CEHv8 Module 05 System Hacking .pdf

Embed Size (px)

Citation preview

  • !"# $ %& (()* ($ "&*

  • $&+,

    - ) & ( . ) //* - $- , & / & $& )& $ 0 12" ) , - &,) *

    2 / ) )3,& --, $ $$, 4, /5!, 6 * / $& & / #* /#*7 8- * , 0$ & *

    , - * 2 - 9 :/ & - ) $ /.$-*2 & )*8 -&*:

    $ %& (()*($ "&*

    / , " 2"- ; &

    9 $9

  • $-* 2 & )* 8

    -& *:

    2$ , - $&

    - )&, ) 0

    , :$ ,: / *>, - &&*

    / - @ & ), = - $

    & - $ ) , @ $- *

    - / & , ) $$ $- & $*

    2 , ! .0 ) , $ $

    $-* $$ :3+: )& ,- $-

    :,: :,: :*: )) / & $

    & , 0 --0 :2":5$ $$- *

    !""#$

    $ %& > (()* ($ "&*

    !"

    http://www.kitguru.net/channel/ion-rnartindale/ieee-hack-confirmed-100k-plain-text-
  • >!

    AB

    ! 94

    ! 2 $A C$ -

    ! ! D!E ! A $ -

    ! "- ! .(

    ! "->A ! (

    ! ! " ! 821!$

    ! -.&C! ! $

    ! -."- ! !

  • %& &

    % $

    & !"#

    %& & 5&- , 0) $ -

    * ",-9

    1$!

    1$ $ $ -

    )* > @ $$ $$ -

    -)* $& , & $ * / $$, $ =,

    - /", $, $ -&*

    1$ $) - - & $ & ) )&* . &H) $ $

    )) $*6 &H) -,&

    ) ,$ &= &*

    1$,-&$ = $) $ & $ , - &H)*

    7 @ -& $) -

    $=*

    $ %& > (()* ($ "&*

    !"

  • !

    $ ) -,

    $$ - * / $,

    & /" & ) /* -

    - ) $*

    $ $ $-$ & )& ) ) / /"*2

    ) $$ $ & /"

    $ ) I - $$ & &*

    !

    ) $&

    - - , &, $

    8- ! " D8!"E * 2 &

    ) & -, , $,$$,&*

    2 0&H) ) $-

    $ & $* )) ) &H @* 8 ,

    - $* 6 -

    ) $&, .8 I -), $& &$ /" , /"J 7-, & $& -

    - &

    $ %& > (()* ($ "&*

    !"

  • &

    K8

    ()# *

    L M L 42

    "-)$$,&

    $") 2$)

    ) &"-,-$

    NOOPN OMFQOR

    2&

    2H

    1 2 (

    ( ) ) * 2$$

    + # !"#

    + , ) ) * C-,

    ) & $ *2 - &

    * 2 & -

    @ )*

    $ %& > (()* ($ "&*

    !"3

  • & ()#*

    42

    "-)$$,&

    ")2$))&

    "-,- $

    $$2&

    2H

    1 2 (

    )22$ $

    1/4>(*94

    $ %& > (()* ($ "&*

    !"

  • !

    # !"#

    ! -!.8SDTUU3E

    V KKKPV 5 , $, , @ )& $) &

    - * 6 ,

    * , - $ -* / ) , -

    *2- $ - &

    9

    $ %& > (()* ($ "&*

    !"+

  • 1/4>(*9! D!E

    $ %& > (()* ($ "&*

    !"W

  • /FK & $ * / $

    ) $ $-, $), $$,

    , ), $* 8-0$

    & , - * / $ ,$-*

    2 & $, **, $- , - - -

    $ @ $- *

    "-/*

    1

    V ") )2

    $$ "2

    $ %& > (()* ($ "&*

    !"#

  • # $% &

    "-@

    )$-$

    ;

    $-@ =

    )&

    !$-

    @

    - &$-

    # !"#

    S X "- $)$- &

    & $ *2 $$ $- &

    $ ) $-, $)) &

    & $- & = *

    ! $ - $- $* "- $

    * @ , $- @ = )& * "- &

    - & *

    2 $ $ $-

    & $& $- $ & * 6 , - $-, $- $$ & $0

    0 $ & * ! $-

    @- &$-*

    $ %& > (()* ($ "&*

    !"?

