Sei sulla pagina 1di 35

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.

com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&KDSWHU+DFNLQJ:LUHOHVV1HWZRUNV
7HFKQRORJ\%ULHI
:LUHOHVVQHWZRUNVDUHWKHPRVWFRPPRQDQGSRSXODUWHFKQRORJ\,QVWDOODWLRQ
RIWKHZLUHGQHWZRUNKDVEHHQUHSODFLQJWKHZLUHOHVVQHWZRUNEHFDXVHRILWV
HDVH DQG PRELOLW\ 8VLQJ ZLUHOHVV QHWZRUN LQFUHDVH QRW RQO\ PRELOLW\ LQ D
QHWZRUNEXWDOVRLQFUHDVHWKHIOH[LELOLW\IRUWKHHQGXVHUV$QRWKHUDGYDQWDJH
RI ZLUHOHVV WHFKQRORJ\ LV WR FRQQHFW WKRVH UHPRWH DUHDV ZKHUH ZLUHG
WHFKQRORJ\ LPSOHPHQWDWLRQ LV GLIILFXOW ,Q WKH HDUO\ HUD RI ZLUHOHVV
WHFKQRORJ\ WKH ZLUHOHVV QHWZRUN LV QRW VXSSRVHG WR EH VHFXUH HQRXJK WR
SURWHFW LQIRUPDWLRQ +RZHYHU D ORW RI HQFU\SWLRQ WHFKQLTXHV DUH XVHG WR
VHFXUHWKHZLUHOHVVFRPPXQLFDWLRQFKDQQHOV,QWKLVFKDSWHUZHZLOOGLVFXVV
WKH &RQFHSW RI ZLUHOHVV QHWZRUNV WKUHDW DQG YXOQHUDELOLWLHV DWWDFNV RQ
ZLUHOHVVWHFKQRORJLHVDQGWKHLUGHIHQGLQJWHFKQLTXHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

:LUHOHVV&RQFHSWV
:LUHOHVV1HWZRUNV
7KH ZLUHOHVV QHWZRUN LV D W\SH RI FRPSXWHU QHWZRUN WKDW LV FDSDEOH RI
WUDQVPLWWLQJDQGUHFHLYLQJWKHGDWDWKURXJKDZLUHOHVVPHGLXPVXFKDVUDGLR
ZDYHV 7KH PDMRU DGYDQWDJH RI WKLV QHWZRUN LV WR UHGXFH WKH FRVW RI ZLUHV
GHYLFHV DQG LQVWDOODWLRQ FRPSOH[LW\ RI ZLUHG QHWZRUNV 8VXDOO\ ZLUHOHVV
FRPPXQLFDWLRQ UHOLHV RQ UDGLR FRPPXQLFDWLRQ 'LIIHUHQW IUHTXHQF\ UDQJHV
DUH XVHG IRU GLIIHUHQW W\SH RI ZLUHOHVV WHFKQRORJ\ GHSHQGLQJ XSRQ WKH
UHTXLUHPHQWV7KHPRVWFRPPRQH[DPSOHRIZLUHOHVVQHWZRUNVLVFHOOSKRQH
QHWZRUNV 6DWHOOLWH FRPPXQLFDWLRQ PLFURZDYH FRPPXQLFDWLRQ HWF 7KHVH
ZLUHOHVV QHWZRUNV DUH SRSXODUO\ XVHG IRU 3HUVRQDO /RFDO ZLGH DUHD
QHWZRUNV
:LUHOHVV7HUPLQRORJLHV
*60
*OREDO6\VWHPIRU0RELOH&RPPXQLFDWLRQ *60 LVDVWDQGDUGE\(XURSHDQ
7HOHFRPPXQLFDWLRQ 6WDQGDUGV ,QVWLWXWH ,W LV D VHFRQG JHQHUDWLRQ *
SURWRFRO IRU GLJLWDO FHOOXODU QHWZRUNV * ZDV GHYHORSHG WR UHSODFH *
DQDORJ  WHFKQRORJ\ 7KLV WHFKQRORJ\ KDV EHHQ UHSODFHG E\ * 8076
VWDQGDUG IROORZHG E\ * /7( VWDQGDUG 0RVWO\ *60 QHWZRUNV RSHUDWH LQ
0+]RU0+]IUHTXHQF\EDQGV
$FFHVV3RLQW
,Q:LUHOHVVQHWZRUNVDQ$FFHVVSRLQW $3 RU:LUHOHVV$FFHVV3RLQW :$3
LVDKDUGZDUHGHYLFHWKDWDOORZVZLUHOHVVFRQQHFWLYLW\WRWKHHQGGHYLFHV7KH
DFFHVV SRLQW FDQ HLWKHU EH LQWHJUDWHG ZLWK D URXWHU RU D VHSDUDWH GHYLFH
FRQQHFWHGWRWKHURXWHU
66,'
6HUYLFH6HW,GHQWLILHU 66,' LVWKHQDPHRIDQ$FFHVV3RLQW
%66,'
0$&DGGUHVVRIDQ$FFHVV3RLQW
,60%DQG
,60EDQGDOVRFDOOHGWKHXQOLFHQVHGEDQGLVDUDGLRIUHTXHQF\EDQGGHGLFDWHG
WR WKH ,QGXVWULDO 6FLHQWLILF DQG 0HGLFDO SXUSRVH 7KH  *+] IUHTXHQF\
EDQG LV GHGLFDWHG WR ,60 0LFURZDYH RYHQV FRUGOHVV SKRQHV PHGLFDO
GLDWKHUP\ PDFKLQHV PLOLWDU\ UDGDUV DQG LQGXVWULDO KHDWHUV DUH VRPH RI WKH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

HTXLSPHQWWKDWXVHVWKLVEDQG
2UWKRJRQDO)UHTXHQF\'LYLVLRQ0XOWLSOH[LQJ 2)'0
2UWKRJRQDO IUHTXHQF\GLYLVLRQ PXOWLSOH[LQJ 2)'0  LV D PHWKRG RI GLJLWDO
HQFRGLQJ RQ PXOWLSOH FDUULHU IUHTXHQFLHV ,W LV XVHG LQ GLJLWDO WHOHYLVLRQV
DXGLREURDGFDVWLQJ'6/LQWHUQHWDQG*FRPPXQLFDWLRQ
)UHTXHQF\KRSSLQJ6SUHDG6SHFWUXP )+66
)+66LVDWHFKQLTXHRIWUDQVPLWWLQJUDGLRVLJQDOVE\VZLWFKLQJRUKRSSLQJWKH
FDUULHURIGLIIHUHQWIUHTXHQFLHV
7\SHVRI:LUHOHVV1HWZRUNV
7\SHV RI ZLUHOHVV QHWZRUNV GHSOR\HG LQ D JHRJUDSKLFDO DUHD FDQ EH
FDWHJRUL]HGDV
:LUHOHVV3HUVRQDO$UHD1HWZRUN :LUHOHVV3$1
:LUHOHVV/RFDO$UHD1HWZRUN :/$1
:LUHOHVV0HWURSROLWDQ$UHD1HWZRUN :0$1
:LUHOHVV:LGH$UHD1HWZRUN ::$1
+RZHYHU D ZLUHOHVV QHWZRUN FDQ EH GHILQHG LQ GLIIHUHQW W\SHV GHSHQGLQJ
XSRQ WKH GHSOR\PHQW VFHQDULRV 7KH IROORZLQJ DUH VRPH RI WKH ZLUHOHVV
QHWZRUNW\SHVWKDWDUHXVHGLQGLIIHUHQWVFHQDULRV










