Sei sulla pagina 1di 22

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.

com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&KDSWHU+DFNLQJ0RELOH3ODWIRUPV
7HFKQRORJ\%ULHI
:H DOO NQRZ WKH UDSLG LQFUHDVH RI PRELOH SKRQH XVHUV DQG IOH[LELOLW\ RI
IXQFWLRQDQGDGYDQFHPHQWWRSHUIRUPHYHU\WDVNKDVEURXJKWDGUDPDWLFVKLIW
6PDUWSKRQHV DYDLODEOH LQ WKH PDUNHW DUH UXQQLQJ RQ GLIIHUHQW SRSXODU
2SHUDWLQJ V\VWHPV VXFK DV L26 %ODFNEHUU\ 26 $QGURLG 6\PELDQ DQG
:LQGRZV HWF 7KH\ DOVR RIIHU DSSOLFDWLRQ VWRUH IRU WKH XVHUV WR GRZQORDG
FRPSDWLEOH DQG WUXVWHG DSSOLFDWLRQ WR UXQ RQ WKHLU UHVSHFWLYH RSHUDWLQJ
V\VWHPV VXFK DV $SSOH
V $SS 6WRUH $QGURLG
V 3OD\ 6WRUH HWF $V WKHVH
PRELOH SKRQHV DUH WKH VRXUFH RI MR\ DQG KHOSIXO WR SHUIRUP SHUVRQDO DQG
EXVLQHVV ZRUN WKH\ DUH DOVR YXOQHUDEOH 6PDUWSKRQH ZLWK WKH PDOLFLRXV
DSSOLFDWLRQRUDQLQIHFWHGSKRQHFDQFDXVHWURXEOHIRUDVHFXUHQHWZRUN$V
PRELOH SKRQHV DUH SRSXODUO\ XVHG IRU RQOLQH WUDQVDFWLRQV EDQNLQJ
DSSOLFDWLRQDQGRWKHUILQDQFLDODSSOLFDWLRQVPRELOHSKRQHGHYLFHVPXVWKDYH
VWURQJ VHFXULW\ WR NHHS WKH WUDQVDFWLRQV VHFXUH DQG FRQILGHQWLDO 6LPLODUO\
PRELOHV KDYH LPSRUWDQW GDWD VXFK DV FRQWDFWV PHVVDJHV HPDLOV ORJLQ
FUHGHQWLDOV DQG ILOHV ZKLFK FDQ EH VWROHQ HDVLO\ RQFH D SKRQH LV
FRPSURPLVHG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

0RELOH3ODWIRUP$WWDFN9HFWRUV
2:$637RS0RELOH7KUHDWV
2:$63 VWDQGV IRU 2SHQ :HE $SSOLFDWLRQ 6HFXULW\ 3URMHFW 2:$63
SURYLGHV XQELDVHG DQG SUDFWLFDO LQIRUPDWLRQ DERXW FRPSXWHU DQG ,QWHUQHW
DSSOLFDWLRQV$FFRUGLQJWR2:$63WRS0RELOHWKUHDWVDUH
2:$637RS0RELOH5LVNV 2:$637RS0RELOH5LVNV
 
,PSURSHU3ODWIRUP8VDJH :HDN6HUYHU6LGH&RQWUROV
,QVHFXUH'DWD6WRUDJH ,QVHFXUH'DWD6WRUDJH
,QVHFXUH&RPPXQLFDWLRQ ,QVXIILFLHQW7UDQVSRUW/D\HU
3URWHFWLRQ
,QVHFXUH$XWKHQWLFDWLRQ 8QLQWHQGHG'DWD/HDNDJH
,QVXIILFLHQW&U\SWRJUDSK\ 3RRU$XWKRUL]DWLRQDQG
$XWKHQWLFDWLRQ
,QVHFXUH$XWKRUL]DWLRQ %URNHQ&U\SWRJUDSK\
&OLHQW&RGH4XDOLW\ &OLHQW6LGH,QMHFWLRQ
&RGH7DPSHULQJ 6HFXULW\'HFLVLRQV9LD8QWUXVWHG
,QSXWV
5HYHUVH(QJLQHHULQJ ,PSURSHU6HVVLRQ+DQGOLQJ
([WUDQHRXV)XQFWLRQDOLW\ /DFNRI%LQDU\3URWHFWLRQV
7DEOH2:$637RS0RELOH5LVNV
0RELOH$WWDFN9HFWRU
7KHUH DUH VHYHUDO W\SHV RI WKUHDWV DQG DWWDFNV RQ D PRELOH GHYLFH 6RPH RI
PRVWEDVLFWKUHDWVDUHPDOZDUHGDWDORVVDQGDWWDFNRQLQWHJULW\$QDWWDFNHU
PD\ DWWHPSW WR ODXQFK DWWDFNV WKURXJK YLFWLP
V EURZVHU E\ D PDOLFLRXV
ZHEVLWH RU D FRPSURPLVHG OHJLWLPDWH ZHEVLWH 6RFLDO HQJLQHHULQJ DWWDFNV
GDWD ORVV GDWD WKHIW GDWD H[ILOWUDWLRQ DUH WKH FRPPRQ DWWDFNV RQ PRELOH
WHFKQRORJ\0RELOHDWWDFNYHFWRULQFOXGHV
0DOZDUH
'DWD/RVV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

