Showing posts with label become. Show all posts
Showing posts with label become. Show all posts

Wednesday, December 27, 2017

Beginners Guide What is Hacking and How to Become a Social Engineer

Beginners Guide What is Hacking and How to Become a Social Engineer


Hacking and How to Become a Social Engineer- picateshackz.com

Social engineering is a non-technical method of intrusion hackers use that relies heavily on human interaction and often involves tricking people into breaking normal security procedures. It is one of the greatest threats that organizations today encounter.Hacking has grown far bigger than anyone could have expected. In the beginning is was about optimizing model trains but today it’s a whole lifestyle. We see “hackers” in the news almost everyday and the business is just getting bigger. If you ask a random person on the street what their view of a hacker is they will probably reply with something like “It’s a person who breaks into systems” but that’s wrong. A true hacker is much more than that and can never be dragged down into something as small as that description, so today i want to explain about what is hacking and how to become a social engineer.



What is hacking?



What do you think of when you hear the term hacker? Most of you guys will probably think of criminal geeks who are butt hurt about something and then decide to take revenge or “hacking” groups like Anonymous. In that case you are wrong. Those people have nothing in common with real hacking and they are using their knowledge for bad things. The correct term for people like Anonymous would be Cracker(lookup the definition if you don’t know why they are called that). The right definition of hacking is “Hacking is the practice of modifying the features of a system, in order to accomplish a goal outside of the creators original purpose.” - www.whatishacking.org. The word hacker originates back from the fifties or the sixties. One of the places that’s commonly known for have started the hacking culture is MIT. Students from Tech Model Railroad Club joined together to create new ways of controlling and building model trains. A great improvement of the train or the system was simply called a hack. It then moved on to phone lines and later on into computers. The reason why it moved on into the phone lines was simply that there wasn’t anything else to hack.


A guy who got very famous for hacking telephones and telephone lines (also called phreaking) is John “Captain Crunch” Draper. The reason why he’s called Captain Crunch was because of a famous hack he did back in the early seventies. From the american breakfast cereal Cap’n Crunch he got a whistle which could make a sound at 2600Hz. Since AT&T’s system was running by tones he could cheat the phone system to dial up pretty much everyone for free. He later on created The Blue Box which made it easier for him to cheat the phone lines. In 1972 he got convicted for cheating the phone company for money and ended up in prison for a short amount of time. According to The Wall Street in 1978 he hand wrote the first word processor for the Apple II computer called EasyWriter. He apparently should have hand written it in prison on paper and then later typed it into a computer. Hacking was also the reason why personal computers was created by guys like Steve Wozniak. Steve Wozniak created a terminal which enabled him to play chess but at the same to lure around on ARPAnet. He then short after joined hacker groups which introduced him to microprocessors. He have later on made great contributions to the development of the microprocessor.

The precursor to Usenet newsgroup and e-mails, the boards with names such as Sherwood Forest and Catch-22 become the venue of choice for phreaks and hacker to talk, trade tips and share stolen credit card information and stolen computer passwords. Hacking groups begin to form and some of the first well known were Legion of Doom from the United States and Chaos Computer Club from Germany.

In 1983 the movie WarGames came out and changed the public view on hacking. Hacking went from being something underground and unnoticed to something big. The movie was about a boy who want’s to crack into a game company’s computer system to play a game but instead end up starting a military catastrophe.

The same year 6 teenagers known as the 414 gang get’s arrested for hacking into 60 computers. It was first in 1986 it was made a crime to break into computer systems.

The morris worm:

In 1988 Robert T. Morris, Jr. created a self-replicating computer worm which he launches on ARPAnet to inspect its effectiveness on UNIX systems. It went out of hand and spread to over 6000 computers. He ended up with probation and a $10.000 fine.

Kevin Mitnick:

As early as the age of 12 he social engineered himself to free bus drives. He’s today known as one of the best social engineers through time. Kevin Mitnick is captured by federal agents and charged with stealing 20,000 credit card numbers. 


I will encourage you to read his biography. It gives you a true sight into his journey to establish himself as one of the greatest social engineers of all time.




How To Become a Social Engineer



Article from Social-Engineer Newsletter Vol 05 Issue 61
I really must admit that one of the most asked questions we get through the website is something like, “I really want to get into social engineering as a career, what should I read/take in college to give me the best chance?” then followed up by “How do I get into this as a job/career?”

It is a serious question that we have spent considerable time trying to come with an appropriate answer for. This month I will answer the education piece, by telling you my own thoughts, what I look for when I hire and also what some of my most trusted friends from large companies look for when hiring. Then next month, I will go into how to make this your career.


So you wanna be a social engineer?


I understand why the question comes in so often. This job is pretty cool sounding. We get paid to phish, vish and break into companies every day. That certainly sounds like the dream job – well at least for a lot of us.


Like most careers, it is logical to think that there may be a clear path to education to help you with a leg up in this field. Some people ask me, if they should study psychology, if they should get sales experience, others wonder if they should skip school all together. What’s the answer?


Lets first ask my good friend Jim. He manages a large team of pentesters that includes red teams, social engineers and some excellent hackers at one of the world’s largest financial institutions. I asked him this question, “If you wanted to hire a young man or woman to be part of your team as a social engineer or pentester what do you look for? Education, experience or a combination?”


Jim says, “First of all I look for experience. But there are certifications that mean something to me like Offensive Security’s certifications (OSCP / OSCE) and the CISSP.


In addition, my mantra is generally: Jack-of-all-trades, master of a couple. I look for folks who have a fairly broad generalist experience, but have taken an interest in deeply diving into one or two.


I also look for mentality; can the candidate think like a bad guy? Is security your job, or a passion? What does your home network look like? And very importantly, does the candidate have the ability to communicate clearly, concisely, and professionally.


Finally, personal references are good, especially when it comes to character, since if you join my team you’re going to have to be a highly trusted individual.”


Thanks Jim, that was very helpful.


I went another very close friend who has been in the industry for a very long time helping run Black Hat and now running the Global Education and Training practice at Accuvant, Ping Look. Jim, “If you wanted to hire a young man or woman to be part of your team as a social engineer or pentester what do you look for? Education, experience or a combination?”

Ping said, “Accuvant does not look for degrees – experience and ability to pass the practical exams that we administer and references, especially industry ones, are more important.

I know that most hackers goals arent to be promoted to management but the reality is that everyone has to make a living and having more responsibility within a company usually means a promotion whether it be to management or not. I do know from anecdotal experience of others that at a lot of larger firms, not having a college degree will make it more difficult to be promoted (initially) to management positions.


