Website Technology Profiler

{
  "PageContent": "<h3>SEO</h3> o Sensepost Footprint Toolso Big Brothero BiLE Suiteo Alchemy Network Toolo Advanced Administrative Toolo My IP Suiteo Wikto Footprinting Toolo Whois Lookupo Whoiso SmartWhoiso ActiveWhoiso LanWhoiso CountryWhoiso WhereIsIPo Ip2countryo CallerIPo Web Data Extractor Toolo Online Whois Toolso What is MyIPo DNS Enumeratoro SpiderFooto Nslookupo Extract DNS Information• Types of DNS Records• Necrosoft Advanced DIGo Expired Domainso DomainKingo Domain Name Analyzero DomainInspecto MSR Strider URL Tracero Mozzle Domain Name Proo Domain Research Tool (DRT)o Domain Status Reportero Reggieo Locate the Network Range• ARIN• Traceroute• 3D Traceroute• NeoTrace• VisualRoute Trace• Path Analyzer Pro• Maltego• Layer Four Traceroute• Prefi x WhoIs widget• Touchgraph• VisualRoute Mail Tracker• eMailTrackerProo 1st E-mail Address Spidero Power E-mail Collector Toolo GEOSpidero Geowhere Footprinting Toolo Google Eartho Kartoo Search Engineo Dogpile (Meta Search Engine)o Tool: WebFerreto robots.txto WTR - Web The Rippero Website WatcherSCANNING• Angry IP• HPing2• Ping Sweep• Firewalk Tool• Firewalk Commands• Firewalk Output• Nmap• Nmap: Scan Methods• NMAP Scan Options• NMAP Output Format• TCP Communication Flags• Three Way Handshakeo Syn Stealth/Half Open Scano Stealth Scano Xmas Scano Fin Scano Null Scano Idle Scano ICMP Echo Scanning/List Scano TCP Connect/Full Open Scano FTP Bounce Scan• Ftp Bounce Attacko SYN/FIN Scanning Using IP Fragmentso UDP Scanningo Reverse Ident Scanningo RPC Scano Window Scano Blaster Scano Portscan Plus, Strobeo IPSec Scano Netscan Tools Proo WUPS – UDP Scannero Superscano IPScannero Global Network Inventory Scannero Net Tools Suite Packo Atelier Web Ports Traffi c Analyzer (AWPTA)o Atelier Web Security Port Scanner (AWSPS)o IPEyeo ike-scano Infi ltrator Network Security Scannero YAPS: Yet Another Port Scannero Advanced Port Scannero NetworkActiv Scannero NetGadgetso P-Ping Toolso MegaPingo LanSpyo HoverIPo LANViewo NetBruteScannero SolarWinds Engineer’s Toolseto AUTAPFo OstroSoft Internet Toolso Advanced IP Scannero Active Network Monitoro Advanced Serial Data Loggero Advanced Serial Port Monitoro WotWebo Antiy Portso Port DetectiveEnumerationOverview of System Hacking CycleTechniques for EnumerationNetBIOS Null Sessionso So What’s the Big Dealo DumpSec Toolo NetBIOS Enumeration Using Netview• Nbtstat Enumeration Tool• SuperScan• Enum Toolo Enumerating User Accounts• GetAccto Null Session CountermeasurePS Toolso PsExeco PsFileo PsGetSido PsKillo PsInfoo PsListo PsLogged Ono PsLogListo PsPasswdo PsServiceo PsShutdowno PsSuspendo Management Information Base (MIB)o SNMPutil Exampleo SolarWindso SNScano Getif SNMP MIB Browsero UNIX Enumerationo SNMP UNIX Enumerationo SNMP Enumeration Countermeasureso LDAP enumerationo JXplorero LdapMinero Softerra LDAP Browsero NTP enumerationo SMTP enumerationo Smtpscano Web enumerationo Asnumbero Lynxo Windows Active Directory Attack Toolo How To Enumerate Web Application Directories in IIS Using DirectoryServicesIP Tools ScannerEnumerate Systems Using Default PasswordTools:o NBTScano NetViewXo FREENETENUMERATORo Terminal Service Agento TXNDSo Unicornscano Amapo NetenumSystem HackingPart 1- Cracking Passwordo Password Typeso Types of Password Attack• Passive Online Attack: Wire Sniffi ng• Passive Online Attack: Man-in-the-middle and replay attacks• Active Online Attack: Password Guessing• Offl ine AttacksBrute force AttackPre-computed HashesSyllable Attack/Rule-based Attack/ Hybrid attacksDistributed network AttackRainbow Attack• Non-Technical Attackso PDF Password Crackero Abcom PDF Password Crackero Password Mitigationo Permanent Account Lockout-Employee Privilege Abuseo Administrator Password Guessing• Manual Password cracking Algorithm• Automatic Password Cracking Algorithmo Performing Automated Password Guessing• Tool: NAT• Smbbf (SMB Passive Brute Force Tool)• SmbCrack Tool: Legion• Hacking Tool: LOphtcracko Microsoft Authentication• LM, NTLMv1, and NTLMv2• NTLM And LM Authentication On The Wire• Kerberos Authentication• What is LAN Manager Hash?LM “Hash” GenerationLM Hash• Salting• PWdump2 and Pwdump3• Tool: