Hacking Presentation

HACKING
Computer Security
Presented By:
Animesh Behera
Guided By:
Mr. Ashish Kumar Rath(HOD)

 What is Hacking?
 Who are Hacker ?
 Types of Hacker
 IP Address
 Hacking Procedure
 Hacking Techniques
 Advantages and Disadvantages
Contents

What is Hacking?
Hacking refers to an array of activities which are done to
intrude some one else’s personal information space so as
to use it for malicious, unwanted purposes.
Hacking is a term used to refer to activities aimed at
exploiting security flaws to obtain critical information for
gaining access to secured networks.

Who are Hacker
 The term hacker is used in popular media to describe some one who attempts
to break into computer systems.
 Typically this kind of hacker would be a proficient programmer or engineer with
sufficient technical knowledge to understand the weak points in a security
system.

Famous Hackers in History
Ian Murphy Kevin Mitnick Johan Helsinguis
Pranav MistryRahul Tyagi Trisneet Arora

The Hacker Attitude
 The world is full of fascinating problems waiting to be solved.
 Nobody should ever have to solve a problem twice.
 Boredom and drudgery are evil.
 Freedom is good.
 Becoming a hacker will take intelligence, practice, dedication, and hard
work.

Basic Hacking Skills
 Learn how to program.
This, of course, is the fundamental hacking skill. If you don't know any
computer languages, you cant do hacking.
 Get one of the open-source Unix's and learn to use and run it
The single most important step any newbie can take towards acquiring
hacker skills is to get a copy of Linux or one of the BSD-Unix’s, install it
on a personal machine, and run it.
 Learn how to use the World Wide Web and write HTML.
To be worthwhile, your page must have content -- it must be interesting
and/or useful to other hackers.

Hacking Premeasured
 When you start hacking the first thing you need to do is: to make sure the
victim will not find out your real identity.
 So hide your IP by masking it or using a anonymous proxy server. This is
only effective when the victim has no knowledge about computers and
internet. Organizations like the F.B.I, C.I.A and such will find you in no
time, so beware !
 The best thing to do is using a dialup connection that has a variable IP
address. Be smart, when you signup for a internet dialup connection use
a fake name and address.
 When hacking never leave traces of your hacking attempts, clear log files
and make sure you are not monitored. So use a good firewall that keeps
out retaliation hacking attempts of your victim.

White Hat Hacker
 Also known as ethical hackers, White Hat hackers are the good guys of the
hacker world.
 They’ll help you remove a virus or Pen Test a company.
 Most White Hat hackers hold a college degree in IT security or computer
science and must be certified to pursue a career in hacking.
 The most popular certification is the CEH (Certified Ethical Hacker) from the
EC-Council.

Black Hat Hacker
 Also known as crackers, these are the men and women you hear about in the
news.
 They find banks or other companies with weak security and steal money or
credit card information.
 The surprising truth about their methods of attack is that they often use
common hacking practices they learned early on.

Gray Hat Hacker
 Nothing is ever just black or white; the same is true in the world of hacking.
 Gray Hat hackers don’t steal money or information (although, sometimes they
deface a website or two), yet they don’t help people for good (but, they could if
they wanted to).
 These hackers comprise most of the hacking world, even though Black Hat
hackers garner most (if not all) of the media’s attention.

IP Addresses
 Every system connected to a network has a unique Internet Protocol (IP)
Address which acts as its identity on that network.
 An IP Address is a 32-bit address which is divided into four fields of 8-bits
each. For Example, 203.94.35.12
 All data sent or received by a system will be addressed from or to the
system.
 An attacker’s first step is to find out the IP Address of the target system.

IP Addresses: Finding out an IP Address
 A remote IP Address can easily be found out by any of the following
methods:
Through Instant Messaging Software
Through Internet Relay Chat
Through Your website
Through Email Headers

General Hacking Methods
 A typical attacker works in the following manner:
1. Identify the target system.
2. Gathering Information on the target system.
3. Finding a possible loophole in the target system.
4. Exploiting this loophole using exploit code.
5. Removing all traces from the log files and escaping without
a trace.

