introduction -...

INTRODUCTION

• Bilişim güvenliğinin önemi• Güvenlik ihtiyacı

White Hat Hacker

Black Hat Hacker

Gray Hat Hacker

Hacker sınıfları LamerCracker

Hacking Bilgisi Footprinting Scanning

HackingAnatomisi

Gaining Access Hacking Enumeration

Privileges Escalation Hiding Files Cover

Tracking

Black Box

White Box

Gray Box

Güvenlik Testleri

InternetFootprinting

WhoisFootprinting

DNSFootprinting

MethodologyEmail

FootprintingWeb Site

FootprintingNetwork

Footprinting

Google Hacking

Lokasyon&

Personel

Discovery

Foorprinting Araçları

1. Ping – hping3 – tracetoute (tracert)2. Nmap3. Maltego4. Nslookup5. Loriot Pro6. Google Hacking Database (GHDB)7. E-Mail Header8. http://www.whois.sc9. http://www.dnsstuff.com

Discovery

Whois Registrant:Eyüp Çelikyavuzselim 168.sk no:4Erzincan,Türkiye

+ 90-446-2245118-

** Administrative Contact:NIC Handle : pmo6-metuOrganization Name : Pan MedyaOrganizasyon Ltd.Þti.Address : Hidden upon user requestPhone : Hidden upon user requestFax : Hidden upon user request

** Domain Servers:uma.ns.cloudflare.comphil.ns.cloudflare.com

** Additional Info:Created on..............: 2011-Jan-20.Expires on..............: 2013-Jan-19.

Discovery

Nslookup

Discovery

Tracert - Traceroute

Discovery

Nmap

Discovery

Maltego-1

Discovery

Maltego-2

Discovery

W3AF

Discovery

E-Mail Header

Port Scanning

Network Scanning

Vulnerability Scanning

Araçlar

Araçlar

•Nmap•Nessus•NetScan•Net Tools Suite Pack•Advanced Port Scanner•Super Scan•Retina•Core Impact•MBSA•Armitage•MetaSploit

PortScanning

Port Scanning

PortScanning

Port Scanning

•TCP Connect (Full Open) Scan•Stealth (Half Open) Scan•XMAS Scan•FIN Scan•NULL Scan•IDLE Scan

Araçlar

Nmap

PortScanning

Network Scanning

Araçlar

Nmap

PortScanning

Vulnerability Scanning

Araçlar

Nessus

PortScanning

Enumeration

Enumerable Edilebilen Servisler

•Netbios Enumeration•SNMP Enumeration•SMTP Enumeration•DNS Enumeration•LDAP Enumeration•NTP Enumeration

Araçlar

•SuperScan•NetBios Enumerator•SolarWinds IP Network Browser•Loriot Pro•JXplorer•NTP Server Scanner•NetScan Tools Pro•Telnet