Rainbowcrack• Hacking Tool: KerbCrack• Hacking Tool: NBTDeputy• NetBIOS DoS Attack• Hacking Tool: John the Rippero Password Sniffi ngo How to Sniff SMB Credentials?o SMB Replay Attackso Replay Attack Tool: SMBProxyo SMB Signingo Tool: LCPo Tool: SID&amp;Usero Tool: Ophcrack 2o Tool: Cracko Tool: Access PassViewo Tool: Asterisk Loggero Tool: CHAOS Generatoro Tool: Asterisk Keyo Password Recovery Tool: MS Access Database Password Decodero Password Cracking Countermeasureso Do Not Store LAN Manager Hash in SAM Databaseo LM Hash Backward Compatibilityo How to Disable LM HASHo Password Brute-Force Estimate Toolo Syskey Utilityo AccountAuditPart2-Escalating Privilegeso Privilege Escalationo Cracking NT/2000 passwordso Active@ Password Changer• Change Recovery Console Password - Method 1• Change Recovery Console Password - Method 2o Privilege Escalation Tool: x.exePart3-Executing applicationso Tool: psexeco Tool: remoexeco Ras N Mapo Tool: Alchemy Remote Executoro Emsa FlexInfo Proo Keystroke Loggerso E-mail Keyloggero Revealer Keylogger Proo Handy Keyloggero Ardamax Keyloggero Powered Keyloggero Quick Keyloggero Spy-Keyloggero Perfect Keyloggero Invisible Keyloggero Actual Spyo SpyToctor FTP Keyloggero IKS Software Keyloggero Ghost Keyloggero Hacking Tool: Hardware Key Loggero What is Spyware?o Spyware: Spectoro Remote Spyo Spy Tech Spy Agento 007 Spy Softwareo Spy Buddyo Ace Spyo Keystroke Spyo Activity Monitoro Hacking Tool: eBlastero Stealth Voice Recordero Stealth Keyloggero Stealth Website Loggero Digi Watcher Video Surveillanceo Desktop Spy Screen Capture Programo Telephone Spyo Print Monitor Spy Toolo Stealth E-Mail Redirectoro Spy Software: Wiretap Professionalo Spy Software: FlexiSpyo PC PhoneHomeo Keylogger Countermeasureso Anti KeyloggerTrojans and BackdoorsEffect on BusinessWhat is a Trojan?o Overt and Covert Channelso Working of Trojanso Different Types of TrojansRemote Access TrojansData-Sending TrojansDestructive TrojansDenial-of-Service (DoS) Attack TrojansProxy TrojansFTP TrojansSecurity Software Disablerso What do Trojan Creators Look for?o Different Ways a Trojan can Get into a SystemIndications of a Trojan AttackPorts Used by Trojanso How to Determine which Ports are ListeningTrojanso Trojan: iCmdo MoSucker Trojano Proxy Server Trojano SARS Trojan Notifi cationo Wrapperso Wrapper Covert Programo Wrapping Toolso One Exe Maker / YAB / Pretator Wrapperso Packaging Tool: WordPado RemoteByMailo Tool: Icon Pluso Defacing Application: Restoratoro Tetriso HTTP Trojanso Trojan Attack through Httpo HTTP Trojan (HTTP RAT)o Shttpd Trojan - HTTP Servero Reverse Connecting Trojanso Nuclear RAT Trojan (Reverse Connecting)o Tool: BadLuck Destructive Trojano ICMP Tunnelingo ICMP Backdoor Trojano Microsoft Network Hacked by QAZ Trojano Backdoor.Theef (AVP)o T2W (TrojanToWorm)o Biorante RATo DownTrojo Turkojano Trojan.Satellite-RATo Yakozao DarkLabel B4o Trojan.Hav-Rato Poison Ivyo Rapid Hackero SharKo HackerzRato TYOo 1337 Fun Trojano Criminal Rat Betao VicSpyo Optix PROo ProAgento OD Cliento AceRato Mhacker-PSo RubyRAT Publico SINnero ConsoleDevilo ZombieRato FTP Trojan - TinyFTPDo VNC Trojano Webcam Trojano DJI RATo Skiddie Rato Biohazard RATo Troyao ProRato Dark Girlo DaCryptico Net-DevilClassic Trojans Found in the Wildo Trojan: Tinio Trojan: NetBuso Trojan: Netcato Netcat Client/Servero Netcat Commandso Trojan: Beasto Trojan: Phatboto Trojan: Amitiso Trojan: Senna Spyo Trojan: QAZo Trojan: Back Orifi ceo Trojan: Back Oriffi ce 2000o Back Oriffi ce Plug-inso Trojan: SubSeveno Trojan: CyberSpy Telnet Trojano Trojan: Subroot Telnet Trojano Trojan: Let Me Rule! 2.0 BETA 9o Trojan: Donald Dicko Trojan: RECUBHacking Tool: LokiLoki CountermeasuresAtelier Web Remote CommanderTrojan Horse Construction KitHow to Detect Trojans?o Netstato fPorto TCPViewViruses and WormsVirus HistoryCharacteristics of VirusWorking of Viruso Infection Phaseo Attack PhaseWhy people create Computer VirusesSymptoms of a Virus-like AttackVirus HoaxesChain LettersHow is a Worm Different from a VirusIndications of a Virus AttackHardware ThreatsSoftware ThreatsVirus DamageMode of Virus InfectionStages of Virus LifeVirus Classifi cationHow Does a