CEH v10 Module 11 - Session Hijacking

Download as pdf or txt
Download as pdf or txt
You are on page 1of 16

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.

com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&KDSWHU6HVVLRQ+LMDFNLQJ
7HFKQRORJ\%ULHI
7KH FRQFHSW RI VHVVLRQ KLMDFNLQJ LV DQ LQWHUHVWLQJ WRSLF DPRQJ RWKHU
VFHQDULRV ,W LV EDVLFDOO\ KLMDFNLQJ RI VHVVLRQV E\ LQWHUFHSWLQJ WKH
FRPPXQLFDWLRQ EHWZHHQ KRVWV 7KH DWWDFNHU XVXDOO\ LQWHUFHSWV WKH
FRPPXQLFDWLRQWRREWDLQWKHUROHVRIDXWKHQWLFDWHGXVHURUIRUWKHLQWHQWLRQRI
0DQLQWKH0LGGOHDWWDFN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

6HVVLRQ+LMDFNLQJ
,QRUGHUWRXQGHUVWDQGWKHVHVVLRQKLMDFNLQJFRQFHSWDVVXPHDQDXWKHQWLFDWHG
7&3VHVVLRQEHWZHHQWZRKRVWV7KHDWWDFNHULQWHUFHSWVWKHVHVVLRQDQGWDNHV
RYHU WKH OHJLWLPDWH DXWKHQWLFDWHG VHVVLRQ :KHQ D VHVVLRQ DXWKHQWLFDWLRQ
SURFHVVLVFRPSOHWHDQGWKHXVHULVDXWKRUL]HGWRXVHUHVRXUFHVVXFKDVZHE
VHUYLFHV 7&3 FRPPXQLFDWLRQ RU RWKHU WKH DWWDFNHU WDNHV DGYDQWDJH RI WKLV
DXWKHQWLFDWHG VHVVLRQ DQG SODFHV KLPVHOI LQ EHWZHHQ WKH DXWKHQWLFDWHG XVHU
DQGWKHKRVW$XWKHQWLFDWLRQSURFHVVLQLWLDWHVDWWKHVWDUWRI7&3VHVVLRQRQO\
RQFH WKH DWWDFNHU VXFFHVVIXOO\ KLMDFNV WKH DXWKHQWLFDWHG 7&3 VHVVLRQ WUDIILF
FDQEHPRQLWRUHGRUDWWDFNHUFDQJHWWKHUROHRIWKHOHJLWLPDWHDXWKHQWLFDWHG
XVHU 6HVVLRQ KLMDFNLQJ EHFRPHV VXFFHVVIXO EHFDXVH RI ZHDN VHVVLRQ ,'V RU
QREORFNLQJXSRQUHFHLYLQJDQLQYDOLGVHVVLRQ,'

)LJXUH6HVVLRQ+LMDFNLQJ
6HVVLRQ+LMDFNLQJ7HFKQLTXHV
6HVVLRQ+LMDFNLQJSURFHVVLVFDWHJRUL]HGLQWRWKHIROORZLQJWKUHHWHFKQLTXHV
6WHDOLQJ
6WHDOLQJFDWHJRU\LQFOXGHVWKHGLIIHUHQWWHFKQLTXHRIVWHDOLQJVHVVLRQ,'VXFK
DV5HIHUUHUDWWDFNQHWZRUNVQLIILQJ7URMDQVRUE\DQ\RWKHUPHDQ
*XHVVLQJ
*XHVVLQJFDWHJRU\LQFOXGHWULFNVDQGWHFKQLTXHVXVHGWRJXHVVWKHVHVVLRQ,'
VXFK DV E\ REVHUYLQJ WKH YDULDEOH FRPSRQHQWV RI VHVVLRQ ,'V RU FDOFXODWLQJ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

WKHYDOLGVHVVLRQ,'E\ILJXULQJRXWWKHVHTXHQFHHWF
%UXWH)RUFLQJ
%UXWH)RUFLQJ LV WKH SURFHVV RI JXHVVLQJ HYHU\ SRVVLEOH FRPELQDWLRQ RI
FUHGHQWLDO 8VXDOO\ %UXWH)RUFLQJ LV SHUIRUPHG ZKHQ DQ DWWDFNHU JDLQV
LQIRUPDWLRQDERXWWKHUDQJHRI6HVVLRQ,'

