Hacking Exposed: Network Security Secrets & Solutions, Third Edition (Hacking Exposed)

PROS: It covers lots of, if not all information on either protecting your business from hackers, or if you ARE the hacker just trying to learn a few little tricks. CONS: Requires a bit of previous knowledge of how network security works, for example, a lot computer jargon. Book "Hacking Exposed" 1 Chapter 1 - Footprinting 3 WHAT IS FOOTPRINTING? 4 Why Is Footprinting Necessary? 4 INTERNET FOOTPRINTING 4 Step 1. Determine the Scope of Your Activities 6 Step 2. Network Enumeration 10 Step 3. DNS Interrogation 19 Step 4. Network Reconnaissance 24 SUMMARY 28 Chapter 8 - Hacking Unix 29 THE QUEST FOR ROOT 30 A Brief Review 30 Vulnerability Mapping 31 REMOTE ACCESS VERSUS LOCAL ACCESS 31 REMOTE ACCESS 32 Data Driven Attacks 36 I Want My Shell 41 Common Types of Remote Attacks 46 LOCAL ACCESS 63 AFTER HACKING ROOT 81 Trojans 82 Rootkit Recovery 93 SUMMARY 94 Chapter 16 - Hacking the Internet User 97 MALICIOUS MOBILE CODE 99 Microsoft ActiveX 99 Java Security Holes 109 Beware the Cookie Monster 113 Internet Explorer HTML Frame Vulnerabilities 116 SSL FRAUD 118 EMAIL HACKING 119 Mail Hacking 101 120 Executing Arbitrary Code Through Email 124 Outlook Address Book Worms 136 File Attachment Attacks 139 Writing Attachments to Disk Without User Intervention 142 Invoking Outbound Client Connections 147 IRC HACKING 149 NAPSTER HACKING WITH WRAPSTER 151 GLOBAL COUNTERMEASURES TO INTERNET 152 USER HACKING 152 SUMMARY 153 Book "Hacking Linux Exposed" 155 Chapter 9 - Password Cracking 157 HOW PASSWORDS WORK IN LINUX 158 /etc/ passwd 158 Linux Encryption Algorithms 160 PASSWORD CRACKING PROGRAMS 163 Other Cracking Programs 172 Availability of Dictionaries 173 SHADOW PASSWORDS AND /ETC/ SHADOW 173 Shadow Passwords Explained 174 Shadow Passwords Command Suite 176 APACHE PASSWORD FILES 177 PLUGGABLE AUTHENTICATION MODULES 178 PASSWORD PROTECTION 179 SUMMARY 187 Book "Hacking Exposed Windows 2000" 188 Chapter 2 - Win2K Security Architecture from the Hacker's Perspective 190 THE WINDOWS 2000 SECURITY MODEL 191 SECURITY PRINCIPLES 193 Users 193 Groups 194 Special Identities 196 Other Security Principles and Containers 196 The SAM and Active Directory 197 FORESTS, TREES, AND DOMAINS 198 Scope: Local, Global, and Universal 199 Trusts 200 Administrative Boundaries: Forest or Domain? 201 SIDS 203 PUTTING IT ALL TOGETHER: AUTHENTICATION AND AUTHORIZATION 205 The Token 205 Network Authentication 208 AUDITING 210 SUMMARY 211 REFERENCES AND FURTHER READING 213 Chapter 10 - Hacking IIS 5 and Web Applications 215 HACKING IIS 5 216 IIS Hacking Basics 216 IIS 5 Buffer Overflows 222 File System Traversal 232 Writing Files to the Web Server 240 Escalating Privileges on IIS 5 245 Source Code Revelation Attacks 249 About the Author

Stuart McClure, CISSP, CNE, CCSE (Mission Viejo, CA) is President/Founder of Foundstone, Inc., an elite security consulting and training company.
Joel Scambray, CISSP, CCSE (Lafayette, CA) is Managing Principal of Foundstone, Inc., an elite security consulting and training company. Joel is the author of Microsoft's "Ask Us About Security" column.
George Kurtz, CISSP (Montville, NJ) is CEO/Founder of Foundstone, Inc., an eliete security consulting and training company. He is also a renowned Black Hat speaker and was an Extreme Hacking instructor Since new hacks and attacks are occurring daily, "Hacking Exposed" provides administrators with the latest information to combat hackers and protect their networks. It shows how flaws and loopholes in security technologies can be exploited and provides security solutions. Line illustrations. CD-ROM contains: a selection of top security tools ready to install, live links to web sites where you can access the latest versions of the security tools mentioned in the book, and a default password database that contains a list of commonly used passwords This is one of those books that needs to be at every Security Professional's desk. It is a good reference to security attacks, exploits, and general security concepts.