Ethical hacking refers to the act of locating weaknesses and vulnerabilities of computer and information systems by duplicating the intent and actions of malicious hackers. Ethical hacking is also known as penetration testing, intrusion testing, or red teaming.

1. ETHICAL HACKING FOR
EDUCATORS
PRESENTED BY
SMKHATTAK
SIBGHATULLAH KHATTAK
AUST, PAKISTAN

2. OVERVIEW
• Old School Hackers: History of Hacking
• Ec-Council: Certified Ethical Hacker
• Learning Competencies
• Teaching Resources: Ethical Hacking Textbooks
• Hacking Tools
• Hacker Challenge Websites
• Additional Web Sites
• Questions and Answers

3. OLD SCHOOL HACKERS:
HISTORY OF HACKING

4. PREHISTORY
• 1960s: The Dawn of Hacking
Original meaning of the word
"hack" started at MIT; meant
elegant, witty or inspired way of
doing almost anything; hacks were
programming shortcuts
ELDER DAYS (1970-1979)
• 1970s: Phone Phreaks and Cap'n
Crunch: One phreak, John Draper
(aka "Cap'n Crunch"), discovers a
toy whistle inside Cap'n Crunch
cereal gives 2600-hertz signal, and
can access AT&T's long-distance
switching system.
• Draper builds a "blue box" used
with whistle allows phreaks to
make free calls.
• Steve Wozniak and Steve Jobs,
future founders of Apple
Computer, make and sell blue
boxes.
THE GOLDEN AGE (1980-1991)
• 1980: Hacker Message Boards
and Groups
Hacking groups form; such as
Legion of Doom (US), Chaos
Computer Club (Germany).
• 1983: Kids' Games
Movie "War Games" introduces
public to hacking.

5. THE GREAT HACKER WAR
• Legion of Doom vs Masters of
Deception; online warfare; jamming
phone lines.
• 1984: Hacker 'Zines
Hacker magazine 2600 publication;
online 'zine Phrack.
CRACKDOWN (1986-1994)
• 1986: Congress passes Computer
Fraud and Abuse Act; crime to break
into computer systems.
• 1988: The Morris Worm
Robert T. Morris, Jr., launches self-
replicating worm on ARPAnet.
 1989: The Germans ,1989: The Germans ,
the KGB and Kevinthe KGB and Kevin
Mitnick.Mitnick.
 German HackersGerman Hackers
arrested for breaking intoarrested for breaking into
U.S. computers; soldU.S. computers; sold
information to Soviet KGB.information to Soviet KGB.
 Hacker "The Mentor“Hacker "The Mentor“
arrested; publishesarrested; publishes
Hacker's Manifesto.Hacker's Manifesto.
 Kevin MitnickKevin Mitnick convicted;convicted;
first person convictedfirst person convicted
under law against gainingunder law against gaining
access to interstateaccess to interstate
network for criminalnetwork for criminal
purposes.purposes.

6. • 1993: Why Buy a Car When You
Can Hack One?
Radio station call-in contest;
hacker-fugitive Kevin Poulsen and
friends crack phone; they allegedly
get two Porsches, $20,000 cash,
vacation trips; Poulsen now a
freelance journalist covering
computer crime.
• First Def Con hacking conference
in Las Vegas
ZERO TOLERANCE (1994-1998)
• 1995: The Mitnick Takedown:
Arrested again; charged with
stealing 20,000 credit card
numbers.
 1995: Russian Hackers1995: Russian Hackers
Siphon $10 million fromSiphon $10 million from
Citibank; Vladimir Levin,Citibank; Vladimir Levin,
leader.leader.
 Oct 1998Oct 1998 teenager hacksteenager hacks
into Bell Atlantic phoneinto Bell Atlantic phone
system; disabledsystem; disabled
communication at airportcommunication at airport
disables runway lights.disables runway lights.
 19991999 hackers attackhackers attack
Pentagon, MIT, FBI webPentagon, MIT, FBI web
sites.sites.
 1999:1999: E-commerceE-commerce
company attacked;company attacked;
blackmail threats followedblackmail threats followed
by 8 million credit cardby 8 million credit card
numbers stolen.numbers stolen.
(www.blackhat.info; www.h2k2.net;(www.blackhat.info; www.h2k2.net;
www.slais.ubc.ca/; www.sptimes.com;www.slais.ubc.ca/; www.sptimes.com;
www.tlc.discovery.com)www.tlc.discovery.com)