Virus Infect?Storage Patterns of Viruso System Sector viruso Stealth Viruso Bootable CD-Rom Virus• Self -Modifi cation• Encryption with a Variable Keyo Polymorphic Codeo Metamorphic Viruso Cavity Viruso Sparse Infector Viruso Companion Viruso File Extension VirusFamous Virus/Worms – I Love You VirusFamous Virus/Worms – MelissaFamous Virus/Worms – JS/SpthKlez Virus AnalysisLatest VirusesTop 10 Viruses- 2008o Virus: Win32.AutoRun.aho Virus:W32/Viruto Virus:W32/Divvio Worm.SymbOS.Lasco.ao Disk Killero Bad Boyo HappyBoxo Java.StrangeBrewo MonteCarlo Familyo PHP.Neworldo W32/WBoy.ao ExeBug.do W32/Voterai.worm.eo W32/Lecivio.wormo W32/Lurka.ao W32/Vora.worm!p2pWriting a Simple Virus ProgramVirus Construction KitsVirus Detection MethodsVirus Incident ResponseWhat is Sheep Dip?Virus Analysis – IDA Pro ToolPrevention is better than CureAnti-Virus Softwareo AVG Antiviruso Norton Antiviruso McAfeeo Socketsheildo BitDefendero ESET Nod32o CA Anti-Viruso F-Secure Anti-Viruso Kaspersky Anti-Viruso F-Prot Antiviruso Panda Antivirus Platinumo avast! Virus Cleanero ClamWino Norman Virus ControlPopular Anti-Virus PackagesVirus DatabasesSniffersDefi nition - Sniffi ngProtocols Vulnerable to Sniffi ngTool: Network View – Scans the Network for DevicesThe Dude SnifferWiresharkDisplay Filters in WiresharkFollowing the TCP Stream in WiresharkCain and AbelTcpdumpTcpdump CommandsTypes of Sniffi ngo Passive Sniffi ngo Active Sniffi ngWhat is ARPo ARP Spoofi ng Attacko How does ARP Spoofi ng Worko ARP Poisingo MAC Duplicatingo MAC Duplicating Attacko Tools for ARP Spoofi ng• Ettercap• ArpSpyXo MAC Flooding• Tools for MAC FloodingLinux Tool: MacofWindows Tool: Etherfl oodo Threats of ARP Poisoningo Irs-Arp Attack Toolo ARPWorks Toolo Tool: Nemesiso IP-based sniffi ngLinux Sniffi ng Tools (dsniff package)o Linux tool: Arpspoofo Linux Tool: Dnssppoofo Linux Tool: Dsniffo Linux Tool: Filesnarfo Linux Tool: Mailsnarfo Linux Tool: Msgsnarfo Linux Tool: Sshmitmo Linux Tool: Tcpkillo Linux Tool: Tcpniceo Linux Tool: Urlsnarfo Linux Tool: Webspyo Linux Tool: WebmitmDNS Poisoning Techniqueso Intranet DNS Spoofi ng (Local Network)o Internet DNS Spoofi ng (Remote Network)o Proxy Server DNS Poisoningo DNS Cache PoisoningInteractive TCP RelayInteractive Replay AttacksRaw Sniffi ng ToolsFeatures of Raw Sniffi ng Toolso HTTP Sniffer: EffeTecho Ace Password Sniffero Win Sniffero MSN Sniffero SmartSniffo Session Capture Sniffer: NetWitnesso Session Capture Sniffer: NWreadero Packet Crafter Craft Custom TCP/IP Packetso SMACo NetSetMan Toolo Ntopo EtherApeo Network Probeo Maa Tec Network Analyzero Tool: Snorto Tool: Windumpo Tool: Etherpeeko NetIntercepto Colasoft EtherLooko AW Ports Traffi c Analyzero Colasoft Capsa Network Analyzero CommViewo Sniffemo NetResidento IP Sniffero Sniphereo IE HTTP Analyzero BillSniffo URL Snoopero EtherDetect Packet Sniffero EffeTech HTTP Sniffero AnalogX Packetmono Colasoft MSN Monitoro IPgrabo EtherScan AnalyzerSocial EngineeringWhat is Social Engineering?Human Weakness“Rebecca” and “Jessica”Offi ce WorkersTypes of Social Engineeringo Human-Based Social Engineering• Technical Support Example• More Social Engineering Examples• Human-Based Social Engineering: Eavesdropping• Human-Based Social Engineering: Shoulder Surfi ng• Human-Based Social Engineering: Dumpster Diving• Dumpster Diving Example• Oracle Snoops Microsoft’s Trash Bins• Movies to Watch for Reverse Engineeringo Computer Based Social Engineeringo Insider Attacko Disgruntled Employeeo Preventing Insider Threato Common Targets of Social EngineeringSocial Engineering Threatso Onlineo Telephoneo Personal approacheso Defenses Against Social Engineering ThreatsFactors that make Companies Vulnerable to AttacksWhy is Social Engineering EffectiveWarning Signs of an AttackTool : Netcraft Anti-Phishing ToolbarPhases in a Social Engineering AttackBehaviors Vulnerable to AttacksImpact on the OrganizationCountermeasuresPolicies and ProceduresSecurity Policies - ChecklistDenial-of-ServiceReal World Scenario of DoS AttacksWhat are Denial-of-Service AttacksGoal of DoSImpact and the Modes of AttackTypes of AttacksDoS Attack Classifi cationo Smurf Attacko Buffer Overfl ow Attacko Ping of Death