([WHQVLRQWRD:LUHG1HWZRUN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH([WHQVLRQWRDZLUHG1HWZRUN
0XOWLSOH$FFHVV3RLQWV

)LJXUH0XOWLSOH$FFHVV3RLQWV
**+RWVSRW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH+RWVSRW1HWZRUN
:LUHOHVV6WDQGDUGV
6WDQGDUG )UHTXHQF\ 0RGXODWLRQ 6SHHG
D *+] 2)'0 0ESV
E *+] '66V 0ESV
J *+] 2)'0'666 0ESV
Q *+] 2)'0 0ESV
 *+] 2)'0 0ESV
:L0$;
%OXHWRRWK *+]  ߙ0ESV
7DEOH:LUHOHVV6WDQGDUGV
6HUYLFH6HW,GHQWLILHU 66,'
6HUYLFH 6HW ,GHQWLILHU 66,'  LV WKH QDPH RI DQ $FFHVV 3RLQW 7HFKQLFDOO\
66,'LVDWRNHQWKDWLVXVHGWRLGHQWLI\QHWZRUNV :L)L RIE\WHV
7KH:L)LQHWZRUNLVEURDGFDVWLQJWKH66,'FRQWLQXRXVO\ LIHQDEOHG 7KLV
EURDGFDVWLQJ LV EDVLFDOO\ LQWHQGHG IRU LGHQWLILFDWLRQ DQG SUHVHQFH RI D
ZLUHOHVVQHWZRUN,I66,'EURDGFDVWLVGLVDEOHGZLUHOHVVGHYLFHVZLOOQRWILQG
WKHZLUHOHVVQHWZRUNXQOHVVWKH\DUHFRQILJXUHGZLWKWKH66,'PDQXDOO\E\
DFFHVV HDFK GHYLFH 'HIDXOW SDUDPHWHUV VXFK DV GHIDXOW 66,' DQG SDVVZRUG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

PXVWEHFKDQJHGWRDYRLGFRPSURPLVH
:L)L7HFKQRORJ\
:L)L LV ZLUHOHVV ORFDO DUHD QHWZRUNLQJ WHFKQRORJ\ ZKLFK IROORZV 
VWDQGDUGV 0DQ\ GHYLFHV VXFK DV SHUVRQDO FRPSXWHUV JDPLQJ FRQVROHV
PRELOH SKRQHV WDEOHWV PRGHUQ SULQWHUV DQG PXFK PRUH DUH :L)L
FRPSDWLEOH 7KHVH :L)L &RPSDWLEOH GHYLFHV DUH FRQQHFWHG WR WKH LQWHUQHW
WKURXJK D :LUHOHVV $FFHVV 3RLQW 7KHUH DUH VHYHUDO VXESURWRFROV LQ 
VXFKDVDEJQZKLFKDUHXVHGLQ:/$1
:L)L$XWKHQWLFDWLRQ0RGHV
7KHUHDUHWZREDVLFPRGHVRIDXWKHQWLFDWLRQLQ:L)LEDVHGQHWZRUNV
 2SHQ$XWKHQWLFDWLRQ
 6KDUHG.H\$XWKHQWLFDWLRQ
2SHQ$XWKHQWLFDWLRQ
2SHQV\VWHPDXWKHQWLFDWLRQSURFHVVUHTXLUHVVL[IUDPHFRPPXQLFDWLRQV
EHWZHHQFOLHQWDQGWKHUHVSRQGHUWRFRPSOHWHWKHSURFHVVRIDXWKHQWLFDWLRQ

)LJXUH2SHQ$XWKHQWLFDWLRQ
,QD:L)L%DVHG/$1QHWZRUNZKHQDZLUHOHVVFOLHQWLVDWWHPSWLQJWR
FRQQHFWWKURXJK:L)LLWLQLWLDWHVWKHSURFHVVRIDVVRFLDWLRQE\VHQGLQJ
WKHSUREHUHTXHVW7KLVSUREHUHTXHVWLVWRGLVFRYHUWKHQHWZRUN
7KLV SUREH UHTXHVW FRQWDLQV VXSSRUWHG GDWD UDWH LQIRUPDWLRQ RI WKH
FOLHQW $VVRFLDWLRQ LV VLPSO\ D SURFHVV RI FRQQHFWLQJ WR D ZLUHOHVV
QHWZRUN
7KLVSUREHUHTXHVWIURPWKHFOLHQWLVUHSOLHGZLWKDUHVSRQVHFRQWDLQLQJ
SDUDPHWHUVVXFKDV66,'GDWDUDWHHQFU\SWLRQHWFLIWKHDFFHVVSRLQW
IRXQG FRPSDWLEOH VXSSRUWHG GDWD UDWH HQFU\SWLRQ DQG DQRWKHU
SDUDPHWHUZLWKWKHFOLHQW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

7KHFOLHQWVHQGVDQRSHQDXWKHQWLFDWLRQUHTXHVW DXWKHQWLFDWLRQIUDPH
WRWKHDFFHVVSRLQWZLWKWKHVHTXHQFH[WRVHWDXWKHQWLFDWLRQRSHQ
7KH2SHQDXWKHQWLFDWLRQUHTXHVWLVUHSOLHGE\WKHDFFHVVSRLQWZLWKWKH
UHVSRQVHKDYLQJVHTXHQFH[
$IWHU UHFHLYLQJ RSHQ V\VWHP DXWKHQWLFDWLRQ UHVSRQVH WKH FOLHQW VHQGV
DVVRFLDWLRQUHTXHVWZLWKVHFXULW\SDUDPHWHUVVXFKDVFKRVHQHQFU\SWLRQ
WRWKHDFFHVVSRLQW
$FFHVV SRLQW UHVSRQGV ZLWK D UHTXHVW WR FRPSOHWH WKH SURFHVV RI
DVVRFLDWLRQDQGFOLHQWFDQVWDUWVHQGLQJGDWD