)LJXUH%UXWH)RUFLQJ
6HVVLRQ+LMDFNLQJ3URFHVV
7KHSURFHVVRIVHVVLRQKLMDFNLQJLQYROYHV
6QLIILQJ
$WWDFNHU DWWHPSW WR SODFH KLPVHOI LQ EHWZHHQ YLFWLP DQG WDUJHW LQ RUGHU WR
VQLIIWKHSDFNHW
0RQLWRULQJ
0RQLWRUWKHWUDIILFIORZEHWZHHQYLFWLPDQGWDUJHW
6HVVLRQ'HV\QFKURQL]DWLRQ
7KHSURFHVVRIEUHDNLQJWKHFRQQHFWLRQEHWZHHQWKHYLFWLPDQGWKHWDUJHW
6HVVLRQ,'
$WWDFNHUWDNHVFRQWURORYHUWKHVHVVLRQE\SUHGLFWLQJWKHVHVVLRQ,'
&RPPDQG,QMHFWLRQ
$IWHUVXFFHVVIXOO\WDNLQJFRQWURORYHUWKHVHVVLRQWKHDWWDFNHUVWDUWVLQMHFWLQJ
WKHFRPPDQGV
7\SHVRI6HVVLRQ+LMDFNLQJ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

$FWLYH$WWDFN
7KHDFWLYHDWWDFNLQFOXGHVLQWHUFHSWLRQLQWKHDFWLYHVHVVLRQIURPWKHDWWDFNHU
$Q DWWDFNHU PD\ VHQG SDFNHWV WR WKH KRVW LQ WKH DFWLYH DWWDFN ,Q DQ DFWLYH
DWWDFNWKHDWWDFNHULVPDQLSXODWLQJWKHOHJLWLPDWHXVHUVRIWKHFRQQHFWLRQ$V
WKH UHVXOW RI DQ DFWLYH DWWDFN WKH OHJLWLPDWH XVHU LV GLVFRQQHFWHG IURP WKH
DWWDFNHU

)LJXUH$FWLYH$WWDFN
3DVVLYH$WWDFN
7KH SDVVLYH DWWDFN LQFOXGHV KLMDFNLQJ D VHVVLRQ DQG PRQLWRULQJ WKH
FRPPXQLFDWLRQEHWZHHQKRVWVZLWKRXWVHQGLQJDQ\SDFNHW

)LJXUH3DVVLYH$WWDFN

6HVVLRQ+LMDFNLQJLQ26,0RGHO
1HWZRUN/HYHO+LMDFNLQJ
1HWZRUNOHYHOKLMDFNLQJLQFOXGHVKLMDFNLQJRIDQHWZRUNOD\HUVHVVLRQVXFKDV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

7&3RU8'3VHVVLRQ
$SSOLFDWLRQ/HYHO+LMDFNLQJ
$SSOLFDWLRQ OHYHO KLMDFNLQJ LQFOXGHV KLMDFNLQJ RI $SSOLFDWLRQ OD\HU VXFK DV
KLMDFNLQJ+7736VHVVLRQ
1HWZRUN/HYHO +LMDFNLQJ DQG $SSOLFDWLRQ/HYHO +LMDFNLQJ DUH GLVFXVVHG LQ
GHWDLOODWHULQWKLVFKDSWHU
6SRRILQJYV+LMDFNLQJ
7KH PDMRU GLIIHUHQFH EHWZHHQ 6SRRILQJ DQG +LMDFNLQJ LV RI WKH DFWLYH
VHVVLRQ,QDVSRRILQJDWWDFNWKHDWWDFNHULVSUHWHQGLQJWREHDQRWKHUXVHUE\
LPSHUVRQDWLQJWRJDLQDFFHVV7KHDWWDFNHUGRHVQRWKDYHDQ\DFWLYHVHVVLRQ
LWLQLWLDWHVDQHZVHVVLRQZLWKWKHWDUJHWZLWKWKHKHOSRIVWROHQLQIRUPDWLRQ
+LMDFNLQJ LV EDVLFDOO\ WKH SURFHVV RI WDNLQJ FRQWURO RYHU DQ H[LVWLQJ DFWLYH
VHVVLRQEHWZHHQDQDXWKHQWLFDWHGXVHUDQGDWDUJHWKRVW7KHDWWDFNHUXVHVWKH
DXWKHQWLFDWHG VHVVLRQ RI D OHJLWLPDWH XVHU ZLWKRXW LQLWLDWLQJ D QHZ VHVVLRQ
ZLWKWKHWDUJHW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