Footprinting
 Footprinting is a part of reconnaissance process which is used for gathering
possible information about a target computer system or network. Footprinting
could be both passive and active.
 a hacker can collect the following information using Footprinting-
 Domain name
 IP Addresses
 Namespaces
 Employee information
 Phone numbers
 E-mails
 Job Information

Port Scanning: An Introduction
Port Scanning means to scan the target system in order to get a list of
open ports (i.e. ports listening for connections) and services running on
these open ports.
Port Scanning is normally the first step that an attacker undertakes.
Is used to get a list of open ports, services and the Operating System
running on the target system.
Can be performed easily by using different methods.
Manual Port Scanning can be performed using the famous ‘Telnet’
program.

Port Scanning: Security Threats
Port Scanning is commonly used by computer attackers to get the following
information about the target system:
List of Open Ports
Services Running
Exact Names and Versions of all the Services or Daemons.
Operating System name and version
All this information can collectively prove to be invaluable when the attacker
is actually trying to infiltrate into the target system.

Port Scanning : Major Tools Available
Some of the best and the most commonly used Port Scanners are:
 Nmap
 Superscan
 Hping
Common Features of all above Port Scanners:
 Very Easy to Use
 Display Detailed Results
The easy usability and the detailed information reports generated by
popular port scanners has led to an alarming increase in the number of
script kiddies.

Port Scanning: Counter-Attacks Strategies
Although, it is impossible to stop clients from Port Scanning your network,
however, it is advisable to take all possible measures against possible
attackers. Some useful Anti-Port Scanning software available are:
 Scanlogd (A Unix based Port Scan Detector & Logger)
 BlackICE (A Windows based Port Scan Detector & Logger)
 Snort: A packet sniffer cum IDS.
 Abacus Port sentry: Capable of Detecting both normal and stealth
port scanning attempts.
Other than the above tools, it is always advisable to disable as many
services as possible. In other words, one should try to close as many ports
as possible, without compromising on the services offered by that system.

ICMP Scanning: An Introduction
 The Internet Control Message Protocol (ICMP) is the protocol used for
reporting errors that might have occurred while transferring data
packets over networks
 Extremely Useful in Information Gathering.
 Originally, designed for network diagnosis and to find out as to what
went wrong in the data communication.
 Can be used to find out the following:
 Host Detection
 Operating System Information
 Network Topography Information
 Firewall Detection

Threats from Key Loggers
 Key loggers: Record all keystrokes made on that system and store
them in a log file, which can later automatically be emailed to the
attacker.
 Countermeasures
 Periodic Detection practices should be made mandatory.
A Typical Key Logger automatically loads itself into the memory,
each time the computer boots.
 Thus, the start up script of the Key Logger should be removed.

Trojan Attacks
 Trojans: act as a RAT or Remote Administration Tool, which allow
remote control and remote access to the attacker.
Working:
1. The Server Part of the Trojan is installed on the target system
through trickery or disguise.
2. This server part listens on a predefined port for connections.
3. The attacker connects to this Server Part using the Client part of
the Trojan on the predefined port number.
4. Once this is done, the attacker has complete control over the
target system.

Trojan Attacks: Detection and
Countermeasures
 Detection & Countermeasures
 Port Scan your own system regularly.
 If you find a irregular port open, on which you usually do not have
a service running, then your system might have a Trojan installed.
 One can remove a Trojan using any normal Anti-Virus Software.

Attack Techniques
(Hacking Techniques)
 Brute Force
A Brute Force attack is an automated process of trial and error used to guess a
person's username, password, credit-card number or cryptographic key
• Cross-site Scripting
Cross-site Scripting (XSS) is an attack technique that forces a web site to echo
attacker-supplied executable code, which loads in a user's browser.
• SQL Injection
SQL Injection is an attack technique used to exploit web sites that construct SQL
statements from user-supplied input.

Advantages
 To recover lost information, especially in case one lost his password.
 To perform penetration testing to strengthen computer and network security.
 To put adequate preventative measures in place to prevent security breaches.
 To have a computer system that prevents malicious hackers from gaining
access.

Disadvantages
 Massive security breach.
 Unauthorized system access on private information.
 Hampering system operation.
 Denial of service attacks.
 Malicious attack on the system.

Hacking Presentation

Recommended

More Related Content

What's hot (20)

Similar to Hacking Presentation (20)

Recently uploaded (20)

Hacking Presentation