The System Hacking Cycle

The System Hacking CycleSystem hacking delegacy to hack system parole within the operating system. umteen hacking attempts start with attempting to crack passwords. However, passwords be the key piece of information needed to access a system. Users, while creating a password, often select password that argon prone to being cracked. tidingss whitethorn be cracked manually or with automated tools such(prenominal) as dictionary or brute-force method, each of which argon discussed in this paper.S pottyning and enumeration is the commencement ceremony part of ethical hacking and contains the hacker target systems . Enumeration is the follow-on step once s brookning is complete and is usaged to identify computer names, usernames, and shares. Scanning and enumeration are discussed together because many hacking tools perform both.The system hacking cycle consists of six steps- a. Enumerationb. Cracking Passwords c. Escalating Privilegesd. Executing Applicationse. Hiding filesf. Coveri ng tracksEnumeration occurs after fashioning the IPv4 protocol independent of the physical interlocking, the designers decided to make the maximum length of the IPv4 datagram equal to 65,535 bytes. This makes transmission to a greater extent efficient if we use a protocol with an MTU of this size. How ever, for another(prenominal) physical net whole shebang, we must divide the datagram to make it possible to pass through these networks. This is called fragmentation. The source usually does not fragment the IPv4 packet. The transport layer will rather segment the data into a size that can be accommodated by IPv4 and the data link layer in use. When a datagram is fragmented, each fragment has its take in header with most of the fields repeated, but with some changed. A fragmented datagram may itself be fragmented if it encounters a network with an even smaller MTU. In other words, a datagram can be fragmented several times before it reaches the final destination. In IPv4, a datag ram can be fragmented by the source host or any router in the path although there is a tendency to limit fragmentation only at the source. The reassembly of the datagram, however, is done only by the destination host because each fragment becomes an independent datagram. Whereas the fragmented datagram can travel through different routes, and we can never control or guarantee which route a fragmented data gram may take, all the information is provided by other means such as the hop-by-hop options or other protocols. In its simplest form, a conflate label can be used to speed up the processing of a packet by a router. When a router receives a packet, instead of consulting the routing table and going through a routing algorithm to define the address of the next hop, it can easily look in a string up label table for the next hop. In its more sophisticated form, a flow labMany hacking attempts can initialize with to attempt crack passwords. Passwords are the important information whic h is required to login a system. Users, when creating passwords, often select passwords that are difficult to guess.Passwords are stored in the Security Accounts Manager (SAM) file on a Windows system and in a password shadow file on a Linux system.Manual Password cracking involves attempting to log on with different passwords. The hacker follows these steps1. Find a valid user account for password test.2. You can create run of possible passwords.3. Arrange the passwords according to possibility4. Try each password.5. Try and try for correct password.In its simplest form, a flow label can be used to speed up the processing of a packet by a router. When a router receives a packet, instead of consulting the routing table and going through a routing algorithm to define the address of the next hop, it can easily look in a flow label table for the next hop.In its more sophisticated form, a flow label can be used to support the transmission of real-time audio and video. Real-time audio o r video, oddly in digital form, requires resources such as high bandwidth, large buffers, long processing time, and so on. A process can make a arriere pensee for these resources beforehand to guarantee that real-time data will not be delayed due to a lack of resources. The use of real-time data and the reticence of these resources require other protocols such as Real-Time Protocol (RTP) and Resource Reservation Protocol (RSVP) in addition to IPv6.To allow the effective use of flow labels, three rules have been defined1. The flow label is assigned to a packet by the source host. The label is a random number betwixt 1 and 224. A source must not reuse a flow label for a new flow while the existing flow is still active.2. If a host does not support the flow label, it sets this field to zero. If a router does not support the flow label, it simply ignores it.3. All packets belonging to the homogeneous flow have the same source, same destination, same priority, and same option.2. ACC OUNTING MANAGEMENTThe Internet is a wonderful thing. It allows knowledge to be shared with the world. unless what if you want to use the