|
EH-Net
|
|
May 22, 2013, 03:16:50 PM
|
 Show Posts
|
|
Pages: 1 ... 4 5 [6] 7
|
|
76
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: A cautionary tale for Penetration testers on live networks
|
on: March 07, 2010, 02:53:22 PM
|
Out of curiosity, did the pen testers recommend any strategic changes to your incident response procedures or any additional procedures to put in place in case this happens again ? This is an excellent example of how having an incident response team with the proper professionals on it could have probably gotten things resolved faster. You post this as a cautionary tale, with good reason, but it seems like there could have been some great positives come out of this that would last through a potential real attack. Losing money is never good, but if you gotta lose money, make the most out of it that you can  I think if nothing else, some critical business points which are vulnerable to attack were exposed here. I was discussing this very thing with another client of mine. I told him the story and he siad "man that would seriously suck. You think they would tell the IT team about this to give them a heads up." Once he said that, i wondered for a moment. This pen test story was a great example of being prepared. No hacker is going to tell you " hey today i mihgt try and bust you up a we bit" So having that incident management team in place with some failsafes is a very good idea. Maybe the CFO didnt want his IT team to know about to make it more "real" But then again he claims he didnt know about it either. BUT to lose that kind of money on a pratice drill has gotta be painful. |
|
|
|
|
77
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Project documentation
|
on: March 07, 2010, 02:25:30 PM
|
I agree with awesec, here.
Also, of note, is that if you use VMWare, the newer versions have screen capture / video capability, so as you're testing or doing some work, you can have VMWare record your actions, so that A.) you can use that for documentation / presentation work, and B.) if you don't understand what you're seeing, or if the testing doesn't make sense to you, you could submit the recording to the 'collective' (read EH-Net or other security pro's) to get their input on what you may or may not be doing wrong, or to enlighten you on what's actually happening, etc.
It's just an overall handy way to do testing and POC (proof of concept.)
Maybe i need to switch to VMware rather than VB? How much does VMware cost? Ok. i think i understand what was being said by both of you and the book. For some reason i was under the impression that malware could detect the presence of Virtual software, therefore making it more difficult to study since the malware would not behave as if it were on a real system.. Maybe i misunderstood the readings. hahah thanx for the input. |
|
|
|
|
78
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Project documentation
|
on: March 06, 2010, 10:56:04 PM
|
I think for the purposes of your lab work, the Google docs thing isn't a bad idea, if it works for you. It's simply a matter of what tool YOU prefer to work with. For me, it depends on what OS I'm using, with what tools. With Windows, I often use Textpad (if it's my own machine, and not a 'borrowed one.' With Linux, it varies, with anything from vi to gedit, to any number of tools.
Also, depends on what, exactly, you're documenting... If you're just doing text, then any of the above, and many others, will suffice. If you're documenting using grapics (screenshots) and / or video capture, then you may use other tools. I use many different tools in any given pentest, depending on the scope, the deliverable I want to hand over at the conclusion, and what makes the most sense for the tools and testing I'm using.
It's really a matter of preference, IMHO.
Ok cool. Thanx for the input. I look forward to my finished result of all my hard work and logging. I figure i outa learn pen testing since i am going into Business Technology Management with a two year degree in network engineering. Chapter 5 of the book however brings some questions to mind. For example: A controlled lab with virtualbox to study malware and examine it. Seems confusing to st one up. thanx Matt |
|
|
|
|
79
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: A cautionary tale for Penetration testers on live networks
|
on: March 06, 2010, 08:54:27 PM
|
|
DANG. We had a very similar experience on our network BUT the only diff was that it was not a pentest. some punk kid was trying to brute force our network because he was able to get the username file from our server using the null session with dumpsec tatic. Luckily we make sure our users have to follow our password policy. Still was annoying to get into work at 6 in the morning and have 33 accounts locked out.
Anyway. awesome post. Ill be sure to remember this for future use and recommendation.
|
|
|
|
|
80
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Where to start??
|
on: March 06, 2010, 04:14:26 PM
|
As already recommended, take a look at the forums of heorot.net, as you will certainly find a few tips and guides on how to proceed with the de-ice discs. If I remember correctly, there was for example also a video-tutorial made by purehate.
I would also recommend not to use them, though, until you are really stuck. Although you might learn the other way round easier, I think it is important to try it this way. There is not always the possibility to look at an already existing solution when you are stuck. Trying it right from the beginning this way might help if you experience similar scenarios in future.
If you haven't done already, look through this forums for a while, as others have often asked the same question (where to start), where you might find one or another good reply which might help you as well, even if the origin might not be the exactly same.
Thanx for the input. I cant believe that im 25 and i still dont know the best way for me to learn. HAHA Sometimes i dont mind being shown the answer because then that allows me to try and find out how they got that answer. But then i dont mind trying to figure it out as well. But for this excercise since i have never done pen testing, i dont mind being walked throw. lol thanx |
|
|
|
|
81
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Project documentation
|
on: March 06, 2010, 03:48:21 PM
|
|
I am currently reading Toms book. So far so good. My goal though is to document everything i learn and post it on me blog. I basically read each chaptor and document my findings and i also do the homework at the end of each chapter. I am currently on chapter 5 and have some questions. BUT my main question i need answered is what type of software should i use to document. As of now i am using google docs so that when im in BT2 or any of my virtualboxes, i can copy and paste my text into the online doc. Is there another way or a better way to document my project? I dont mind google docs cuz then i can copy paste right from the VB into google docs and then access it from my HOST machine. Whilst if i used just word on my HOST, i wouldnt be able to copy paste from my VB guest to the HOST since i do not have the live cd's installed. Just running them as a live cd
thanx
Matt
|
|
|
|
|
82
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: ettercap with backtrack 4
|
on: February 25, 2010, 10:50:33 PM
|
I appreciate your concern and time. Since i am new to the security world, i lack the experience for it. Hence why i am here. haha. Im looking forward to toms book. At least with that i will have a foot in the door. From there i will use the backtrack labs/tutorials i got from my professor. Im glad that virtual box will do what i need it to do and thank you for researching that for me. I didnt know where to start. The only issue i have is i cant really use VB to do security with routers and switches or firewalls. But luckily for me i have a CCNP cisco lab in my dang room. haha. |
|
|
|
|
85
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: Where to start??
