Hacking

By: Nitesh Dhanjani, Billy Rios (Contribution by), Brett Hardin (Contribution by)

Write A Review

Paperback | 29 September 2009

At a Glance

Paperback
298 Pages

Dimensions(cm)
23.37 x 17.78 x 2.03

Paperback

RRP $76.00

$35.75

53%OFF

or 4 interest-free payments of $8.94 with

Aims to ship in 15 to 25 business days

With the advent of rich Internet applications, the explosion of social media, and the increased use of powerful cloud computing infrastructures, a new generation of attackers has added cunning new techniques to its arsenal. For anyone involved in defending an application or a network of systems, Hacking: The Next Generation is one of the few books to identify a variety of emerging attack vectors. You'll not only find valuable information on new hacks that attempt to exploit technical flaws, you'll also learn how attackers take advantage of individuals via social networking sites, and abuse vulnerabilities in wireless technologies and cloud infrastructures. Written by seasoned Internet security professionals, this book helps you understand the motives and psychology of hackers behind these attacks, enabling you to better prepare and defend against them. Learn how "inside out" techniques can poke holes into protected networks Understand the new wave of "blended threats" that take advantage of multiple application vulnerabilities to steal corporate data Recognize weaknesses in today's powerful cloud infrastructures and how they can be exploited Prevent attacks against the mobile workforce and their devices containing valuable data Be aware of attacks via social networking sites to obtain confidential information from executives and their assistants Get case studies that show how several layers of vulnerabilities can be used to compromise multinational corporations

Shipping

	Standard Shipping	Express Shipping
Metro postcodes:	$9.99	$14.95
Regional postcodes:	$9.99	$14.95
Rural postcodes:	$9.99	$14.95

How to return your order

At Booktopia, we offer hassle-free returns in accordance with our returns policy. If you wish to return an item, please get in touch with Booktopia Customer Care.

Additional postage charges may be applicable.

Defective items

If there is a problem with any of the items received for your order then the Booktopia Customer Care team is ready to assist you.

For more info please visit our Help Centre.

You Can Find This Book In

Non-Fiction Computing & I.T.Computer Networking & Communications Network Security Computer Security Computer Fraud & Hacking O'Reilly Data Encryption Computer Viruses