'DWD7DPSHULQJ
'DWD([ILOWUDWLRQ
9XOQHUDELOLWLHVDQG5LVNRQ0RELOH3ODWIRUP
$SDUW IURP $WWDFNV RQ D PRELOH SODWIRUP WKHUH DUH DOVR VHYHUDO
YXOQHUDELOLWLHVDQGULVNLQDPRELOHSODWIRUP7KHPRVWFRPPRQULVNVDUH
0DOLFLRXVWKLUGSDUW\DSSOLFDWLRQV
0DOLFLRXVDSSOLFDWLRQRQ6WRUH
0DOZDUHDQGURRWNLWV
$SSOLFDWLRQYXOQHUDELOLW\
'DWDVHFXULW\
([FHVVLYH3HUPLVVLRQV
:HDN(QFU\SWLRQV
2SHUDWLQJV\VWHP8SGDWHVLVVXHV
$SSOLFDWLRQXSGDWHLVVXHV
-DLOEUHDNLQJDQG5RRWLQJ
3K\VLFDO$WWDFN
$SSOLFDWLRQ6DQGER[LQJ,VVXH
6DQGER[LQJ LV RQH RI WKH PRVW LPSRUWDQW NH\ FRPSRQHQWV RI VHFXULW\ ,W
VXSSRUWV VHFXULW\ DV DQ LQWHJUDWHG FRPSRQHQW LQ D VHFXULW\ VROXWLRQ
6DQGER[LQJ IHDWXUH LV PXFK GLIIHUHQW IURP RWKHU WUDGLWLRQDO DQWLYLUXV DQG
DQWLPDOZDUHPHFKDQLVPV6DQGER[LQJWHFKQRORJ\RIIHUVHQKDQFHGSURWHFWLRQ
E\ DQDO\VLV RI HPHUJLQJ WKUHDWV PDOZDUH PDOLFLRXV DSSOLFDWLRQV HWF LQ D
VRSKLVWLFDWHGHQYLURQPHQWZLWKLQGHSWKYLVLELOLW\DQGPRUHJUDQXODUFRQWURO
+RZHYHUWKHDGYDQFHGPDOLFLRXVDSSOLFDWLRQPD\EHGHVLJQHGWRE\SDVVWKH
VDQGER[LQJWHFKQRORJ\)UDJPHQWHGFRGHVDQGVFULSWZLWKVOHHSWLPHUDUHWKH
FRPPRQWHFKQLTXHVWKDWDUHDGRSWHGE\WKHDWWDFNHUWRE\SDVVWKHLQVSHFWLRQ
SURFHVV
0RELOH6SDPDQG3KLVKLQJ
0RELOH6SDPPLQJLVDVSDPPLQJWHFKQLTXHIRUWKHPRELOHSODWIRUPLQZKLFK
XQVROLFLWHGPHVVDJHVRUHPDLOVDUHVHQWWRWKHWDUJHWV7KHVHVSDPVFRQWDLQ
PDOLFLRXVOLQNVWRUHYHDOVHQVLWLYHLQIRUPDWLRQ6LPLODUO\SKLVKLQJDWWDFNVDUH
DOVRSHUIRUPHGEHFDXVHRIHDVHWRVHWXSDQGGLIILFXOWWRVWRS0HVVDJHVDQG
HPDLOZLWKSUL]HZLQQLQJQRWLILFDWLRQVDQGFDVKZLQQLQJVWRULHVDUHWKHPRVW
FRPPRQO\ NQRZQ VSDPV $Q DWWDFNHU PD\ HLWKHU DVN IRU FUHGHQWLDOV RQ D
SKRQH FDOO PHVVDJH RU UHGLUHFW WKH XVHU WR PDOLFLRXV ZHEVLWH RU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

FRPSURPLVHGOHJLWLPDWHZHEVLWHWKURXJKDOLQNLQDVSDPPHVVDJHRUHPDLO
2SHQ:L)LDQG%OXHWRRWK1HWZRUNV
3XEOLF :L)L 8QHQFU\SWHG :L)L DQG %OXHWRRWK QHWZRUNV DUH DQRWKHU HDV\
ZD\ IRU DQ DWWDFNHU WR LQWHUFHSW WKH FRPPXQLFDWLRQ DQG UHYHDO LQIRUPDWLRQ
8VHUV FRQQHFWHG WR SXEOLF :L)L LQWHQWLRQDOO\ RU XQLQWHQWLRQDOO\ PD\ EH D
YLFWLP %OXH%XJJLQJ %OXH6QDUILQJ DQG 3DFNHW 6QLIILQJ DUH WKH FRPPRQ
DWWDFNVRQRSHQZLUHOHVVFRQQHFWLRQV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

+DFNLQJ$QGURLG26
,QWURGXFWLRQWR$QGURLG2SHUDWLQJ6\VWHP
$QGURLG LV DQ RSHUDWLQJ V\VWHP IRU 6PDUWSKRQHV GHYHORSHG E\ *RRJOH
$QGURLG LV QRW RQO\ IRU 6PDUWSKRQHV EXW DOVR JDPLQJ FRQVROHV 3&V DQG
RWKHU,R7GHYLFHV$QGURLG26EULQJVIOH[LEOHIHDWXUHVZLWKDQRSHQVRXUFH
SODWIRUP :LGH VXSSRUW DSSOLFDWLRQ DQG LQWHJUDWLRQ ZLWK GLIIHUHQW KDUGZDUH
DQG VHUYLFHV DUH WKH PDMRU IHDWXUHV RI WKLV RSHUDWLQJ V\VWHPV 7KH $QGURLG
RSHUDWLQJ V\VWHP KDV VLQFH JRQH WKURXJK PXOWLSOH PDMRU UHOHDVHV ZLWK WKH
FXUUHQWYHUVLRQEHLQJ2UHRUHOHDVHGLQ'HFHPEHU
$ SRSXODU IHDWXUH RI $QGURLG LV LWV IOH[LELOLW\ RI WKLUGSDUW\ DSSOLFDWLRQV
8VHUV FDQ GRZQORDG DQG LQVWDOO DQG UHPRYH WKHVH DSSOLFDWLRQV $3.  ILOH
IURPDSSOLFDWLRQVWRUHVRUIURPWKHLQWHUQHWKRZHYHUWKLVPLJKWEHDVHFXULW\
ULVNEHFDXVHRIRSHQVRXUFHQDWXUHWKLVWKLUGSDUW\DSSOLFDWLRQPD\LQFOXGHD
QXPEHURIDSSOLFDWLRQVWKDWDUHYLRODWLQJWKHSROLF\RIDWUXVWHGDSSOLFDWLRQ$
ORW RI $QGURLG KDFNLQJ WRROV PHQWLRQHG LQ WKLV ZRUNERRN DUH DOVR QRW
DYDLODEOHDWWKHSOD\VWRUH
'HYLFH$GPLQLVWUDWLRQ$3,
'HYLFH $GPLQLVWUDWLRQ $3, LV LQWURGXFHG LQ $QGURLG  'HYLFH
$GPLQLVWUDWLRQ $3, HQVXUHV GHYLFH DGPLQLVWUDWLRQ DW WKH V\VWHP OHYHO
RIIHULQJ FRQWURO RYHU $QGURLG GHYLFHV ZLWKLQ D FRUSRUDWH QHWZRUN 8VLQJ
WKHVH VHFXULW\DZDUH DSSOLFDWLRQV WKH DGPLQLVWUDWRU FDQ SHUIRUP VHYHUDO
DFWLRQVLQFOXGLQJZLSLQJWKHGHYLFHUHPRWHO\+HUHDUHH[DPSOHVRIWKHW\SHV
RIDSSOLFDWLRQVWKDWPLJKWXVHWKH'HYLFH$GPLQLVWUDWLRQ$3,
(PDLOFOLHQWV
6HFXULW\DSSOLFDWLRQVFDQGRDUHPRWHZLSH
'HYLFHPDQDJHPHQWVHUYLFHVDQGDSSOLFDWLRQV
5RRW$FFHVV$QGURLG5RRWLQJ
5RRWLQJ LV EDVLFDOO\ D SURFHVV RI JDLQLQJ SULYLOHJHG FRQWURO RYHU D GHYLFH
FRPPRQO\NQRZQDV5RRWDFFHVV,QWKH$QGURLGRSHUDWLQJV\VWHPURRWLQJLV
WKHVDPHSURFHVVRIJDLQLQJSULYLOHJHGDFFHVVWRDQ$QGURLGGHYLFHVXFKDVD
VPDUWSKRQH WDEOHW HWF RYHU VXEV\VWHPV $V PHQWLRQHG HDUOLHU $QGURLG LV
PRGLILHGYHUVLRQRI/LQX[NHUQHOURRWDFFHVVJLYHV6XSHUXVHUSHUPLVVLRQV
5RRW DFFHVV LV EDVLFDOO\ UHTXLUHG WR PRGLI\ WKH VHWWLQJV DQG FRQILJXUDWLRQV
WKDW UHTXLUH DGPLQLVWUDWRU SULYLOHJHV KRZHYHU LW FDQ EH XVHG WR DOWHU WKH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