  • # $ %

    # !"#

    0

    0

    "- ! "# $$$$$$$$$

    "-

    $ **************)

    %&

    "- $ **********/

    & ()%*+, F

    ! " ! #

    / 1"- $ $ $) * /

    $ - $-* 2 $-

    & $ $ $- $ * 2 $-

    - & $, , &*2 $- $ @$ *

    "- & & $ * $

    , &, $ , ) &* $ -

    9

    "- ,$, &9 $Y

    "- &9 +?#W

    "- $9ZFRY [D\E

    "- &9

    "- 9 "62!G.

    "- $9&&YZ&

    "- $ &9 YJ3

    $ %& > (()* ($ "&*

    !"

  • 2 3 > 7 >-

    2

    -

    &

    $-

    2$ /- /

    ) ,& &

    & & & &

    &- $-

    *

    $-

    &

    *

    *

    (&

    &

    &

    ! &

    &

    )

    &

    * +

    &

    $$

    .

    F H # !"#

    2 3 "- @ ) $-* /

    - $) $ -*2 $$

    $- $--)&

    *2)@$- , -*

    .

    / , $$*2 & -*

    2$ ) -$ $-* .

    & * 5 -- $$*

    2&$$ -9

    ] / $ , $ & $

    $*

    % / $ , ) $ &

    $-*

    $ %& > (()* ($ "&*

    !"

  • , $

    > & 2

    - $)$-

    % > $ , -

    : : $ : :

    51

    2 $$ & $) & * 2 & (9 :) , &

    , & @ ) $&

    *:

    7 $ ) $

    , & * > , $

    -$& - $$-*

    2 > ) &) D ?WWE +& . $

    D.E-&,) $-

    *

    $ & $ & $* /

    -, $& $ ) $

    $ $ $* 2 $ - $

    $ & & - & $* $ & $ & * ! ,

    $$ *

    / , $-, ),&)&$& *

    &-9

    % / $

    % $-- ) &

    % 82 C!

    ] " &

    PSOOK 2 $$$ *2 $$

    $-& H &$-* / $

    , $ & & - $-* 1 $, $- : ,:

    $- : :: *:

    $ %& > (()* ($ "&*

    !"

  • ( )

    ! " # # "

    $ " "

    " %

    "

    "

    ! "# >$ %%& %! (#

    )(

  • 2/& 4

    M 7

    B !!

    ($

    * ")6

    $$---=$

    .$ .)

    3* 8

    * )6

    $

    -

    $-, -

    $- &

    ) $-

    /H

    ^ 2H

  • ,--./

    * #

    3 -

    3 4

    "

    "

    3 51

    6

    -

    ###################################################### #

    + +

    " # #

    -

    (

    % 7 7

    4 %

    (

    ++

    ,

    2 51

    ,

    -

    ( #

    6

    2

    8

    8

    6

    ! "# >$ %%& %! (#

    )(

  • # 01 ++

    ] $ -DC8E

    --

    , & & , -

    ;;

    2 $ )

    $-D2, 12",

    ,*E

    =

    + # !"#

    )232)- # 01 ++ .###########

    9

    6 5 5 " 5:

    5: 5:

    5: 5 :"

    5: %

    "

    5: "

    !(" " 8

    *

    ! "# >$ %%& %! (#

    )( ,

  • ! "# >$ %%& %! (#

    ;

    )( -

  • # 0 ))4 ) ( $

    7 &);

    () $$

    !&& &

    &&

    & )

    / !/2!,@ &- ) )

    /$ ,$$*),$&-

    + # !"#

    " # 0 554 5 ( $ 0 " # # " "

    1 "

    "

    9(

    "

    "

    "

    ! "# >$ %%& %! (#

    )( .

  • 1 3

    3 9

    ; ;

    $ %%& %! (#

    )( /

  • 0# 6

    # !"#

    0# 6 > " #

    0 "

    " "

    - " * "

    "

    "

    " " "

    " "

    "

    8-

    :

    / 2 -,

    $&

    &$- )

    :

    8-

    ######### ? @ ! [U[

    2

    (@

    -&-

    B

    ! "# >$ %%& %! (#

    )( *

  • 1/4>(*9)6& >"-4 !