6KDUHG.H\$XWKHQWLFDWLRQ
6KDUHG.H\DXWKHQWLFDWLRQPRGHUHTXLUHVIRXUIUDPHVWRFRPSOHWHWKHSURFHVV
RIDXWKHQWLFDWLRQ

)LJXUH6KDUHG.H\$XWKHQWLFDWLRQ
7KH ILUVW IUDPH LV WKH LQLWLDO DXWKHQWLFDWLRQ UHTXHVW IUDPH WKDW VHQW E\
WKHFOLHQWWRWKHUHVSRQGHURUDFFHVVSRLQW
$FFHVV SRLQW UHVSRQGV WKH DXWKHQWLFDWLRQ UHTXHVW IUDPH ZLWK WKH
DXWKHQWLFDWLRQUHVSRQVHIUDPHZLWKWKHFKDOOHQJHWH[W
7KH FOLHQW ZLOO HQFU\SW WKH FKDOOHQJH ZLWK WKH VKDUHG VHFUHW NH\ DQG
VHQGLWEDFNWRWKHUHVSRQGHU
5HVSRQGHU GHFU\SWV WKH FKDOOHQJH ZLWK WKH VKDUHG VHFUHW NH\ ,I WKH
GHFU\SWHG FKDOOHQJH PDWFKHV ZLWK WKH FKDOOHQJH WH[W VXFFHVVIXO
DXWKHQWLFDWLRQUHVSRQVHIUDPHLVVHQWWRWKHFOLHQW
:L)L$XWKHQWLFDWLRQZLWK&HQWUDOL]HG$XWKHQWLFDWLRQ6HUYHU
1RZDGD\WKH%DVLFWHFKQRORJ\RI:/$1ZKLFKLVFRPPRQO\DQGZLGHO\
GHSOR\HG DQG VWLOO EHLQJ LQ XVH DOO RYHU WKH ZRUOG LV ,(((  7KH
$XWKHQWLFDWLRQ 2SWLRQ IRU ,(((  QHWZRUN LV 6KDUHG.H\
$XWKHQWLFDWLRQ PHFKDQLVP RU :(3 :LUHG (TXLYDOHQF\ 3ULYDF\  $QRWKHU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

RSWLRQLVWR2SHQ$XWKHQWLFDWLRQ7KHVH2SWLRQVDUHQRWFDSDEOHRIVHFXULQJ
WKHQHWZRUNKHQFHWKH,(((LVUHPDLQLQJVHFXUH
7KHVH WZR DXWKHQWLFDWLRQ PHFKDQLVPV 2SHQ DQG 6KDUHG $XWKHQWLFDWLRQ
FDQQRW HIIHFWLYHO\ VHFXUH WKH QHWZRUN EHFDXVH :(3 NH\ LV UHTXLUHG DQG LQ
6KDUHG.H\ $XWKHQWLFDWLRQ &KDOOHQJH LV IRUZDUGHG WR WKH FOLHQW ZKLFK FDQ
EH GHWHFWHG E\ KDFNHG ZKLFK FDQ GHWHFW FOHDU WH[W FKDOOHQJH SDFNHW DQG
(QFU\SWHGSDFNHWV
,((( [ FRPHV ZLWK DQ DOWHUQDWLYH :LUHOHVV /$1 6HFXULW\ IHDWXUH WKDW
RIIHUV PRUH HQKDQFHG XVHU DXWKHQWLFDWLRQ RSWLRQ ZLWK '\QDPLF NH\
GLVWULEXWLRQ,((([LVIRFXVHGVROXWLRQIRU:/$1IUDPHZRUNRIIHULQJ
&HQWUDO $XWKHQWLFDWLRQ ,((( [ LV GHSOR\HG ZLWK ([WHQVLEOH
$XWKHQWLFDWLRQ3URWRFRO ($3 DV:/$16HFXULW\6ROXWLRQ
7KH PDMRU FRPSRQHQWV RQ ZKLFK WKLV HQKDQFHG :/$1 6HFXULW\ VROXWLRQ
,((([ZLWK($3GHSHQGVDUH
 $XWKHQWLFDWLRQ
 (QFU\SWLRQ
 &HQWUDO3ROLF\
$XWKHQWLFDWLRQ0XWXDO$XWKHQWLFDWLRQSURFHVVEHWZHHQ(QGSRLQW8VHUDQG
$XWKHQWLFDWLRQ6HUYHU5$',86LHFRPPRQO\,6(RU$&6
(QFU\SWLRQ (QFU\SWLRQ NH\V DUH G\QDPLFDOO\ DOORFDWHG DIWHU DXWKHQWLFDWLRQ
SURFHVV
&HQWUDO3ROLF\&HQWUDOSROLF\RIIHUVPDQDJHPHQWDQG&RQWUROOLQJRYHUUH
DXWKHQWLFDWLRQVHVVLRQWLPHRXWUHJHQHUDWLRQDQGHQFU\SWLRQNH\VHWF


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,((([($3$XWKHQWLFDWLRQ)ORZ

:LUHOHVV[ߙ($3$XWKHQWLFDWLRQ)ORZ
$ ,Q WKH DERYH ILJXUH :LUHOHVV 8VHU ZLWK ($3 6XSSOLFDQW FRQQHFWV WKH
QHWZRUNWRDFFHVVWKHUHVRXUFHVWKURXJKDQ$FFHVV3RLQW
% $VLWFRQQHFWVDQGOLQNWXUQVXSWKH$FFHVVSRLQWZLOOEORFNDOOWUDIILF
IURP WKH UHFHQWO\ FRQQHFWHG GHYLFH XQWLO WKLV XVHU ORJV LQ WR WKH
QHWZRUN
& $XVHUZLWK($36XSSOLFDQWSURYLGHORJLQ&UHGHQWLDOVWKDWFRPPRQO\
DUH 8VHUQDPH DQG 3DVVZRUG EXW LW FDQ EH 8VHU ,' DQG 2QH7LPH
SDVVZRUG RU FRPELQDWLRQ RI 8VHU ,' DQG &HUWLILFDWH :KHQ 8VHU
SURYLGHV ORJLQ FUHGHQWLDOV WKHVH FUHGHQWLDOV DUH DXWKHQWLFDWHG E\ WKH
$XWKHQWLFDWLRQVHUYHUWKDWLV5$',86VHUYHU
' 0XWXDO $XWKHQWLFDWLRQ LV SHUIRUPLQJ DW SRLQW ' DQG ( EHWZHHQ WKH
DXWKHQWLFDWLRQ VHUYHU DQG &OLHQW 7KLV LV D WZRSKDVH DXWKHQWLFDWLRQ
SURFHVV$WILUVWSKDVHWKHVHUYHUDXWKHQWLFDWHV8VHU
( $WWKHVHFRQGSKDVH8VHUDXWKHQWLFDWHV6HUYHURUYLFHYHUVD
) $IWHUWKHPXWXDODXWKHQWLFDWLRQSURFHVVPXWXDOGHWHUPLQDWLRQRI:(3
NH\ EHWZHHQ VHUYHU DQG FOLHQW LV SHUIRUPHG 7KH FOLHQW ZLOO VDYH WKLV
VHVVLRQNH\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

* 5$',86 DXWKHQWLFDWLRQ VHUYHU VHQGV WKLV VHVVLRQ NH\ WR WKH $FFHVV
SRLQW
+ ,Q WKH HQG $FFHVV SRLQW QRZ HQFU\SWV WKH %URDGFDVW NH\ ZLWK WKH
VHVVLRQNH\DQGVHQGWKHHQFU\SWHGNH\WRWKHFOLHQW
, 7KH FOLHQW DOUHDG\ KDV 6HVVLRQ NH\ ZKLFK ZLOO XVH IRU GHFU\SWLRQ RI
HQFU\SWHGEURDGFDVWNH\SDFNHW1RZ&OLHQWFDQFRPPXQLFDWHZLWKWKH
$FFHVVSRLQWXVLQJVHVVLRQDQGEURDGFDVWNH\V
:L)L&KDONLQJ
:L)L &KDONLQJ LQFOXGHV VHYHUDO PHWKRGV WR GHWHFW RSHQ ZLUHOHVV QHWZRUNV
7KHVHWHFKQLTXHVLQFOXGH
:DU:DONLQJ:DONLQJDURXQGWRGHWHFWRSHQ:L)LQHWZRUNV
:DU&KDONLQJ8VLQJ6\PERODQG6LJQVWRDGYHUWLVH2SHQ:L)L
QHWZRUNV
:DU)O\LQJ'HWHFWLRQRIRSHQ:L)LQHWZRUNVXVLQJ'URQHV
:DU'ULYLQJ'ULYLQJDURXQGWRGHWHFW2SHQ:L)LQHWZRUNV

