In this part we will go a step further in to ethical hacking and discuss how to do Penetration testing.
Warning: Proceed only after permission from network owner else it will be treated as hacking. You can try it on your personal systems.
Step 1: Port Scanning
Penetration testing starts with port scanning which allows tester to probe and attempt to discover open ports, services running and OS versions. To do this you can use nmap tools.
Using nmap you can scan both TCP and UDP ports.
Step2: Attack to webserver like apache server.
You can launch some actual attack using Metasploit. Example Apache Range DoS attack which is known as Apache Killer.
Step3: Protocol anomaly
Play with SSH to establish SSH connections to unconventional ports. Security tools should be able to detect SSH protocol anomalies.
So far we have covered 2 tools nmap and Metasploit.
What is nmap?
Nmap (“Network Mapper”) is a free and open source (license) utility for network discovery and security auditing. Sometime it is also used for network inventory, managing service upgrade schedules and managing host or service uptime.
Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It is designed to rapidly scan large networks, but works fine against single hosts.
Nmap runs on all major computer operating systems, and official binary packages are available for Linux, Windows, and Mac OS X. In addition to the classic command-line Nmap executable, the Nmap suite includes an advanced GUI and results viewer (Zenmap), a flexible data transfer, redirection, and debugging tool (Ncat), a utility for comparing scan results (Ndiff), and a packet generation and response analysis tool (Nping).
For more details you can visit http://nmap.org
What is Metasploit?
This tool helps test your network to uncover exploitable security gaps and help validate vulnerabilities. It allows you to simulate phishing attacks.
Next we will cover how to use nmap.
Katika sehemu hii tutaenda hatua zaidi katika hacking ya kimaadili na kujadili jinsi ya kufanya upimaji wa Kuingia. Onyo: Endelea tu baada ya ruhusa kutoka kwa mmiliki wa mtandao vinginevyo itatibiwa kama hacking. Unaweza kujaribu kwenye mifumo yako binafsi. Hatua ya kwanza: Port Scanning: Uchunguzi wa kupenya huanza na scanning ya bandari ambayo inaruhusu mtihani kuchunguza na kujaribu kugundua bandari zilizo wazi, huduma zinazoendesha na matoleo ya OS. Ili kufanya hivyo unaweza kutumia zana za nmap. Kutumia nmap unaweza skanning wote TCP na UDP bandari. Hatua ya pili: Kushambulia seva ya wavuti kama seva ya Apache. Unaweza kuzindua baadhi ya mashambulizi halisi kwa kutumia Metasploit. Mfano Apache Range DoS shambulio ambayo inajulikana kama Apache Killer. Hatua ya 3: Utaratibu wa Anomaly: Kucheza na SSH kuanzisha uhusiano wa SSH kwa bandari zisizo za kawaida. Vifaa vya usalama vinapaswa kuwa na uwezo wa kugundua makosa ya itifaki ya SSH. Kwa sasa, tuna vifaa viwili vya kuvutia, Nmap na Metasploit. Nini ni nmap? Nmap (<unk>Network Mapper<unk>) ni bure na wazi chanzo (leseni) huduma kwa ajili ya kugundua mtandao na ukaguzi wa usalama. Wakati mwingine pia hutumiwa kwa hesabu ya mtandao, kusimamia ratiba za kuboresha huduma na kusimamia mwenyeji au huduma ya uptime. Nmap hutumia pakiti za IP mbichi kwa njia mpya ili kuamua ni majeshi gani yanapatikana kwenye mtandao, ni huduma gani (jina la programu na toleo) majeshi hayo yanatoa, ni mifumo gani ya uendeshaji (na matoleo ya OS) wanayoendesha, ni aina gani ya vichungi vya pakiti au firewalls zinazotumika, na sifa zingine nyingi. Ni iliyoundwa kwa haraka skanning mitandao mikubwa, lakini kazi faini dhidi ya majeshi moja. Nmap anaendesha juu ya mifumo yote kuu ya uendeshaji wa kompyuta, na pakiti rasmi binary zinapatikana kwa Linux, Windows, na Mac OS X. Nmap Suite inajumuisha GUI ya juu na mtazamaji wa matokeo (Zenmap), uhamisho wa data, kuelekeza, na chombo cha debugging (Ncat), zana ya kulinganisha matokeo ya skanning (Ndiff), na chombo cha kuzalisha pakiti na uchambuzi wa majibu (Nping). Kwa maelezo zaidi unaweza kutembelea http: www.nmap.org Ni nini Metasploit? Chombo hiki husaidia mtihani mtandao wako kufunua mapungufu ya usalama exploitable na kusaidia kuthibitisha udhaifu. Inakuwezesha kuiga mashambulizi ya udanganyifu. Ifuatayo tutazungumzia jinsi ya kutumia nmap.