Download as pdf or txt
Download as pdf or txt
You are on page 1of 73

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.

com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

6\VWHP+DFNLQJ
$IWHUJDLQLQJWKHLQIRUPDWLRQIURPSUHYLRXVSKDVHVQRZSURFHHGWRV\VWHP
KDFNLQJSKDVH7KHSURFHVVRIV\VWHPKDFNLQJLVPXFKGLIILFXOWDQGFRPSOH[
WKDQSUHYLRXVRQHV
%HIRUHVWDUWLQJWKHV\VWHPKDFNLQJSKDVHDQHWKLFDOKDFNHURUSHQWHVWHUPXVW
UHPHPEHUWKDW\RXFDQQRWJDLQDFFHVVWRWKHWDUJHWV\VWHPLQDJR<RXPXVW
KDYHWRZDLWIRUZKDW\RXZDQWGHHSO\REVHUYHDQGVWUXJJOHWKHQ\RXZLOO
ILQGVRPHUHVXOWV
6\VWHP+DFNLQJ0HWKRGRORJ\
7KH SURFHVV RI 6\VWHP KDFNLQJ LV FODVVLILHG LQWR VRPH 6\VWHP KDFNLQJ
PHWKRGV 7KHVH PHWKRGV DUH DOVR WHUPHG DV &(+ KDFNLQJ PHWKRGRORJ\ E\
(&&RXQFLO7KLVPHWKRGRORJ\LQFOXGHV
 &UDFNLQJSDVVZRUGV
 (VFDODWLQJSULYLOHJHV
 ([HFXWLQJDSSOLFDWLRQV
 +LGLQJILOHV
 &RYHULQJWUDFNV
*RDOVRI6\VWHPKDFNLQJ
,Q WKH PHWKRGRORJLFDO DSSURDFK RI 6\VWHP KDFNLQJ E\SDVVLQJ WKH DFFHVV
FRQWURODQGSROLFLHVE\SDVVZRUGFUDFNLQJRUVRFLDOHQJLQHHULQJDWWDFNVZLOO
OHDGWRJDLQDFFHVVWRWKHV\VWHP8VLQJWKHRSHUDWLQJV\VWHPLQIRUPDWLRQLW
KHOSVWRH[SORLWWKHNQRZQYXOQHUDELOLWLHVRIDQRSHUDWLQJV\VWHPWRHVFDODWH
WKH SULYLOHJHV 2QFH \RX KDYH JDLQHG DFFHVV WR WKH V\VWHP DQG DFTXLUH WKH
ULJKWVDQGSULYLOHJHVE\H[HFXWLQJDQDSSOLFDWLRQVXFKDV7URMDQVEDFNGRRUV
DQGVS\ZDUHDQDWWDFNHUFDQFUHDWHDEDFNGRRUWRPDLQWDLQWKHUHPRWHDFFHVV
WRWKHWDUJHWV\VWHP1RZWRVWHDODFWXDOLQIRUPDWLRQGDWDRUDQ\RWKHUDVVHW
RIDQRUJDQL]DWLRQWKHDWWDFNHUQHHGVWRKLGHLWVPDOLFLRXVDFWLYLWLHV5RRWNLWV
DQG VWHJDQRJUDSK\ DUH WKH PRVW FRPPRQ WHFKQLTXHV WR KLGH PDOLFLRXV
DFWLYLWLHV2QFHDQDWWDFNHUVWHDOVWKHLQIRUPDWLRQDQGUHPDLQVXQGHWHFWHGWKH
ODVWSKDVHRIV\VWHPKDFNLQJHQVXUHVWREHXQGHWHFWHGE\KLGLQJWKHHYLGHQFH
RIFRPSURPLVHVE\PRGLI\LQJRUFOHDULQJWKHORJV
3DVVZRUG&UDFNLQJ
%HIRUHSURFHHGLQJWR3DVVZRUG&UDFNLQJ\RXVKRXOGNQRZDERXWWKUHHW\SHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