)LJXUH:L)L6\PEROV

7\SHVRI:LUHOHVV$QWHQQD
'LUHFWLRQDO$QWHQQD

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

'LUHFWLRQDO DQWHQQDV DUH GHVLJQHG WR IXQFWLRQ LQ D VSHFLILF GLUHFWLRQ WR


LPSURYHWKHHIILFLHQF\RIWKHDQWHQQDZKLOHFRPPXQLFDWLRQE\UHGXFLQJWKH
LQWHUIHUHQFH0RVWFRPPRQW\SHRIGLUHFWLRQDODQWHQQDLVD'LVKXVHZLWK
VDWHOOLWH 79 DQG LQWHUQHW 2WKHU W\SHV RI GLUHFWLRQDO DQWHQQDV DUH <DJL
DQWHQQD 4XDG DQWHQQD +RUQ DQWHQQD %LOOERDUG DQWHQQD DQG +HOLFDO
DQWHQQD
2PQLGLUHFWLRQDO$QWHQQD
$Q RPQLGLUHFWLRQDO DQWHQQD LV WKRVH DQWHQQDV WKDW UDGLDWH XQLIRUPO\ LQ DOO
GLUHFWLRQV7KHUDGLDWLRQSDWWHUQLVRIWHQGHVFULEHGDV'RXJKQXWVKDSHG0RVW
FRPPRQ XVH RI 2PQLGLUHFWLRQDO DQWHQQDV LV LQ UDGLR EURDGFDVWLQJ FHOO
SKRQH DQG *36 7\SHV RI WKH 2PQLGLUHFWLRQDO DQWHQQD LQFOXGHV 'LSROH
DQWHQQDDQG5XEEHU'XFN\DQWHQQD

)LJXUH7\SHVRI$QWHQQD
3DUDEROLF$QWHQQD
3DUDEROLF $QWHQQD DV GHILQHG ZLWK WKH QDPH LV GHSHQG XSRQ SDUDEROLF
UHIOHFWRU 7KH FXUYHG VXUIDFH RI SDUDEROD GLUHFWV WKH UDGLR ZDYHV 0RVW
SRSXODUW\SHRISDUDEROLFDQWHQQDLVFDOOHG'LVK$QWHQQDRU3DUDEROLF'LVK
8VHRISDUDEROLFDQWHQQDVLVLQ5DGDUVZHDWKHUGHWHFWLRQVDWHOOLWHWHOHYLVLRQ
HWF
<DJL$QWHQQD
<DJL8GD DQWHQQD WKDW LV FRPPRQO\ NQRZQ DV <DJL DQWHQQD LV WKH W\SH RI
GLUHFWLRQDODQWHQQDLVFRPSULVHGRI3DUDVLWLFHOHPHQWVDQGGULYHQHOHPHQWV,W
LVOLJKWZHLJKWLQH[SHQVLYHDQGVLPSOHWRFRQVWUXFW,WLVXVHGDVDWHUUHVWULDO

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

WHOHYLVLRQDQWHQQDSRLQWWRSRLQWIL[HGFRPPXQLFDWLRQLQUDGDUDQWHQQDHWF
'LSROH$QWHQQD
7KH GLSROH DQWHQQD LV WKH VLPSOHVW DQWHQQD FRQVLVWLQJ RI WZR LGHQWLFDO
GLSROHV2QHVLGHLVFRQQHFWHGWRWKHIHHGOLQHZKHUHDVDQRWKHULVFRQQHFWHGWR
WKHJURXQG0RVWSRSXODUXVHRI'LSROHDQWHQQDLVLQ)0UHFHLYLQJDQWHQQD
DQG79DQWHQQD

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

:LUHOHVV(QFU\SWLRQ
:(3(QFU\SWLRQ
:LUHG (TXLYDOHQW 3ULYDF\ :(3  LV DQ ROGHVW DQG ZHDNHVW HQFU\SWLRQ
SURWRFRO ,W ZDV GHYHORSHG WR HQVXUH WKH VHFXULW\ RI ZLUHOHVV SURWRFROV
KRZHYHU LW LV KLJKO\ YXOQHUDEOH ,W XVHV ELW LQLWLDOL]DWLRQ YHFWRU ,9  WR
FUHDWH D VWUHDP FLSKHU 5& ZLWK &\FOLF 5HGXQGDQW &KHFN &5&  WR HQVXUH
FRQILGHQWLDOLW\DQGLQWHJULW\6WDQGDUGELW:(3XVHVWKHELWNH\
ELW :(3 XVHV ELW NH\ DQG ELW :(3 XVHV D ELW NH\
$XWKHQWLFDWLRQVXVHGZLWK:(3DUH2SHQ6\VWHPDXWKHQWLFDWLRQDQG6KDUHG
.H\DXWKHQWLFDWLRQ
:RUNLQJRI:(3(QFU\SWLRQ
,QLWLDOL]DWLRQ 9HFWRU ,9  DQG .H\ WRJHWKHU LV FDOOHG :(3 6HHG 7KLV :(3
6HHG LV XVHG WR IURP 5& .H\ 5& JHQHUDWHV D SVHXGRUDQGRP VWUHDP RI
ELWV7KLVSVHXGRUDQGRPVWUHDPLV;25HGZLWKWKH3ODLQWH[WWRHQFU\SWWKH
GDWD &5& &KHFNVXP LV XVHG WR FDOFXODWH WKH ,QWHJULW\ &KHFN 9DOXH
,&9 

)LJXUH:(3(QFU\SWLRQ)ORZ
:HDN,QLWLDOL]DWLRQ9HFWRUV ,9
7KHRQHRIWKHPDMRULVVXHVZLWK:(3LVZLWK,QLWLDOL]DWLRQ9HFWRU ,9 ,9
YDOXHLVWRRVPDOOWRSURWHFWIURPUHXVHDQGUHSOD\5&$OJRULWKPXVHV,9
DQG.H\WRFUHDWHDVWUHDPXVLQJ.H\6FKHGXOLQJDOJRULWKP:HDN,9UHYHDO
LQIRUPDWLRQ&ROOHFWLRQRIZHDN,9ZLOOEHWKHEDVHNH\:(3KDVQREXLOWLQ
SURYLVLRQWRXSGDWHNH\
%UHDNLQJ:(3(QFU\SWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