Attacko Teardrop Attacko SYN Attacko SYN Floodingo DoS Attack Toolso DoS Tool: Jolt2o DoS Tool: Bubonic.co DoS Tool: Land and LaTierrao DoS Tool: Targao DoS Tool: Blasto DoS Tool: Nemesyo DoS Tool: Panther2o DoS Tool: Crazy Pingero DoS Tool: SomeTroubleo DoS Tool: UDP Floodo DoS Tool: FSMaxBot (Derived from the Word RoBOT)BotnetsUses of BotnetsHow Do They Infect? Analysis Of AgabotHow Do They InfectTool: Nuclear BotWhat is DDoS AttackCharacteristics of DDoS AttacksDDOS UnstoppableAgent Handler ModelDDoS IRC based ModelDDoS Attack TaxonomyAmplifi cation AttackRefl ective DNS AttacksRefl ective DNS Attacks Tool: ihateperl.plDDoS Toolso DDoS Tool: Trinooo DDoS Tool: Tribal Flood Networko DDoS Tool: TFN2Ko DDoS Tool: Stacheldrahto DDoS Tool: Shafto DDoS Tool: Trinityo DDoS Tool: Knight and Kaiteno DDoS Tool: MstreamWormsSlammer WormSpread of Slammer Worm – 30 minMyDoom.BSCO Against MyDoom WormHow to Conduct a DDoS AttackThe Refl ected DoS AttacksRefl ection of the ExploitCountermeasures for Refl ected DoSDDoS CountermeasuresTaxonomy of DDoS CountermeasuresPreventing Secondary VictimsDetect and Neutralize HandlersDetect Potential AttacksSession HijackingWhat is Session Hijacking?Spoofi ng v HijackingSteps in Session HijackingTypes of Session HijackingSession Hijacking LevelsNetwork Level HijackingThe 3-Way HandshakeTCP Concepts 3-Way HandshakeSequence NumbersSequence Number PredictionTCP/IP hijackingIP Spoofi ng: Source Routed PacketsRST Hijackingo RST Hijacking Tool: hijack_rst.shBlind HijackingMan in the Middle: Packet SnifferUDP HijackingApplication Level HijackingPrograms that Performs Session Hackingo Juggernauto Hunto TTY-Watchero IP watchero Session Hijacking Tool: T-Sighto Remote TCP Session Reset Utility (SOLARWINDS)o Paros HTTP Session Hijacking Toolo Dnshijacker Toolo Hjksuite ToolDangers that hijacking PoseProtecting against Session HijackingCountermeasures: IPSecHacking Web ServersHow Web Servers WorkHow are Web Servers CompromisedWeb Server Defacemento How are Servers DefacedApache VulnerabilityAttacks against IISo IIS Componentso IIS Directory Traversal (Unicode) AttackUnicodeo Unicode Directory Traversal VulnerabilityHacking Toolo Hacking Tool: IISxploit.exeo Msw3prt IPP Vulnerabilityo RPC DCOM Vulnerabilityo ASP Trojano Network Tool: Log Analyzero Hacking Tool: CleanIISLogo ServerMask ip100o Tool: CacheRighto Tool: CustomErroro Tool: HttpZipo Tool: LinkDenyo Tool: ServerDefender AIo Tool: ZipEnableo Tool: w3compilero YersiniaTool: MPackTool: NeosploitHotfi xes and PatchesWhat is Patch ManagementPatch Management Checklisto Solution: UpdateExperto Patch Management Tool: qfechecko Patch Management Tool: HFNetChko cacls.exe utilityo Shavlik NetChk Protecto Kaseya Patch Managemento IBM Tivoli Confi guration Managero LANDesk Patch Managero BMC Patch Managero Confi gureSoft Enterprise Confi guration Manager (ECM)o BladeLogic Confi guration Managero Opsware Server Automation System (SAS)o Best Practices for Patch ManagementVulnerability ScannersOnline Vulnerability Search EngineNetwork Tool: WhiskerNetwork Tool: N-Stealth HTTP Vulnerability ScannerHacking Tool: WebInspectNetwork Tool: Shadow Security ScannerSecure IISo ServersCheck Monitoringo GFI Network Server Monitoro Servers Aliveo Webserver Stress ToolWeb-Based Password Cracking TechniquesAuthentication - Defi nitionAuthentication Mechanismso HTTP Authentication• Basic Authentication• Digest Authenticationo Integrated Windows (NTLM) Authenticationo Negotiate Authenticationo Certifi cate-based Authenticationo Forms-based Authenticationo RSA SecurID Tokeno Biometrics Authentication• Types of Biometrics AuthenticationFingerprint-based Identifi cationHand Geometry- based Identifi cationRetina ScanningFace RecognitionFace Code: WebCam Based Biometrics Authentication SystemBill Gates at the RSA Conference 2006How to Select a Good PasswordThings to Avoid in PasswordsChanging Your PasswordProtecting Your PasswordExamples of Bad PasswordsThe “Mary Had A Little Lamb” FormulaHow Hackers Get Hold of PasswordsWindows XP: Remove Saved PasswordsWhat is a Password CrackerModus Operandi of an Attacker Using a Password CrackerHow Does a Password Cracker WorkAttacks - Classifi