Skip to main content

Posts

Attacking Network Device PART - 2

Security Testing of Internetworking Operating System Tutorial 1 –  The Home Lab Welcome to the second module of the “Attacking Network Devices” workshop. You have learned the basic principles in the previous module. Hands-on experience is a must for a security professional who wants to gain experience in network security testing. But the problem is, how can you achieve this goal?   This module will explain how you can build your own virtual lab that will be running switches and routers virtually with real Internetworking Operating System. Once you are able to setup this lab, you can gain more experience with the Internetworking Operating System as well as testing the security of network devices.   Here, we will again clarify one thing, network devices as explained earlier in the workshop are considered any type of device that can have an IP Address or simply a device that can come and join the network.    For keeping your hacking taste sour and juicy w...

Attacking Network Device PART - 1

Well Known Vendors in Networking Tutorial 1 – Core Principles    Welcome to the “Attacking Network Devices” workshop. In this workshop you will gain diversified knowledge, covering network and security threats in networks that will build your knowledge about network security issues and how you can practice different methods of attacking networking nodes to enhance your skills.   This workshop is designed in a way to cover all levels of students, from beginners level to intermediate professionals. Moreover, if you are a newbie in the network industry, by completing this workshop, you will add enough knowledge to boost your career in the network security field.  However, if you want to gear up and experience network security then you should first build your knowledge about the top vendors and their products that play a core role in the networking industry. Once you have that then you can move towards gaining experience with the selected product or vendor and gain ...

Exploit Development on Linux Platform Part - 5

Exploiting the  Vulnerable Code on Linux  Introduction     Welcome to module 5, the last module of this workshop. So far in this workshop, we have been learning about debugging and how to work with GDB in Linux and, most importantly, controlling the EIP register. Prrequisite      It is strongly recommended that you should first complete the previous four modules of this workshop and then start completing this module.                   In this module, we will try to go to the level of exploitation while getting help from GDB so that we know how we can develop exploit in Linux. Controlling EIP           We have already presented how to control EIP in our previous module and what role GDB can play in debugging and giving you information about registers.       Now, let’s focus...

Exploit Development on Linux Platform Part - 4

Vulnerable Code in “C” Language  Introduction     Welcome to module 4 of this workshop. In this module, we will experience some debugging with the vulnerable code based on Linux platform and we will be using “C” as our programming language. Prerequisites To get the most out of this module, it is recommended that you should have: • Complete previous three modules • Background in programming at least at a beginner level • Understands TCP/IP • Beginner level knowledge in information security • Passion to learn ethical hacking • Understand Debugging and Know GDB This module will not be as theoretical as we had in previous modules; however, what we will cover in our lab is the debugging on Linux and how to make good use of it for exploit development. The key of exploit development is controlling EIP, and in this module we will go to the level of overwriting EIP register with the help of GDB in debugging. Debugging on Linux with GDB We have alrea...

Exploit Development on Linux Platform Part - 3

     Buffer overflows Introduction    Welcome to module 3 of this workshop. So far we have discussed the Linux operating system and debugging on Linux platform. In this module, we will be talking about Buffer overflows in more granular detail and we will try to focus buffer overflows as generic as we can in order to keep this concept independent from any specific platform. This would be more of a knowledge-based module, which will hopefully build baseline knowledge about buffer overflows, its types, precautionary measures, and the reasons for buffer overflows.     We will be also discussing types of overflows and how you can exploit them and get the illegitimate access to the operating system. Prerequisites • Knowledge of TCP/IP protocols • Basic knowledge of operating systems • Complete the previous two modules of this workshop • Should have at least beginner level concepts in programming The Basics   ...

Exploit Development on Linux Platform Part - 2

Linux Basics and Command Line  Introduction          Welcome to the Module 2 of this workshop. So far in this workshop, we have talked about GCC & GDB and Ubuntu Linux setup. Linux is basically an open source operating system which s based on the Unix platform. However, Linux is now a much more enhanced, strong, fast and much more reliable operating system, which steps ahead of the Windows platform. In this module, we will explore Linux and its different flavors. We will be learning different techniques and commands that you should know in order to use Linux as a normal user, at minimum. PreRequisite Since we will be learning about Linux knowledge base, this module doesn’t require any prerequisites, especially on Linux, however, you should be a computer user and have prior experience with DOS. Linux Key Components It is very difficult to completely cover all Linux components aspects in one workshop, however, we will be prese...