$SSOLFDWLRQ/HYHO6HVVLRQ+LMDFNLQJ
$SSOLFDWLRQ/HYHO+LMDFNLQJ&RQFHSW
6HVVLRQ KLMDFNLQJ DV GHILQHG IRFXVHV RQ WKH DSSOLFDWLRQ OD\HU RI WKH 26,
PRGHO,QWKHDSSOLFDWLRQOD\HUKLMDFNLQJSURFHVVWKHDWWDFNHULVORRNLQJIRUD
OHJLWLPDWH VHVVLRQ ,' IURP WKH YLFWLP LQ RUGHU WR JDLQ DFFHVV WR DQ
DXWKHQWLFDWHG VHVVLRQ ZKLFK DOORZV WKH DWWDFNHU WR DYDLO ZHE UHVRXUFHV )RU
H[DPSOHDWWDFNHUZLWKDQDSSOLFDWLRQOD\HUKLMDFNLQJFDQDFFHVVWKHZHEVLWH
UHVRXUFHVVHFXUHGIRUDXWKHQWLFDWHGXVHUVRQO\7KHZHEVHUYHUPD\DVVXPH
WKDWWKHLQFRPLQJUHTXHVWIRUPVWKHNQRZQKRVWZKHUHDVDQDWWDFNHUKDVEHHQ
KLMDFNHGWKHVHVVLRQE\SUHGLFWLQJWKHVHVVLRQ,'
&RPSURPLVLQJ6HVVLRQ,'VXVLQJ6QLIILQJ
6HVVLRQVQLIILQJLVDQRWKHUIODYRURIVQLIILQJLQZKLFKDQDWWDFNHULVORRNLQJ
IRU WKH VHVVLRQ ,'  6HVVLRQ 7RNHQ 2QFH WKH DWWDFNHU KDV WKH IRXQG WKH
VHVVLRQ,'LWFDQJDLQDFFHVVWRWKHUHVRXUFHV
&RPSURPLVLQJ6HVVLRQ,'VE\3UHGLFWLQJ6HVVLRQ7RNHQ
3UHGLFWLQJWKHVHVVLRQ,'LVWKHSURFHVVRIREVHUYLQJWKHFXUUHQWO\RFFXSLHG
VHVVLRQ,'VE\WKHFOLHQW%\REVHUYLQJWKHFRPPRQDQGYDULDEOHSDUWRIWKH
VHVVLRQNH\DQDWWDFNHUFDQJXHVVWKHQH[WVHVVLRQNH\
+RZWR3UHGLFWD6HVVLRQ7RNHQ"
:HE VHUYHUV QRUPDOO\ XVH UDQGRP VHVVLRQ ,' JHQHUDWLRQ WR SUHYHQW
SUHGLFWLRQ KRZHYHU VRPH ZHE VHUYHUV XVH FXVWRPHU GHILQHG DOJRULWKPV WR
DVVLJQVHVVLRQ,')RUH[DPSOHDVVKRZQEHORZ
KWWSZZZH[DPSOHFRP$%&'
KWWSZZZH[DPSOHFRP$%&'
KWWSZZZH[DPSOHFRP$%&'
KWWSZZZH[DPSOHFRP$%&'

$IWHU REVHUYLQJ WKH DERYH VHVVLRQ ,'V \RX FDQ HDVLO\ LGHQWLI\ WKH FRQVWDQW
SDUW DQG RWKHU YDULDEOH SDUWV ,Q WKH DERYH H[DPSOH $%&' LV WKH FRQVWDQW
SDUW LV D GDWH DQG WKH ODVW VHFWLRQ LV WKH WLPH $Q DWWDFNHU PD\
DWWHPSWZLWKWKHIROORZLQJVHVVLRQ,'DW
KWWSZZZH[DPSOHFRP$%&'