    8 -

    2

    ! "# >$ %%& %! (#

    )( *

  • 7

    U

    0* $ 7

    8

    *

    0 %"

    " "

    A

    + # !"#

    0 * $ 7 % (

    7 " "

    0 % "

    "

    %

    8

    *

    "

    3 "

    " *

    ! "

    )( * ! "# >$%%& %! (#

  • 0 48

    _ H - H $

    ) -

    ____ 2

    V 2

    /H $ )

    B .. C D

    ; $

    # !"#

    0 4 8 % %

    -

    E 7 7

    E # #

    E

    E 6 *

    /H $

    F 9

    !G,2>HI- 3,4%

    ! "# >$ %%& %! (#

    )( *

  • ++ 0( 8

    / )

    $-&

    $ $

    $-

    $$ &

    $

    $&$-

    $ -

    $$ &*

    /

    $-

    ) -

    &

    $-

    @

    &- &

    # !"#

    ++ 0 ( .

    3 4

    " 4 "

    "

    3 51

    6

    "

    2

    6

    999 ( # #

    9 # #

    ! "# $ %%& %! (#

    )( **

  • " )

    8 J J

    ( *

    $ 4

    B

    # K L "

    $ 4 4

    #

    # ) $ 4

    3 7

    "

    >

    "

    4 "

    8 51 J J M .

    : 4 N .H H " IHO "PQR " Q > , #

    ! "# $ %%& %! (#

    )( *

  • * ( * 01

    7$(&-2&4$$C!,1C!,82C!,C!CC,C!CC,82C!CC,!,!.,!.3,!.,,(/"!.+,! ]C,! ]C,"/a,6(C,D+E,D#3E,DE

    & /0.OS93

    LKTU=I93V!/4W01:3(/28,0 0O

    AXPMHM9POHO60Y Y -Z I.-H1M8* Y,QRPMMM[QRPKA[

    3S12#

    D=YYY\]DK X ,K" 1 6 O " 1 6 S " 1 6 H " 84 ." 2 (>16 . I " 1 8 /5MOM "

    1 8 / 58 4 " 9 ( c" 3295>" 84 #O KOH IL" 84 #O KMPSL" 84 #O KH .OL

    ! "# $ %%& %! (#

    )( *,

    http://www.oxid.ithttp://project-rainbowcrack.comhttp://www.oxid.it
  • (&-2&$$

    1 9X5 99 :X1b5 15

    d

    [b5.14>AC!86"](2>;7aGc

    A-PMHMPOHPO

    6-P.MH1$

    8X-QRPMPKQRPXL

    3

    [

    HH9 [

    $

    4

    8

    -

    1-

    $

    1/4>(*W974(&-2&7-

    8 - - 7 7 #

    2 9 #

    # %

    %

    )

    -

    %0 a a a a a %

    % a %

    - . /9"$ -$ W3

    " ()"("*+,+" !" " " % -.-

    " $#% ##+, %$ "/ " "

    !0*""% 1&2

    &/ / ! "!/ / &/

    "!%" !" " 3&4

    "" !" 3", " "!" 3", 4 " "!" 3", 4 " "!" 3", 4 " "!" 3", 4 " "!" 3", 4

    1/4>(*#9 4(&-2&7-

    ! "# >$ %%& %! (#

    )( *-

    http://pro1ect-rainbowcrack.com
  • 5# 4

    . &8 - D.8 E @ ) $-

    $ $$ - -

    $ $-

    /, .8 -

    .8 ) -

    e7 # f # $ f 6 : 1

    6 :

    9

    C*

    6:1

    5

    6 : 9

    "

    g

    H

    + # !"#

    : 6 : K6 : L #

    *

    " 6 :

    6 : 6 :

    "

    6 : "

    3 QR O

    E 2

    E

    E 3 *

    E 1

    E 9

    E 6 :

    ! "# >$ %%& %! (#

    )( *.