%UHDNLQJ :(3 HQFU\SWLRQ FDQ EH SHUIRUPHG E\ IROORZLQJ WKH VWHSV
PHQWLRQHGEHORZ
 0RQLWRUWKH$FFHVVSRLQWFKDQQHO
 7HVW,QMHFWLRQ&DSDELOLW\WRWKH$FFHVVSRLQW
 8VHWRROIRU)DNH$XWKHQWLFDWLRQ
 6QLIIWKHSDFNHWVXVLQJ:L)L6QLIILQJWRROV
 8VH(QFU\SWLRQWRROWRLQMHFW(QFU\SWHGSDFNHWV
 8VHWKH&UDFNLQJWRROWRH[WUDFWWKHHQFU\SWLRQNH\IURP,9
:3$(QFU\SWLRQ
:L)L 3URWHFWHG $FFHVV :3$  LV DQRWKHU GDWD HQFU\SWLRQ WHFKQLTXH WKDW LV
SRSXODUO\XVHGIRU:/$1QHWZRUNEDVHGRQL6WDQGDUGV7KLVVHFXULW\
SURWRFRO LV GHYHORSHG E\ :L)L $OOLDQFH WR VHFXUH :/$1 QHWZRUN DV D
VROXWLRQRIZHDNQHVVDQGYXOQHUDELOLWLHVIRXQGLQ:LUHG(TXLYDOHQW3ULYDF\
:(3  'HSOR\PHQW RI :3$ UHTXLUHV ILUPZDUH XSJUDGH IRU :LUHOHVV
QHWZRUNLQWHUIDFHFDUGVWKDWDUHGHVLJQHGIRU:(37HPSRUDO.H\,QWHJULW\
3URWRFRO 7.,3 HQVXUHVSHUSDFNHWNH\E\G\QDPLFDOO\JHQHUDWLQJDQHZNH\
IRUHDFKSDFNHWRIELWWRSUHYHQWDWKUHDWWKDWLVYXOQHUDEOHWR:(3:3$
DOVR FRQWDLQ 0HVVDJH ,QWHJULW\ &KHFN DV D VROXWLRQ RI &\FOLF 5HGXQGDQF\
&KHFN &5&  WKDW LV LQWURGXFHG LQ :(3 WR RYHUFRPH WKH IODZ RI VWURQJ
LQWHJULW\YDOLGDWLRQ
7HPSRUDO.H\,QWHJULW\3URWRFRO
7HPSRUDO .H\ ,QWHJULW\ 3URWRFRO 7.,3  LV D SURWRFRO WKDW LV XVHG LQ ,(((
L:LUHOHVVQHWZRUNV7KLVSURWRFROLVXVHGLQ:L)L3URWHFWHG$FFHVV
:3$ 7.,3KDVLQWURGXFHGWKUHHVHFXULW\IHDWXUHV
 6HFUHWURRWNH\DQG,QLWLDOL]DWLRQ9HFWRU ,9 0L[LQJEHIRUH5&
 6HTXHQFH &RXQWHU WR HQVXUH UHFHLYLQJ LQ RUGHU DQG SUHYHQW UHSOD\
DWWDFNV
 ELW0HVVDJH,QWHJULW\&KHFN 0,& 
:RUNLQJRI:3$(QFU\SWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH:3$(QFU\SWLRQ)ORZ

 7HPSRUDO (QFU\SWLRQ .H\ 7UDQVPLW $GGUHVV DQG 7.,3 6HTXHQFH
QXPEHULVLQLWLDOO\PL[HGWRFUHDWH:(3VHHGEHIRUHLQSXWWRWKH5&
DOJRULWKP
 :(3VHHGLVLQSXWWRWKH5&DOJRULWKPWRFUHDWH.H\6WUHDP
 0$&6HUYLFH'DWD8QLW 06'8 DQG0HVVDJH,QWHJULW\&KHFN 0,&
DUHFRPELQHGXVLQJ0LFKDHO$OJRULWKP
 7KH UHVXOWDQW RI 0LFKDHO $OJRULWKP LV IUDJPHQWHG WR JHQHUDWH 0$&
3URWRFRO'DWD8QLW 03'8 
 ELW,QWHJULW\&KHFN9DOXH ,&9 LVFDOFXODWHGIRU03'8
 7KH FRPELQDWLRQ RI 03'8 DQG ,&9 LV ;25HG ZLWK WKH .H\ 6WUHDP
FUHDWHGLQWKHVHFRQGVWHSWRFUHDWH&LSKHUWH[W
:3$(QFU\SWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

:3$LVGHVLJQHGRYHUFRPHDQGUHSODFH:3$SURYLGLQJHYHQPRUHEHWWHU
VHFXULW\XVLQJELWHQFU\SWLRQDQGLQGLYLGXDOHQFU\SWLRQIRUHDFKXVHUWR
PDNHLWPRUHFRPSOLFDWHGDQGKDUGHUWRFRPSURPLVH,WXVHV&RXQWHU0RGH
&LSKHU%ORFN&KDLQLQJ0HVVDJH$XWKHQWLFDWLRQ&RGH3URWRFRO &&03 DQG
$GYDQFHG (QFU\SWLRQ 6WDQGDUG $(6  EDVHG HQFU\SWLRQ :L)L $OORZDQFH
DOVR LQWURGXFHV QH[W VHFXULW\ SURWRFRO :3$ LQ WKH \HDU  WR RYHUFRPH
:3$ZLWKDGGLWLRQDOFDSDELOLWLHVDQGVHFXULW\
:3$3HUVRQDOUHTXLUHGDSDVVZRUG 3UH6KDUHG.H\ WRSURWHFWWKHQHWZRUN
IURP XQDXWKRUL]HG DFFHVV ,Q WKLV PRGH HDFK ZLUHOHVV GHYLFH LV HQFU\SWLQJ
WKHWUDIILFZLWKDELWGHULYHGNH\IURPWKHSDVVSKUDVHRIWR$6&,,
FKDUDFWHUV :3$(QWHUSULVH LQFOXGHV ($3 RU 5$',86 IRU D FHQWUDOL]HG
DXWKHQWLFDWLRQ PHFKDQLVP 8VLQJ WKLV FHQWUDOL]HG DXWKHQWLFDWLRQ ZLWK
DGGLWLRQDO DXWKHQWLFDWLRQ PHFKDQLVPV VXFK DV .HUEHURV DQG &HUWLILFDWHV
ZLUHOHVVQHWZRUNVFDQEHPRUHVHFXUH
(QFU\SWLRQ (QFU\SWLRQ ,9 (QFU\SWLRQ ,QWHJULW\ &KHFN
$OJRULWKP 6L]H .H\ 0HFKDQLVP
:(3 5& ELWV %LWV &5&
:3$ 5&7.,3 ELWV %LWV 0LFKDHO $OJRULWKP
DQG&5&
:3$ $(6  ELWV %LWV &%&0$&
&&03
7DEOH&RPSDULQJ(QFU\SWLRQSURWRFROV
%UHDNLQJ:3$(QFU\SWLRQ
 %UXWH )RUFLQJ WKH :3$ 36. XVHUGHILQHG SDVVZRUG XVLQJ 'LFWLRQDU\
$WWDFN
 &DSWXUH WKH $XWKHQWLFDWLRQ +DQGVKDNLQJ SDFNHWV RI :3$:3$ WR
FUDFN:3$.H\RIIOLQH
 )RUFLQJ WKH &RQQHFWHG FOLHQW WR GLVFRQQHFW DQG WKHQ UHFRQQHFW WR
FDSWXUH DXWKHQWLFDWLRQ SDFNHWV WR EUXWH IRUFH WKH 3DLUZLVH 0DVWHU NH\
30.

