Ethical Hacking and Penetration Testing

Discussion on ethical hacking and penetration testing subjects.

InfoSec Institute's most popular information security and hacking training goes in-depth into the techniques used by malicious, black hat hackers with attention getting lectures and hands-on lab exercises . While these hacking skills can be used for malicious purposes, this class teaches you how to use the same hacking techniques to perform a white-hat, ethical hack, on your organization. You leave with the ability to quantitatively assess and measure threats to information assets; and discover where your organization is most vulnerable to hacking in this network security training course.

Some of the instructor-led hands-on hacking lab exercises in this security training experience:

* Capture the Flag hacking exercises every night
* Abusing DNS for host identification
* Leaking system information from Unix and Windows
* Stealthy Recon
* Unix, Windows and Cisco password cracking
* Remote buffer overflow exploit lab I - Smashing the Stack
* Remote buffer overflow exploit lab II - Integer Overflows
* Remote heap overflow exploit lab III - Beyond the Stack
* Desktop exploitation
* Remote keylogging
* Data mining authentication information from clear-text protocols
* Remote sniffing
* Breaking wireless security
* Malicious event log editing
* Transferring files through firewalls
* Hacking into Cisco routers
* Harvesting web application data
* Data retrieval with SQL Injection Hacking
* Calculating the Return on Investment (ROI) for an ethical hack

 Click here to learn more about the most hands-on Ethical Hacking course ever!

Wednesday, October 26, 2005

Blog is back & Yersinia

Ok, well I have been super lazy about this blog in the last 6 months, and now it is time to get back into it. I'll try to keep the posts shorter, this will allow me to post more often.

One really kick ass program that has been in heavy use by a lot of pen testers out there, but has not really been picked up by general security pros is Yersinia. Yersinia allows you to play with all sorts of layer 2 protocols that you would otherwise have to do with netdude or a heck of a lot of scripting. The most useful attacks in a pen testing situation where network gear is in scope, are for VLAN hacking and VLAN hopping. The other DoS attacks for CDP and STP are useful, but DoSing your local broadcast domain isn't that big of a deal. Check out some network hacking output from Yersinia here.

- Jack

posted by Jack Koziol @ 2:19 PM    

1 Comments:

  • At 4:26 AM, Johnny Foo said…

    Glad to know that you find Yersinia useful. Of course the best attacks are the VLANS addition/removal if no VTP password is set, and the ARP Spoofing over VLAN hopping (having set up the trunk with DTP before), it is always a succeded pen-test if the customer switches are poorly configured :) Anyway, the DoS attacks can cause an internal network to be chaotic, according to our experience. It is not good if it is your network, but sometimes it is needed when demostrating the risks to a customer (warning him firsr :P)

     

Post a Comment

<< Home