  • / 9

    6 : -

    : 8 +

    6 : 6 : 6 :

    % 6 :

    -

    / % %

    % "

    6 : % " "

    "

    " % "

    % %

    %

    %

    6 : % " "

    " " 6 :

    % " 6 :

    % " "

    : 8 +

    6 :

    6 :

    6 :

    6 : " 6 : "

    % "

    : 0

    : 6 :

    6 : , " 6 :

    6 : 6 :

    6 :

    % 6 : 0

    : " 0 *

    "

    " % "

    ! "# >$ %%& %! (#

    )( */

  • U

    +: # (

    19

    ^ .& $- ) )C8,/,&

    ^ " -

    M $$ &&

    M / )$-)

    M $-

    6Xb T # b < $ %%& %! (#

    )(

    http://www.elcomsoft.com
  • j >6(2 # 5 W X

    V bY 8 %

    f V 8 ! [ 8 . k F f f c 6 [ f KbL > KH 6

    !

    8 j98O=W

    XQPMl.PRl

    .

    S8ISOM

    9

    1M1

    j 8=H 2 I 98j

    HOIl8OQRl ^O RPOlHl mHSQl

    .O.

    O.QSRSOm

    OIM

    -R" -." - " -" D -8" -" -.95

    % [ 2 T 9

    n 1 9G

    T>f [ o f *

    ( 78 1 X H=IW- o $96G4WA51:3(/285F0cpq

    . . ] r.OMSHIRMQO

    $

    L5

    !

    8X

    Z

    5 6$ ) 7812 &, 9 : ;

    6* 6 2

    "#B

    "$K;L ,0&M!L ,&J

    %! "1""!5" % $ N" %,O P",,O Q ",

    1!%

    11

    X

    ,=O J,,O P S, $", P",,O Q ,O T

    T

    1%1" 1%

    U"" "

    /C UW/ C W "!/C 1/,"P1/C" %P/U(*?9 .& "-()

    ! "# >$ %%& %! (#

    )(

  • 4

    + # !"#

    )$$)

    C0 &-$ %%& %! (#

    )(

  • 8 "

    " 8

    * * + "

    %

    * 4 + +S.;]Bi 8 "

    "

    + "

    (: 1 (

    :

    > + (

    " J ( J

    1 "

    " "

    "

    4 "

    "

    4 "

    p

    "

    , "

    " #

    "

    J

    J ! "

    *

    "

    ! "# >$ %%& %! (#

    )(

  • 8 #

    8

    1

    4 "

    "

    " "

    "

    7 ++/

    A

    ! "# >$ %%& %! (#

    )( *

  • 5 &

    W

    6

    $-96 7&"& /

    X P

  • 1/4>(*9 ."-

    ! " !##

    $

    %&

    M931 9 $ R 7 I 7MH 7OH 6 8

    M931 9 $ R 7 I 7MH 7OH

    M931 4(29 S. KL

    M931 5: OH 6 8

    M931 5: OH

    M931 5 8 O 7OR

    4 >QI

    M931 : $ 8:1( 51

    M931 : 1 KL

    M9313 9

    86: 2H 7 (880326

    M93188

    8 OO 8

    M93188

    8 OR

    M9313 9

    P.O 6851

    25C*9622 ."-

    ! "# >$ %%& %! (#

    )( ,

  • # >

    (

    A

    $-,

    $-

    )

    ($-

    $&& -

    )#$#*

    $&

    $-

    8 ? + &()()*)+%)+#$(, $-)+%

    #

  • # 4

    " !32

    "

    !32

    !32

    -

    Y/ " , & X

    $" ZZ

    $" %

    $" $"

    Y6 ,X

    ! " -

    /(BG8NB *"[CJS O " I" , & 4

  • U

    # 4

    ; - /.

    $&$-

    1 $

    ($ $- )

    + &()()*)+%)+#$(, $-)+%

    # 4 "

    %

    # #

    4 " "

    8 #

    6 "

    #

    "

    " #

    "

    1 B 1 " , : c" : B

    :" : " , : c

    ! "# >$ %%& %! (#

    )( /

  • "

    " " "

    " 6

    -

    !

    !

    3

    / 9

    / >

    E 8 6

    # + # 6

    "

    8

    5 " W 2 " : $ 38 K: L"

    : 7O

    4 !32

    U/(BG8NBZ *"[C JZ O " I" , & 4

    " (( ! (7U\ O N/ O0

    * -

    E K

    L 53 9 W 2 "

    6

    / " ,

    "

    ,

    " "

    "

    ! "# >$ %%& %! (#

    )( ,

  • # @ @A: > ! !H /!!