7. EC-COUNCIL: CERTIFIED
ETHICAL HACKER

8. EC-COUNCIL HAS CERTIFIED IT
PROFESSIONALS FROM THE
FOLLOWING ORGANIZATIONS AS
CEH:
Novell, Canon, Hewlett Packard, US Air Force Reserve, US
Embassy, Verizon, PFIZER, HDFC Bank, University of Memphis,
Microsoft Corporation, Worldcom, Trusecure, US Department of
Defense, Fedex, Dunlop, British Telecom, Cisco, Supreme Court
of the Philippines, United Nations, Ministry of Defense, UK,
Nortel Networks, MCI, Check Point Software, KPMG, Fleet
International, Cingular Wireless, Columbia Daily Tribune,
Johnson & Johnson, Marriott Hotel, Tucson Electric Power
Company, Singapore Police Force

9. PriceWaterhouseCoopers, SAP, Coca-ColaPriceWaterhouseCoopers, SAP, Coca-Cola
Corporation, Quantum Research, US Military, IBMCorporation, Quantum Research, US Military, IBM
Global Services, UPS, American Express, FBI,Global Services, UPS, American Express, FBI,
Citibank Corporation, Boehringer Ingelheim, Wipro,Citibank Corporation, Boehringer Ingelheim, Wipro,
New York City Dept Of IT & Telecom – DoITT, UnitedNew York City Dept Of IT & Telecom – DoITT, United
States Marine Corps, Reserve Bank of India, US AirStates Marine Corps, Reserve Bank of India, US Air
Force, EDS, Bell Canada, SONY, Kodak, OntarioForce, EDS, Bell Canada, SONY, Kodak, Ontario
Provincial Police, Harris Corporation, Xerox, PhilipsProvincial Police, Harris Corporation, Xerox, Philips
Electronics, U.S. Army, Schering, Accenture, BankElectronics, U.S. Army, Schering, Accenture, Bank
One, SAIC, Fujitsu, Deutsche BankOne, SAIC, Fujitsu, Deutsche Bank
(CONT.)

10. HACKERS ARE HERE.
WHERE ARE YOU?
• The explosive growth of the Internet has brought many
good things…As with most technological advances, there is
also a dark side: criminal hackers.
• The term “hacker” has a dual usage in the computer
industry today. Originally, the term was defined as:
• HACKER noun. 1. A person who enjoys learning the details
of computer systems and how to stretch their capabilities….
2. One who programs enthusiastically or who enjoys
programming rather than just theorizing about
programming.

11. WHAT IS A HACKER?
• Old School Hackers: 1960s style Stanford or MIT hackers. Do not
have malicious intent, but do have lack of concern for privacy and
proprietary information. They believe the Internet was designed
to be an open system.
• Script Kiddies or Cyber-Punks: Between 12-30; predominantly
white and male; bored in school; get caught due to bragging
online; intent is to vandalize or disrupt systems.
• Professional Criminals or Crackers: Make a living by breaking
into systems and selling the information.
• Coders and Virus Writers: See themselves as an elite;
programming background and write code but won’t use it
themselves; have their own networks called “zoos”; leave it to
others to release their code into “The Wild” or Internet.
(www.tlc.discovery.com)

12. WHAT IS ETHICAL HACKING?
• Ethical hacking – defined “methodology adopted by
ethical hackers to discover the vulnerabilities existing in
information systems’ operating environments.”
• With the growth of the Internet, computer security has
become a major concern for businesses and
governments.
• In their search for a way to approach the problem,
organizations came to realize that one of the best ways to
evaluate the intruder threat to their interests would be to
have independent computer security professionals
attempt to break into their computer systems.

13. WHO ARE ETHICAL
HACKERS?• “One of the best ways to evaluate the intruder threat is to have
an independent computer security professionals attempt to
break their computer systems”
• Successful ethical hackers possess a variety of skills. First and
foremost, they must be completely trustworthy.
• Ethical hackers typically have very strong programming and
computer networking skills.
• They are also adept at installing and maintaining systems that
use the more popular operating systems (e.g., Linux or Windows
2000) used on target systems.
• These base skills are augmented with detailed knowledge of the
hardware and software provided by the more popular computer
and networking hardware vendors.