Internet to share knowledge with just one person? When vane pages, e-mail, and even passwords are transferred across the Internet, they are free to be seen by anyone who cares to look. You may ask, Who is going to be looking, anyway? The answer, in most cases, is nobody. Anonymity can be your security. This is especially true of your Internet presence from home.However, the military position changes when you use your credit card over the Internet, or when you are a business on the receiving end of a credit card transaction. In such cases, anonymity clearly doesnt provide enough security. Furthermore, what if you receive a sensitive document, but you are unsure if the person who sent it really is who they claim to be? How do you know that this same document wasnt tampered with between the time it was sent and the time you received it? And what if you need to protect sensitive data on your web site, or perhaps you want to protect the data in transit to the user, or authenticate the user with a stronger certificate method?It prevents users from monopolizing limited network resources.It prevents users from using the system inefficiently.Network managers can do short- and long-term planning based on the demand for network use. compound Windows enfranchisement is the most sterilise method of authentication, but it is available only with Internet Explorer. This authentication type had been known previously as NTLM authentication and Windows NT Challenge/Response authentication. In Integrated Windows authentication, the users browser proves itself to the server using a cryptographic exchange during the authentication process.Integrated Windows authentication supports both the Kerberos v5 and the NTLM (NT LAN Manager) protocols for authentication through the Negotiate package. If you are using Active Directory, and the browser s upports it (IE 5 or above with Windows 2000), Kerberos is used otherwise, NTLM is used. Both Kerberos and NTLM have limitations on their use. Interestingly enough, each ones strength is the others weakness. Kerberos generally works with legate servers, but it tends to have a hard time with firewalls. NTLM generally works through firewalls, but it tends to have a hard time with proxy servers.1. A manager checks an agent by requesting information that reflects the behavior of the agent.2. A manager forces an agent to perform a task by resetting values in the agent database.3. An agent contributes to the management process by warning the manager of an unusual situation.3. PASSWORD INTEGRITYAuthentication is an important feature of any impregnable web site. Every time a client browses to a web site, it needs to be authenticated before it can access the resources it is requesting. By default, that authentication all takes place on the server, and the client isnt even involved. Some aut hentication settings can make for easy access to a web site, but sometimes you want to limit who sees what information on your site. This is where more restrictive types of authentication come in.If your computer is renamed, the Internet Guest Account does not change and continues to use the old machine name. Because user accounts use security identifiers (SIDs) to identify themselves, changing the computer name doesnt affect the account name. When IIS receives a request, it automatically attempts anonymous authentication first. If anonymous authentication fails, it attempts to log on the user using another logon method. If no other authentication methods are enabled, IIS sends a 403 Access Denied HTTP error cognitive content to the client. You can use any user account that you wish for anonymous access, including the Administrator account. You can change access settings in the items Properties windows Directory Security tab, accessible by right-clicking the item in the IIS Microso ft Management Console (MMC) snap-in and choosing Properties. (By the way, even though you can do it, dont use the Administrator account for anonymous access.)Basic authentication is a widely accepted means of authentication. Because all the information is presented and transmitted in clear text, its easy to use and makes for easy program interoperability, but the passwords can be found out faster than you can say security risk. Both the web server and FTP server components in IIS support Basic authentication.4. terminalThe simplest and the oldest method of entity authentication is the password, something that the claimant possesses. A password is used when a user needs to access a system to use the systems resources (log-in). Each user has a user identification that is public and a password that is private.We can divide this authentication scheme into two separate groups the fixed password and the one-time password.In this group, the password is fixed the same password is used over and over for every access. This approach is subject to several attacks.4. REFRENCESwww.ankitfadia.in for ethical hacking and password guessing techniques.www.ethicalhacker.netwww.hackcommunity.comwww.dl4hacks.comwww.go4expert.com/forumswww.ehacking.netwww.govermentsecurity.org/forum/32003