RIDXWKHQWLFDWLRQIDFWRUV
6RPHWKLQJ,KDYHOLNHXVHUQDPHDQGSDVVZRUG
6RPHWKLQJ,DPOLNHELRPHWULFV
6RPHWKLQJ,SRVVHVVOLNHUHJLVWHUHGDOORZHGGHYLFHV
3DVVZRUG &UDFNLQJ LV WKH PHWKRG RI H[WUDFWLQJ WKH SDVVZRUG WR JDLQ
DXWKRUL]HG DFFHVV WR WKH WDUJHW V\VWHP LQ WKH JXLVH RI D OHJLWLPDWH XVHU
8VXDOO\ RQO\ WKH XVHUQDPH DQG SDVVZRUG DXWKHQWLFDWLRQ DUH FRQILJXUHG EXW
QRZSDVVZRUGDXWKHQWLFDWLRQLVWKHPRYLQJWRZDUGWZRIDFWRUDXWKHQWLFDWLRQ
RUPXOWLSOHIDFWRUDXWKHQWLFDWLRQZKLFKLQFOXGHVVRPHWKLQJ\RXKDYHVXFKDV
XVHUQDPH DQG SDVVZRUG ZLWK WKH ELRPHWULFV 3DVVZRUG FUDFNLQJ PD\ EH
SHUIRUPHG E\ VRFLDO HQJLQHHULQJ DWWDFN RU FUDFNLQJ WKURXJK WHPSHULQJ WKH
FRPPXQLFDWLRQ DQG VWHDOLQJ WKH VWRUHG LQIRUPDWLRQ *XHVVDEOH SDVVZRUG
VKRUWSDVVZRUGSDVVZRUGZLWKZHDNHQFU\SWLRQDSDVVZRUGRQO\FRQWDLQLQJ
QXPEHUVRUDOSKDEHWVFDQEHFUDFNHGZLWKHDVH+DYLQJDVWURQJOHQJWK\DQG
GLIILFXOW SDVVZRUG LV DOZD\V DQ RIIHQVLYH OLQH RI GHIHQVH DJDLQVW WKHVH
FUDFNLQJDWWDFNV7\SLFDOO\DVJRRGSDVVZRUGFRQWDLQV
&DVH6HQVLWLYHOHWWHUV
6SHFLDOFKDUDFWHUV
1XPEHUV
OHQJWK\SDVVZRUG W\SLFDOO\PRUHWKDQOHWWHUV

7\SHVRI3DVVZRUG$WWDFNV
3DVVZRUG$WWDFNVDUHFODVVLILHGLQWRWKHIROORZLQJW\SHV
 1RQ(OHFWURQLF$WWDFNV
 $FWLYH2QOLQH$WWDFNV
 3DVVLYH2QOLQH$WWDFNV
 'HIDXOW3DVVZRUG
 2IIOLQH$WWDFN
 1RQ(OHFWURQLF$WWDFNV
1RQ(OHFWURQLFDWWDFNVRU1RQWHFKQLFDO$WWDFNVDUHWKHDWWDFNVZKLFKGR
QRWUHTXLUHDQ\W\SHRIWHFKQLFDOXQGHUVWDQGLQJDQGNQRZOHGJH7KLVLVWKH
W\SHRIDWWDFNWKDWFDQEHGRQHE\VKRXOGHUVXUILQJVRFLDOHQJLQHHULQJDQG
GXPSVWHU GLYLQJ )RU H[DPSOH JDWKHULQJ XVHUQDPH DQG SDVVZRUG
LQIRUPDWLRQE\VWDQGLQJEHKLQGDWDUJHWZKHQKHLVORJJLQJLQLQWHUDFWLQJ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