|
on: February 24, 2010, 01:02:24 PM
|
Thanks for the kudos!!! I sincerely appreciate you guys buying the book, and am glad that you enjoyed it. If you have a bit of time and inkling to spread the word, I humbly request you pop over to Amazon and post a review for the book.  NICE, did not know you were on these forums. I have heard of your book and want to buy it. I actually have been saving for it. I did not know it was a step by step guide so i appreciate that input. I wish i could find a study group around here that would want to learn with me. I cant motivate myself to learn outside of full time school. hahah. Well im gonna buy the book now. If i have questions though, where do i go and how do i ask you if i need answers?? thanx Matt EDIT Just bought the book |
|
|
|
|
86
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Where to start??
|
on: February 23, 2010, 07:37:49 PM
|
|
I have a bunch of info on ethical hacking. I just have no idea where to start. But first of all what i need help with is De-ice. I am the type of person that needs to be shown first then i try it and learn from that. IE, a instruction sheet says type this command in the global config of routerA. THEN it explains to me what the command is doing. I then type it and watch what happens. Ok now that you know how i semi work, i am looking for a great tutorial that has been written on how to hack and complete de-ice exercises and explain what is happening at the same time. Sorta like how the CCNP books i use for school. So basically a lab guide to complete the exercises of de-ice step by step.
I have done my CCNA stuff, I have done all my RHCT and some RHCE stuff and now im working on my CCNP. However i still have problems understanding how protocols work.
Ok now that that is out of the way here is what i have gained from friends and professors/classes for net security.
Hacking exposed 5th edition
CEH study guide 2009 edition.
pen test open source tool kit vol2 2007 (lost the dang CD)
A few labs from backtrack(received by a professor)
I need to build a good lab as well. I have 3 cisco enterprise routers and 5 switches. What is a good lab set up?? oh and i have a really powerful desktop for vm's..I have heard about that course by backtrack but never looked into it cuz i have no money for that. BUT i want to build the same lab environment that they use so if anyone has taken the courses it would be nice to know what machines or devices you attacked.
Ok thats it i think..
I really really appreciate this guys. Im not kidding. Thank you so much.
Matt
PS. im not looking for someone to hold my hand perse, but rather "shove" me in the right direction.
|
|
|
|
|
88
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / DE ice level 1 questions
|
on: October 22, 2009, 03:49:10 PM
|
|
Ok i have started reading books. I own the CEH 6th edtion review guide. I have my virtual lab set up with bt3 and deice 1. I have found user name for interns remote login via ssh. Just not his password. This is where i could use the help. Im completly new at this. I just need to be lead the way a lil bit. Maybe hold my hand while i cross the street for the first time sorta thing. Then once im across. i will learn from there..
Thanx
Matt
|
|
|
|
|
89
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: MAN DOWN
|
on: October 17, 2009, 10:17:04 PM
|
LT, get hacking for dummies. don't let the dummies name fool you. I really did learn from it. The author went with a lot of commercial software, but it was a good start.
There are a few noob threads around here with books to read.
I know what you mean about not being just a cookbook (do step a, step b, step c) kind of guy.
As for my firewalls, I prefer a small box, without a lot of stuff installed running straight IP Tables. Work however wants ASAs and PIXs.
Ill check it out from library. Cookbooks can be usefull at times but i also dont want all theory. i want to be taught how to use the tools and have hands on for pentesting and not just read a book about what pen testing is. I have begged and begged for the labs from my friend back east for offsec 101. so he let me borrow them. so hopefully they will work for me rather than against me. Your so lucky you know IPtables. i wish i could read and edit those. |
|
|
|
|
90
|
Ethical Hacking Discussions and Related Certifications / Network Pen Testing / Re: MAN DOWN
|
on: October 17, 2009, 08:34:20 PM
|
IpCop will do egress filtering as well, but it has no management interface for this task. If you want egress filtering, you have to add custom iptables entries.
VPN interoperability is one of the main reasons I went with IpCop. I needed a point to point connection to a Watchguard fw, which does not play nice with other VPNs. I think that I may have to give smoothwal a try. Since the snort version included with IpCop stopped receiving updates, I have been thinking about a replacement. The development roadmap just moves a little too slowly.
Thanks for the info everyone!
Smoothwall plays very nicely with other VPN's. never had an issue with wacthgaurd or sonic wall. Egress filtering is all done with a pertty lil GUI in smoothwall. AND you can add custom entries in IPtables if wanted. The only thing i dont think smoothwall can do is this: some isp's block certain ports and i know with ipcop you can add a custom ip entry to redirect any incomming data for that port to another port. Its more than portforwarding. I cant exactly remember what it is. Its like comcast blocks port 441 and so any incomming dat to that port is dropped but in ipcop you can redirect port 441 to 4598 or whatever. smoothwall i dont think can do that |
|
|
|
|
Loading...
|
Greetings : Hi from the UK