V\VWHP DSSOLFDWLRQV DQG VHWWLQJV WR RYHUFRPH OLPLWDWLRQV DQG UHVWULFWLRQV


2QFH \RX KDYH URRW DFFHVV \RX KDYH IXOO FRQWURO RYHU NHUQHO DQG
DSSOLFDWLRQV 7KLV URRWLQJ FDQ EH XVHG IRU PDOLFLRXV LQWHQWLRQV VXFK DV WKH
LQVWDOODWLRQ RI PDOLFLRXV DSSOLFDWLRQV DVVLJQLQJ H[FHVVLYH SHUPLVVLRQV
LQVWDOODWLRQRIFXVWRPILUPZDUH

)LJXUH$QGURLG)UDPHZRUN
$QGURLG3KRQHV6HFXULW\7RROV
7KHUHDUHVHYHUDO$QWLYLUXVߞVDSSOLFDWLRQVSURWHFWLRQWRROVYXOQHUDELOLW\
VFDQQLQJWRROV$QWLWKHIWILQGP\SKRQHDSSOLFDWLRQVDYDLODEOHRQWKH3OD\
6WRUH7KHVHWRROVLQFOXGH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

'URLG6KHHS*XDUG
7UXVW*R0RELOH6HFXULW\
6RSKRV0RELOH6HFXULW\
6HFXULW\
$YLUD$QWLYLUXV6HFXULW\
$9/
;UD\

)LJXUH7UXVW*RDQG6RSKRV$SSOLFDWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

+DFNLQJL26
L3KRQH2SHUDWLQJ6\VWHP
7KH RSHUDWLQJ V\VWHP GHYHORSHG IRU WKH L3KRQHV E\ $SSOH,QF LV NQRZQ DV
L26 7KH LV WKH DQRWKHU PRVW SRSXODU RSHUDWLQJ V\VWHP IRU PRELOH GHYLFHV
LQFOXGLQJ L3KRQHV L3DGV DQG L3RGV 7KH XVHU LQWHUIDFH LQ DQ L26 LV EDVHG
XSRQGLUHFWPDQLSXODWLRQXVLQJPXOWLWRXFKJHVWXUHV0DMRUL26YHUVLRQVDUH
UHOHDVHG DQQXDOO\ 7KH FXUUHQW YHUVLRQ L26  ZDV UHOHDVHG RQ 6HSWHPEHU
  L26 XVHV KDUGZDUHDFFHOHUDWHG $(6 HQFU\SWLRQ DQG RWKHU
DGGLWLRQDOHQFU\SWLRQWRHQFU\SWGDWDL26DOVRLVRODWHVWKHDSSOLFDWLRQIURP
RWKHUDSSOLFDWLRQV$SSOLFDWLRQVDUHQRWDOORZHGWRDFFHVVWKHRWKHUDSSVGDWD
-DLOEUHDNLQJL26
-DLOEUHDNLQJLVWKHFRQFHSWRIEUHDNLQJWKHUHVWULFWLRQ-DLO-DLOEUHDNLQJLVD
IRUP RI URRWLQJ UHVXOWLQJ LQ SULYLOHJH HVFDODWLRQ L26 MDLOEUHDNLQJ LV WKH
SURFHVVRIHVFDODWLQJWKHSULYLOHJHVRQL26GHYLFHVLQWHQGHGWRHLWKHUUHPRYH
RUE\SDVVWKHIDFWRU\GHIDXOWUHVWULFWLRQVRQVRIWZDUHE\XVLQJNHUQHOSDWFKHV
RUGHYLFHFXVWRPL]DWLRQ-DLOEUHDNLQJDOORZVWKHURRWDFFHVVWRDQL26GHYLFH
ZKLFKDOORZVGRZQORDGLQJXQRIILFLDODSSOLFDWLRQVMDLOEUHDNLQJLVSRSXODUIRU
UHPRYLQJ UHVWULFWLRQV LQVWDOODWLRQ RI DGGLWLRQDO VRIWZDUH PDOZDUH LQMHFWLRQ
DQGVRIWZDUHSLUDF\
7\SHVRI-DLOEUHDNLQJ
%DVLFDOO\ L26 -DLOEUHDNLQJ LV FDWHJRUL]HG LQWR WKUHH W\SHV GHSHQGLQJ XSRQ
SULYLOHJH OHYHOV H[SORLWLQJ V\VWHP YXOQHUDELOLW\ D YXOQHUDELOLW\ LQ ILUVW DQG
WKLUGERRWORDGHUHWF8VHUODQGH[SORLWVDQGL%RRWH[SORLWFDQEHSDWFKHGE\
$SSOH
 8VHUODQG([SORLW
$ 8VHUODQG H[SORLW LV D W\SH RI L26 MDLOEUHDNLQJ ZKLFK DOORZ 8VHUOHYHO
DFFHVVZLWKRXWHVFDODWLQJWRDERXWOHYHODFFHVV
 L%RRW([SORLW
$Q L%RRW H[SORLW LV D W\SH RI L26 MDLOEUHDNLQJ ZKLFK DOORZ 8VHUOHYHO
DFFHVVDQGERRWOHYHODFFHVV
 %RRWURP([SORLW
$ ERRWURP H[SORLW LV D W\SH RI L26 MDLOEUHDNLQJ ZKLFK DOORZ 8VHUOHYHO
DFFHVVDQGERRWOHYHODFFHVV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