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&RPSURPLVLQJ6HVVLRQ,'V8VLQJ0DQLQWKH0LGGOH$WWDFN
7KHSURFHVVRIFRPSURPLVLQJWKHVHVVLRQ,'XVLQJ0DQLQWKH0LGGOHDWWDFN
UHTXLUHVVSOLWWLQJRIWKHFRQQHFWLRQEHWZHHQ9LFWLPDQG:HEVHUYHULQWRWZR
FRQQHFWLRQV RQH RI WKHP EHWZHHQ 9LFWLPWR$WWDFNHU DQG DQRWKHU EHWZHHQ
$WWDFNHUWR6HUYHU

)LJXUH0,703URFHVV
&RPSURPLVLQJ6HVVLRQ,'V8VLQJ0DQLQWKH%URZVHU$WWDFN
&RPSURPLVLQJ 6HVVLRQ ,' XVLQJ 0DQLQWKH%URZVHU DWWDFN UHTXLUHV D
7URMDQDOUHDG\GHSOR\HGRQWKHWDUJHWPDFKLQH7KHWURMDQFDQHLWKHUFKDQJH
WKHSUR[\VHWWLQJVUHGLUHFWLQJDOOWUDIILFWKURXJKWKHDWWDFNHUZKHUHDVDQRWKHU
WHFKQLTXHXVLQJ7URMDQLVWKDWLQWHUFHSWWKHSURFHVVEHWZHHQWKHEURZVHUDQG
LWVVHFXULW\PHFKDQLVP
6WHSVWR3HUIRUP0DQLQWKH%URZVHU$WWDFN
7RODXQFK0DQLQWKH%URZVHUDWWDFNWKHDWWDFNHUILUVWLQIHFWHGWKHYLFWLP
V
PDFKLQH XVLQJ D 7URMDQ 7URMDQ LQVWDOOV PDOLFLRXV FRGH LQ WKH IRUP RI DQ
H[WHQVLRQ RQ WKH YLFWLP
V PDFKLQH DQG ZKLFK PRGLILHV WKH EURZVHU
V
FRQILJXUDWLRQXSRQERRW:KHQDXVHUORJJHGLQWRWKHVLWH85/LVFKHFNHG
DJDLQVW D NQRZQ OLVW RI WKH WDUJHWHG ZHEVLWH WKH (YHQW KDQGOHU ZLOO UHJLVWHU
WKHHYHQWZKHQLWLVGHWHFWHG8VLQJ'20LQWHUIDFHDWWDFNHUFDQH[WUDFWDQG
PRGLI\WKHYDOXHVZKHQWKHXVHUFOLFNVWKHEXWWRQ7KHEURZVHUZLOOVHQGWKH
IRUPZLWKPRGLILHGHQWULHVWRWKHZHEVHUYHU$VWKHEURZVHUVKRZVRULJLQDO
WUDQVDFWLRQGHWDLOVWKHXVHUFRXOGQRWLGHQWLI\DQ\LQWHUFHSWLRQ
&RPSURPLVLQJ6HVVLRQ,'V8VLQJ&OLHQWVLGH$WWDFNV
6HVVLRQ,'VFDQEHFRPSURPLVHGHDVLO\E\XVLQJ&OLHQWVLGHDWWDFNVVXFKDV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


