In order to outsmart a would-be hacker, you need to get into the hacker’s mindset. And with this book, thinking like a bad guy has never been easier. Learn about penetration testing, vulnerability assessments, security best practices, and much more!

Hacking For Dummies

Preface

IN THIS CHAPTER >> Understanding hackers’ and malicious users’ objectives >> Examining how the security testing process came about >> Recognizing what endangers your computer systems >> Starting to use the process for security testing 

Introduction to Vulnerability and Penetration Testing

IN THIS CHAPTER >> Understanding the enemy >> Profiling hackers and malicious users >> Understanding why attackers do what they do >> Examining how attackers go about their business 

Cracking the Hacker Mindset

IN THIS CHAPTER >> Setting security testing goals >> Selecting which systems to test >> Developing your testing standards >> Examining hacking tools 

Developing Your Security Testing Plan

IN THIS CHAPTER >> Examining steps for successful vulnerability and penetration testing >> Gleaning information about your organization from the Internet >> Scanning your network >> Looking for vulnerabilities 

Hacking Methodology

IN THIS CHAPTER >> Gleaning information about your organization from the Internet >> Using Web resources >> Seeking information that you (and others) can benefit from 

Information Gathering

IN THIS CHAPTER >> Understanding social engineering >> Examining the ramifications of social engineering >> Performing social engineering tests >> Protecting your organization against social engineering 

Social Engineering

IN THIS CHAPTER >> Understanding the importance of physical security >> Looking for physical security vulnerabilities >> Implementing countermeasures for physical security attacks 

Physical Security

IN THIS CHAPTER >> Identifying password vulnerabilities >> Examining password-hacking tools and techniques >> Hacking operating system passwords >> Hacking password-protected files >> Protecting your systems from password hacking 

Passwords

IN THIS CHAPTER >> Selecting tools >> Scanning network hosts >> Assessing security with a network analyzer >> Preventing denial of service and infrastructure vulnerabilities 

Network Infrastructure Systems

IN THIS CHAPTER >> Understanding the risks of wireless networks >> Selecting wireless network hacking tools >> Cracking wireless encryption >> Minimizing wireless network risks 

Wireless Networks

IN THIS CHAPTER >> Seeking out the common weaknesses in laptops, phones, and tablets >> Executing security tests to uncover crucial mobile flaws >> Exploring the security vulnerabilities associated with the Internet of Things (IoT) >> Minimizing mobile security risks 

Mobile Devices

IN THIS CHAPTER >> Port-scanning Windows systems >> Gleaning Windows information without logging in >> Catching the Windows security flaws you don’t want to overlook >> Exploiting Windows vulnerabilities >> Minimizing Windows security risks 

Windows

IN THIS CHAPTER >> Examining Linux and macOS testing tools >> Port-scanning hosts >> Gleaning information without logging in >> Exploiting common vulnerabilities when logged in to Linux and macOS >> Minimizing Linux and macOS security risks 

Linux and macOS

IN THIS CHAPTER >> Attacking email systems >> Assailing instant messaging >> Assaulting Voice over IP applications 

Communication and Messaging Systems

IN THIS CHAPTER >> Testing websites and web applications >> Uncovering flaws in mobile apps >> Protecting against SQL injection and cross-site scripting >> Preventing login weaknesses >> Analyzing software flaws manually >> Countering web abuse >> Analyzing source code 

Web Applications and Mobile Apps

IN THIS CHAPTER >> Testing and exploiting database flaws >> Finding storage weaknesses >> Ferreting out sensitive information >> Countering database and storage abuse 

Databases and Storage Systems

IN THIS CHAPTER >> Bringing your test data together >> Categorizing vulnerabilities you discover >> Documenting and presenting the results 

Reporting Your Results

IN THIS CHAPTER >> Determining which vulnerabilities to address first >> Patching your systems >> Looking at security in a new light 

Plugging Your Security Holes

IN THIS CHAPTER >> Automating tasks >> Watching for misbehavior >> Outsourcing your security testing >> Keeping security on everyone’s mind 

Managing Security Processes

Dozens of key steps exist for obtaining the buy-in and sponsorship that you need to support your security testing efforts. In this chapter, I describe the ten that I find to be most effective.

Ten Tips for Getting Security Buy-In

Approaching your security testing from the perspective of ethical hacking isn’t just for fun or show. For numerous business reasons, it’s the only effective way to find the security vulnerabilities that matter in your organization.

Ten Reasons Hacking Is the Only Effective Way to Test

Making the wrong choices in your security testing can wreak havoc on your work and possibly even your career. In this chapter, I discuss ten potential pitfalls to be keenly aware of when performing your security assessment work.

Ten Deadly Mistakes

To stay up to date with the latest and greatest security testing tools and resources, you need to know where to turn. This appendix contains my favorite security sites, tools, resources, and more that you can benefit from in your ongoing security assessment program.

Community Questions