-DLOEUHDNLQJ7HFKQLTXHV
 7HWKHUHG-DLOEUHDNLQJ
,Q 7HWKHUHG -DLOEUHDNLQJ ZKHQ WKH L26 GHYLFH LV UHERRWHG LW ZLOO QR
ORQJHUKDYHDSDWFKHGNHUQHO,WPD\KDYHVWXFNLQDSDUWLDOO\VWDUWHGVWDWH
:LWK7HWKHUHG-DLOEUHDNLQJDFRPSXWHULVUHTXLUHGWRERRWWKHGHYLFHHDFK
WLPH LH WKH GHYLFH LV UHMDLOEURNHQ HDFK WLPH 8VLQJ -DLOEUHDNLQJ WRRO
WKHGHYLFHLVVWDUWHGZLWKWKHSDWFKHGNHUQHO
 6HPLWHWKHUHG-DLOEUHDNLQJ
6HPLWHWKHUHG -DLOEUHDNLQJ WHFKQLTXH LV DQRWKHU VROXWLRQ LQ EHWZHHQ
7HWKHUHG DQG 8QWHWKHUHG -DLOEUHDNLQJ 8VLQJ WKLV WHFKQLTXH ZKHQ WKH
GHYLFHLVDERRWLWGRHVQRWKDYHSDWFKHGNHUQHOEXWDEOHWRFRPSOHWHWKH
VWDUWXS SURFHVV DQG HQWHUWDLQ QRUPDO IXQFWLRQV $Q\ PRGLILFDWLRQ ZLOO
UHTXLUHVWDUWXSZLWKSDWFKHGNHUQHOE\MDLOEUHDNLQJWRROV
 8QWHWKHUHG-DLOEUHDNLQJ
,Q 8QWHWKHUHG MDLOEUHDNLQJ 'HYLFH LV ERRWHG FRPSOHWHO\ :KLOH ERRWLQJ
.HUQHO ZLOO EH SDWFKHG ZLWKRXW DQ\ UHTXLUHPHQW RI WKH FRPSXWHU WKXV
HQDEOLQJWKHXVHUWRERRWZLWKRXWDFRPSXWHU7KLVWHFKQLTXHLVKDUGHUWR
DWWHPSW
-DLOEUHDNLQJ7RROV
7KHIROORZLQJDUHVRPHRIWKHL26MDLOEUHDNLQJWRROV
3DQJX
5HGVQZ
$EVLQWKH
HYDVLQQ
*HHN6QZ
6QZEUHH]H
3ZQDJH7RRO
/LPH5DOQ
%ODFNUDOQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

+DFNLQJ:LQGRZV3KRQH26
:LQGRZV 3KRQH :3  LV DQRWKHU RSHUDWLQJ V\VWHP LQ WKH 26 IDPLO\
GHYHORSHG E\ 0LFURVRIW :LQGRZV SKRQH ZDV WKH ILUVW WR ODXQFK ZLWK
:LQGRZV 3KRQH  :LQGRZV  LVVXH ZDV IL[HG E\ ODWHU UHOHDVH  0DQJR
ZKLFK KDV YHU\ ORZ KDUGZDUH UHTXLUHPHQW RI 0+] &38 DQG  0%
5DP:LQGRZVGHYLFHVDUHQRWFDSDEOHRIXSJUDGLQJWR:LQGRZVGXHWR
KDUGZDUH OLPLWDWLRQV :LQGRZV   UHOHDVH LQ  LV HOLPLQDWHG E\
:LQGRZVUHOHDVHGLQ
:LQGRZV3KRQH
:LQGRZV3KRQHLVWKHVHFRQGJHQHUDWLRQ:LQGRZVSKRQHIURP0LFURVRIW
:LQGRZV3KRQHUHSODFHVWKH:LQGRZV&(EDVHGDUFKLWHFWXUHWKDWZDVXVHG
LQ :LQGRZV  :LQGRZV 3KRQH  GHYLFHV DUH PDQXIDFWXUHG QRW RQO\ E\
0LFURVRIWEXW1RNLD+7&6DPVXQJDQG+XDZHLDVZHOO:LQGRZV3KRQH
LVWKHILUVWPRELOH26ODXQFKHGE\0LFURVRIWXVLQJWKH:LQGRZV17NHUQHO
,PSURYHPHQW RI WKH ILOH V\VWHP GULYHUV VHFXULW\ PHGLD DQG JUDSKLFV LV
IHDWXUHG LQ ZLQGRZV SKRQH  :LQGRZV 3KRQH  LV FDSDEOH RI VXSSRUWLQJ
PXOWLFRUH &38V XS WR  FRUHV ,W LV DOVR FDSDEOH RI VXSSRUWLQJ —
DQG—UHVROXWLRQV:LQGRZV3KRQHDOVRVXSSRUWVQDWLYHELW%LW
ORFNHU HQFU\SWLRQ DQG 6HFXUH %RRW :LQGRZV 3KRQH  DOVR VXSSRUWV 17)6
GXHWRWKLVVZLWFK,QWHUQHW([SORUHULVWKHGHIDXOWEURZVHULQZLQGRZV
SKRQHV :LQGRZV 3KRQH  XVHV WUXH PXOWLWDVNLQJ DOORZLQJ GHYHORSHUV WR
FUHDWHDSSVWKDWFDQUXQLQWKHEDFNJURXQGDQGUHVXPHLQVWDQWO\
6RPHRWKHUPHDVXUHIHDWXUHVRI:LQGRZV3KRQHLQFOXGH
1DWLYHFRGHVXSSRUW &
1)&
5HPRWH'HYLFH0DQDJHPHQW
9R,3DQG9LGHR&KDWLQWHJUDWLRQ
8(),DQG)LUPZDUHRYHUWKHDLUIRU:LQGRZV3KRQHXSGDWHV
$SS6DQGER[LQJ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH:LQGRZV6HFXUH%RRW3URFHVV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

+DFNLQJ%ODFN%HUU\
%ODFNEHUU\ LV DQRWKHU VPDUWSKRQH FRPSDQ\ WKDW LV IRUPHUO\ NQRZQ DV
5HVHDUFK,Q0RWLRQ 5,0  OLPLWHG %ODFNEHUU\ ZDV FRQVLGHUHG DV D PRVW
SURPLQHQW DQG VHFXUH PRELOH SKRQH 7KH RSHUDWLQJ V\VWHP RI %ODFNEHUU\
SKRQHLVNQRZQDV%ODFNEHUU\26
%ODFN%HUU\2SHUDWLQJ6\VWHP
%ODFNEHUU\ 26 LV WKH RSHUDWLQJ V\VWHP RI %ODFNEHUU\ SKRQHV ,W SURYLGHV
PXOWLWDVNLQJ ZLWK VSHFLDO LQSXW VXSSRUWV VXFK DV WUDFNZKHHO WUDFNEDOO DQG
PRVWUHFHQWO\WKHWUDFNSDGDQGWRXFKVFUHHQ%ODFNEHUU\26LVEHVWNQRZQIRU
LWV IHDWXUHV VXFK DV LWV QDWLYH VXSSRUW IRU FRUSRUDWH HPDLOV -DYD %DVHG
DSSOLFDWLRQ IUDPHZRUN LH -DYD 0LFUR (GLWLRQ 0,'3  DQG 0,'3 
8SGDWHV WR WKH RSHUDWLQJ V\VWHP PD\ EH DXWRPDWLFDOO\ DYDLODEOH IURP
ZLUHOHVV FDUULHUV WKDW VXSSRUW WKH %ODFN%HUU\ RYHU WKH DLU VRIWZDUH ORDGLQJ
27$6/ VHUYLFH
%ODFN%HUU\$WWDFN9HFWRUV
0DOLFLRXV&RGH6LJQLQJ
0DOLFLRXV&RGH6LJQLQJLVWKHSURFHVVRIREWDLQLQJDFRGHVLJQLQJNH\IURP
WKHFRGHVLJQLQJVHUYLFH$QDWWDFNHUPD\FUHDWHDPDOLFLRXVDSSOLFDWLRQZLWK
WKHKHOSRIFRGHVLJQLQJNH\VREWDLQHGE\PDQLSXODWLQJWKHLQIRUPDWLRQVXFK
DVXVLQJDQRQ\PRXVO\XVLQJSUHSDLGFUHGLWFDUGVDQGIDNHGHWDLOVDQGSXEOLVK
WKHPDOLFLRXVDSSOLFDWLRQRQ%ODFNEHUU\$SSZRUOG%ODFNEHUU\$SSZRUOGLV
RIILFLDO DSSOLFDWLRQ GLVWULEXWLRQ VHUYLFH 8VHU GRZQORDGV WKLV PDOLFLRXV
DSSOLFDWLRQZKLFKGLUHFWVWKHWUDIILFWRWKHDWWDFNHU
-$')LOH([SORLW
-DYD$SSOLFDWLRQ'HVFULSWLRQ MDG ILOHVFRQWDLQDWWULEXWHVLI-DYDDSSOLFDWLRQ
7KHVH DWWULEXWHV LQFOXGH LQIRUPDWLRQ DQG GHWDLOV DERXW WKH DSSOLFDWLRQ
LQFOXGLQJ85/WRGRZQORDGWKHDSSOLFDWLRQ$QDWWDFNHUFDQWULFNWRLQVWDOOHG
PDOLFLRXV MDG ILOH RQ YLFWLP GHYLFH 7KLV FUDIWHG MDG ILOH ZLWK VSRRIHG
LQIRUPDWLRQFDQEHLQVWDOOHGE\WKHXVHU$PDOLFLRXVDSSOLFDWLRQFDQDOVREH
FUDIWHGIRUD'HQLDORI6HUYLFHDWWDFN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