cationo Password Guessingo Query Stringo Cookieso Dictionary MakerPassword Crackers Availableo L0phtCrack (LC4)o John the Rippero Brutuso ObiWaNo Authforceo Hydrao Cain &amp; Abelo RARo Gammaprogo WebCrackero Munga Bungao PassListo SnadBoyo MessenPasso Wireless WEP Key Password Spyo RockXPo Password Spectator Proo Passwordstateo Atomic Mailbox Password Crackero Advanced Mailbox Password Recovery (AMBPR)o Tool: Network Password Recoveryo Tool: Mail PassViewo Tool: Messenger Keyo Tool: SniffPasso WebPasswordo Password Administratoro Password Safeo Easy Web Passwordo PassRemindero My Password ManagerSQL InjectionWhat is SQL InjectionExploiting Web ApplicationsSteps for performing SQL injectionWhat You Should Look ForWhat If It Doesn’t Take InputOLE DB ErrorsInput Validation AttackSQL injection TechniquesHow to Test for SQL Injection VulnerabilityHow Does It WorkBadLogin.aspx.csBadProductList.aspx.csExecuting Operating System CommandsGetting Output of SQL QueryGetting Data from the Database Using ODBC Error MessageHow to Mine all Column Names of a TableHow to Retrieve any DataHow to Update/Insert Data into DatabaseSQL Injection in OracleSQL Injection in MySql DatabaseAttacking Against SQL ServersSQL Server Resolution Service (SSRS)Osql -L ProbingSQL Injection Automated ToolsAutomated SQL Injection Tool: AutoMagic SQLAbsinthe Automated SQL Injection Toolo Hacking Tool: SQLDicto Hacking Tool: SQLExeco SQL Server Password Auditing Tool: sqlbfo Hacking Tool: SQLSmacko Hacking Tool: SQL2.exeo sqlmapo sqlninjao SQLIero Automagic SQL InjectorBlind SQL Injectiono Blind SQL Injection: Countermeasureo Blind SQL Injection SchemaSQL Injection CountermeasuresPreventing SQL Injection AttacksGoodLogin.aspx.csSQL Injection Blocking Tool: SQL BlockAcunetix Web Vulnerability ScannerHacking Wireless NetworksIntroduction to Wirelesso Introduction to Wireless Networkingo Wired Network vs. Wireless Networko Effects of Wireless Attacks on Businesso Types of Wireless Networko Advantages and Disadvantages of a Wireless NetworkWireless Standardso Wireless Standard: 802.11ao Wireless Standard: 802.11b – “WiFi”o Wireless Standard: 802.11go Wireless Standard: 802.11io Wireless Standard: 802.11nWireless Concepts and Deviceso Related Technology and Carrier Networkso Antennaso Wireless Access Pointso SSIDo Beacon Frameso Is the SSID a Secreto Setting up a WLANo Authentication and Associationo Authentication Modeso The 802.1X Authentication ProcessWEP and WPAo Wired Equivalent Privacy (WEP)o WEP Issueso WEP - Authentication Phaseo WEP - Shared Key Authenticationo WEP - Association Phaseo WEP Flawso What is WPAo WPA Vulnerabilitieso WEP, WPA, and WPA2o WPA2 Wi-Fi Protected Access 2Attacks and Hacking Toolso Terminologieso WarChalkingo Authentication and (Dis) Association Attackso WEP Attacko Cracking WEPo Weak Keys (a.k.a. Weak IVs)o Problems with WEP’s Key Stream and Reuseo Automated WEP Crackerso Pad-Collection Attackso XOR Encryptiono Stream Ciphero WEP Tool: Aircracko Aircrack-ngo WEP Tool: AirSnorto WEP Tool: WEPCracko WEP Tool: WepLabo Attacking WPA Encrypted Networkso Attacking WEP with WEPCrack on Windows using Cygwino Attacking WEP with WEPCrack on Windows using PERL Interpretero Tool: Wepdecrypto WPA-PSK Cracking Tool: CowPattyo 802.11 Specifi c Vulnerabilitieso Evil Twin: Attacko Rogue Access Pointso Tools to Generate Rogue Access Points: Fake APo Tools to Detect Rogue Access Points: Netstumblero Tools to Detect Rogue Access Points: MiniStumblero ClassicStumblero AirFarto AP Radaro Hotspottero Cloaked Access Pointo WarDriving Tool: shtumbleo Temporal Key Integrity Protocol (TKIP)o LEAP: The Lightweight Extensible Authentication Protocolo LEAP Attackso LEAP Attack Tool: ASLEAPo Working of ASLEAPo MAC Sniffi ng and AP Spoofi ngo Defeating MAC Address Filtering in Windowso Manually Changing the MAC Address in Windows XP and 2000o Tool to Detect MAC Address Spoofi ng: Wellenreitero Man-in-the-Middle Attack (MITM)o Denial-of-Service Attackso DoS Attack Tool: Fatajacko Hijacking and Modifying a Wireless Networko Phone Jammerso Phone Jammer: Mobile Blockero Pocket Cellular Style Cell Phone Jammero 2.4Ghz Wi-Fi &amp; Wireless Camera Jammero 3 Watt