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

:LUHOHVV7KUHDWV
$FFHVV&RQWURO$WWDFNV
:LUHOHVV $FFHVV &RQWURO $WWDFN DUH WKRVH DWWDFNV E\ DWWDFNHU SHQHWUDWH WKH
ZLUHOHVV QHWZRUN E\ HYDGLQJ DFFHVV FRQWURO SDUDPHWHU VXFK DV E\ VSRRILQJ
0$&DGGUHVV5RXJH$FFHVVSRLQWDQGPLVFRQILJXUDWLRQVHWF
,QWHJULW\DQG&RQILGHQWLDOLW\$WWDFNV
,QWHJULW\DWWDFNVLQFOXGH:(3LQMHFWLRQ'DWDIUDPHLQMHFWLRQUHSOD\DWWDFNV
DQGELWIOLSSLQJHWF&RQILGHQWLDOLW\DWWDFNVLQFOXGHWUDIILFDQDO\VLVVHVVLRQ
KLMDFNLQJ PDVTXHUDGLQJ FUDFNLQJ 0,70 DWWDFNV HWF LQ RUGHU WR LQWHUFHSW
WKHFRQILGHQWLDOLQIRUPDWLRQ


$YDLODELOLW\$WWDFNV
$YDLODELOLW\DWWDFNVLQFOXGH)ORRGLQJDQG'HQLDORIVHUYLFHDWWDFNVLQRUGHUWR
SUHYHQWOHJLWLPDWHXVHUVIURPFRQQHFWLQJRUDFFHVVLQJWKHZLUHOHVVQHWZRUN
$YDLODELOLW\DWWDFNVFDQEHPDGHE\$XWKHQWLFDWLRQIORRGLQJ$53SRLVRQLQJ
'HDXWKHQWLFDWLRQDWWDFNVGLVDVVRFLDWLRQDWWDFNHWF
$XWKHQWLFDWLRQ$WWDFNV
$XWKHQWLFDWLRQ DWWDFN LV LQWHQGHG WR VWHDO LGHQWLW\ LQIRUPDWLRQ RU OHJLWLPDWH
ZLUHOHVV FOLHQW LQ RUGHU WR JDLQ DFFHVV WR WKH QHWZRUN E\ LPSHUVRQDWLQJ ,W
PD\LQFOXGH3DVVZRUGFUDFNLQJWHFKQLTXHVLGHQWLW\WKHIWSDVVZRUGJXHVVLQJ
5RJXH$FFHVV3RLQW$WWDFN
5RJXH$FFHVVSRLQWDWWDFNLVDWHFKQLTXHLQZKLFKDURJXHDFFHVVSRLQWLQD
SODFH ZLWK D OHJLWLPDWH ZLUHOHVV QHWZRUN ZLWK WKH XVXDOO\ WKH VDPH 66,'
8VHU DVVXPHV WKH URJXH DFFHVV SRLQW DV WKH OHJLWLPDWH DFFHVV SRLQW DQG
FRQQHFWV ZLWK 2QFH D XVHU LV FRQQHFWHG ZLWK WKH URJXH DFFHVV SRLQW DOO
WUDIILF ZLOO GLUHFW WKURXJK LW DQG WKH DWWDFNHU VQLIIV WKH SDFNHW WR PRQLWRU
DFWLYLW\
&OLHQW0LVDVVRFLDWLRQ
&OLHQW 0LVDVVRFLDWLRQ LQFOXGHV D URJXH DFFHVV SRLQW RXWVLGH WKH SDUDPHWHUV
RIDFRUSRUDWHQHWZRUN2QFHDQHPSOR\HHLVFRQQHFWHGZLWKLWE\E\SDVVLQJ
WKHVHFXULW\SROLFLHVDOOWUDIILFZLOOEHSDVVLQJWKURXJKWKHDWWDFNHU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

0LVFRQILJXUHG$FFHVV3RLQW$WWDFN
0LVFRQILJXUHG DFFHVV SRLQW DWWDFN LQFOXGH DFFHVV WR WKH OHJLWLPDWH DFFHVV
SRLQWE\WDNLQJDGYDQWDJHRILWVPLVFRQILJXUDWLRQV0LVFRQILJXUDWLRQPD\EH
OLNH ZHDN SDVVZRUG GHIDXOW SDVVZRUG FRQILJXUDWLRQ :LUHOHVV QHWZRUN
ZLWKRXWSDVVZRUGSURWHFWLRQHWF
8QDXWKRUL]HG$VVRFLDWLRQ
7KHXQDXWKRUL]HGDVVRFLDWLRQLVDQRWKHUWHFKQLTXHVXVHULQIHFWHGZLWK7URMDQ
DUH ZRUNLQJ DV DQ DFFHVV SRLQW ZKLFK DOORZV WKH DWWDFNHU WR FRQQHFW WKH
FRUSRUDWH QHWZRUN WKURXJK LW 7KHVH 7URMDQ HQDEOH WKH VRIW DFFHVV SRLQW
WKURXJKWKHPDOLFLRXVVFULSWLQJZKLFKDOORZVWKHGHYLFHVVXFKDVDODSWRSWR
WXUQWKHLU:/$1FDUGVLQWRWUDQVPLWWLQJD:/$1QHWZRUN
$G+RF&RQQHFWLRQ$WWDFN
$G +RF FRQQHFWLRQ LV LQVHFXUH QHWZRUN EHFDXVH WKH\ GR QRW SURYLGH VWURQJ
DXWKHQWLFDWLRQ DQG HQFU\SWLRQ $Q DWWDFNHU PD\ DWWHPSW WR FRPSURPLVH WKH
FOLHQWLQDGKRFPRGH
-DPPLQJ6LJQDO$WWDFN
6LJQDO-DPPLQJDWWDFNVUHTXLUHGKLJKJDLQIUHTXHQF\VLJQDOZKLFKFDXVHVWKH
'HQLDORIVHUYLFHDWWDFN&DUULHU6HQVH0XOWLSOH$FFHVV&ROOLVLRQ$YRLGDQFH
DOJRULWKPUHTXLUHVZDLWLQJWLPHWRWUDQVPLWDIWHUGHWHFWLRQRIDFROOLVLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