0RELOH'HYLFH0DQDJHPHQW 0'0
0RELOH'HYLFH0DQDJHPHQW&RQFHSW
7KH EDVLF SXUSRVH RI LPSOHPHQWLQJ PRELOH GHYLFH PDQDJHPHQW 0'0  LV
GHSOR\PHQW PDLQWHQDQFH DQG PRQLWRULQJ RI PRELOH GHYLFHV WKDW PDNH XS
%<2' VROXWLRQ 'HYLFHV PD\ LQFOXGH WKH ODSWRSV VPDUWSKRQHV WDEOHWV
QRWHERRNV RU DQ\ RWKHU HOHFWURQLF GHYLFH WKDW FDQ EH PRYHG RXWVLGH WKH
FRUSRUDWH RIILFH WR KRPH RU VRPH SXEOLF SODFH DQG WKHQ JHWV FRQQHFWHG WR
FRUSRUDWH RIILFH E\ VRPH PHDQV 7KH IROORZLQJ DUH VRPH RI WKH IXQFWLRQV
SURYLGHGE\0'0
ࢆ(QIRUFLQJDGHYLFHWREHORFNHGDIWHUFHUWDLQORJLQIDLOXUHV
ࢆ(QIRUFHPHQWRIVWURQJSDVVZRUGSROLF\IRUDOO%<2'GHYLFHV
ࢆ    0'0FDQGHWHFWDQ\DWWHPSWRIKDFNLQJ%<2'GHYLFHVDQGWKHQ
OLPLWWKHQHWZRUNDFFHVVRIWKHVHDIIHFWHGGHYLFHV
ࢆ    (QIRUFLQJFRQILGHQWLDOLW\E\XVLQJHQFU\SWLRQDVSHURUJDQL]DWLRQߞV
SROLF\
ࢆ $GPLQLVWUDWLRQDQGLPSOHPHQWDWLRQRI'DWD/RVV3UHYHQWLRQ '/3
IRU%<2'GHYLFHV,WKHOSVWRSUHYHQWDQ\NLQGRIGDWDORVVGXHWRHQG
XVHUߞVFDUHOHVVQHVV

0'0'HSOR\PHQW0HWKRGV
*HQHUDOO\WKHUHDUHWZRW\SHVRI0'0GHSOR\PHQWQDPHO\
2QVLWH 0'0 GHSOR\PHQW 2QVLWHSUHPLVHV 0'0 GHSOR\PHQW LQYROYHV
LQVWDOODWLRQ RI 0'0 DSSOLFDWLRQ RQ ORFDO VHUYHUV LQVLGH WKH FRUSRUDWH GDWD
FHQWHURURIILFHVDQGLWVPDQDJHPHQWLVGRQHE\ORFDOVWDIIDYDLODEOHRQWKH
VLWH
7KH PDMRU DGYDQWDJH RI 2QVLWH 0'0 LV JUDQXODU FRQWURO RYHU WKH
PDQDJHPHQW RI WKH %<2' GHYLFHV ZKLFK LQFUHDVHV WKH VHFXULW\ WR VRPH
H[WHQW


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH2Q3UHPLVHV0'0+LJK/HYHO'HSOR\PHQW$UFKLWHFWXUH

7KHRQVLWHSUHPLVHV0'0VROXWLRQLVFRQVLVWVRIWKHIROORZLQJDUFKLWHFWXUH
偪    'DWD&HQWHUPD\LQFOXGH,6('+&3DQG'16VHUYHUVWRVXSSRUW
FHUWDLQVHUYLFHVDSDUWIURPGLVWULEXWLRQDQGFRUHVZLWFKHV,6(LVXVHGWR
SURYLGH WKH HQIRUFHPHQW RI RUJDQL]DWLRQߞV VHFXULW\ SROLFLHV '16'+&3
VHUYHUV DUH XVHG WR SURYLGH WKH QHWZRUN FRQQHFWLYLW\ 6LPLODUO\ &$ DQG
$' VHUYHUV FDQ DOVR EH XVHG WR SURYLGH DFFHVV RQO\ WR XVHUV ZLWK YDOLG
DXWKHQWLFDWLRQFUHGHQWLDOV
偪    ,QWHUQHW(GJH7KH EDVLF SXUSRVH RI WKLV DUFKLWHFWXUH LV WR SURYLGH
FRQQHFWLYLW\WRWKHSXEOLFLQWHUQHW7KLVOD\HULQFOXGHV&LVFR$6$ILUHZDOO
WR ILOWHU DQG PRQLWRU DOO WKH WUDIILF LQJUHVV DQG HJUHVV WRZDUGV WKH SXEOLF
LQWHUQHW:LUHOHVV/$1&RQWUROOHU :/& DORQJZLWK$FFHVV3RLQWV $3V
DUH DOVR SUHVHQW LQ LQWHUQHW HGJH WR VXSSRUW JXHVW XVHUV 2QH RI WKH NH\
FRPSRQHQWV DW LQWHUQHW HGJH LV 2QSUHPLVHV 0'0 VROXWLRQ ZKLFK
PDLQWDLQV SROLFLHV DQG FRQILJXUDWLRQ VHWWLQJV RI DOO %<2' GHYLFHV
FRQQHFWHGWRWKHFRUSRUDWHQHWZRUN
偪    6HUYLFHV /D\HU 7KLV OD\HU FRQWDLQV :/& IRU DOO WKH $3V XVHG E\
XVHUV ZLWKLQ D FRUSRUDWH HQYLURQPHQW $Q\ RWKHU VHUYLFH UHTXLUHG E\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