Digital Cell Phone Jammero 3 Watt Quad Band Digital Cellular Mobile Phone Jammero 20W Quad Band Digital Cellular Mobile Phone Jammero 40W Digital Cellular Mobile Phone Jammero Detecting a Wireless NetworkScanning Toolso Scanning Tool: Kismeto Scanning Tool: Prismstumblero Scanning Tool: MacStumblero Scanning Tool: Mognet V1.16o Scanning Tool: WaveStumblero Scanning Tool: Netchaser V1.0 for Palm Topso Scanning Tool: AP Scannero Scanning Tool: Wavemono Scanning Tool: Wireless Security Auditor (WSA)o Scanning Tool: AirTrafo Scanning Tool: WiFi Findero Scanning Tool: Wifi Scannero eEye Retina WiFIo Simple Wireless Scannero wlanScannerSniffi ng Toolso Sniffi ng Tool: AiroPeeko Sniffi ng Tool: NAI Wireless Sniffero MAC Sniffi ng Tool: WireSharko Sniffi ng Tool: vxSniffero Sniffi ng Tool: Etherpego Sniffi ng Tool: Drifneto Sniffi ng Tool: AirMagneto Sniffi ng Tool: WinDumpo Sniffi ng Tool: Ssidsniffo Multiuse Tool: THC-RUTo Tool: WinPcapo Tool: AirPcapo AirPcap: Example Program from the Developer’s PackHacking Wireless Networkso Steps for Hacking Wireless Networkso Step 1: Find Networks to Attacko Step 2: Choose the Network to Attacko Step 3: Analyzing the Networko Step 4: Cracking the WEP Keyo Step 5: Sniffi ng the NetworkWireless Securityo WIDZ: Wireless Intrusion Detection Systemo Radius: Used as Additional Layer in Securityo Securing Wireless Networkso Wireless Network Security Checklisto WLAN Security: Passphraseo Don’ts in Wireless SecurityWireless Security Toolso WLAN Diagnostic Tool: CommView for WiFi PPCo WLAN Diagnostic Tool: AirMagnet Handheld AnalyzerLinux HackingWhy LinuxLinux DistributionsLinux Live CD-ROMsBasic Commands of Linux: Files &amp; DirectoriesLinux Basico Linux File Structureo Linux Networking CommandsDirectories in LinuxInstalling, Confi guring, and Compiling Linux KernelHow to Install a Kernel PatchCompiling Programs in LinuxGCC CommandsMake FilesMake Install CommandLinux VulnerabilitiesChrootingWhy is Linux HackedHow to Apply Patches to Vulnerable ProgramsScanning NetworksNmap in LinuxScanning Tool: NessusPort Scan Detection ToolsPassword Cracking in Linux: XcrackFirewall in Linux: IPTablesIPTables CommandBasic Linux Operating System DefenseSARA (Security Auditor's Research Assistant)Linux Tool: NetcatLinux Tool: tcpdumpLinux Tool: SnortLinux Tool: SAINTLinux Tool: WiresharkLinux Tool: Abacus Port SentryLinux Tool: DSniff CollectionLinux Tool: Hping2Linux Tool: Sniffi tLinux Tool: NemesisLinux Tool: LSOFLinux Tool: IPTrafLinux Tool: LIDSHacking Tool: HuntTool: TCP WrappersLinux Loadable Kernel ModulesHacking Tool: Linux RootkitsRootkits: Knark &amp; TornRootkits: Tuxit, Adore, RamenRootkit: BeastkitRootkit Countermeasures‘chkrootkit’ detects the following RootkitsEvading IDS, Firewalls and Detecting Honey PotsIntroduction to Intrusion Detection SystemTerminologiesIntrusion Detection System (IDS)o IDS Placemento Ways to Detect an Intrusiono Types of Instruction Detection Systemso System Integrity Verifi ers (SIVS)o Tripwireo Cisco Security Agent (CSA)o True/False, Positive/Negativeo Signature Analysiso General Indication of Intrusion: System Indicationso General Indication of Intrusion: File System Indicationso General Indication of Intrusion: Network Indicationso Intrusion Detection Tools• Snort• Running Snort on Windows 2003• Snort Console• Testing Snort• Confi guring Snort (snort.conf )• Snort Rules• Set up Snort to Log to the Event Logs and to Run as a Service• Using EventTriggers.exe for Eventlog Notifi cations• SnortSamo Steps to Perform after an IDS detects an attacko Evading IDS Systems• Ways to Evade IDS• Tools to Evade IDSIDS Evading Tool: ADMutatePacket GeneratorsWhat is a Firewall?o What Does a Firewall Doo Packet Filteringo What can’t a fi rewall doo How does a Firewall worko Firewall Operationso Hardware Firewallo Software Firewallo Types of Firewall• Packet Filtering Firewall• IP Packet Filtering Firewall• Circuit-Level Gateway• TCP Packet Filtering Firewall• Application Level Firewall• Application Packet Filtering Firewall• Stateful Multilayer Inspection Firewallo Packet Filtering Firewallo Firewall Identifi cationo Firewalkingo Banner Grabbingo Breaching Firewallso Bypassing a