Preface	p. ix
Intelligence Gathering: Peering Through the Windows to Your Organization	p. 1
Physical Security Engineering	p. 1
Dumpster Diving	p. 2
Hanging Out at the Corporate Campus	p. 3
Google Earth	p. 5
Social Engineering Call Centers	p. 6
Search Engine Hacking	p. 7
Google Hacking	p. 8
Automating Google Hacking	p. 9
Extracting Metadata from Online Documents	p. 9
Searching for Source Code	p. 12
Leveraging Social Networks	p. 13
Facebook and MySpace	p. 13
Twitter	p. 16
Tracking Employees	p. 17
Email Harvesting with theHarvester	p. 18
Resumés	p. 19
Job Postings	p. 21
Google Calendar	p. 23
What Information Is Important?	p. 24
Summary	p. 25
Inside-Out Attacks: The Attacker Is the Insider	p. 27
Man on the Inside	p. 28
Cross-Site Scripting (XSS)	p. 28
Stealing Sessions	p. 29
Injecting Content	p. 30
Stealing Usernames and Passwords	p. 32
Advanced and Automated Attacks	p. 36
Cross-Site Request Forgery (CSRF)	p. 39
Inside-Out Attacks	p. 39
Content Ownership	p. 50
Abusing Flash's crossdomain.xml	p. 51
Abusing Java	p. 52
Advanced Content Ownership Using GIFARs	p. 55
Stealing Documents from Online Document Stores	p. 57
Stealing Files from the Filesystem	p. 64
Safari File Stealing	p. 65
Summary	p. 70
The Way It Works: There Is No Patch	p. 71
Exploiting Telnet and FTP	p. 72
Sniffing Credentials	p. 72
Brute-Forcing Your Way In	p. 74
Hijacking Sessions	p. 75
Abusing SMTP	p. 76
Snooping Emails	p. 78
Spoofing Emails to Perform Social Engineering	p. 79
Abusing ARP	p. 80
Poisoning the Network	p. 81
Cain & Abel	p. 82
Sniffing SSH on a Switched Network	p. 83
Leveraging DNS for Remote Reconnaissance	p. 85
DNS Cache Snooping	p. 86
Summary	p. 90
Blended Threats: When Applications Exploit Each Other	p. 91
Application Protocol Handlers	p. 93
Finding Protocol Handlers on Windows	p. 96
Finding Protocol Handlers on Mac OS X	p. 99
Finding Protocol Handlers on Linux	p. 101
Blended Attacks	p. 102
The Classic Blended Attack: Safari's Carpet Bomb	p. 103
The FireFoxUrl Application Protocol Handler	p. 108
Mailto:// and the Vulnerability in the ShellExecute Windows API	p. 111
The iPhoto Format String Exploit	p. 114
Blended Worms: Conficker/Downadup	p. 115
Finding Blended Threats	p. 118
Summary	p. 119
Cloud Insecurity: Sharing the Cloud with Your Enemy	p. 121
What Changes in the Cloud	p. 121
Amazon's Elastic Compute Cloud	p. 122
Google's App Engine	p. 122
Other Cloud Offerings	p. 123
Attacks Against the Cloud	p. 123
Poisoned Virtual Machines	p. 124
Attacks Against Management Consoles	p. 126
Secure by Default	p. 140
Abusing Cloud Billing Models and Cloud Phishing	p. 141
Googling for Gold in the Cloud	p. 144
Summary	p. 146
Abusing Mobile Devices: Targeting Your Mobile Workforce	p. 149
Targeting Your Mobile Workforce	p. 150
Your Employees Are on My Network	p. 150
Getting on the Network	p. 152
Direct Attacks Against Your Employees and Associates	p. 162
Putting It Together: Attacks Against a Hotspot User	p. 166
Tapping into Voicemail	p. 171
Exploiting Physical Access to Mobile Devices	p. 174
Summary	p. 175
Infiltrating the Phishing Underground: Learning from Online Criminals?	p. 177
The Fresh Phish Is in the Tank	p. 178
Examining the Phishers	p. 179
No Time to Patch	p. 179
Thank You for Signing My Guestbook	p. 182
Say Hello to Pedro!	p. 184
Isn't It Ironic?	p. 189
The Loot	p. 190
Uncovering the Phishing Kits	p. 191
Phisher-on-Phisher Crime	p. 193
Infiltrating the Underground	p. 195
Google ReZulT	p. 196
Fullz for Sale!	p. 197
Meet Cha0	p. 198
Summary	p. 200
Influencing Your Victims: Do What We Tell You, Please	p. 201
The Calendar Is a Gold Mine	p. 201
Information in Calendars	p. 202
Who Just Joined?	p. 203
Calendar Personalities	p. 204
Social Identities	p. 206
Abusing Social Profiles	p. 207
Stealing Social Identities	p. 210
Breaking Authentication	p. 212
Hacking the Psyche	p. 217
Summary	p. 220
Hacking Executives: Can Your CEO Spot a Targeted Attack?	p. 223
Fully Targeted Attacks Versus Opportunistic Attacks	p. 223
Motives	p. 224
Financial Gain	p. 224
Vengeance	p. 225
Benefit and Risk	p. 226
Information Gathering	p. 226
Identifying Executives	p. 226
The Trusted Circle	p. 227
Twitter	p. 230
Other Social Applications	p. 232
Attack Scenarios	p. 232
Email Attack	p. 233
Targeting the Assistant	p. 238
Memory Sticks	p. 239
Summary	p. 240
Case Studies: Different Perspectives	p. 241
The Disgruntled Employee	p. 241
The Performance Review	p. 241
Spoofing into Conference Calls	p. 243
The Win	p. 245
The Silver Bullet	p. 245
The Free Lunch	p. 246
The SSH Server	p. 247
Turning the Network Inside Out	p. 249
A Fool with a Tool Is Still a Fool	p. 252
Summary	p. 253
Chapter 2 Source Code Samples	p. 255
Cache_Snoop.pl	p. 265
Index	p. 269
Table of Contents provided by Ingram. All Rights Reserved.

Hacking

At a Glance

Paperback

Shipping

How to return your order

Defective items

You Can Find This Book In

More in Computer Security

Cybercrime

An Encyclopedia of Digital Crime

Digital Currencies in The New Global World Order

Privacy in Statistical Databases

International Conference, PSD 2024, Antibes Juan-les-Pins, France, September 25-27, 2024, Proceedings

Blockchain

Blueprint for a New Economy

Crypto Wars

Faked Deaths, Missing Billions and Industry Disruption

Elementary Information Security

3rd edition

Cyber Wars

Hacks that Shocked the Business World

Cybersecurity for Business

Organization-Wide Strategies to Ensure Cyber Risk Is Not Just an IT Issue

CompTIA Security+ All-in-One Exam Guide (Exam SY0-601))

6th Edition

CompTIA Security+

8th Edition - Guide to Network Security Fundamentals

Machine Learning and Security

Protecting Systems with Data and Algorithms

Network Security Assessment

Know Your Network : 3rd Edition

Hacker Culture A to Z

A Fun Guide to The Fundamentals of Cybersecurity and Hacking

Web Application Security

2nd Eidtion - Exploitation and Countermeasures for Modern Web Applications

Keanu Reeves is Not in Love With You

The Murky World of Online Romance Fraud

Cyber Risk Management

Prioritize Threats, Identify Vulnerabilities and Apply Controls

Fintech Wars

Tech Titans, Complex Crypto and the Future of Money

The Language of Cyber Attacks

A Rhetoric of Deception

The Language of Cyber Attacks

A Rhetoric of Deception

Encyclopedia of Cyber Warfare

Cybersecurity For Dummies

2nd edition

How to Measure Anything in Cybersecurity Risk

Cloud Security For Dummies

For Dummies (Computer/Tech)

Crafting an Information Security Playbook

This product is categorised by