, advanced Hacking techniques, Web services and social networking sites. Understanding Web site Foot printing, E-mail Foot printing and Competitive Intelligence. Understanding Whois, DNS and Network Foot printing
- 3. UNIT – II Foot printing Tools: Foot printing through Social Engineering, Understanding different Foot Printing Tools-MALTEGO, RECON-NG and FOCA and Counter Measures. Scanning Networks: Overview of network scanning, understanding various scanning tools-NMAP, ZEN MAP, angryip.org, PacketBuilder2.0, checking for live systems, Scanning tools for mobile, Overview of scanning pen testing.
- 4. UNIT – III Enumeration: What is enumeration? Understanding different techniques of enumeration-SNMP, LDAP, NTP, and DNS. Vulnerability analysis: Vulnerability research, Vulnerability classification, what is vulnerability assessment-Nessus professional ,GFI languard, Openvas, Retina CS, Qualys free scan, Nitko, Microsoft base line security analiser, automated vulnerable detection system, types of vulnerability assessments, Exploit database, Types of vulnerability tools, Characteristics of a good vulnerability assessment solution, Choosing a vulnerability tool, Criteria for choosing a vulnerability assessment tool, Best practices for selecting vulnerability tools.
- 5. UNIT – IV System Hacking: Overview of CEH Hacking methodology, understanding different techniques to gain access to the system, privilege escalation techniques, overview of different types of rootkits, techniques to hide the evidence of compromise, system hacking penetration testing. Password cracking: Types of password attacks, online tools to search default passwords: default password.info, ZTE default usernames and passwords, `Active online attack: Trojan/spyware/keyloggers, Password relevance tools.
- 6. UNIT – V Malware threats: How hackers use Trojans, common ports used by trojans, trojan horse construction kit, RIG exploit kit, command shell trojan, remote access trojan, Study of spyrix.com, flaticon.com and anti-trojan software. Sniffing: sniffing concepts, sniffing tools-Wireshark tool, oxid.it, Sniffer detection techniques: PING and DNS methods. Social Engineering: Understanding social engineering concepts, Social Engineering Techniques, Insider Threats, Impersonation on Social Networking Sites, Identity Theft, and countermeasures
- 7. UNIT – VI Session Hijacking: Understanding Session Hijacking Concepts, Application-Level Session Hijacking, Network Level Session Hijacking, overview of Session Hijacking Tools, Understanding Countermeasures and Penetration Testing. SQL Injection: SQL Injection Concepts, Types of SQL Injection, SQL Injection Methodology SQL Injection Tools, Evasion Techniques and Countermeasure.
- 8. Rapid Growth Of Internet-Cyber Crime Increased
- 9. CYBER CRIMES Email : Mahesh bank Mobile : Covid-19 Cloud : Amazon cloud ( DDoS attack) Ransomware: North American land developer was hit (151,000 employees at risk) Credential stuffing : Zoom (500,000 usernames and passwords di) App: Bahubali-2 cinema booking.
- 10. ONLINE FRAUDS Purchase fraud Job fraud Insurance fraud Admission fraud Fake website fraud Investment fraud Matrimonial fraud Loan fraud.
- 12. HACKING Exploiting weakness in a computer system to gain unauthorized access to obtain information.
- 13. Hacking Hacking is the act of compromising digital devices and networks through unauthorized access to an account or computer system. Hacking is not always a malicious act, but it is most commonly associated with illegal activity and data theft by cyber criminals. Hacking refers to the misuse of devices like computers, smartphones, tablets, and networks to cause damage to or corrupt systems, gather information on users, steal data and documents, or disrupt data-related activity.
- 14. HACKER They are powerful skilled individuals who break into the system by bypassing the security measures to achieve a goal. A person who performs hacking is called a hacker.
- 15. Types of Hackers
- 16. Black hat Hacker
- 17. Grey Hat Hacker
- 18. White Hat Hacker
- 19. Types of Hackers
- 20. Types of Hackers
- 21. Green hat hacker A green hat hacker is someone who is new to the hacking world but is intently focused on increasing their cyberattack skills. They primarily focus on gaining knowledge on how to perform cyberattacks on the same level as their black hat counterparts. Their main intent is to eventually evolve into a full-fledged hacker, so they spend their time looking for learning opportunities from more experienced hackers. Motives: To learn how to become an experienced hacker
- 22. Blue hat hackers Blue hat hackers are hired by organizations to bug-test a new software or system network before it’s released. Their role is to find loopholes or security vulnerabilities in the new software and remedy them before it launches. Motives: To identify vulnerabilities in new organizational software before it’s released
- 23. Red Hat Government-Hired Hackers Red hat hackers are hired by government agencies to spot vulnerabilities in security systems, with a specific focus on finding and disarming black hat hackers. They’re known to be particularly ruthless in their hunt for black hat criminals, and typically use any means possible to take them down. This often looks like using the same tactics as black hat hackers and using them against them— using the same malware, viruses and other strategies to compromise their machines from the inside out.
- 24. Ethical Hacking Ethical Hacking is performed by White Hat Hackers to find the security vulnerabilities of the system and prevent the Black Hat hackers from illegally infiltrating and stealing data from any system. The big organizations perform ethical hacking to test the cybersecurity level and identify the weak points. Ethical hacking is performed as per the rules and regulations set by the legal authorities.