Firewall using HTTPTunnelo Placing Backdoors through Firewallso Hiding Behind a Covert Channel: LOKIo Tool: NCoverto ACK TunnelingCommon Tool for Testing Firewall and IDSo IDS testing tool: IDS Informero IDS Testing Tool: Evasion Gatewayo IDS Tool: Event Monitoring Enabling Responses to Anomalous Live Disturbances (Emerald)o IDS Tool: BlackICEo IDS Tool: Next-Generation Intrusion Detection Expert System (NIDES)o IDS Tool: SecureHosto IDS Tool: Snareo IDS Testing Tool: Traffi c IQ Professionalo IDS Testing Tool: TCPOperao IDS testing tool: Firewall Informero Atelier Web Firewall TesterWhat is Honeypot?o The Honeynet Projecto Types of HoneypotsLow-interaction honeypotMedium-interaction honeypotHigh-interaction honeypoto Advantages and Disadvantages of a Honeypoto Where to place Honeypotso Honeypots• Honeypot-SPECTER• Honeypot - honeyd• Honeypot – KFSensor• Sebeko Physical and Virtual HoneypotsTools to Detect HoneypotsWhat to do when hackedBuffer OverflowsWhy are Programs/Applications VulnerableBuffer Overfl owsReasons for Buffer Overfl ow AttacksKnowledge Required to Program Buffer Overfl ow ExploitsUnderstanding StacksUnderstanding HeapsTypes of Buffer Overfl ows: Stack-based Buffer Overfl owo A Simple Uncontrolled Overfl ow of the Stacko Stack Based Buffer Overfl owsTypes of Buffer Overfl ows: Heap-based Buffer Overfl owo Heap Memory Buffer Overfl ow Bugo Heap-based Buffer Overfl owUnderstanding Assembly Languageo ShellcodeHow to Detect Buffer Overfl ows in a Programo Attacking a Real ProgramNOPsHow to Mutate a Buffer Overfl ow ExploitOnce the Stack is SmashedDefense Against Buffer Overfl owso Tool to Defend Buffer Overfl ow: Return Address Defender (RAD)o Tool to Defend Buffer Overfl ow: StackGuardo Tool to Defend Buffer Overfl ow: Immunix Systemo Vulnerability Search: NISTo Valgrindo Insure++Buffer Overfl ow Protection Solution: Libsafeo Comparing Functions of libc and LibsafeSimple Buffer Overfl ow in Co Code AnalysisCryptographyIntroduction to CryptographyClassical Cryptographic Techniqueso Encryptiono DecryptionCryptographic AlgorithmsRSA (Rivest Shamir Adleman)o Example of RSA Algorithmo RSA Attackso RSA ChallengeData Encryption Standard (DES)o DES OverviewRC4, RC5, RC6, Blowfi sho RC5Message Digest Functionso One-way Bash Functionso MD5SHA (Secure Hash Algorithm)SSL (Secure Sockets Layer)What is SSH?o SSH (Secure Shell)Algorithms and SecurityDisk EncryptionGovernment Access to Keys (GAK)Digital Signatureo Components of a Digital Signatureo Method of Digital Signature Technologyo Digital Signature Applicationso Digital Signature Standardo Digital Signature Algorithm: Signature Generation/Verifi cationo Digital Signature Algorithms: ECDSA, ElGamal Signature Schemeo Challenges and OpportunitiesDigital Certifi catesCypherCalcCommand Line ScriptorCryptoHeavenHacking Tool: PGP CrackMagic LanternAdvanced File EncryptorEncryption EngineEncrypt FilesEncrypt PDFEncrypt EasyEncrypt my FolderAdvanced HTML Encrypt and Password ProtectEncrypt HTML sourceAlive File EncryptionOmziffABC CHAOSEncryptOnClickCryptoForgeSafeCryptorCrypToolMicrosoft Cryptography ToolsPolar Crypto LightCryptoSafeCrypt EditCrypSecureCryptlibCrypto++ LibraryCode Breaking: MethodologiesCryptanalysisCryptography AttacksBrute-Force AttackPenetration TestingIntroduction to Penetration Testing (PT)Vulnerability AssessmentLimitations of Vulnerability AssessmentPenetration TestingTypes of Penetration TestingRisk ManagementDo-It-Yourself TestingOutsourcing Penetration Testing ServicesTerms of EngagementProject ScopePentest Service Level AgreementsTesting pointsTesting LocationsAutomated TestingManual TestingUsing DNS Domain Name and IP Address InformationEnumerating Information about Hosts on Publicly Available NetworksTesting Network-fi ltering DevicesEnumerating DevicesDenial-of-Service EmulationPentest using AppscanHackerShieldPen-Test Using Cerberus Internet ScannerPen-Test Using Cybercop ScannerPen-Test Using FoundScan Hardware AppliancesPen-Test Using NessusPen-Test Using NetReconPen-Test Using SAINTPen-Test Using SecureNet ProPen-Test Using SecureScanPen-Test Using SATAN, SARA and Security AnalyzerPen-Test Using STAT AnalyzerPentest Using VigilENTPentest