    6

    "->

    ";- c

    ,8$

    ,8$

    #

    K L

    6 (F"

    $-

    9 , &

    9 -

    ,8$

    + &()()*)+%)+#$(, $-)+%

    9 * ,8$

    B5C # @ @A: V! " #

    8 ,8$

    ,8$

    (

    p

    ,8$

    3

    ,8$

    1

    3

    ,8$ ,8$

    0 c(" 0 R"

    0 F " 0 O

    ,8$ p 1 , ,8$

    8 ,8$ -

    . p

    ! "# >$ %%& %! (#

    )( ,

  • O 9 ,8$

    M 9

    T t

    ?

    : "

    ,8$

    S 3 : : -

    7

    " ,8$

    H ,8$ # K L

    I #

    c ,8$

    " ,8$

    1/4>(*9"->>5.)

    ! "# >$ %%& %! (#

    )( ,

  • # @ 7

    B A $) ) );$-

    B / )0-2H) 2H)&

    .)

    0$1()+1"()*)(

    $)+)"("(")))

    =0#########

    2))()+(

    2))()+( %$)+)"( ;"$)

    &"$)"("$$)((+1"()*)

    &"$))$(*$13($"-

    + &()()*)+%)+#$(, $-)+%

    # @ 7 0 "

    (

    9 %

    + %

    (

    ( 4 "

    "

    "

    A

    "

    A

    ! "# >$ %%& %! (#

    )( ,

  • .

    )

    &"$)"("$$)((+1"()*)

    1/4>(*9"->A

    0 " + (9

    0 "

    K " L

    3 + "

    ! "# >$ %%& %! (#

    )( ,*

  • ! &4

    D_- H

    4+(,)$#

    )) "(( +> + -

    o 2

    ()" ) "$$#

    6A

    %2

    +! 7&&&

    7-$- !&D!E, ). &* "-)I$- !

    86/ &

    282C!$ $9

    * 82C!$

    * C!$

    2$0 $-!&

    ?

    !$$A&-$)

    p 0 : S

    8 1 # 8 1

    ! "# >$ %%& %! (#

    )( ,

  • System HackingModule 05Security NewsCEH\m-Security NewsIEEE Hack Confirmed, 100k Plain Text Passwords VulnerableModule ObjectivesInformation at Hand Before System Hacking StageFootprinting ModuleScanning ModuleEnumeration ModuleSystem Hacking: GoalsCEH Hacking Methodology (CHM)CEH System Hacking StepsPassword CrackingCEHPassword CrackingPassword ComplexityA + D + u =Password ComplexityPassword Cracking TechniquesDictionary AttacksBrute Forcing AttacksQP Hybrid AttackSyllable AttackRule-based AttackTypes of Password AttacksPassive Online Attacks|1ngn1,nd Active Online AttacksOffline AttacksPassive Online Attack: Wire Sniffing-77-1 Passive Online Attack: Wire SniffingPassive Online Attacks: Man-in-the- Middle and Replay AttackActive Online Attack: Password GuessingActive Online Attack: Troj an/Spy ware/Key loggerActive Online Attack: Hash Injection Attack11.I kkActive Online Attack: Hash Injection AttackOffline Attack: Rainbow Attacks I CEHOffline Attack: Rainbow Attacks Rainbow Attacks*Z Rainbow TableComputed HashesCompare the HashesPre-Computed HashesTools to Create Rainbow Tables: Winrtgen and rtgenTools to Create Rainbow Tables: Winrtgen and rtgenWinrtgenDistributed Network Attack C EHDistributed Network AttacksDNA Server InterfaceDNA Client InterfaceNetwork ManagementElcomsoft Distributed Password RecoveryElcomsoft Distributed Password RecoveryNon-Electronic AttacksNon-Electronic Attacks|1 Dumpster DivingT H Shoulder SurfingSocial EngineeringKeyboard SniffingDefault PasswordsManual Password Crackingr E u(Guessing)1E!!Manual Password Cracking (Guessing)Manual Password Cracking AlgorithmAutomatic Password Cracking AlgorithmAutomatic Password Cracking AlgorithmPerforming Automated Password Guessing Stealing Passwords Using USB DrivesStealing Passwords Using KeyloggersStealing Passwords Using KeyloggersMicrosoft AuthenticationMicrosoft Authentication SAM DatabaseNTLM AuthenticationNTLM Authentication ProtocolKerberos