 &URVV6LWH6FULSWLQJ ;66
 0DOLFLRXV-DYD6FULSW&RGH
 7URMDQV
&URVVVLWH6FULSW$WWDFN
&URVVVLWH6FULSWLQJDWWDFNLVSHUIRUPHGE\DQDWWDFNHUE\VHQGLQJDFUDIWHG
OLQN ZLWK D PDOLFLRXV VFULSW :KHQ WKH XVHU FOLFNV WKLV PDOLFLRXV OLQN WKH
VFULSWZLOOEHH[HFXWHG7KLVVFULSWPD\EHFRGHGWRH[WUDFWWKH6HVVLRQ,'V
DQGVHQGLWWRWKHDWWDFNHU
&URVVVLWH5HTXHVW)RUJHU\$WWDFN
&URVV6LWH 5HTXHVW )RUJHU\ &65)  DWWDFN LV WKH SURFHVV RI REWDLQLQJ WKH
VHVVLRQ ,' RI D OHJLWLPDWH XVHU DQG H[SORLWLQJ WKH DFWLYH VHVVLRQ ZLWK WKH
WUXVWHGZHEVLWHLQRUGHUWRSHUIRUPPDOLFLRXVDFWLYLWLHV
6HVVLRQ5HSOD\$WWDFN
$QRWKHU WHFKQLTXH IRU VHVVLRQ KLMDFNLQJ LV 6HVVLRQ 5HSOD\ $WWDFN $WWDFNHU
FDSWXUHV WKH DXWKHQWLFDWLRQ WRNHQ IURP XVHU LQWHQGHG IRU WKH VHUYHU DQG
UHSOD\VWKHUHTXHVWWRWKHVHUYHUUHVXOWLQJLQXQDXWKRUL]HGDFFHVVWRWKHVHUYHU
6HVVLRQ)L[DWLRQ
6HVVLRQ)L[DWLRQLVDQDWWDFNSHUPLWWLQJWKHDWWDFNHUWRKLMDFNWKHVHVVLRQ7KH
DWWDFNHUKDVWRSURYLGHYDOLGVHVVLRQ,'DQGPDNHWKHYLFWLP
VEURZVHUWRXVH
LW,WFDQEHGRQH\WKHIROORZLQJWHFKQLTXH
 6HVVLRQ7RNHQLQ85/DUJXPHQW
 6HVVLRQ7RNHQLQKLGGHQIRUP
 6HVVLRQ,'LQDFRRNLH
7R XQGHUVWDQG WKH 6HVVLRQ )L[DWLRQ DWWDFN DVVXPH DQ DWWDFNHU YLFWLP DQG
WKH ZHE VHUYHU 7KH DWWWDFNHU LQLWLDWHV D OHJLWLPDWH FRQQHFWLRQ ZLWK WKH ZHE
VHUYHULVVXHVDVHVVLRQ,'RUXVHVDQHZVHVVLRQ,'7KHDWWDFNHUWKHQVHQGV
WKH OLQN WR WKH YLFWLP ZLWK WKH HVWDEOLVKHG VHVVLRQ ,' IRU E\SDVVLQJ WKH
DXWKHQWLFDWLRQ :KHQ WKH XVHU FOLFNV WKH OLQN DQG DWWHPSWV WR ORJ LQWR WKH
ZHEVLWH ZHE VHUYHU FRQWLQXHV WKH VHVVLRQ DV LW LV DOUHDG\ HVWDEOLVKHG DQG
DXWKHQWLFDWLRQ LV SHUIRUPHG 1RZ WKH DWWDFNHU DOUHDG\ KDV WKH VHVVLRQ ,'
LQIRUPDWLRQZLOOFRQWLQXHXVLQJDOHJLWLPDWHXVHUDFFRXQW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

1HWZRUNOHYHO6HVVLRQ+LMDFNLQJ
1HWZRUN/HYHO KLMDFNLQJ LV IRFXVHG RQ 7UDQVSRUW OD\HU DQG ,QWHUQHW OD\HU
SURWRFROV XVHG E\ WKH DSSOLFDWLRQ OD\HU 1HWZRUN OHYHO DWWDFN UHVXOWV LQ
H[WUDFWLQJLQIRUPDWLRQZKLFKPLJKWEHKHOSIXOIRUDSSOLFDWLRQOD\HUVHVVLRQ
7KHUHDUHVHYHUDOW\SHVRIQHWZRUNOHYHOKLMDFNLQJLQFOXGLQJ
%OLQG+LMDFNLQJ
8'3+LMDFNLQJ
7&3,3+LMDFNLQJ
567+LMDFNLQJ
0,70
,36SRRILQJ
7KH:D\+DQGVKDNH
7&3 FRPPXQLFDWLRQ LQLWLDWHV ZLWK WKH ZD\ KDQGVKDNLQJ EHWZHHQ
UHTXHVWLQJKRVWDQGWDUJHWKRVW,QWKLVKDQGVKDNLQJ6\QFKURQL]DWLRQ 6<1
SDFNHWV DQG $FNQRZOHGJPHQW $&.  SDFNHWV DUH FRPPXQLFDWHG EHWZHHQ
WKHP 7R XQGHUVWDQG WKH IORZ RI ZD\ KDQGVKDNLQJ REVHUYH WKH IROORZLQJ
GLDJUDP