:LUHOHVV+DFNLQJ0HWKRGRORJ\
:L)L'LVFRYHU\
7KHILUVWVWHSLQKDFNLQJD:LUHOHVVQHWZRUNLQRUGHUWRFRPSURPLVHLWLVWR
JHW LQIRUPDWLRQ DERXW LW 7KLV LQIRUPDWLRQ FDQ EH FROOHFWHG E\ $FWLYH
IRRWSULQWLQJ SDVVLYH IRRWSULQWLQJ PHWKRG DV ZHOO XVLQJ GLIIHUHQW WRROV
3DVVLYH IRRWSULQWLQJ LQFOXGHV VQLIILQJ WKH SDFNHWV XVLQJ WRROV VXFK DV
ߡ$LUZDYHVߢ ߡ1HW6XUYH\RUߢ DQG RWKHU WRROV WR UHYHDO LQIRUPDWLRQ VXFK DV
/LYH ZLUHOHVV QHWZRUNV DURXQG $FWLYH IRRWSULQWLQJ LQFOXGHV SURELQJ WKH
$FFHVVSRLQWWRJDLQLQIRUPDWLRQ,Q$FWLYHIRRWSULQWLQJWKHDWWDFNHUVHQGVD
SUREHUHTXHVWDQGDFFHVVSRLQWVHQGVSUREHUHVSRQVH
*360DSSLQJ
*36PDSSLQJLVWKHSURFHVVWRFUHDWHDOLVWRIGLVFRYHUHG:L)LQHWZRUNVWR
FUHDWHUHFRUGVXVLQJ*36*36WUDFHWKHORFDWLRQRIGLVFRYHUHG:L)L7KLV
LQIRUPDWLRQFDQEHXVHGIRUVHOOLQJWRWKHDWWDFNHURUKDFNLQJFRPPXQLWLHV
:LUHOHVV7UDIILF$QDO\VLV
7UDIILFDQDO\VLVRI:LUHOHVVQHWZRUNLQFOXGHVFDSWXULQJWKHSDFNHWWRUHYHDO
DQ\LQIRUPDWLRQVXFKDVEURDGFDVW66,'$XWKHQWLFDWLRQPHWKRGV(QFU\SWLRQ
WHFKQLTXHVHWF7KHUHDUHVHYHUDOWRROVDYDLODEOHWRFDSWXUHDQGDQDO\]HWKH
ZLUHOHVVQHWZRUNVXFKDV:LUHVKDUN3LORWWRRO2PQLSHHN&RPPYLHZHWF
/DXQFK:LUHOHVV$WWDFNV
$Q DWWDFNHU XVLQJ WKH WRRO VXFK DV $LUFUDFNQJ DQG RWKHU DWWDFNV VXFK DV
$53 SRLVRQLQJ 0,70 )UDJPHQWDWLRQ 0$& 6SRRILQJ 'HDXWKHQWLFDWLRQ
'LVDVVRFLDWLRQ DQG URJXH DFFHVV SRLQW WR LQLWLDWH WKH DWWDFN RQ D ZLUHOHVV
QHWZRUN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH:L)L3HQ7HVWLQJ)UDPHZRUN


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

%OXHWRRWK+DFNLQJ
%OXHWRRWKKDFNLQJUHIHUVWRWKHDWWDFNVRQ%OXHWRRWKEDVHGFRPPXQLFDWLRQ
%OXHWRRWK LV D SRSXODU ZLUHOHVV WHFKQRORJ\ ZKLFK FDQ EH VHHQ RQ DOPRVW
HYHU\ PRELOH GHYLFH %OXHWRRWK WHFKQRORJ\ LV XVHG IRU VKRUWUDQJH
FRPPXQLFDWLRQ EHWZHHQ WKH GHYLFHV %OXHWRRWK RSHUDWHV DW  *+]
IUHTXHQF\DQGFDQEHHIIHFWLYHXSWRPHWHUV
%OXHWRRWKGLVFRYHU\IHDWXUHHQDEOHVWKHGHYLFHVWREHGLVFRYHUDEOHE\DQRWKHU
%OXHWRRWKHQDEOHGGHYLFHV'LVFRYHU\IHDWXUHPD\EHHQDEOHGIRUDOOWKHWLPH
DVZHOODVVHWXSWREHGLVFRYHUDEOHIRUDVKRUWSHULRGRIWLPH
%OXHWRRWK$WWDFNV
%OXH6PDFNLQJ
%OXH6PDFN LV WKH W\SH RI 'R6 DWWDFN IRU %OXHWRRWK ,Q %OXH6PDFNLQJ WKH
WDUJHWGHYLFHLVRYHUIORZHGE\WKHUDQGRPSDFNHWV3LQJRIGHDWKLVXVHGWR
ODXQFK WKLV %OXHWRRWK DWWDFN E\ IORRGLQJ D ODUJH QXPEHU RI HFKR SDFNHWV
FDXVHV'R6
%OXH%XJJLQJ
%OXH%XJJLQJLVDQRWKHUW\SHRI%OXHWRRWKDWWDFNLQZKLFKDQDWWDFNHUH[SORLWV
%OXHWRRWK GHYLFH WR JDLQ DFFHVV DQG FRPSURPLVH LWV VHFXULW\ %DVLFDOO\
%OXH%XJJLQJLVDWHFKQLTXHWRDFFHVVWKH%OXHWRRWKHQDEOHGGHYLFHUHPRWHO\
7KH DWWDFNHU XVHV WKLV WR WUDFN YLFWLP DFFHVV WKH FRQWDFW OLVW PHVVDJHV DQG
RWKHUSHUVRQDOLQIRUPDWLRQ
%OXH-DFNLQJ
%OXH-DFNLQJ LV DQ DUW WR VHQG XQVROLFLWHG PHVVDJHV WR %OXHWRRWK HQDEOHG
GHYLFHV %OXH-DFNLQJ KDFNHU FDQ VHQG PHVVDJHV LPDJHV DQG RWKHU ILOHV WR
DQRWKHU%OXHWRRWKGHYLFH
%OXH3ULQWLQJ
%OXH3ULQWLQJ LV D WHFKQLTXH RU D PHWKRG IRU H[WUDFWLQJ WKH LQIRUPDWLRQ DQG
GHWDLOV DERXW D UHPRWH %OXHWRRWK GHYLFH 7KLV LQIRUPDWLRQ PD\ EH XVHG IRU
H[SORLWLQJ ,QIRUPDWLRQ VXFK DV ILUPZDUH LQIRUPDWLRQ PDQXIDFWXUHUV
LQIRUPDWLRQDQGGHYLFHPRGHOHWFFDQEHH[WUDFWHG
%OXH6QDUILQJ
%OXH6QDUILQJ LV DQRWKHU WHFKQLTXH LQ ZKLFK DWWDFNHU WKHIW WKH LQIRUPDWLRQ
IURP %OXHWRRWK HQDEOHG GHYLFHV ,Q %OXH6QDUILQJ DWWDFNHUV H[SORLW WKH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

VHFXULW\ YXOQHUDELOLWLHV RI %OXHWRRWK VRIWZDUH DQG DFFHVV %OXHWRRWK HQDEOHG


GHYLFHVDQGVWHDOLQIRUPDWLRQVXFKDVFRQWDFWOLVWWH[WPHVVDJHVHPDLOHWF
%OXHWRRWK&RXQWHUPHDVXUHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

