|
|
 Re: كيـف يتـم التهكيـر خطـوات عمليـة (Re: عبداللطيف حسن علي)
|
Next, I'll give an example of an old (but still widely used) attack, which involves sniffing passwords right off the network. You can see how a network supervisor had his Cisco routers and switches cracked by a help desk technician within the company.
Example: The help desk technician
Tommy is hired for the position of help desk technician to work with the after hours help desk crew. The after hours help desk staff is made up of roughly 10 technicians who provide coverage for eight remote sites that the company needs to support during off hours. Tommy always brings his laptop with him to work. When questioned about the laptop by his manager, Tommy explains that he is using his break time to prepare for a certification test. This seems harmless and is approved, even though there is a company-wide security policy in place about bringing machines from the outside into the corporate network without corporate security looking the device over.
Tommy is eventually caught by a surveillance camera leaving a small wiring closet with something under his arm. But since nothing is reported missing, there is no way to prove that Tommy has done anything wrong. And when questioned by the help desk manager about why he was in the closet, Tommy says that he mistakenly entered it thinking it was a break room.
The company's security manager, Erika, sees the report filed by the guards responsible for the physical security of the building. She wonders what Tommy was doing in that closet and is not satisfied with the answer he gave to the help desk manager. Upon searching the closet, she finds an unplugged patch cable hanging from one of the patch panels and an empty hub port. When she plugs the cable back in, the link light does not come back on suggesting that this is a dead port. Cable management Velcro straps neatly hold all the other cables together. With Erika's years of experience and keen sense of security exploitation, she knows exactly what happened.
Erika assumes that Tommy has brought his laptop in the wiring closet unseen. He most likely looked for a dead port on the hub and plugged his laptop in with a packet sniffer installed on it, which promiscuously picks up traffic on a network segment. He returns later to pick up the laptop, which is caught on the surveillance camera, to take home for analysis after saving the capture file.
Using the company's security policy, she confronts Tommy and explains that all personal property, such as laptops and palm pilots, are subject to search if on the premises illegally. Since Tommy never should have had his laptop there in the first place, he hands it over to Erika. Upon careful examination, Erika finds the following trace decode as seen in Figure 1.
|
|
 
|
|
|
|
|
| العنوان |
الكاتب |
Date |
 كيـف يتـم التهكيـر خطـوات عمليـة | عبدالوهاب علي الحاج | 10-17-08, 11:23 AM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبدالوهاب علي الحاج | 10-17-08, 11:26 AM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 11:51 AM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | Sobajo | 10-17-08, 12:20 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبدالوهاب علي الحاج | 10-17-08, 03:08 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبدالوهاب علي الحاج | 10-17-08, 12:22 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 02:52 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 02:57 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:00 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:05 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:08 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:11 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:20 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:27 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:34 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:38 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:41 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:44 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:47 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:50 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 03:58 PM |
| Re: كيـف يتـم التهكيـر خطـوات عمليـة | عبداللطيف حسن علي | 10-17-08, 04:02 PM |
|
| |
عبداللطيف حسن علي
فيس بوك
تويتر
انستقرام
يوتيوب
بنتيريست