ZLWK VHQVLWLYH LQIRUPDWLRQ RU HOVH %\ 6KRXOGHU VXUILQJ SDVVZRUGV


DFFRXQW QXPEHUV RU RWKHU VHFUHW LQIRUPDWLRQ FDQ EH JDWKHUHG GHSHQGLQJ
XSRQWKHFDUHOHVVQHVVRIWKHWDUJHW
 $FWLYH2QOLQH$WWDFNV
$FWLYH 2QOLQH $WWDFN LQFOXGHV GLIIHUHQW WHFKQLTXHV WKDW GLUHFWO\ LQWHUDFW
ZLWKWKHWDUJHWIRUFUDFNLQJWKHSDVVZRUG$FWLYH2QOLQHDWWDFNVLQFOXGH
 'LFWLRQDU\$WWDFN
,Q WKH 'LFWLRQDU\ DWWDFN WR SHUIRUP SDVVZRUG FUDFNLQJ D SDVVZRUG
FUDFNLQJDSSOLFDWLRQLVXVHGDORQJZLWKDGLFWLRQDU\ILOH7KLVGLFWLRQDU\
ILOH FRQWDLQV HQWLUH GLFWLRQDU\ RU OLVW RI NQRZQ DQG FRPPRQ ZRUGV WR
DWWHPSW SDVVZRUG UHFRYHU\ 7KLV LV WKH VLPSOHVW W\SH RI SDVVZRUG
FUDFNLQJDQGXVXDOO\V\VWHPVDUHQRWYXOQHUDEOHWRGLFWLRQDU\DWWDFNV
LIWKH\XVHVWURQJXQLTXHDQGDOSKDQXPHULFSDVVZRUGV
 %UXWH)RUFH$WWDFN
%UXWH )RUFH DWWDFN DWWHPSW WR UHFRYHU WKH SDVVZRUG E\ WU\LQJ HYHU\
SRVVLEOH FRPELQDWLRQ RI FKDUDFWHUV (DFK FRPELQDWLRQ SDWWHUQ LV
DWWHPSWHGXQWLOWKHSDVVZRUGLVDFFHSWHG%UXWHIRUFLQJLVWKHFRPPRQ
DQGEDVLFWHFKQLTXHWRXQFRYHUSDVVZRUG
+DVK,QMHFWLRQ
,QWKH+DVKLQMHFWLRQDWWDFNKDVKLQJDQGRWKHUFU\SWRJUDSK\WHFKQLTXHV
NQRZOHGJHLVUHTXLUHG,QWKLVW\SHRIDWWDFN
D 7KHDWWDFNHUQHHGVWRH[WUDFWXVHUVORJRQKDVKHVVWRUHVLQ6HFXULW\
$FFRXQW0DQDJHU 6$0 ILOH
E %\ FRPSURPLVLQJ D ZRUNVWDWLRQ RU D VHUYHU E\ H[SORLWLQJ WKH
YXOQHUDELOLWLHVDWWDFNHUJDLQDFFHVVWRWKHPDFKLQH
F 2QFHLWFRPSURPLVHVWKHPDFKLQHLWH[WUDFWHGWKHORJRQKDVKHVRI
YDOXDEOHXVHUVDQGDGPLQV
G :LWK WKH KHOS RI WKHVH H[WUDFWHG KDVKHV DWWDFNHU ORJJHG RQ WR WKH
VHUYHUOLNHGRPDLQFRQWUROOHUWRH[SORLWPRUHDFFRXQWV
 3DVVLYH2QOLQH$WWDFNV
3DVVLYH RQOLQH DWWDFNV DUH SHUIRUPHG ZLWKRXW LQWHUIHULQJ ZLWK WKH WDUJHW
,PSRUWDQFH RI WKHVH DWWDFNV LV EHFDXVH RI H[WUDFWLRQ RI WKH SDVVZRUG
ZLWKRXWUHYHDOLQJWKHLQIRUPDWLRQDVLWREWDLQVSDVVZRUGZLWKRXWGLUHFWO\
SURELQJWKHWDUJHW7KHPRVWFRPPRQW\SHVRI3DVVLYH2QOLQH$WWDFNVDUH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