HOWEVER in a technical field, smart companies know that InfoSec is still an emerging marketplace and that finding a candidate with a college degree, especially in computer science who is also a good infosec practitioner with the necessary experience will be very difficult. Over time, those who prove themselves technically adept and have good management chops end up having the same chance in getting promotions or running teams or being lead technologist or chief research scientist as the guy with a degree.”


Another excellent answer, that really helps us to get a clear picture.


Finally, I went to my good friend, Dave Kennedy. Dave started his own company just a few years ago, Trusted Sec, and went from just a couple people to over 20 people. He obviously knows a thing or two about hiring pentesters. So I presented him with the same question, “If you wanted to hire a young man or woman to be part of your team as a social engineer or pentester what do you look for? Education, experience or a combination?”


Dave said, “I favor experience over education any day. Although a college degree is important, I am looking for someone who has the experience to handle the type of work that we get.



References are important, but I tend to hire people I’ve known and trust in the industry so I always get individuals I know and trust to do the work.”


All three answers really paint a great picture for anyone thinking and asking.



What about Social-Engineer, Inc?

My company has personally grown over the last couple years so I have had to spend considerable time thinking about what it is that I need in employees. Unlike some of the great minds I asked above, my needs are a tad bit different. But let me pick out the similarities from what we saw above:

  • Experience always wins. Many of my team have degrees, and some, like Michele are not only highly educated but trained educators. Even with that, experience is king. Now with that said there aren’t just slews of people that have tons of experience in phishing, vishing and breaking into buildings without having a criminal record. I will discuss later how we get around this particular hurdle in a bit. Mentality: This is a big one because there are many components to this particular topic.
  1. Can the person think like a bad guy? We have a motto in my company, “Always leave them feeling better for having met you.” We apply that to how we want our customers to feel about our services. So although I need my people to be able to THINK like a bad guy, I need them to care enough about the customer that they don’t revel in the bad side too long.
  2. Desire to learn. We are in a constant state of growth, and part of that is learning how to adapt when the times, attack vectors and methods of the bad guys change. My team has to be willing to do that.
  3. Learn from failure. I have failed so many times I can’t count them, but the important part is learning from each failure. My team has to be willing to have the same attitude.
  4. Is this a hobby or a passion? It is important to me to find people who enjoy the work and don’t just look at it as a “job”.

  • Performance based education. Right now from what I found, Social-Engineer has the only performance based SE Certification around. I also favor the Offensive Security Certifications as they prove fortitude, persistence and critical thinking skills.


  • Critical thinkers. Probably one of the most important aspects of being a social engineer is being able to critically think. To adapt, flex and change your methods on the fly. To be able to think outside the box, as if there is no box.

  • Willingness to try new things. Many times my team will be required to try completely new things, new pretexts, new methodologies and new processes.


Does this mean that education is completely useless? No, not at all. Depending on the role we are looking for a degree can definitely add to usefulness and the position we use the person for.

If you are going to college already and you are thinking of a career in pentesting and maybe even social engineering, then there are some areas of study that can help. Things like computer sciences, psychology and social psychology can all help.

In the end, the fortitude to stick through college, study hard and graduate with good grades can tell a potential employer that you have some great qualities to make a good employee. In the end of the day, social engineering is an exciting and very rewarding career path. Study hard, stay out of trouble and get practical experience where you can and it may just be your career someday too.


Recommended article: Penetration Testing: Basic Guide For Beginners


Available link for download

Read more »

Sunday, October 29, 2017

Become A Hacker Types Of Cyber Attacks And Must Know Facts

Become A Hacker Types Of Cyber Attacks And Must Know Facts


learn to hack_types of cyber attacks_picateshackz.com

Nowadays, every other college or school student wants to be a hacker. Due to media hype, the term hacker is considered both cool and criminal at the same time. Now, since my blog is basically about my journey into hacking, I receive many emails on how to become a hacker. "Im a beginner in hacking, how should I start?" or "I want to be able to hack my friends Facebook account" are some of the more frequent queries. 

In this article I will attempt to answer these and more. I will give detailed technical instructions on how to get started as a beginner, how to evolve as you gain more knowledge and expertise in the domain and also describing the different types of cyber attacks and must know facts about hacking. Hacking is a skill. And you must remember that if you want to learn hacking solely for the fun of hacking into your friends Facebook account or email, things will not work out for you. You should decide to learn hacking because of your fascination for technology and your desire to be an expert in computer systems.

"Being a hacker is lots of fun, but its a kind of fun that takes lots of effort. The effort takes motivation."



The hacker mindset

In order to become a hacker, you must start thinking like one. We encounter all kinds of technology in our real life. Look at them from a hackers perspective by thinking of ways to hack them. Hacking is not only about computers. It is also about how you use logic and ingenuity to solve the problems you encounter in your day today life. Nothing is really hack-proof. Auto-rickshaw meters, electronic voting machines, electronic doors, biometric systems, cars and even a yatch have all been hacked in the past. Whenever you encounter any technology, think about how it can be exploited to perform another action. You should possess a natural curiosity for solving puzzles and taking up challenges.

Read my previous post to know more: Understand The Hacker MindsetTo Become A Real Hacker




Know your technology

Becoming a hacker is no easy task. It will not happen in days or weeks. It will take you many months and  even years to reach to the level where you can call yourself a hacker. The main reason for this is that being a hacker requires a lot of technical know-how. If you want to hack a computer, it only seems logical that you first know how it works, right? You should be familiar with the ins and outs of computers and know a little bit about everything in the IT domain. For this, you need to learn many things. This learning phase is when most aspiring hackers will give up.
General IT knowledge:
·         Learn how to install Windows and Linux. Use VirtualBox or VMware to           practice this.
·         Learn networking concepts like IP address, subnets, TCP/IP, OSI model,           LAN,WAN
·         Functions of switch, router, firewall, access point etc
·        What is DNS, DHCP, SNMP, ARP, NAT?
·         What is HTTP, FTP, Telnet, RDP, SSH, POP, SMTP, SSL, NetBios?
  
      These bullet points are just bare minimum concepts, and you have to learn them thoroughly. For instance, you need to know how data travels through the OSI layers, and the role of each layer in the data transfer.      I would recommend taking a networking course  such as CompTIAs N+ certification. 