)LJXUHZD\+DQGVKDNLQJ
7&3,3+LMDFNLQJ
7&3,3 KLMDFNLQJ SURFHVV LV WKH QHWZRUN OHYHO DWWDFN RQ D 7&3 VHVVLRQ LQ
ZKLFKDQDWWDFNHUSUHGLFWVWKHVHTXHQFHQXPEHURIDSDFNHWIORZLQJEHWZHHQ
YLFWLPDQGKRVW7RSHUIRUP7&3,3DWWDFNWKHDWWDFNHUPXVWEHRQWKHVDPH
QHWZRUNZLWKWKHYLFWLP8VXDOO\WKHDWWDFNHUXVHVVQLIILQJWRROVWRFDSWXUH
WKHSDFNHWVDQGH[WUDFWWKHVHTXHQFHQXPEHU%\LQMHFWLQJWKHVSRRIHGSDFNHW
VHVVLRQ FDQ EH LQWHUUXSWHG &RPPXQLFDWLRQ IURP WKH OHJLWLPDWH XVHU FDQ EH
GLVUXSWHGE\D'HQLDORI6HUYLFHDWWDFNRU5HVHWFRQQHFWLRQ
6RXUFH5RXWLQJ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

6RXUFH URXWLQJ LV D WHFKQLTXH RI VHQGLQJ WKH SDFNHW YLD VHOHFWHG URXWH ,Q
VHVVLRQKLMDFNLQJWKLVWHFKQLTXHLVXVHGWRDWWHPSW,3VSRRILQJDVDOHJLWLPDWH
KRVW ZLWK WKH KHOS RI 6RXUFH URXWLQJ WR GLUHFW WKH WUDIILF WKURXJK WKH SDWK
LGHQWLFDOWRWKHYLFWLP
VSDWK
567+LMDFNLQJ
567 KLMDFNLQJ LV WKH SURFHVV RI VHQGLQJ 5HVHW 567  SDFNHW WR WKH YLFWLP
ZLWKWKHVSRRIHGVRXUFHDGGUHVV$FNQRZOHGJPHQWQXPEHUXVHGLQWKLV5HVHW
SDFNHW LV DOVR SUHGLFWHG :KHQ WKH YLFWLP UHFHLYHV WKLV SDFNHW LW FRXOG QRW
LGHQWLI\ WKDW WKH SDFNHW LV VSRRIHG EHOLHYLQJ WKH DFWXDO VRXUFH KDV VHQW WKH
SDFNHWUHVXOWLQJLQUHVHWWLQJWKHFRQQHFWLRQ567SDFNHWFDQEHFUDIWHGXVLQJ
SDFNHWFUDIWLQJWRROV
%OLQG+LMDFNLQJ
%OLQG+LMDFNLQJLVWKHWHFKQLTXHLQZKLFKDWWDFNHULVQRWDEOHWRFDSWXUHWKH
UHWXUQ WUDIILF ,Q %OLQG KLMDFNLQJ DWWDFNHU FDSWXUHV WKH SDFNHW FRPLQJ IURP
YLFWLPGHVWLQHGWRZDUGVWKHVHUYHULQMHFWPDOLFLRXVSDFNHWDQGIRUZDUGWRWKH
WDUJHWVHUYHU
)RUJHG,&03DQG$536SRRILQJ
$ PDQLQWKHPLGGOH DWWDFN FDQ DOVR EH SHUIRUPHG E\ XVLQJ )RUJHG ,&03
SDFNHW DQG $53 VSRRILQJ WHFKQLTXHV )RUJHG ,&03 SDFNHWV VXFK DV
'HVWLQDWLRQXQDYDLODEOHRUKLJKODWHQF\PHVVDJHDUHVHQWWRIRROWKHYLFWLP
8'3+LMDFNLQJ
8'36HVVLRQ+LMDFNLQJSURFHVVLVTXLWHVLPSOHUWKDQ7&3VHVVLRQKLMDFNLQJ
6LQFHWKH8'3LVDFRQQHFWLRQOHVVSURWRFROLWGRHVQRWUHTXLUHDQ\VHTXHQFH
SDFNHWEHWZHHQUHTXHVWLQJFOLHQWDQGKRVW8'3VHVVLRQKLMDFNLQJLVDOODERXW
VHQGLQJ WKH UHVSRQVH SDFNHW EHIRUH D GHVWLQDWLRQ VHUYHU UHVSRQGV 7KHUH DUH
VHYHUDOWHFKQLTXHVWRLQWHUFHSWWKHFRPLQJWUDIILFIURPWKHGHVWLQDWLRQVHUYHU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&RXQWHUPHDVXUHV
6HVVLRQ+LMDFNLQJ&RXQWHUPHDVXUHV
0LWLJDWLRQRI6HVVLRQ+LMDFNLQJDWWDFNVLQFOXGHVVHYHUDOGHWHFWLRQWHFKQLTXHV