14. WHAT DO ETHICAL HACKERS
DO?
• An ethical hacker’s evaluation of a system’s security seeks
answers to these basic questions:
• What can an intruder see on the target systems?
• What can an intruder do with that information?
• Does anyone at the target notice the intruder’s at tempts or
successes?
• What are you trying to protect?
• What are you trying to protect against?
• How much time, effort, and money are you willing to
expend to obtain adequate protection?

15. HOW MUCH DO ETHICAL HACKERS
GET PAID?
• Globally, the hiring of ethical hackers is on the rise
with most of them working with top consulting firms.
• In the United States, an ethical hacker can make
upwards of $120,000 per annum.
• Freelance ethical hackers can expect to make $10,000
per assignment.
• Some ranges from $15,000 to
$45,000 for a standalone ethical
hack.

16. CERTIFIED ETHICAL HACKER
(C|EH) TRAINING
• InfoSec Academy
• http://www.infosecacademy.com
• Five-day Certified Ethical Hacker (C|EH) Training Camp
Certification Training Program
• (C|EH) examination
• C|EH Certified Ethical
Hacker Training Camp
(5-Day Package)$3,595
($2,580 training only)
(Source: www.eccouncil.org)

17. LEARNING COMPETENCIES

18. REQUIRED SKILLS OF AN
ETHICAL HACKER• Routers: knowledge of routers, routing protocols, and access
control lists
• Microsoft: skills in operation, configuration and management.
• Linux: knowledge of Linux/Unix; security setting,
configuration, and services.
• Firewalls: configurations, and operation of intrusion detection
systems.
• Mainframes
• Network Protocols: TCP/IP; how they function and can be
manipulated.
• Project Management: knowledge of leading, planning,
organizing, and controlling a penetration testing team.
(Source: http://www.examcram.com)

19. MODES OF ETHICAL HACKING
• Insider attack
• Outsider attack
• Stolen equipment attack
• Physical entry
• Bypassed authentication attack (wireless access points)
• Social engineering attack
(Source: http://www.examcram.com)

20. ANATOMY OF AN ATTACK:
• Reconnaissance – attacker gathers information; can include
social engineering.
• Scanning – searches for open ports (port scan) probes target for
vulnerabilities.
• Gaining access – attacker exploits vulnerabilities to get inside
system; used for spoofing IP.
• Maintaining access – creates backdoor through use of Trojans;
once attacker gains access makes sure he/she can get back in.
• Covering tracks – deletes files, hides files, and erases log files.
So that attacker cannot be detected or penalized.
(Source: www.eccouncil.org)

21. • Hacker classes
• Black hats – highly skilled,
malicious, destructive “crackers”
• White hats – skills used for
defensive security analysts
• Gray hats – offensively and
defensively; will hack for different
reasons, depends on situation.
• Hactivism – hacking for social and political cause.
• Ethical hackers – determine what attackers can gain
access to, what they will do with the information, and
can they be detected.
(Source: www.eccouncil.org)

22. TEACHING RESOURCES:
ETHICAL HACKING TEXTBOOKS

23. EC-COUNCIL
Certified Ethical Hacker
www.eccouncil.org
ISBN 0-9729362-1-1

24. EC-COUNCIL TOPICS COVERED
• Introduction to Ethical Hacking
• Footprinting
• Scanning
• Enumeration
• System Hacking
• Trojans and Backdoors
• Sniffers
• Denial of Service
• Social Engineering
• Session Hijacking
• Hacking Web Servers

25. EC-COUNCIL (CONT.)
• Web Application Vulnerabilities
• Web Based Password Cracking Techniques
• SQL Injection
• Hacking Wireless Networks
• Viruses
• Novell Hacking
• Linux Hacking
• Evading IDS, Firewalls and Honeypots
• Buffer Overflows
• Cryptography