Programming  Languages

Programming knowledge is necessary, although not mandatory to become a hacker. Some of the worlds best hackers started out as programmers. If you know programming, you will be able to dissect code and analyze it. You will be able to write your own scripts or your own hacking tools. So, which programming language should you learn then? HTML and JavaScript are languages of the internet. So make sure you learn them first. they are also incredibly easy to grasp and learn.  If your are enrolled in an undergraduate computer science degree, you will most probably be learning C,C++ and Java. These three major languages are good and you should keep learning them, but for a hacker, Python is the best language. "Why?" You ask. Because python is an extremely powerful language and it easy to learn at the same time. With Python you can achieve your results with minimal coding, and it does not need to be compiled. That means, just as you finish writing a script, you can immediately run it without having to compile it. And later on in life, if you decide to become a programmer instead of a hacker, Python can develop GUI applications also. In fact, a large part of YouTube is written in Python.
 Another language you should learn is PHP. PHP is also free and open source. It is a server side scripting language, meaning, login pages and other web based forms are handled by PHP. Knowledge of ASP. NET will also be helpful. You should also know MySQL commands and syntax. This knowledge will be vital later when you perform SQL injection attacks against websites. Download XAMPP package and start practicing PHP and MySQL
Another important thing to note is that most colleges will not teach you advanced programming concepts. File handling and Network socket programming are two very important concepts you should familiarize yourself with, regardless of the language.


Read my previous post to know more: Programming Languages For Hackers And Learn It From Most 6 Helpful Websites



Open Source

The hacker community is a big supporter of Open Source software. You should contribute to open source projects when you can. In order to improve your programming skills, you can start an open source project and work on it. Download the source code of popular open source projects and study the code. Sourceforge and Github are excellent starting points. Alternatively, start your own project and post the source code online. This will help you get recognition.


Linux

The Windows operating system may be easy and convenient for most users, but it is certainly not suited for hackers. With the exception of few windows only tools, most hacking tools run best under Linux environment. I have given a list of top ten popular hacking tools, and most out of those 10 tools run best under Linux. You can use any Linux distribution like Ubuntu or Fedora, but BackTrack and Kali are two major Linux distros specifically designed for hackers. They come loaded with all the popular hacking tools, saving you from the trouble of downloading them yourself. If you are not comfortable with leaving windows as yet, you can use VirtualBox to install BackTrack in your system, or you can dual boot your operating systems.
Information Technology is a huge field. If you look at your college or university, your professors know about programming concepts and theory, the System Administrator knows about networks and systems, the website developers know web programming and designing. You, as a hacker, must know all these things and more.

Even under the domain of hacking, there are many sub categories like web application security, network security, digital forensics, reverse engineering etc. Nobody can be good at everything. After you have adequate knowledge and experience in "general" hacking, you can choose a speciality and become an expert in it.


Must Read: An Introduction To Hacker’s OS: Kali Linux Setup Tutorial



Different Types of Cyber Attacks

learn to hack_types of cyber attacks_picateshackz

A cyber attack, in simple terms, is an attack on your digital systems originating from malicious acts of an anonymous source. Cyber attack allows for an illegal access to your digital device, while gaining access or control of your digital device.
A different types of cyber attacks can be defined as an offensive tactic to gain an illegal control or access to your digital device, called the target system, initiated by a person or a computer against a website, computer system or a single digital device as well as a whole, which poses a serious threat to computer systems, information stored, financial structures and the entire network itself. Cyber attacks work towards compromising the integrity of the digital device and the information stored in it.

1. Backdoors – Backdoor is a type of cyber threat in which the attacker uses a back door to install a keylogging software, thereby allowing an illegal access to your system. This threat can turn out to be potentially serious as it allows for modification of the files, stealing information, installing unwanted software or even taking control of the entire computer.
2. Denial-of-Service Attack – A denial-of-service or a DOS attack generally means attacking the network to bring it down completely with useless traffic by affecting the host device which is connected to the internet. A DOS attack targets websites or services which are hosted on the servers of banks and credit card payment gateways.
3. Direct-access Attack – A direct-access attack simply means gaining physical access to the computer or its part and performing various functions or installing various types of devices to compromise security. The attacker can install software loaded with worms or download important data, using portable devices.
4. Eavesdropping – As the name suggests, eavesdropping means secretly listening to a conversation between the hosts on a network. There are various programs such as Carnivore and NarusInsight that can be used to eavesdrop.
5. Spoofing – Spoofing is a cyber attack where a person or a program impersonate another by creating false data in order to gain illegal access to a system. Such threats are commonly found in emails where the sender’s address is spoofed.
6. Tampering – Tampering is a web based attack where certain parameters in the URL are changed without the customer’s knowledge; and when the customer keys in that URL, it looks and appears exactly the same. Tampering is basically done by hackers and criminals to steal the identity and obtain illegal access to information.
7. Repudiation Attack – A repudiation attack occurs when the user denies the fact that he or she has performed a certain action or has initiated a transaction. A user can simply deny having knowledge of the transaction or communication and later claim that such transaction or communication never took place.
8. Information Disclosure– Information disclosure breach means that the information which is thought to be secured is released to unscrupulous elements who are not trustworthy.
9. Privilege Escalation Attack – A privilege escalation attack is a type of network intrusion which allows the user to have an elevated access to the network which was primarily not allowed. The attacker takes the advantage of the programming errors and permits an elevated access to the network.
10. Exploits – An exploit attack is basically a software designed to take advantage of a flaw in the system. The attacker plans to gain easy access to a computer system and gain control, allows privilege escalation or creates a DOS attack.
11. Social Engineering – An attack by a known or a malicious person is known as social engineering. They have knowledge about the programs used and the firewall security and thus it becomes easier to take advantage of trusted people and deceive them to gain passwords or other necessary information for a large social engineering attack.
12. Indirect attack – Indirect attack means an attack launched from a third party computer as it becomes more difficult to track the origin of the attack.
13. Computer crime – A crime undertaken with the use of a computer and a network is called as a computer crime.
14. Malware – Malware refers to malicious software that are being designed to damage or perform unwanted actions into the system. Malware is of many types like viruses, worms, Trojan horses, etc., which can cause havoc on a computer’s hard drive. They can either delete some files or a directory or simply gather data without the actual knowledge of the user.
15. Adware – Adware is a software that supports advertisements which renders ads to its author. It has advertisements embedded in the application. So when the program is running, it shows the advertisement. Basically, adware is similar to malware as it uses ads to inflict computers with deadly viruses.
16. Bots – Bots is a software application that runs automated tasks which are simple and repetitive in nature. Bots may or may not be malicious, but they are usually found to initiate a DoS attack or a click fraud while using the internet.
17. Ransomware – Ransomware is a type of cyber security threat which will restrict access to your computer system at first and will ask for a ransom in order for the restriction to be removed. This ransom is to be paid through online payment methods only which the user can be granted an access to their system.
18. Rootkits – A rootkit is a malicious software designed in such a way that hides certain process or programs from normal anti virus scan detection and continues to enjoy a privilege access to your system. It is that software which runs and gets activated each time you boot your system and are difficult to detect and can install various files and processes in the system.
19. Spyware – Spyware, as the name suggests, is a software which typically spies and gathers information from the system through a user’s internet connection without the user’s knowledge. A spyware software is majorly a hidden component of a freeware program which can be downloaded from the internet.
20. Scareware – Scareware is a type of threat which acts as a genuine system message and guides you to download and purchase useless and potentially dangerous software. Such scareware pop-ups seem to be similar to any system messages, but actually aren’t. The main purpose of the scareware is to create anxiety among the users and use that anxiety to coax them to download irrelevant softwares.
21. Trojan Horses – Trojan Horses are a form of threat that are malicious or harmful codes hidden behind genuine programs or data which can allow complete access to the system and can cause damage to the system or data corruption or loss/theft of data. It acts as a backdoor and hence it is not easily detectable.
22. Virus – A computer virus is a self replicating program which, when executed, replicates or even modifies by inserting copies of itself into another computer file and infects the affected areas once the virus succeeds in replicating. This virus can be harmful as it spreads like wildfire and can infect majority of the system in no time.
23. Worm – Just like a virus, worm is a self replicating program which relies on computer network and performs malicious actions and spreads itself onto other computer networks. Worms primarily rely on security failures to access the infected system.
24. Phishing – Phishing is a cyber threat which makes an attempt to gain sensitive information like passwords, usernames and other details for malicious reasons. It is basically an email fraud where the perpetrator sends a legitimate looking email and attempts to gain personal information.
25. Identity Theft – Identity theft is a crime wherein your personal details are stolen and these details are used to commit a fraud. An identity theft is committed when a criminal impersonates individuals and use the information for some financial gain.
26. Intellectual Property Theft – Intellectual Property theft is a theft of copyrighted material where it violates the copyrights and the patents. It is a cybercrime to get hands onto some trade secrets and patented documents and research. It is basically a theft of an idea, plan and the methodology being used.
27. Password Attacks – Password attack is a form of a threat to your system security where attackers usually try ways to gain access to your system password. They either simply guess the password or use an automated program to find the correct password and gain an entry into the system.
28. Bluesnarfing – Bluesnarfing is a threat of information through unauthorized means. The hackers can gain access to the information and data on a Bluetooth enabled phone using the wireless technology of the Bluetooth without alerting the user of the phone.
29. Bluejacking – Bluejacking is simply sending of texts, images or sounds, to another Bluetooth enabled device and is a harmless way of marketing. However, there is a thin line between bluejacking and bluesnarfing and if crossed it results into an act of threat.
30. DDoS – DDoS basically means a Distributed Denial of Service. It is an attempt to make any online service temporarily unavailable by generating overwhelming traffic from multiple sources or suspend services of a host connected to the internet.
31. Keylogger – A keylogger is a spyware that has the capability to spy on the happenings on the computer system. It has the capability to record every stroke on the keyboard, web sites visited and every information available on the system. This recorded log is then sent to a specified receiver.