FRUSRUDWH XVHUV OLNH 173 DQG LWV VXSSRUWLQJ VHUYHUV FDQ EH IRXQG LQ WKLV
VHFWLRQ
偪&RUH/D\HU-XVWOLNHHYHU\RWKHUGHVLJQWKHFRUHLVWKHIRFDOSRLQWRI
WKH ZKROH QHWZRUN UHJDUGLQJ URXWLQJ RI WUDIILF LQ D FRUSRUDWH QHWZRUN
HQYLURQPHQW
偪    &DPSXV%XLOGLQJ$GLVWULEXWLRQOD\HUVZLWFKDFWVDVLQJUHVVHJUHVV
SRLQW IRU DOO WUDIILF LQ D FDPSXV EXLOGLQJ 8VHUV FDQ FRQQHFW WR FDPSXV
EXLOGLQJE\FRQQHFWLQJWRDFFHVVVZLWFKHVRUZLUHOHVVDFFHVVSRLQWV $3V 
&ORXGEDVHG 0'0 GHSOR\PHQW ,Q WKLV W\SH RI GHSOR\PHQW 0'0
DSSOLFDWLRQVRIWZDUHLVLQVWDOOHGDQGPDLQWDLQHGE\VRPHRXWVRXUFHGPDQDJHG
VHUYLFHVSURYLGHU
2QH RI WKH PDLQ DGYDQWDJHV RI WKLV NLQG RI VHWXS LV WKH OHVV DGPLQLVWUDWLYH
ORDG RQ FXVWRPHUߞV HQG DV GHSOR\PHQW DQG PDLQWHQDQFH LV WRWDOO\ WKH
UHVSRQVLELOLW\RIVHUYLFHSURYLGHU
7KHFORXGEDVHG0'0GHSOR\PHQWLVFRQVLVWVRIWKHIROORZLQJFRPSRQHQWV
DVGHSLFWHGLQWKHILJXUH
偪    'DWD&HQWHUPD\LQFOXGH,6('+&3DQG'16VHUYHUVWRVXSSRUW
FHUWDLQVHUYLFHVDSDUWIURPGLVWULEXWLRQDQGFRUHVZLWFKHV,6(LVXVHGWR
SURYLGH WKH HQIRUFHPHQW RI RUJDQL]DWLRQߞV VHFXULW\ SROLFLHV '16'+&3
VHUYHUV DUH XVHG WR SURYLGH WKH QHWZRUN FRQQHFWLYLW\ 6LPLODUO\ &$ DQG
$' VHUYHUV FDQ DOVR EH XVHG WR SURYLGH DFFHVV RQO\ WR XVHUV ZLWK YDOLG
DXWKHQWLFDWLRQFUHGHQWLDOV
偪    ,QWHUQHW HGJH WKH %DVLF SXUSRVH RI WKLV VHFWLRQ LV WR SURYLGH
FRQQHFWLYLW\WRWKHSXEOLFLQWHUQHW7KLVOD\HULQFOXGHV&LVFR$6$ILUHZDOO
WR ILOWHU DQG PRQLWRU DOO WKH WUDIILF LQJUHVV DQG HJUHVV WRZDUGV WKH SXEOLF
LQWHUQHW:LUHOHVV/$1&RQWUROOHU :/& DORQJZLWK$FFHVV3RLQWV $3V
DUHDOVRSUHVHQWLQLQWHUQHWHGJHWRVXSSRUWJXHVWXVHUV
偪:$17KH:$1PRGXOHLQFORXGEDVHG0'0GHSOR\PHQWSURYLGHV
03/6 931 FRQQHFWLYLW\ IURP EUDQFK RIILFH WR FRUSRUDWH RIILFH LQWHUQHW
DFFHVV IURP EUDQFK RIILFHV DQG FRQQHFWLYLW\ WR FORXGEDVHG 0'0
DSSOLFDWLRQ VRIWZDUH &ORXGEDVHG 0'0 VROXWLRQ PDLQWDLQV SROLFLHV DQG
FRQILJXUDWLRQ VHWWLQJV RI DOO %<2' GHYLFHV FRQQHFWHG WR WKH FRUSRUDWH
QHWZRUN
偪 :$1HGJH7KLVFRPSRQHQWDFWDVDIRFDOSRLQWRIDOOLQJUHVVHJUHVV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

03/6:$1WUDIILFHQWHULQJIURPDQGJRLQJWREUDQFKRIILFHV


)LJXUH&ORXG%DVHG0'0'HSOR\PHQW+LJK/HYHO$UFKLWHFWXUH

偪    6HUYLFHV 7KLV OD\HU FRQWDLQV :/& IRU DOO WKH $3V XVHG E\ XVHUV
ZLWKLQDFRUSRUDWHHQYLURQPHQW$Q\RWKHUVHUYLFHUHTXLUHGE\FRUSRUDWH
XVHUVOLNH173DQGLWVVXSSRUWLQJVHUYHUVFDQDOVREHIRXQGLQWKLVVHFWLRQ
偪&RUH/D\HU-XVWOLNHHYHU\RWKHUGHVLJQWKHFRUHLVWKHIRFDOSRLQWRI
WKH ZKROH QHWZRUN UHJDUGLQJ URXWLQJ RI WUDIILF LQ D FRUSRUDWH QHWZRUN
HQYLURQPHQW
偪%UDQFKRIILFHV7KLVFRPSRQHQWLVFRPSULVHGRIIHZURXWHUVDFWLQJDV
IRFDO SRLQW RI LQJUHVV DQG HJUHVV WUDIILF RXW RI EUDQFK RIILFHV 8VHUV FDQ
FRQQHFW WR EUDQFK RIILFH QHWZRUN E\ FRQQHFWLQJ WR DFFHVV VZLWFKHV RU
ZLUHOHVVDFFHVVSRLQWV $3V 

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

%ULQJ<RXU2ZQ'HYLFH %<2'
,Q WKLV VHFWLRQ WKH LPSRUWDQFH RI %ULQJ <RXU 2ZQ 'HYLFH %<2'  DQG LWV
KLJKOHYHO DUFKLWHFWXUH ZLOO EH GLVFXVVHG $SDUW IURP %<2' RQH RI LWV
PDQDJHPHQW DSSURDFK NQRZQ DV 0RELOH 'HYLFH 0DQDJHPHQW 0'0  ZLOO
DOVREHGLVFXVVHG
$OWKRXJKWKHFRQFHSWRI%<2'IDFLOLWDWHVWKHHQGXVHUVLQVRPHZD\LWDOVR
EULQJV QHZ FKDOOHQJHV IRU QHWZRUN HQJLQHHUV DQG GHVLJQHUV 7KH FRQVWDQW
FKDOOHQJH WKDW LV IDFHG E\ WRGD\
V QHWZRUN GHVLJQHUV WR SURYLGH VHDPOHVV
FRQQHFWLYLW\ ZKLOH PDLQWDLQLQJ D JRRG VHFXULW\ SRVWXUH RI DQ RUJDQL]DWLRQ
2UJDQL]DWLRQVVHFXULW\SROLFLHVPXVWFRQVWDQWO\EHUHYLHZHGWRPDNHVXUHWKDW
EULQJLQJDQ\RXWVLGHGHYLFHRYHUWKHFRUSRUDWHQHWZRUNZLOOQRWUHVXOWLQWKHIW
DQGFRPSULVHRIRUJDQL]DWLRQߞVGLJLWDODVVHWV