- 25. Unethical Hacking Unethical Hacking or Black Hat hacking is performed by cybercriminals with the false intention of stealing sensitive data, money, and access the restricted networks and systems. Such type of hacking is practiced to disrupt official website networks and infiltrate communication between two or more parties. Unethical hacking is hacking done by violating the rules and regulations set by the legal authorities.
- 26. Difference between Ethical & unethical Hacking S. No. Hacking Ethical Hacking 1. Steal valuable information of company and individual for illegal activity Hack system to reduce vulnerabilities of company’s system 2. Illegal practice and considered a crime Legal practice, authorized by the company or individual 3. Such types of hackers are called black-hat hackers Such types of hackers are called white-hat hackers 4. Such hackers try to access restricted networks through illegal practices and reduce the security of data. Such hackers create firewalls and security protocols. 5. They work for themselves for dirty money. They work with different government agencies and big tech companies.
- 27. Parts of Web The web is divided into three categories, which are The Surface Web, Deep Web, and Dark Web
- 28. Parts of Web
- 30. Surface Web: The surface web is the normal web that is everyone knows and it is visible for all users who use the internet. The websites on the surface web are mostly indexed or promoted by search engines. Google, Bing, Yahoo, etc. All these are the search engines where users come and search the content accordingly his/her needs. The user can open websites and collect information. But the interesting thing is that on the surface web have only 4% of the content is only available for the general public in the entire ocean of the web. The internet is a huge and vast amount of information but the big amount of people don’t know. And they think only what they see only this is the internet nothing else.
- 31. The deep web The deep web is the secret web that is not visible for the normal user only who has access and who is authorized can access and use the information. It is a group of many different websites or many pages but they are not indexed by search engines. It is used to storing most personal information like Cloud storage, any Organization’s Personal Data, and Military Data, etc.
- 33. Deep web Simple examples of deep web content include financial data, social security databases, email inboxes, social media, medical documentation, legal files, blog posts that are pending review and web page redesigns that are in progress. The dark web technically speaking, is a subsection of the deep web More than 200,000 websites exist on the deep web. The volume of public data on the deep web is 400 to 500 times greater than that of surface web. The deep web hosts approximately 7,500 terabytes of data, compared to the 19 terabytes hosted on the surface web.
- 34. The dark web The dark web also known as the darknet, it is an encrypted part of the internet that isn’t indexed by search engines like Google, Bing, Yahoo, etc. The dark web is a subdirectory of the deep web.
- 35. Dark web Dark web pages need special software such as the Tor browser with the appropriate decryption key, in addition to access rights and understanding of the place to find the content. The Dark Web is composed of Networks and may only be accessed with special software (based on the network you would like to connect to, together with TOR Network employing the TOR proxy and proxy ) and specifically configured network settings, which means you properly and anonymously connect with the Network.
- 36. Dark Web The content on the dark web has the potential to be more dangerous, this content is usually walled off from regular users. However, it is entirely possible for regular users to accidentally come across harmful content while browsing the deep web, which is much more easily accessible.
- 38. Hacking Phases The following are the five phases of hacking: - 1. Reconnaissance 2. Scanning 3. Gaining Access 4. Maintaining Access 5. Clearing Tracks
- 39. 1. Reconnaissance Reconnaissance is an initial preparing phase for the attacker to get ready for an attack by gathering the information about the target before launching an attack using different tools and techniques. Emp details, Ip address, domain names, sub domain names, location, etc
- 40. Types of Reconnaissance Passive Reconnaissance, the hacker is acquiring the information about target without interacting the target directly. An example of passive reconnaissance is public or social media searching for gaining information about the target. Active Reconnaissance is gaining information by acquiring the target directly. Examples of active reconnaissance are via calls, emails, help desk or technical departments.
- 41. 2. Scanning Scanning phase is a pre-attack phase. In this phase, attacker scans the network by information acquired during the initial phase of reconnaissance. Scanning tools include Scanners such as Port scanners, Network mappers, client tools such as ping, as well as vulnerabilities scanner. During the scanning phase, attacker finally fetches the information of ports including port status, operating system information, device type, live machines, and other information depending upon scanning.
- 42. 3. Gaining Access Gaining access phase of hacking is the point where the hacker gets the control over an operating system, application or computer network. Techniques include password cracking, denial of service, session hijacking or buffer overflow and others are used to gain unauthorized access. After accessing the system; the attacker escalates the privileges to obtain complete control over services and process and compromise the connected intermediate systems.
- 43. 4. Maintaining Access / Escalation of Privileges Maintaining access phase is the point when an attacker is trying to maintain the access, ownership & control over the compromised systems. Similarly, attacker prevents the owner from being owned by any other hacker. They use Backdoors, Rootkits or Trojans to retain their ownership. In this phase, an attacker may steal information by uploading the information to the remote server, download any file on the resident system, and manipulate the data and configuration. To compromise other systems, the attacker uses this compromised system to launch attacks.
- 44. 5. Clearing Tracks An attacker must hide his identity by covering the tracks. Covering tracks are those activities which are carried out to hide the malicious activities. Covering track is most required for an attacker to fulfill their intentions by continuing the access to the compromised system, remain undetected & gain what they want, remain unnoticed and wipe all evidence that indicates his identity. To manipulate the identity and evidence, the attacker overwrites the system, application, and other related logs to avoid suspicion.