26. CERTIFIED ETHICAL HACKER
EXAM PREP
http://www.examcram.com
ISBN 0-7897-3531-8

27. CERTIFIED ETHICAL HACKER
EXAM PREP• The Business Aspects of Penetration Testing
• The Technical Foundations of Hacking
• Footprinting and Scanning
• Enumeration and System Hacking
• Linux and automated Security Assessment Tools
• Trojans and Backdoors
• Sniffers, Session Hyjacking, and Denial of Service

28. CERTIFIED ETHICAL HACKER
EXAM PREP (CONT.)
• Web Server Hacking, Web Applications, and Database
Attacks
• Wireless Technologies, Security, and Attacks
• IDS, Firewalls, and Honeypots
• Buffer Overflows, Viruses, and Worms
• Cryptographic Attacks and Defenses
• Physical Security and Social Engineering

29. HANDS-ON INFORMATION
SECURITY LAB MANUAL, SECOND
EDITION
http://www.course.com/
ISBN 0-619-21631-X
1. Footprinting
2. Scanning and Enumeration
3. Operating System Vulnerabilities
and Resolutions
4. Network Security Tools and
Technologies
5. Security Maintenance
6. Information Security
Management
7. File System Security and
Cryptography
8. Computer Forensics

30. HACKING TOOLS: FOOTPRINTING
AND RECONNAISSANCE

31. WHOIS

32. WHOIS (CONT.)
http://www.allwhois.com/

33. WHOIS (CONT.)

34. SAM SPADE

35. SAM SPADE (CONT.)

36. NSLOOKUP

37. NSLOOKUP OPTIONS

38. TRACEROUTE

39. PING

40. PING OPTIONS

41. HACKING TOOLS: SCANNING AND
ENUMERATION

42. NMAP

43. NMAPWIN

44. SUPERSCAN

45. SUPERSCAN (CONT.)

46. IP SCANNER

47. HYENA

48. RETINA

49. LANGUARD

50. HACKING TOOLS: SYSTEM
HACKING

51. TELNET

52. SNADBOY

53. PASSWORD CRACKING WITH
LOPHTCRACK

54. KEYLOGGER

55. HACKING TOOLS: TROJANS AND
BACKDOORS

56. NETBUS

57. GAME CREATES BACKDOOR
FOR NETBUS

58. SUBSEVEN

59. HACKING TOOLS: SNIFFERS

60. SPOOFING A MAC ADDRESS
ORIGINAL CONFIGURATION

61. SPOOFED MAC

62. ETHEREAL

63. IRIS

64. SNORT

65. HACKING TOOLS: WEB BASED
PASSWORD CRACKING

66. CAIN AND ABEL

67. CAIN AND ABEL (CONT.)

68. CAIN AND ABEL (CONT.)

69. LEGION

70. BRUTUS

71. HACKING TOOLS: COVERING
TRACKS

72. IMAGEHIDE

73. CLEARLOGS

74. CLEARLOGS (CONT.)

75. HACKING TOOLS: GOOGLE
HACKING AND SQL INJECTION

76. GOOGLE HACKING

77. GOOGLE CHEAT SHEET

78. SQL INJECTION
• Allows a remote attacker to
execute arbitrary database
commands
• Relies on poorly formed database queries and
insufficient
input validation
• Often facilitated, but does not rely on unhandled
exceptions and ODBC error messages
• Impact: MASSIVE. This is one of the most dangerous
vulnerabilities on the web.

79. COMMON DATABASE QUERY

80. PROBLEM: UNVALIDATED
INPUT

81. PIGGYBACKING QUERIES
WITH
UNION

82. HACKER CHALLENGE
WEBSITES

83. http://www.hackr.org/mainpage.php

85. HACKTHISSITE.ORG
http://www.hackthissite.org

86. ANSWERS REVEALED IN
CODE

87. HACKITS
http://www.hackits.de/challenge/

88. ADDITIONAL WEB SITES

89. LEGION OF ETHICAL HACKING

90. LEGION OF ETHICAL
HACKING (CONT.)

91. HACKER HIGHSCHOOL
http://www.hackerhighschool.org/

92. HACKER HIGHSCHOOL

93. JOHNNY.IHACKSTUFF.COM/

94. HAPPYHACKER.ORG

95. FOUNDSTONE

96. INSECURE.ORG

97. SANS INSTITUTE

98. QUESTIONS & ANSWERS