6RPHRIWKHUHDVRQVWKDWGHPDQG%<2'VROXWLRQVWREHLPSOHPHQWHGLQDQ
RUJDQL]DWLRQDUH
偪$ZLGHYDULHW\RIFRQVXPHUGHYLFHV,QWKHSDVWZHZHUHXVHGWR
KDYLQJ RQO\ 3&V FRQVWDQWO\ VLWWLQJ RQ WKH WDEOH DQG ZLUHG FRQQHFWLRQ
ZDVWKHRQO\SUHIHUUHGZD\RIFRPPXQLFDWLRQ,QWKHVWFHQWXU\QRW
RQO\KLJKHUGDWDUDWHVKDYHUHVXOWHGLQFRXQWOHVVRSSRUWXQLWLHVEXWWKH
YDULDQWVRIGHYLFHVRQWKHLQWHUQHWDUHDOVRLQFUHDVHG,IZHORRNDURXQG
ZHVHHPRELOHGHYLFHVOLNHVPDUWSKRQHVWDEOHWVDQGHYHQODSWRSVZKLFK
DUH FRQVWDQWO\ FRPPXQLFDWLQJ ZLWK HDFK RWKHU RYHU VRPH ZLUHG RU
ZLUHOHVV QHWZRUN (PSOR\HHV PD\ FRQQHFW WKHLU VPDUWSKRQHV WR
FRUSRUDWHQHWZRUNVGXULQJZRUNLQJKRXUVDQGWRWKHLQWHUQHWZKHQWKH\
PRYHWRDKRPHRUVRPHFDI©6XFKVLWXDWLRQVGHPDQG%<2'VROXWLRQ
WREHLPSOHPHQWHGLQWKHFRUSRUDWHHQYLURQPHQWWRVWD\VDIHIURPDQ\
NLQGRIWKHIW
偪1RIL[DWLPHIRU:RUN,QWKHSDVWZHZHUHXVHGWRIROORZLQJD
VWULFW KRXU ZRUNLQJ HQYLURQPHQW 1RZ ZH ZRUN GXULQJ OXQFK DQG
HYHQRXUZRUNLQJURVWHUVJHWXSGDWHGRQZHHNO\EDVHV6RPHWLPHVZH
HYHQZRUNGXULQJWKHQLJKWWRPHHWWKHGHDGOLQHV
偪    &RQQHFWLQJ WR FRUSRUDWH IURP DQ\ZKHUH (PSOR\HHV DOVR
GHPDQGWRFRQQHFWWRWKHFRUSRUDWHQHWZRUNDQ\WLPHHLWKHUWKH\DUHDW
KRPHRULQVRPHFDI©7KHHPHUJHQFHRIZLUHOHVVQHWZRUNVDQGPRELOH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

QHWZRUNVOLNH**DOVRHQDEOHVWKHPWRFRQQHFWHYHQIURPWKHPRVW
UHPRWHORFDWLRQRQHDUWK
%<2'$UFKLWHFWXUH)UDPHZRUN
7KHUHDUHUXOHVLQLPSOHPHQWLQJ%<2'LQDQRUJDQL]DWLRQ,WGHSHQGVRQWKH
FRPSDQ\ߞVSROLF\DERXWKRZIOH[LEOHWKH\DUHLQDFFHSWLQJDQGHQDEOLQJWKHLU
HPSOR\HHVWREULQJDORQJGLIIHUHQWW\SHVRIGHYLFHV,QWURGXFLQJ%<2'LQDQ
RUJDQL]DWLRQPD\DOVRUHVXOWLQLPSOHPHQWLQJRUGHSOR\LQJQHZVRIWZDUHDQG
KDUGZDUHIHDWXUHVWRFDWHUWKHVHFXULW\DVSHFWVRI%<2'
7KH &LVFR %<2' IUDPHZRUN LV EDVHG RQ &LVFR %RUGHUOHVV 1HWZRUN
$UFKLWHFWXUH DQG LW WULHV WR LPSOHPHQW EHVW FRPPRQ SUDFWLFHV %&3  LQ
GHVLJQLQJEUDQFKRIILFHKRPHRIILFHDQGFDPSXVDUHDQHWZRUNV
7KLVILJXUHVKRZVWKH&LVFR%<2'DUFKLWHFWXUHZLWKDVKRUWH[SODQDWLRQRI
HDFKFRPSRQHQWLQWKHFRPLQJVHFWLRQ