38 Things That You Should Understand While Learning To Hacking



learn to hack_types of cyber attacks_picateshackzAvailable link for download

Read more »

Monday, October 16, 2017

Become a Hacker Best 20 Tips for Beginners to Start Learning

Become a Hacker Best 20 Tips for Beginners to Start Learning


Best 20 Tips for Beginners to Start Learning - picateshackz.com

Are you a beginner who wants to learn hacking but don’t know where to start? If so you are at the right place. Since most of the books and free resources on the Internet are only meant for those who already have a considerable amount of knowledge on the subject, they fail to teach hacking for beginners. Therefore, I have decided to come up with this post that gives useful best 20 tips for beginners to start learning on how to kick start their journey to becoming a hacker..

What Skills do I Need to Become a Hacker?

How to become a hacker?, This is very tough job to answer this question and you may already searched a lot of time on google to get the exact answer for the question but there is no simple way to become a hacker, yes .Hacking is an art which need lot of skills and more passion to technologies and a mindset to learn new topics.

When i was a started to learn hacking i dont know from where to start and what to do but i was very interested to learning hacking and learning new things. Everyday i found new topics related to computer and technologies and followed some blog and at finally i could do just few tweaks in my pc, someones script copying, cracking and phishing. At that times i didnt know anything about a real hacker and i believed myself as a hacker but in reality i was just a script kiddie.

It was very good time for me when i realized that i am not a hacker yet, i am just a script kiddie and i my goal is to become a hacker. After few months i used to read some good articles about real hacking and i got some good resources to learn hacking and i have started from the basics including some programming language. Only reading wont make you a hacker you have to work on your computer lab about your new experiments also.

Recommended: Become a Hacker!, What does Exactly Mean by a Hacker ?

What is the Best Way to Become a Hacker?

As said earlier, the best way to turn yourself into a hacker is to start from the basics. You will have to master the basics to build a strong foundation. And once this is done, you’ll be in a position to explore new ideas and start thinking like a hacker. You can follow the below mentioned steps to start off your career as a hacker.


20 Tips to Become a Hacker:


1. Begin with the Basics

For beginners who have little or no previous knowledge of hacking, it is always better to start off from the basics. Instead of directly learning how to hack, you can begin exploring more about topics such as computer networks, network ports, firewalls, common network protocols like IP address, HTTP, FTP, DNS, SMTP etc. along with how each of those stuffs work.

You can also begin to learn more about alternate operating systems Linuxwhose knowledge becomes very much essential in the field of hacking. The more you learn about the basics, the more easy it is to find vulnerabilities and device exploits. Once you develop a basic understanding of the fundamental concepts, you will be in a position to easily understand various hacking techniques that are in practice.

2. Find a Good Source to Start Learning

If one has a fair amount of experience in the field of hacking, there exists so many books and websites that give out technical information on latest vulnerabilities along with possible ways to exploit them. However, for beginners it is hard to find sources that teach hacking right from the basics in a simple and easy to follow manner.

Recommended: Become A Hacker: Top Books To Learn Ethical Hacking

3. Start by learning the fundamentals before attempting to do anything

Rather than unnecessarily trying to be one with no sound technical knowledge to back you up, you ought to start at the very beginning by having a sound knowledge in computers. A great way to dip your toes into the water, when you are confused about where to begin from is by understanding Unix. What many do not know is that Unix is the operating system of the internet. You can use the internet without learning about Unix, Yet you cannot become a hacker without learning Unix.

4. Begin by trying to learn the correct attitude of a hacker

If being a professional hacker is something which you are interested in, then make sure that you imbibe the correct attitude. It is of paramount importance that a hacker, besides knowing the intricate nuances of computer system as well as computer programming, knows that he or she does not need to adhere to any stereotype when it comes to hacking. There are a lot of negative things which are said and written about hackers, yet you should work as per what you want to do with your skill.

Recommended: Understand The Hacker Mindset To Become A Real Hacker

5. Know that not all hacking has to be a negative thing 

Before you think that you rather not become a hacker, because there is so much negativity associated with it, you ought to remember that hacking is not always a negative thing. People that use their ability for negative use are commonly referred to as hackers, but this term is actually wrong, as such people should be correctly referred to as crackers. Crackers in a community are people that are involved in illegal as well as unethical things which you ought to steer clear off.

6. Gradually build on your ability to write in Hyper Text Mark Language

To become a professional hacker, it is not merely enough to have the correct attitude, you must know how to write in Hyper Text Mark Language, or html as it is popularly referred to as. When you see a website which is composed of pictures, images as well as text, it is all done through the use of HTML.You can write your HTML in any basic word processing program, like for example Notepad. It is not at all difficult to master the art of writing in HTML and over time you have to keep improving.

Recommended: Programming Languages For Hackers And Learn It From Most 6 Helpful Websites

7. Do be proficient in more than one language of programming

Needless to say, before you can run, you ought to learn to walk, before you can write an essay you need to learn the alphabet, similarly, to become a hacker and break the rules, you need to be well versed in all the rules first. So keeping this in mind, a hacker has to have a sound and in depth knowledge in the language of programming. It is advisable to make use of a starting platform such as r3 or Kali. In addition to this a good language to start off with is ‘Python’ and for more serious work, C or C++.

Recommended: Python: Noob Friendly Programming Language To Start Coding

8. Become a Creative and unconventional thinker

Hackers are known for their unconventional as well as creative bend of mind. To become a hacker you too must try and think of out of the box techniques when it comes to getting things done. There is no particular set of rules a hacker can follow to get his work done therefore it is up to him to assimilate all the textbook knowledge in programming which he or she has gained and to put it to use in a practical manner. There is no diploma course in hacking therefore to a large extent hackers must rely on their own expertise.

9. Read up some old pieces to get the true spirit of a hacker

To be a good professional hacker one think which you ought to imbibe is the spirit of a true hacker. It is practically impossible that you will imbibe this spirit on your own without any source of inspiration, therefore , for you it is advisable to read up some old pieces that might help you know what hacking is all about. Two examples of such old pieces include, ‘Jargon File’ as well as ‘Hackers Manifesto’ written by The Mentor, the technical issues addressed may be old but the essence surpasses the boundaries of time.

10. Use your expertise to stand up against injustice and inequality

If you think you have what it takes to become a professional hacker, then you can put your knowledge to positive use by helping people in need. In such a case you can make your chief enemy those sources of authority that use their power in a bad way to withhold information from the common man or from weaker individuals. By doing this positive work you will become a crusader raising your voice for those individuals who are too afraid or even too backward to raise their voices on their own.

11. You can land a corporate job if that interests you

There are many people who have a joint interest for becoming professional hackers as well as landing a corporate job. If you are one of these people as well, then you need not worry at all, you can fulfill your dream. It is not a very well known fact that hackers are hired by big companies as well so as to ensure that all their data is very well protected. Since hackers know how other hackers work, therefore they will be able to take the necessary precautions as well as ensure any damage is minimal.

12. Learn about a number of operating systems, rather than just one

There are a number of operating systems that are being used across the globe and as a hacker it would greatly benefit you to learn about a number of different operating systems rather than being acquainted with only one. Apart from the popular operating system UNIX, there are numerous other ones as well. Windows is in fact one of the systems which is compromised most often and therefore you should have a working knowledge of a Microsoft System.

Recommended:

  • Top 15 Advanced Operating Systems For Hackers
  • An Introduction To Hacker’s OS: Kali Linux Setup Tutorial

13. Your networking concepts need to be very sharp to become a hacker

Learning network concepts will really help you go a long way when it comes to becoming a hacker. A great reference book that you can make use of is ‘A Top down Approach’, which is by James F. Kurose and Keith W. Ross. In addition to reading this what you must do is to familiarize yourself with what exactly is VPN, LAN, WAN as well as subnet. If your primary aim as a hacker is to use to your advantage the vulnerabilities of the net, then you ought to know about, UDP protocol and TCP/IP.

Recommended: Become A Hacker: Learn the Basics of Networking

14. Embark on a project to help you get in depth knowledge on computers

Being a hacker you must have all computer related knowledge at your finger tips. What can really help you is embarking on a self assigned project. A popular project which many hackers do is building a computer on their own right from scratch. This sounds like a lot of work and indeed it is, yet this has been a tried and tested method to help hackers improve on their work and get better acquainted with a computer as well as a computer system.

15. Carefully read up on tutorials for hacking which you can find online

There is a lot of information online as well, when hackers are looking for help or even information. In addition to the information, there are also several step by step tutorials online which are very helpful indeed. Figuring things out in your own way and in your own time is a good thing yet if you reach a dead end then you can always find answers for your queries online. They may not be the best, but they will certainly guide you in the right direction.

16. Keep a log book to document your progress

A method which scientists make use of to keep a track of the work they are doing is by maintaining a log book. If you wish to be a hacker, then this is something that you can do as well so that you know what all you have experimented with, what has worked successfully as well as what has not. In addition to this when maintaining a log book, it becomes easy for you to keep a track of what as well as how much you have been able to accomplish in a given span of time.

17. It is advisable to work alone rather than in a team

Becoming a hacker is not a very popular job that people opt for and given the general job description it is always advisable to work on your own. This does not imply that you cannot seek good council from friends or colleagues, but it has been noticed that working in solitude yields more positive results in general.

18. Continuous practice is a must

Once you become a hacker you cannot possibly assume that your studying or practicing days are over. If you want to succeed it is up to you to keep up with the changing times in terms of advancements in programming and make sure that you do your studying well, such that you are not left behind in the rat race. There are a number of individuals who choose to become hackers, for the sheer thrill of the fact that they can constantly as well as continuously gain more information with each passing day.

19. Do participate in several hacking challenges online 

Healthy competition has proved as a highly effective way of making us give our hundred percent at all times. To improve on your skill and ability you can participate in a number of hacking challenges online where you can test yourself as well as find out, as opposed to others in your field, where you stand and how you perform. As a professional hacker you will have to brace yourself to work under pressure, so this can be an excellent way for you to gauge, how quickly you are able to act when the going gets tough.

20. Use your knowledge responsibly or the consequences could be dire

When choosing to take up a career as a professional hacker you must remember that in the course of your career there will be many temptations where you might want to use the wealth of knowledge which you have for negative purposes. Yet, you ought to remember that ‘hacking ‘in the negative sense if used, has serious as well as dire consequences as it has been deemed illegal by the law. So keeping this in mind this should be reason enough for you to not indulge in any illegal and unethical actions.

Final Words

Since hacking is not something that can be mastered overnight, you should never be in a hurry to get going. It requires knowledge, skills, creativity, dedication and of course the time. Depending upon the amount of effort and dedication you put, it can take up anywhere between a few months to few years to develop all the the necessary skills. Everyone can become a hacker provided they learn it from the basics and build a solid foundation. So, if you want to be a hacker all you need is passion to learn, a good source of knowledge that will guide you through the basics and some perseverance.

So these are some of the tips you can follow on how to become a hacker. Hacking is an extremely complex thing which cannot be accomplished by everyone. It is only after learning the very basics and mastering them, one can go on to become a good professional hacker. These steps are exhaustive and difficult to execute, yet it is important to remember than you should put all the knowledge you have acquired to positive use rather than wasting it on doing something negative.


Also Read:

  • Beginners Guide: What is Hacking and How to Become a Social Engineer
  • Become A Hacker: Types Of Cyber Attacks And Must Know Facts
  • What You Should Do To Become A Hacker!

Available link for download

Read more »

Friday, October 13, 2017

Become A Hacker Top Books To Learn Ethical Hacking

Become A Hacker Top Books To Learn Ethical Hacking


Top 10 Best Books To Learn Ethical Hacking- picateshackz.com

Hacking is considered to be a two-way tool the place in a computer system is penetrated both to make it extra secure or to create a mischief. Ethical hacking is defined as making use of programming abilities, in order to penetrate a computer system and decide its vulnerabilities. The ethical hacker is skilled specialists, usually referred to as the “white hats”. As towards non-ethical hacker or “black hats” that penetrate into a computer system and exploit it for their very own private gain or mischief, the “white hats” consider and point out the vulnerabilities of system software, and recommend system changes to make it less penetrate.

The word hacking can sound a bit frighting and trigger some negative responses from people around you. A common misunderstanding is that all hackers are criminals. They use their skills to break in to your computer and steal valuable information. Of course there are people that use their skills for criminal actions but far from all of them.

A lot of hackers work as security-consultants or penetration-testers. They are hired by companies and organizations that wants to investigate what vulnerabilities they have in their systems. That way they can be ahead of the criminals.

You can also work with bug-bounties. Companies and organizations can sign up to organized bug-bounty programs. They allow hackers to try and break their systems such as their website. If the hacker finds a vulnerability he or she then reports back to the company. If you find something you get a reward, usually in the form of money.


BEST HACKING BOOKS

Their are two types of hacking books. If you are new to programming and computer science you should read at least one of each.

The first type gives you a good understanding of how stuff works. If you want to learn how to hack web applications for example you need to have a good understanding of how the web works. You also want to know what the common vulnerabilities are for different systems and how you prevent attacks today.

The second type is for hands on practice. You can read and follow the examples.



BEST HACKING BOOKS FOR GENERAL UNDERSTANDING

I always encourage people to develop a general understanding of the subject that they want to learn. That way you have a good base to build on. In the long run this will save time. In hacking that means reading about security. I have picked out my two favorite books about security for you to look at. Both of them will do just fine.

Top 10 Best Books To Learn Ethical Hacking- picateshackz.com Top 10 Best Books To Learn Ethical Hacking- picateshackz.com


  • Computer and Information Security Handbook Second Edition
  • The InfoSec Handbook: An Introduction to Information Security

Number 1 is my choice. If you have the patience to read through a thousand pages of highly technical content this book will make it well worth your time. You will get a great overview of all computer related security and an understanding of why certain parts of the technology is more vulnerable than others.

If you want something on a more basic level I would go with number 2. You will find it easier to read. Be aware that hacking and security are complex topics. You wont come far with just basic knowledge. So be prepared to spend hours on learning.


BEST HACKING BOOKS FOR HANDS ON PRACTICE

The best way to learn is by doing. You will find this to be true whatever the subject might be. When it comes to hacking you might be a bit scared to start out. Luckily for us there are good resources that help you get started in a legal way. The best hacking books to help you with this that I have read is the following:

Top 10 Best Books To Learn Ethical Hacking- picateshackz.com Top 10 Best Books To Learn Ethical Hacking- picateshackz.com Top 10 Best Books To Learn Ethical Hacking- picateshackz.com


  • The Hacker Playbook 2: Practical Guide To Penetration Testing
  • Black Hat Python: Python Programming for Hackers and Pentesters
  • Metasploit: The Penetration Testers Guide

The one that offer the most practical practice is as you might have guessed the first one. It is also a little bit easier to read if you dont have any prior experience. In any case all of these books are some of the best in the area. If you want more hands on practice you should turn to the internet. There are sites that offer catch the flag exercises which is a great way to develop your skills. 


BEST HACKING BOOKS FOR DIFFERENT TARGETS

If you have some technology that you are interested in you might want to find a book related to that. It can be anything from mobile applications to IoT systems. Everything technological have some security issue. You might find it easier to learn security if it relates to a technology that you know.

A great book-series for new hackers with an interest in web technologies is the Hackers Handbook series. It consists of a number of books, all of them with a certain attacking-target. The most popular books in the series are:


Top 10 Best Books To Learn Ethical Hacking- picateshackz.com Top 10 Best Books To Learn Ethical Hacking- picateshackz.com Top 10 Best Books To Learn Ethical Hacking- picateshackz.com

Top 10 Best Books To Learn Ethical Hacking- picateshackz.com Top 10 Best Books To Learn Ethical Hacking- picateshackz.com


  • The Web Application Hackers Handbook
  • The Browser Hackers Handbook
  • The Mobile Application Hackers Handbook
  • iOS Hackers Handbook
  • Android Hackers Handbook

Since these technologies are similar to each other reading one of these books will help you with the next one. So you can pick which ever you find the most interesting and then continue from there. They are all well written and contains good examples and explanations. My personal favorite is number one. Mostly because it contains the most information. It is a bit more general than the others.


CONCLUSION

You dont need to be a professional programmer to be a hacker, but it will help you. Hacking is a complex topic. You have to spend time on learning. What makes it even more difficult is that security always changes. If you learn a way to attack a web application today that might not work tomorrow. To be a great hacker you need to keep your skills updated at all times.

Learning about security is very important for developers as well. You need to create secure applications. The best way to learn security is to take the attackers perspective. Having knowledge in hacking will make you a better developer.

What ever your reason for learning hacking might be I hope you will use it for good.

Source: http://www.bestprogrammingresources.com/


Also Read:

  • What You Should Do To Become A Hacker!
  • Penetration Testing: Basic Guide For Beginners
  • Python For Hackers And Learn It From Top 5 Web Resources

Available link for download

Read more »

Saturday, July 8, 2017

Become a Hacker! What does Exactly Mean by a Hacker

Become a Hacker! What does Exactly Mean by a Hacker


what-mean-by-a-hacker ? - picateshackz.com

“Hacker” is the word which is so much infested by the media, Hacker to an average person means “A guy with his hoodie on going to a coffee shop and hacking the NSA! No, that’s not how it actually works in real life. “Hacker” to an average person can also mean a guy who can hack a Facebook account by making phishing page which maybe took him a week to find a bulletproof hosting, or may be someone who can “RAT” someone and then pretend to be a “Pro L33T hax0r” afterwards.

The thing is 95% of people who call themselves hackers are actually skids, here think of it, what would an average person do if he wants to hack a website, let’s say he wants login credentials from an SQL database of a website(which has an SQL vulnerability) what would he do, here he will probably Google “How to hack this or that? and then maybe get hooked up by a tutorial or something showing how to exploit an “SQL vulnerability” because the website he is trying to hack is shit and the owner of that website didn’t put much attention to the website while coding it. Then the guy would probably use some automated tools like Havij( the most skiddish shit ever) and then get the login credentials,



Would you call such person a hacker?

NO!, you would call him a SKID! Why? Because he did something which he doesn’t know of, he doesn’t know what an SQL database is, he doesn’t know what SQL is, he doesn’t know how Havij is working , he doesn’t know shit

Sure enough he “got into a system” but you don’t call him a hacker for fucks sake, just because the owner of that website didn’t pay a shit to the strengthen a code.

Also RATTING isn’t hacking nor Key-logging is, argue how much you want.

Just because you purchased a “RAT” from a forum and port forwarded and stuff and got a “slave” doesn’t make you a hacker. It doesn’t. It makes you a “skid shit”

Just because you purchased a “KEY LOGGER’ and were able to get the admin credentials of some shitty social networking website since 2 months doesn’t make you a Hacker

The thing is you don’t know how the thing works, you don’t know what a RAT does! You don’t know how it works,

The people selling the same programs are skilled but the people buying them are the complete opposites


Also Read:

  • Become A Hacker: Top Books To Learn Ethical Hacking
  • Penetration Testing: Basic Guide For Beginners
  • What You Should Do To Become A Hacker!

Want to learn Website Hacking?

Learn HTML, PHP, CSS, JavaScript, SQL. This is the path which is least taken by someone who wants to become a hacker

Learn Code Injections, server-sided attacks, client-sided attacks, Phishing, defacement, Web firewalls, shelling, reverse connections, escalating to server, enumerating applications, platform research. Learn how web servers work, command execution and other stuff. You need to understand how a system works and go deep into it and then you would probably think about breaking it, “Googling to hack” rarely helps

I would not lie, but this would be hard, change the way you think. A Hacker is first most a programmer and then a “Hacker”, that’s why you would need to have a good knowledge of PHP, HTML, CSS and SQL. Same applies for other stuff? Want to make malware? Learn C++ and hook up with some assembly probably (x8086) first. Learning Assembly is hard, I would not lie, so be sure to if you want to follow this path.Same applies for other fields in the hacking

For networking part, understand the core concepts of networking and other stuff, TCP/IP protocol etc. Just don’t try to what you don’t even know of, hook up with languages, go deep with concepts

At last I would say, follow the path which is right not the path everyone else follows and then later be called as a “Skid”



Available link for download

Read more »

Thursday, May 25, 2017

Become A Hacker What Is Denial of Service DoS Attack

Become A Hacker What Is Denial of Service DoS Attack



Denial of Service (DoS) Attack- picateshackz.com

If you are working in the field of computer networks or an enthusiast in the field of network security, you are sure to have come across the term “Denial of Service attack” which is simply referred to as “DoS attack”. Today, this is one of the most common types of network attacks carried out on the Internet. In this post, I will try to explain DoS attack, its variants and methods involved to carry out the same in an easily understandable manner.

What is a DOS Attack?

Denial of Service or DoS attack is a type of network attack designed to flood the target network or machine with a large amount of useless traffic so as to overload it and eventually bring it down to its knees. The main intention behind DoS attack is to make the services running on the target machine (such as a website) temporarily unavailable to its intended users. DoS attacks are usually carried out on web servers that host vital services such as banking, e-commerce or credit card processing.
A common variant of DOS attack known as DDoS (Distributed Denial of Service) attack has become quite popular in the recent days as it is more powerful and hard to detect. A typical DoS attack has a single place of origin while a DDoS attack originates from multiple IP addresses distributed across two or more different network. The working of a DDoS attack is shown in the following diagram:

Unlike a DoS attack where the attacker uses one single computer or a network to attack the target, a DDoS the attack originates from different pre-compromised computers belonging to different networks. As the attacker uses a number of computer systems from different networks each residing in different geographical locations, the incoming traffic looks natural and therefore becomes hard to detect.

Protection Against DoS/DDoS Attacks:

DoS attacks can easily be handled by blacklisting the target IP (or range of IPs) that are found to be making too many requests/connections (in an unnatural way) to the server. However, DDoS attacks are complicated as the incoming requests seem more natural and distributed. In this case it is hard to find the difference between the genuine and malicious traffic. Taking an action at the firewall level to blacklist suspected IPs may result in false positives and therefore may affect the genuine traffic as well.

How to defend against a sync flood attack:

What are some ways to protect against sync flood attacks?
A Sync flood attack, better known as a SYN attack, has its origins as one of the original types of distributed denial-of-service (DDoS) attacks and have not been significant threats to enterprises today. Most CERT advice from 1996 still applies to modern systems, but obviously many improvements have been made in the last 15 years.


A SYN attack is one where an attacker makes an initial connection to a victim computer and the victim computer waits for the completion of the connection. The attack is exploiting part of the three-way handshake in TCP for establishing reliable connections. When the initial connection is left open, it consumes resources on the victim computer until it runs out of connections or has other issues.

To protect against sync flood attacks, you have several options. The attacks can be detected by standard intrusion detection systems (IDS) and could also be blocked or minimized by built-in features in firewalls and other devices. Further protections could include lowering timeouts for how long a system waits for another system to complete the three-way handshake or having your ISP block the attacks.




Methods Involved in DoS Attack

The following are some of the commonly employed methods in carrying out a DoS attack:
  • SYN Flood Attack
  • Ping Flood Attack (Ping of Death)
  • Teardrop Attack
  • Peer-to-Peer Attacks

1. SYN Flood Attack




SYN flooding is an attack vector for conducting a denial-of-service (DoS) attack on a computer server.


The attack involves having a client repeatedly send SYN (synchronization) packets to every port on a server, using fake IP addresses. When an attack begins, the server sees the equivalent of multiple attempts to establish communications. The server responds to each attempt with a SYN/ACK (synchronization acknowledged) packet from each open port, and with a RST (reset) packet from each closed port.


In a normal three-way handshake, the client would return an ACK (acknowledged) packet to confirm that the servers SYN/ACK packet was received, and communications would then commence. However, in a SYN flood, the ACK packet is never sent back by the hostile client. Instead, the client program sends repeated SYN requests to all the servers ports. A hostile client always knows a port is open when the server responds with a SYN/ACK packet.

The hostile client makes the SYN requests all appear valid, but because the IP addresses are fake ones, it is impossible for the server to close down the connection by sending RST packets back to the client. Instead, the connection stays open. Before time-out can occur, another SYN packet arrives from the hostile client. A connection of this type is called a half-open connection. Under these conditions, the server becomes completely or almost completely busy with the hostile client and communications with legitimate clients is difficult or impossible. For this reason, SYN floods are also known as half-open attacks.

The transmission by a hostile client of SYN packets for the purpose of finding open ports and hacking into one or more of them, is called SYN scanning.



2. Ping Flood Attack (Ping of Death)




Ping of Death (a.k.a. PoD) is a type of Denial of Service (DoS) attack in which an attacker attempts to crash, destabilize, or freeze the targeted computer or service by sending malformed or oversized packets using a simple ping command.
While PoD attacks exploit legacy weaknesses which may have been patched in target systems. However, in an unpatched systems, the attack is still relevant and dangerous. Recently, a new type of PoD attack has become popular. This attack, commonly known as a Ping flood, the targeted system is hit with ICMP packets sent rapidly via ping without waiting for replies.
Attack Description
The size of a correctly-formed IPv4 packet including the IP header is 65,535 bytes, including a total payload size of 84 bytes. Many historical computer systems simply could not handle larger packets, and would crash if they received one. This bug was easily exploited in early TCP/IP implementations in a wide range of operating systems including Windows, Mac, Unix, Linux, as well as network devices like printers and routers.
Since sending a ping packet larger than 65,535 bytes violates the Internet Protocol, attackers would generally send malformed packets in fragments. When the target system attempts to reassemble the fragments and ends up with an oversized packet, memory overflow could occur and lead to various system problems including crash.
Ping of Death attacks were particularly effective because the attacker’s identity could be easily spoofed. Moreover, a Ping of Death attacker would need no detailed knowledge of the machine he/she was attacking, except for its IP address.
It is worthy of note that this vulnerability, though best recognized for its exploitation by PoD attacks, can actually be exploited by anything that sends an IP datagram - ICMP echo, TCP, UDP and IPX.
Methods of Mitigation
To avoid Ping of Deatch attacks, and its variants, many sites block ICMP ping messages altogether at their firewalls. However, this approach is not viable in the long term.

Firstly, invalid packet attacks can be directed at any listening port—like FTP ports—and you may not want to block all of these, for operational reasons.

Moreover, by blocking ping messages, you prevent legitimate ping use – and there are still utilities that rely on ping for checking that connections are live, for example.Incapsula mitigates a massive HTTP flood: 690,000,000 DDoS requests from 180,000 botnets IPs.



The smarter approach would be to selectively block fragmented pings, allowing actual ping traffic to pass through unhindered.

Incapsula DDoS Protection services intelligently and preemptively identify and filter out all abnormally large packets, even if they are fragmented—eliminating the threat of PoD and similar packet-based attacks altogether.


3. Teardrop Attack


A teardrop attack is a denial-of-service (DoS) attack that involves sending fragmented packets to a target machine. Since the machine receiving such packets cannot reassemble them due to a bug in TCP/IP fragmentation reassembly, the packets overlap one another, crashing the target network device. This generally happens on older operating systems such as Windows 3.1x, Windows 95, Windows NT and versions of the Linux kernel prior to 2.1.63.

One of the fields in an IP header is the “fragment offset” field, indicating the starting position, or offset, of the data contained in a fragmented packet relative to the data in the original packet. If the sum of the offset and size of one fragmented packet differs from that of the next fragmented packet, the packets overlap. When this happens, a server vulnerable to teardrop attacks is unable to reassemble the packets - resulting in a denial-of-service condition.


Definition - What does Teardrop Attack mean?

A teardrop attack is a denial of service (DoS) attack conducted by targeting TCP/IP fragmentation reassembly codes. This attack causes fragmented packets to overlap one another on the host receipt; the host attempts to reconstruct them during the process but fails. Gigantic payloads are sent to the machine that is being targeted, causing system crashes.

Techopedia explains Teardrop Attack
While much more popular on older versions of Windows, the teardrop attack is also possible on Windows 7 and Windows Vista machines that have SMB enabled. The driver vulnerability on the latter two operating systems was noted in 2009, but Windows 2000 and Windows XP are not vulnerable to this type of teardrop attack, which hones in on TCP ports 139 and 445 on the firewalls of the SMB-enabled machines. If users don’t have patches to protect against this DoS attack, SMBv2 should be disabled, as recommended by Microsoft, and ports 139 and 445 should be blocked.


4. Peer-to-Peer Attacks


The evolution of computing continues to lead to greater decentralization. Mainframes gave way to local area networks (LANS), which provided greater economies of scale. The Internet has allowed for even greater distribution capability; peer to peer computing has grown as a result. Examples of peer to peer networks include the popular Kazaa and Napster file sharing services. These types of networks allow for significant transfers of data, yet they are vulnerable to attack from multiple sources.


Definition

Peer relationship exploitation can be defined in several ways. First, it can be the exploitation of transitive trust relationships created by peer-networking so as to expand privileges to the transitive closure of peer trust. It can also be defined in less technical terms. Exploitation can be when an insider uses the security access of colleagues to gain access to unauthorized information.  This can include physical access or information access. This essay will focus on the first type of attack.



Recommended Articles To Become A Hacker:

How To Become A Hacker - Basic Guide For Beginners 2015

Understand The Hacker Mindset To Become A Real Hacker

Programming Languages For Hackers And Learn It From Most 6 Helpful Websites

Installing Hackers OS Kali Linux In VMware (Beginners Guide With Screenshots)

Easy Steps to Create Web Penetration Testing Lab in Kali Linux

Introduction to using Metasploit in Kali Linux

An Introduction To Hacker’s OS: Kali Linux And Setup Tutorial.

Linux Powerful Distros For Hacking Or Security: Kali, Tails And Qubes

Become A Hacker: What Is Denial of Service (DoS) Attack?



Available link for download

Read more »