DQG FRXQWHUPHDVXUHV WKDW FDQ EH LPSOHPHQWHG LQFOXGLQJ PDQXDO DQG
DXWRPDWHGSURFHVVHV'HSOR\PHQWRI'HIHQVHLQGHSWKWHFKQRORJ\1HWZRUN
PRQLWRULQJ GHYLFHV VXFK DV ,QWUXVLRQ 'HWHFWLRQ 6\VWHP ,'6  DQG ,QWUXVLRQ
3UHYHQWLRQ 6\VWHP ,36  DUH FDWHJRUL]HG DV DXWRPDWHG GHWHFWLRQ SURFHVV
7KHUH DUH VHYHUDO 3DFNHW VQLIILQJ WRROV DYDLODEOH ZKLFK FDQ EH XVHG IRU
PDQXDOGHWHFWLRQ
)XUWKHUPRUH HQFU\SWHG VHVVLRQ DQG FRPPXQLFDWLRQ XVLQJ 6HFXUH 6KHOO
66+ XVLQJ+7736LQVWHDGRI+773XVLQJ5DQGRPDQGOHQJWK\VWULQJIRU
6HVVLRQ ,' VHVVLRQ WLPHRXW DQG VWURQJ DXWKHQWLFDWLRQ OLNH .HUEHURV FDQ EH
KHOSIXO WR SUHYHQW DQG PLWLJDWH VHVVLRQ KLMDFNLQJ 8VLQJ ,3VHF DQG 66/ FDQ
SURYLGHVWURQJHUSURWHFWLRQDJDLQVWKLMDFNLQJ
,36HF
,36HFVWDQGVIRU,3VHFXULW\$VWKHQDPHVXJJHVWVLWLVXVHGIRUWKHVHFXULW\
RIJHQHUDO,3WUDIILF7KHSRZHURI,3VHFOLHVLQLWVDELOLW\WRVXSSRUWPXOWLSOH
SURWRFROV DQG DOJRULWKPV ,W DOVR LQFRUSRUDWHV QHZ DGYDQFHPHQWV LQ
HQFU\SWLRQDQGKDVKLQJSURWRFROV7KHPDLQREMHFWLYHRI,36HFLVWRSURYLGH
&,$ FRQILGHQWLDOLW\LQWHJULW\DQGDXWKHQWLFDWLRQ IRUYLUWXDOQHWZRUNVXVHG
LQFXUUHQWQHWZRUNLQJHQYLURQPHQWV,36HFPDNHVVXUHWKHDERYHREMHFWLYHV
DUHLQDFWLRQE\WKHWLPHSDFNHWHQWHUVD931WXQQHOXQWLOLWUHDFKHVWKHRWKHU
HQGRIWKHWXQQHO
&RQILGHQWLDOLW\,36HFXVHVHQFU\SWLRQSURWRFROVQDPHO\$(6'(6
DQG'(6IRUSURYLGLQJFRQILGHQWLDOLW\
,QWHJULW\,36HFXVHVKDVKLQJSURWRFROV 0'DQG6+$ IRUSURYLGLQJ
LQWHJULW\ +DVKHG 0HVVDJH $XWKHQWLFDWLRQ +0$&  FDQ DOVR EH XVHG
IRUFKHFNLQJWKHGDWDLQWHJULW\
$XWKHQWLFDWLRQ DOJRULWKPV 56$ GLJLWDO VLJQDWXUHV DQG SUHVKDUHG
NH\V 36. DUHWZRPHWKRGVXVHGIRUDXWKHQWLFDWLRQSXUSRVHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,3VHF$UFKLWHFWXUH
&RPSRQHQWVRI,3VHF
&RPSRQHQWVRI,3VHFLQFOXGHV
&RPSRQHQWVRI,3VHF
,3VHF'ULYHUV
,QWHUQHW.H\([FKDQJH ,.(
,QWHUQHW6HFXULW\$VVRFLDWLRQ.H\0DQDJHPHQW3URWRFRO
2DNOH\
,3VHF3ROLF\$JHQW
0RGHVRI,3VHF
7KHUH DUH WZR ZRUNLQJ PRGHV RI ,36HF QDPHO\ WXQQHODQGWUDQVSRUW PRGH
(DFKKDVLWVIHDWXUHVDQGLPSOHPHQWDWLRQSURFHGXUH
,36HF7XQQHO0RGH
%HLQJWKHGHIDXOWPRGHVHWLQ&LVFRGHYLFHVWXQQHOPRGHSURWHFWVWKHHQWLUH
,3SDFNHWIURPRULJLQDWLQJGHYLFH,WPHDQVIRUHYHU\RULJLQDOSDFNHWDQRWKHU
SDFNHWLVJHQHUDWHGZLWKQHZ,3KHDGHUDQGVHQGRYHUWKHXQWUXVWHGQHWZRUN
WR WKH 931 SHHU ORFDWHG RQ DQRWKHU HQG RI WKH ORJLFDO FRQQHFWLRQ 7XQQHO

