Karteikarten
Internet Forensics
Karten in diesem Stapel (19)
- 1Whoisextracts info that was provided when domain was registered
address
phone number
point of contact
authoritative name server - 2ARINAmerican Registry for Internet Numbers
web app that provides information about owners of IP addresses and domain names - 3Advanced ReconWeb-based Hacking Support Sites
War Dialing
War Driving
Port Scanners
Pseudo proxy servers
Session hijacking - 4War dialers(Demon Dialers)
Dial phone numbers in an attempt to locate modem carriers - 5War drivingact of searching for Wi-Fi wireless networks by a person in a moving vehicle, using a portable computer, smartphone or personal digital assistant (PDA)
- 6Port scannignEssential hacker tool to identify open ports
UDP : sessionless
TCP: connection orientaed
ping sweep: first to see if host is alive, then scan ports - 7Session hijackingSteal, participate in, intercept/monitor, terminate, or log any computer session either in progress over the internet or on the host machine
- 8sniffinginterception of network traffic
- 9Broadcast ethernetall boxes see all traffic because hub distributes indiscriminately
- 10Switched Ethernetinformation routed to MAC ids
- 11IP fragmentation AttacksStealthy
Useful in bypassing older packet filters
Useful in scanning (2), gaining access(3), covering tracks (5) - 12IP Address spoofingcommunications that identify a person with false IP addresses in packets
- IP addresses are not validated in TCP/IP (security flaw)
- used in DOS attacks, log access, manipulating firewalls - 13Buffer Overflowstechnique of placing K+n bytes of data in a K sized buffer
(poor software engineering) - 14Code RedWorm propogated through TCP/IP port 80
Buffer overflow in IDQ.dll - 15Methods of password crackignDictionary attack
Brute force attack (cartesian cross product)
Hybrid attack - 16Dos attack categoriesStopping services
Saturate resource - 17Stopping Services (DOS)Process killing
System reconfiguration
Process Crashing
(malformed packets) - 18Saturate Resource (DOS)Spawning process to fill process table
Fill up file system
(Packet flooding: Syn flood, smurf) - 19Historical DOS attacksCPU Hog
Ping of Death
Jolt2
Informationen
- Beschreibung
- Karteikarten am Internet Forensics, erstellt von moxiehart am 17/03/2015.
- Erstellt von
- moxiehart · Mär 2015
- Aktualisiert
- 19 Feb 2016
- Aufrufe
- 0
- Bewertung