:LUHOHVV6HFXULW\7RROV
:LUHOHVV,QWUXVLRQ3UHYHQWLRQ6\VWHPV
:LUHOHVV ,QWUXVLRQ 3UHYHQWLRQ 6\VWHP :,36  LV D QHWZRUN GHYLFH IRU
ZLUHOHVV QHWZRUNV ,W PRQLWRUV WKH ZLUHOHVV QHWZRUN DQG SURWHFW LW DJDLQVW
XQDXWKRUL]HG DFFHVV SRLQWV DQG SHUIRUP DXWRPDWLF LQWUXVLRQ SUHYHQWLRQ %\
PRQLWRULQJWKHUDGLRVSHFWUXPLWSUHYHQWVURJXHDFFHVVSRLQWVDQGJHQHUDWHV
DOHUWV IRU QHWZRUN DGPLQLVWUDWRU DERXW GHWHFWLRQ )LQJHUSULQWLQJ DSSURDFK
KHOSV WR DYRLG GHYLFHV ZLWK VSRRIHG 0$& DGGUHVVHV :,36 LV FRQVLVWV RI
WKUHH FRPSRQHQWV 6HUYHU 6HQVRU DQG &RQVROH 5RJXH DFFHVV SRLQWV
PLVFRQILJXUHG$3V&OLHQWPLVFRQILJXUDWLRQ0,70$GKRFQHWZRUNV0$&
6SRRILQJ+RQH\SRWV'R6DWWDFNFDQEHPLWLJDWHGXVLQJ:,36
:L)L6HFXULW\$XGLWLQJ7RRO
8VLQJ :LUHOHVV 6HFXULW\ WRROV LV DQRWKHU DSSURDFK WR SURWHFW ZLUHOHVV
QHWZRUNV 7KHVH VHFXULW\ VRIWZDUHߞV SURYLGHV ZLUHOHVV QHWZRUN DXGLWLQJ
WURXEOHVKRRWLQJ GHWHFWLRQ LQWUXVLRQ SUHYHQWLRQ WKUHDW PLWLJDWLRQ URJXH
GHWHFWLRQ GD\]HUR WKUHDW SURWHFWLRQ IRUHQVLF LQYHVWLJDWLRQ DQG FRPSOLDQFH
UHSRUWLQJ6RPHRIWKHSRSXODU:L)LVHFXULW\WRROVDUHDVEHORZ
$LU0DJQHW:L)L$QDO\]HU
0RWRURODߞV$LU'HIHQVH6HUYLFHV3ODWIRUP $'63
&LVFR$GDSWLYH:LUHOHVV,36
$UXED5)3URWHFW


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE+DFNLQJ:L)L3URWHFWHG$FFHVV1HWZRUNXVLQJ
$LUFUDFNQJ
&DVH6WXG\,QWKLVFDVHZHKDYHFDSWXUHGVRPH :LUHOHVV1HWZRUN
SDFNHWVDQGVDYHWKHILOH8VLQJWKLVILOHZLWKߡ&XSSߢDQGߡ$LUFUDFNQJߢ
ZHZLOOFUHDWHDSDVVZRUGILOHDQGFUDFNWKHSDVVZRUG

3URFHGXUH
 &DSWXUHVRPHZODQSDFNHWVXVLQJILOWHUߡHWKDGG DDEEFFGGHHߢDQG
VDYHWKHILOH
 *RWR.DOL/LQX[WHUPLQDO
 &KDQJHWKHGLUHFWRU\WRWKHGHVNWRS
URRW#NDOLaFG'HVNWRS
 'RZQORDGWKHߡ&XSSߢXWLOLW\WRFUHDWHZRUGOLVW
URRW#NDOLaJLWFORQHKWWSVJLWKXEFRPFKHWDQFXSSJLW


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH'RZQORDGLQJ&XSS

 &KDQJHWKHGLUHFWRU\WR'HVNWRS&XSS
URRW#NDOLa'HVNWRSFGFXSS
 /LVWWKHIROGHUVLQWKHFXUUHQWGLUHFWRU\
URRW#NDOLa'HVNWRSFXSSOV
 5XQWKHXWLOLW\FXSSS\
URRW#NDOLa'HVNWRSFXSSFXSS\S\


)LJXUH5XQQLQJ&XSS8WLOLW\

 8VH,QWHUDFWLYH4XHVWLRQIRUXVHUSDVVZRUGSURILOLQJ
URRW#NDOLa'HVNWRSFXSSFXSSS\L

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,QWHUDFWLYH4XHVWLRQV

 3URYLGHWKHFORVHVWLQIRUPDWLRQDERXWWKHWDUJHW,WZLOOLQFUHDVHWKH
FKDQFHVRIVXFFHVVIXOFUDFNLQJ
 <RXFDQDGGNH\ZRUGV
 <RXFDQDGGVSHFLDOFKDUDFWHUV
 <RXFDQDGGUDQGRPQXPEHUV
 <RXFDQHQDEOHOHHWPRGH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH:RUGOLVWFUHDWHG

 $IWHUVXFFHVVIXOFRPSOHWLRQ\RXILQGDQHZWH[WILOHQDPHGDVWKHILUVW
QDPH\RXW\SHLQLQWHUDFWLYHRSWLRQ7KLVILOHZLOOFRQWDLQDORWRI
SRVVLEOHFRPELQDWLRQV$VVKRZQLQWKHILJXUHEHORZ$OEHUWW[WILOHKDV
EHHQFUHDWHGLQWKHFXUUHQWGLUHFWRU\



Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH3DVVZRUGILOHDOEHUWW[W

 <RXFDQFKHFNWKHILOHE\RSHQLQJLW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH3RVVLEOHFRPELQDWLRQV

 1RZFUDFNWKHSDVVZRUGXVLQJ$LUFUDFNQJZLWKWKHKHOSRISDVVZRUGILOH
FUHDWHG
URRW#NDOLaFG
URRW#NDOLaDLUFUDFNQJߙDߙE%66,'RI:/$15RXWHU!Z
URRW'HVNWRSFXSS$OEHUWW[WߝURRW'HVNWRS:3$FDSߞ

:3$FDSLVFDSWXUHGSDFNHWILOH


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&UDFNLQJ3DVVZRUG

 7KLVZLOOVWDUWWKHSURFHVVDQGDOONH\VZLOOEHFKHFNHG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&UDFNLQJ3DVVZRUG

 7KHUHVXOWZLOOHLWKHUVKRZ\RXWKHNH\RUUHIXVHWRFUDFNIURPWKH
GLFWLRQDU\


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&UDFNHG3DVVZRUG



Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&RXQWHUPHDVXUHV
:LUHOHVV7HFKQRORJLHVVXFKDV:L)LDQG%OXHWRRWKDUHWKHPRVWSRSXODUDQG
ZLGHO\XVHGWHFKQRORJLHV7KHVHWHFKQRORJLHVFDQEHVHFXUHGXVLQJGLIIHUHQW
QHWZRUN PRQLWRULQJ DQG DXGLWLQJ WRROV FRQILJXULQJ VWULFW DFFHVV FRQWURO
SROLFLHV EHVW SUDFWLFHV DQG WHFKQLTXHV $V HDUOLHU LQ WKLV FKDSWHU ZH KDYH
GLVFXVVHG:L)LHQFU\SWLRQVDQGWKHLULVVXHVPRYLQJIURP:(3WR:3$
VWURQJDXWKHQWLFDWLRQDQGHQFU\SWLRQVEHVWSUDFWLFHVZLOOPDNH\RXUZLUHOHVV
QHWZRUN KDUGHU WR EH FRPSURPLVHG 7KH IROORZLQJ PLQG PDS VKRZV VRPH
EDVLFWHFKQLTXHDVZHOODVDFRXQWHUPHDVXUHWKDWLVGLVFXVVHGLQWKLVFKDSWHU






0LQG0DS

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Potrebbero piacerti anche