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

PRGHLVFRPPRQO\XVHGLQFDVHRI6LWHWR6LWH931ZKHUHWZRVHFXUH,36HF
JDWHZD\V DUH FRQQHFWHG RYHU SXEOLF LQWHUQHW XVLQJ ,36HF 931 FRQQHFWLRQ
&RQVLGHUWKHIROORZLQJGLDJUDP
7KLVVKRZV,36HF7XQQHO0RGHZLWK(63KHDGHU

)LJXUH,3VHF7XQQHO0RGHZLWK(63KHDGHU
6LPLODUO\ZKHQ$+LVXVHGQHZ,33DFNHWIRUPDWZLOOEH

)LJXUH,3VHF7XQQHO0RGHZLWK$+KHDGHU
,3VHF7UDQVSRUW0RGH
,QWUDQVSRUWPRGH,3VHF931VHFXUHVWKHGDWDILHOGRUSD\ORDGRIRULJLQDWLQJ
,3 WUDIILF E\ XVLQJ HQFU\SWLRQ KDVKLQJ RU ERWK 1HZ ,3VHF KHDGHUV
HQFDSVXODWH RQO\ SD\ORDG ILHOG ZKLOH WKH RULJLQDO ,3 KHDGHUV UHPDLQ
XQFKDQJHG7XQQHOPRGHLVXVHGZKHQRULJLQDO,3SDFNHWVDUHWKHVRXUFHDQG
GHVWLQDWLRQ DGGUHVV RI VHFXUH ,3VHF SHHUV )RU H[DPSOH VHFXULQJ WKH
PDQDJHPHQW WUDIILF RI URXWHU LV D SHUIHFW H[DPSOH RI ,3VHF 931
LPSOHPHQWDWLRQ XVLQJ WUDQVSRUW PRGH )URP D FRQILJXUDWLRQ SRLQW RI YLHZ
ERWKWXQQHODQGWUDQVSRUWPRGHVDUHGHILQHGLQWKHFRQILJXUDWLRQRIWUDQVIRUP
VHW,WZLOOEHFRYHUHGLQWKH/DEVFHQDULRRIWKLVVHFWLRQ
7KLVGLDJUDPVKRZV,3VHF7UDQVSRUW0RGHZLWK(63KHDGHU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,3VHF7UDQVSRUW0RGHZLWK(63KHDGHU
6LPLODUO\LQFDVHRI$+

)LJXUH,3VHF7UDQVSRUW0RGHZLWK$+KHDGHU








0LQG0DS

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

You might also like