Using WebInspectPentest Using CredDiggerPentest Using NsauditorEvaluating Different Types of Pen-Test ToolsAsset AuditFault Tree and Attack TreesBusiness Impact of ThreatInternal Metrics ThreatExternal Metrics ThreatCalculating Relative CriticalityTest DependenciesDefect Tracking Tools: Bug Tracker ServerDisk Replication ToolsDNS Zone Transfer Testing ToolsNetwork Auditing ToolsTrace Route Tools and ServicesNetwork Sniffi ng ToolsDenial of Service Emulation ToolsTraditional Load Testing ToolsSystem Software Assessment ToolsOperating System Protection ToolsFingerprinting ToolsPort Scanning ToolsDirectory and File Access Control ToolsFile Share Scanning ToolsPassword DirectoriesPassword Guessing ToolsLink Checking ToolsWeb-Testing Based Scripting toolsBuffer Overfl ow protection ToolsFile Encryption ToolsDatabase Assessment ToolsKeyboard Logging and Screen Reordering ToolsSystem Event Logging and Reviewing ToolsHacking Routers, cable Modems and FirewallsNetwork DevicesIdentifying a Routero SING: Tool for Identifying the RouterHTTP Confi guration Arbitrary Administrative Access VulnerabilityADMsnmpSolarwinds MIB BrowserBrute-Forcing Login ServicesHydraAnalyzing the Router Confi gCracking the Enable PasswordTool: Cain and AbelImplications of a Router AttackTypes of Router AttacksRouter Attack TopologyDenial of Service (DoS) AttacksPacket “Mistreating” AttacksRouting Table PoisoningHit-and-run Attacks vs. Persistent AttacksCisco Routero Finding a Cisco Routero How to Get into Cisco Routero Breaking the Passwordo Is Anyone Hereo Covering Trackso Looking AroundEigrp-toolTool: ZebraTool: Yersinia for HSRP, CDP, and other layer 2 attacksTool: Cisco TorchMonitoring SMTP(port25) Using SLcheckMonitoring HTTP(port 80)Cable Modem Hacking",
  "Url": "http://qudsseo.blogspot.com",
  "IpAddress": "142.251.221.65",
  "ReverseDns": "syd09s31-in-f1.1e100.net",
  "Asn": null,
  "Http2": false,
  "Http3": false,
  "ResponseTimeMs": 1832,
  "StatusCode": 200,
  "ServerHeaders": [
    "GSE"
  ],
  "Ssl": {
    "Issuer": null,
    "Subject": null,
    "NotBefore": null,
    "NotAfter": null,
    "SubjectAltNames": [],
    "Hsts": false,
    "Ciphers": [],
    "Protocol": null,
    "DaysUntilExpiry": 0
  },
  "Cdns": [],
  "HostingHints": [],
  "Cms": [
    "WordPress"
  ],
  "Frameworks": [
    "jQuery"
  ],
  "JsLibraries": [],
  "Analytics": [
    "Google Analytics GA4"
  ],
  "AdsAndMarketing": [
    "Google AdSense"
  ],
  "PaymentGateways": [],
  "EcommerceHints": [
    "Magento"
  ],
  "SocialSignals": [
    "Pinterest",
    "YouTube"
  ],
  "MediaProviders": [
    "YouTube",
    "Vimeo"
  ],
  "SeoTags": [
    "content-type: text/html; charset=UTF-8"
  ],
  "HtmlLanguage": null,
  "HasRobots": true,
  "HasSitemap": true,
  "SecurityHeaders": [
    "X-Content-Type-Options",
    "X-XSS-Protection"
  ],
  "CookiesObserved": [],
  "XhrApiHints": [],
  "SitemapCounts": {
    "total_urls": 29
  },
  "ChatWidgets": [],
  "ABTesting": [],
  "PrivacyConsent": [],
  "EmailMarketing": [],
  "WebFonts": [
    "Google Fonts",
    "Font Awesome"
  ],
  "DynamicJs": [
    "React (Script Analysis)",
    "jQuery (Script Analysis)",
    "Bootstrap (CSS Classes)",
    "Web Server: GSE",
    "REST/GraphQL API (Pattern Detection)",
    "Google APIs (script CDN)",
    "jQuery (script Resource)",
    "jQuery CDN (script CDN)",
    "jQuery (CDN Detection)",
    "Bootstrap (CDN Detection)",
    "Font Awesome (CDN Detection)",
    "Google Tag Manager (Script Analysis)",
    "Hotjar (Script Analysis)"
  ],
  "ResourceHosts": [
    "ajax.googleapis.com",
    "code.jquery.com",
    "apis.google.com",
    "www.blogger.com",
    "qudsseo.blogspot.com",
    "fonts.googleapis.com",
    "netdna.bootstrapcdn.com",
    "static.xx.fbcdn.net"
  ],
  "CssFrameworks": [],
  "BuildTools": [],
  "ServerTech": [
    "Generator: blogger",
    "PHP (inferred from WordPress)"
  ],
  "DatabaseHints": [
    "MySQL"
  ],
  "PageTitle": "SEO",
  "MetaDescription": "",
  "ImageCount": 2,
  "ScriptCount": 27,
  "LinkCount": 17,
  "Errors": [],
  "UiFrameworks": [
    "D3.js",
    "Font Awesome",
    "AOS",
    "Slate",
    "Bootstrap (Class Names)",
    "Vuetify (Class Names)"
  ]
}