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH%<2'KLJKOHYHODUFKLWHFWXUH
%<2''HYLFHV7KHVHHQGSRLQWGHYLFHVDUHUHTXLUHGWRDFFHVVWKHFRUSRUDWH
QHWZRUNIRUGDLO\EXVLQHVVQHHG%<2'GHYLFHVPD\LQFOXGHERWKFRUSRUDWH
DQGSHUVRQDOO\RZQHGGHYLFHVUHJDUGOHVVRIWKHLUSK\VLFDOORFDWLRQ$WGD\
WKH\ PD\ EH DW WKH FRUSRUDWH RIILFH DQG DW QLJKW WKH\ PD\ EH VRPH FDI© RU
IRRGUHVWUDLQW&RPPRQ%<2'GHYLFHVLQFOXGHVPDUWSKRQHVODSWRSVHWF
:LUHOHVV $FFHVV 3RLQWV $3  &LVFR ZLUHOHVV DFFHVV SRLQWV $3V  SURYLGH
ZLUHOHVV FRQQHFWLYLW\ WR WKH FRUSRUDWH QHWZRUN IRU DERYH GHILQHG %<2'
GHYLFHV$FFHVVSRLQWVDUHLQVWDOOHGSK\VLFDOO\DWWKHFDPSXVEUDQFKRIILFH
RUHYHQDWKRPHRIILFHWRIDFLOLWDWHWKHHPSOR\HHV
:LUHOHVV /$1 &RQWUROOHUV :/$1 FRQWUROOHUV SURYLGHV FHQWUDOL]HG
PDQDJHPHQWDQGPRQLWRULQJRI&LVFR:/$1VROXWLRQ:/$1LVLQWHJUDWHG
ZLWK &LVFR ,GHQWLW\ 6HUYLFH (QJLQH WR HQIRUFH WKH DXWKRUL]DWLRQ DQG
DXWKHQWLFDWLRQRI%<2'HQGSRLQWGHYLFHV
,GHQWLW\ 6HUYLFH (QJLQH ,6(  ,6( LV RQH RI WKH PRVW FULWLFDO HOHPHQWV LQ
&LVFR %<2' DUFKLWHFWXUH DV LW LPSOHPHQWV $XWKHQWLFDWLRQ $XWKRUL]DWLRQ
DQG$FFRXQWLQJRQ%<2'HQGSRLQWGHYLFHV
&LVFR $Q\&RQQHFW 6HFXUH 0RELOLW\ &OLHQW &LVFR $Q\&RQQHFW &OLHQW
VRIWZDUH SURYLGHV FRQQHFWLYLW\ WR WKH FRUSRUDWH QHWZRUN IRU HQG XVHUV ,WV
XVHV [ IHDWXUHV WR SURYLGH DFFHVV WR FDPSXV RIILFH RU KRPH RIILFH
QHWZRUN:KHQHQGXVHUVQHHGWRFRQQHFWWRWKHSXEOLFLQWHUQHW$Q\&RQQHFW
XVHV931FRQQHFWLRQWRPDNHVXUHWKHFRQILGHQWLDOLW\RIFRUSRUDWHGDWD
,QWHJUDWHG 6HUYLFHV 5RXWHU ,65  &LVFR ,65 URXWHUV DUH SUHIHUUHG LQ
%<2' DUFKLWHFWXUH IRU SURYLQJ :$1 DQG LQWHUQHW DFFHVV IRU EUDQFK DQG
KRPH RIILFH QHWZRUNV 7KH\ DUH DOVR XVHG WR SURYLGH 931 FRQQHFWLYLW\ IRU
PRELOH%<2'GHYLFHVZLWKLQDQRUJDQL]DWLRQ
$JJUHJDWLRQ6HUYLFHV5RXWHU $65 &LVFR$65URXWHUVSURYLGH:$1DQG
LQWHUQHW DFFHVV IRU FRUSRUDWH DQG FDPSXV QHWZRUNV 7KH\ DOVR DFW DV
DJJUHJDWLRQSRLQWVIRUFRQQHFWLRQVFRPLQJIURPWKHEUDQFKDQGKRPHRIILFH
WRWKHFRUSRUDWHQHWZRUNVRI&LVFR%<2'VROXWLRQ
&ORXG:HE6HFXULW\ &:6 &LVFR&ORXG:HE6HFXULW\SURYLGHVHQKDQFHG
VHFXULW\IRUDOO%<2'GHYLFHVZKLFKDFFHVVWKHLQWHUQHWXVLQJSXEOLFKRWVSRWV
DQG**QHWZRUNV
$GDSWLYH 6HFXULW\ $SSOLDQFH $6$  &LVFR $6$ SURYLGHV WKH VWDQGDUG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

VHFXULW\ VROXWLRQV DW WKH LQWHUQHW HGJH RI FDPSXV EUDQFK DQG KRPH RIILFH
QHWZRUNVZLWKLQ%<2'DUFKLWHFWXUH$SDUWIURPLQWHJUDWLQJ,36,'6PRGXOH
ZLWKLQ LWVHOI $6$ DOVR DFWV DV WKH WHUPLQDWLRQ SRLQW RI 931 FRQQHFWLRQV
PDGH E\ &LVFR $Q\&RQQHFW &OLHQW VRIWZDUH RYHU WKH SXEOLF LQWHUQHW WR
IDFLOLWDWHWKH%<2'GHYLFHV
56$ 6HFXU,' 56$ 6HFXU,' JHQHUDWHV D RQHWLPH SDVVZRUG 273  IRU
%<2'GHYLFHVWKDWQHHGWRDFFHVVWKHQHWZRUNDSSOLFDWLRQVWKDWUHTXLUH273
$FWLYH 'LUHFWRU\ $FWLYH 'LUHFWRU\ SURYLGHV FHQWUDOL]HG FRPPDQG DQG
FRQWURO RI GRPDLQ XVHUV FRPSXWHUV DQG QHWZRUN SULQWHUV ,W UHVWULFWV WKH
DFFHVVWRQHWZRUNUHVRXUFHVRQO\WRWKHGHILQHGXVHUVDQGFRPSXWHUV
&HUWLILFDWH $XWKRULW\ &HUWLILFDWH DXWKRULW\ FDQ EH XVHG WR DOORZ DFFHVV WR
FRUSRUDWHQHWZRUNWRRQO\WKRVH%<2'GHYLFHVZKLFKKDYHDYDOLGFRUSRUDWH
FHUWLILFDWH LQVWDOOHG RQ WKHP $OO WKRVH GHYLFHV ZLWKRXW FHUWLILFDWH PD\ EH
JLYHQQRDFFHVVWRWKHFRUSRUDWHQHWZRUNEXWOLPLWHGLQWHUQHWFRQQHFWLYLW\DV
SHUGHILQHGLQWKHFRUSRUDWHSROLF\




0LQG0DS

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

0RELOH6HFXULW\*XLGHOLQHV
7KHUH DUH D ORW RI IHDWXUHV LQ D VPDUWSKRQH D QXPEHU RI WHFKQLTXHV DQG
PHWKRGV ZKLFK FDQ EH IROORZHG LQ RUGHU WR DYRLG DQ\ WURXEOH ZKLOH XVLQJ
PRELOHSKRQHV$SDUWIURPWKLVEXLOWLQIHDWXUHDQGSUHFDXWLRQVVHYHUDOWRROV
DUH DOVR DYDLODEOH RQ HYHU\ RIILFLDO DSSOLFDWLRQ VWRUHV WR SURYLGH XVHU EHWWHU
VHFXULW\ RI WKHLU GHYLFHV 6RPH RI WKH EHQHILFLDO JXLGHOLQHV WR VHFXUH \RXU
PRELOHSKRQHDUHDVIROORZV
$YRLGDXWRXSORDGRIILOHVDQGSKRWRV
3HUIRUPVHFXULW\DVVHVVPHQWRIDSSOLFDWLRQV
7XUQ%OXHWRRWKRII
$OORZRQO\QHFHVVDU\*36HQDEOHGDSSOLFDWLRQV
'R QRW FRQQHFW WR RSHQ QHWZRUNV RU SXEOLF QHWZRUNV XQOHVV LW LV
QHFHVVDU\
,QVWDOODSSOLFDWLRQVIURPWUXVWHGRURIILFLDOVWRUHV
&RQILJXUHVWULQJSDVVZRUGV
8VH0RELOH'HYLFH0DQDJHPHQW0'0VRIWZDUHV
8VH5HPRWH:LSH6HUYLFHV
8SGDWH2SHUDWLQJ6\VWHPV
'RQRWDOORZURRWLQJMDLOEUHDNLQJ
(QFU\SW\RXUSKRQH
3HULRGLFEDFNXS
)LOWHUHPDLOV
&RQILJXUHDSSOLFDWLRQFHUWLILFDWLRQUXOHV
&RQILJXUHPRELOHGHYLFHSROLFLHV
&RQILJXUHDXWR/RFN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx