EC Council Certified Ethical Hacker v7.0

Introduction to Ethical Hacking. This video aligns many of the topics of Module 01 of the CEH exam objectives. Here, you will understand the issues plaguing the information security world. Examples include hacked power grids, infiltration of US government agencies such as Department of Defense, Department of State, Department of Commerce, Department of Energy, NASA, Centcom, and others. Hacked bank ATMs, white plastic, and holding confidential information hostage are described. Lulzsec and Anonymous hacking groups are discussed. You will also gain knowledge on various hacking terminologies, understand the different types and implications of hacker attacks, understand hactivism and understand the classification of hackers. Understand who is an ethical hacker, learn the profile of a typical ethical hacker, and understand scope and limitations of ethical hacking. Many of the other Module 01 objectives are addressed in various ways throughout the rest of this series. Laws related to hacking include the Computer Misuse Act, Can Spam Act, 18 U.S.C. 1030 Fraud and Related Activity in Connection with Computers, 1029 Fraud in Access Devices. Terms covered include cyber-terrorism, hacking, hacker, black box test, white box test, gray box test, opaque box test, vulnerability, exploit, proof of concept, 0day, vulnerability scan, penetration test, black hat, cracker, malicious hacker, white hat, ethical hacker, penetration tester, grey hat, hacktivism, suicide hacker, script kiddie, phreak, red team, insider threats, pure insider, insider associate, insider affiliate.

This video is part one of Footprinting and Reconnaissance, which maps to Module 02 of the exam objectives. You will learn the difference between active and passive intelligence gathering. In passive recon, you’ll leverage public tools such as: Google search, public company web pages, message boards, social media such as Facebook or Twitter. For active recon will largely be addressed in future Nuggets, but include network scans, vulnerability scans, ping sweep, social engineering, and spear phishing. Learn the purpose of reconnaissance, narrow down to specific targets and technologies. Identify how to leverage default passwords. Use other public resources such as the Securities and Exchange Commision (SEC) EDGAR database. Learn about ICANN and all the regional internet registries (RIR) such as ARIN, APNIC, RIPE, LACNIC, and AfriNIC. Leverage whois information, use Netcraft to identify operating systems, servers, recent changes, and IP addresses. Learn how to download webpages to local file system for offline exploitation using tools such as httrack, wget, sam spade, archive.org. Use Windows tracert and Linux traceroute. Explore robots.txt and find out how it can reveal sensitive information of a web site. Use Telnet to perform banner grabbing and identify an operating system.

This Nugget introduces the topic of scanning addressed in Module 3 of the exam objectives. Here, it's important to understand the CEH Scanning Methodology, because it saves lots of time avoiding futile scan attempts. We will also look at several scanning terms such as network scanning, port scanning, and vulnerability scanning. We will use the traceroute and hping, hping2, or hping3 tool to perform firewalking. There is also the Firewalk utility that is still useful but is no longer updated. Before you start an actual scan, it's important to understand the 3-way handshake and also how TCP closes sessions. Basic firewall types and states are discussed such as open, closed, filtered, port blocking firewalls, and stateful packet inspection firewalls.

This Nugget addresses Module 4 of the exam objectives. We look what enumeration is, learn the system hacking cycle, understand enumeration and its techniques, understand null sessions and its countermeasures, understand SNMP enumeration and its countermeasures, and describe the steps involved in performing enumeration. These are implemented using a variety of tools, particularly SolarWinds Engineer’s Toolset, which has several windows tools to derive SNMP information from a target. We also use several Linux tools, such as snmpget, snmpwalk, and onesixtyone. We also enumerate the Administrator account using whoami, user2sid, and sid2user.

This Nugget addresses Module 5: System Hacking. Here you will learn about the following objectives: Identifying the different types of password attacks; identifying password cracking techniques; understanding Microsoft Authentication mechanism; describing password sniffing; identifying various password cracking tools; and identifying various password cracking countermeasures. You will also see a side-jacking tool called Hamster Ferret that hijacks open logon sessions. This could be very useful for any website that does not use SSL cookies (for example, Facebook or Twitter!) You will also learn various cracking techniques such as finding passwords in plain sight, sniffing for plain text passwords, and using the following types of password cracking attacks: dictionary, brute-force, hybrid, rainbow table. You will see John the Ripper, the gold standard of password cracking tools for Linux.

In this video, we address Module 05, 06, and 07. Understanding rootkits, Learn how to identify rootkits and steps involved, Define a Trojan, Identify overt and covert channels, Understand working of Trojans, Identify the different types of Trojans, Identify the different ways a Trojan can infect a system, How to indicate a Trojan attack, Identify the ports used by Trojan, Learn Trojan detection techniques, Learn Trojan evading techniques, Learn how to avoid a Trojan infection, Characteristics of a virus, Understand the motive behind writing a virus, understand how does a computer get infected by viruses, gain insights on virus hoax, understand the difference between a virus and a worm, understand the life cycle of virus, understand how a virus spreads and infects the system, understand antivirus evasion techniques, understand virus detection methods and countermeasures. You will see additional information such as various types of Trojans and the common trojan ports, rootkits such as Application-level, Kernel-level, and library-level. You will also learn about the Bankerfox trojan that steals banking information and how rogue security software can be a trojan. Trojan wrappers bind a trojan to an otherwise legitimate file, and you will see this in the next video. The “Run” registry locations help Trojans to persistently run. You will learn about Remote Access Trojan (RAT), DVDLauncher.exe, Poison Ivy Botnet Command and Control Center, Trojans posing as *.sys driver files in C:\Windows\System32\drivers. Identify rootkit defensive tools such as tripwire, chrootkit, rootkit hunter.

This Nugget addresses Module 8, Sniffing. This includes: Understand sniffing and protocols vulnerable to it, Identify types of sniffing, Understand Address Resolution Protocol (ARP), Understanding the process of ARP Spoofing, Understand active and passive sniffing, Understand ARP poisoning, Understand MAC duplicating, Learn ethereal capture and display filters, Understand MAC flooding, Understand DNS spoofing techniques, Identify sniffing countermeasures, Know various sniffing tools, Identify sniffing detection and defensive techniques. You will also learn more about how to use Wireshark including capture and display filters, and how to craft filters for your own requirements and also how to promiscuously sniff wireless networks. You will learn how to use specific tools such as macof, dsniff, arpspoof, driftnet. You will also learn how to prevent arp spoofing using tools such as switch port security, arpwatch, and arpon.

This Nugget addresses Module 10: Denial of Service. Here, you will learn to Understand a Denial of Service Attack, Gain insights on Distributed Denial of Service Attacks, Examine the working of Distributed Denial of Service Attacks, Analyze Symptoms of a DoS Attack, Understand Internet Chat Query (ICQ), Understand Internet Relay Chat (IRC), Assess DoS Attack Techniques, Understand Botnets, Assess DoS/DDoS Attack Tools, Describe Detection Techniques, Identify DoS/DDoS Countermeasure Strategies, Analyze Post-Attack Forensics, Identify DoS/DDoS Protection Tools, Understand DoS/DDoS Penetration Testing. We will identify tools such as SlowLoris, Low-Orbit-Ion-Cannon, LOIC, tribe, trinity, R-U-Dead-Yet, RUDY, and various types of attack such as SYN attack, SYN flood, ICMP flood, Smurf, Fraggle, and Ping of Death.

This Nugget addresses Module 12, 13, and 14: Hacking Webservers, hacking web applications, and SQL injection. We cover very many exam objectives including but not limited to: Understand Open Source Webserver Architecture, Examine IIS Webserver Architecture, Understand Website Defacement, Understand why Web Servers are compromised, Analyze Impact of Webserver Attacks, Understand Directory Traversal Attacks, Understand HTTP Response Hijacking, Discuss SSH Bruteforce Attack, Examine Man-in-the-Middle Attack, Learn Webserver Password Cracking Techniques, Identify Web Application Attacks, Understand Webserver Attack Methodology, Identify Webserver Attack Tools, Identify Counter-measures against Webserver Attacks, Understand Patch Management, Assess Webserver Security Tools, Understand Webserver Pen Testing, Assess Parameter/Form Tampering, Understand Injection Flaws, Discuss Hidden Field Manipulation Attack, Describe Cross-Site Scripting (XSS) Attacks, Understand Web Services Attack, Understand Web Application Hacking Methodology, identify Web Application Hacking Tools, Understand SQL Injection, Examine SQL Injection Attacks, Discuss SQL Injection Black Box Pen Testing, Types of SQL Injection, Understand Blind SQL Injection, Learn SQL Injection Methodology, Understanding SQL Query, Examine Advanced Enumeration, Describe Password Grabbing, Discuss Grabbing SQL Server Hashes, Identify SQL Injection Tools.

This Nugget addresses parts of Module 16: Evading IDS, Firewalls, and Honeypots. Here you will learn about the following exam objectives: Understand Intrusion Detection Systems (IDS), Learn Ways to Detect an Intrusion, Acquire knowledge on various types of Intrusion Detection Systems, Understand Honeypot, Assess various types of Honeypot, Understand how to Set up a Honeypot, Understand IDS, Firewall and Honeypot System, Examine Evading IDS, Learn detecting Honeypots. We’ll look specifically at Snort, and HoneyBot as our tools. Note that Firewalls and much of IDS has already been addressed throughout this series in other Nuggets, especially in the sixth video, Scanning Part 1.