:LUH6QLIILQJ
:LUH6QLIILQJSDFNHW6QLIILQJLVDSURFHVVRIVQLIILQJWKHSDFNHWXVLQJ
SDFNHW VQLIILQJ WRROV ZLWKLQ D /RFDO $UHD 1HWZRUN /$1  %\
LQVSHFWLQJ WKH &DSWXUHG SDFNHWV VHQVLWLYH LQIRUPDWLRQ DQG SDVVZRUG
VXFKDV7HOQHW)736073UORJLQFUHGHQWLDOVFDQEHH[WUDFWHG7KHUH
DUH GLIIHUHQW VQLIILQJ WRROV DYDLODEOH ZKLFK FDQ FROOHFW WKH SDFNHWV
IORZLQJ DFURVV WKH /$1 LQGHSHQGHQW RI WKH W\SH RI LQIRUPDWLRQ
FDUU\LQJ 6RPH VQLIIHUV RIIHU WR ILOWHU WR FDWFK RQO\ FHUWDLQ W\SHV RI
SDFNHWV
0DQLQWKH0LGGOH$WWDFN
$ PDQLQWKHPLGGOH DWWDFN LV WKH W\SH RI DWWDFN LQ ZKLFK DWWDFNHU
LQYROYHVKLPVHOILQWRWKHFRPPXQLFDWLRQEHWZHHQRWKHUQRGHV0,70
DWWDFNFDQEHH[SODLQHGDVDXVHUFRPPXQLFDWLQJZLWKDQRWKHUXVHURU
VHUYHU DQG DWWDFNHU LQVHUW KLPVHOI LQ EHWZHHQ WKH FRQYHUVDWLRQ E\
VQLIILQJ WKH SDFNHWV DQG JHQHUDWLQJ 0,70 RU 5HSOD\ WUDIILF 7KH
IROORZLQJDUHVRPHXWLOLWLHVDYDLODEOHIRUDWWHPSWLQJ0DQLQWKHPLGGOH
0,70 DWWDFNV
66/6WULS
%XUS6XLWH
%URZVHU([SORLWDWLRQ)UDPHZRUN %H()

)LJXUH0,70$WWDFN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

5HSOD\$WWDFN
,Q D 5HSOD\ DWWDFN $WWDFNHU FDSWXUH SDFNHWV XVLQJ D SDFNHW VQLIIHU
WRROV 2QFH SDFNHWV DUH FDSWXUHG UHOHYDQW LQIRUPDWLRQ VXFK DV
SDVVZRUGV LV H[WUDFWHG %\ JHQHUDWLQJ UHSOD\ WUDIILF ZLWK WKH LQMHFWLRQ
RIH[WUDFWHGLQIRUPDWLRQDWWDFNHUJDLQDFFHVVWRWKHV\VWHP
 'HIDXOW3DVVZRUG
(YHU\ QHZ HTXLSPHQW LV FRQILJXUHG ZLWK D GHIDXOW SDVVZRUG E\ WKH
PDQXIDFWXUHV ,W LV UHFRPPHQGHG WR FKDQJH WKH GHIDXOW SDVVZRUG WR D
XQLTXH VHFUHW VHW RI FKDUDFWHUV $Q DWWDFNHU XVLQJ GHIDXOW SDVVZRUGV E\
VHDUFKLQJWKURXJKWKHRIILFLDOZHEVLWHRIGHYLFHPDQXIDFWXUHURUWKURXJK
RQOLQH WRROV IRU VHDUFKLQJ GHIDXOW SDVVZRUGV FDQ DWWHPSW WKLV W\SH RI
DWWDFN 7KH IROORZLQJ DUH WKH OLVW RI RQOLQH WRROV DYDLODEOH IRU VHDUFKLQJ
GHIDXOWSDVVZRUG
KWWSVFLUWQHW
KWWSVGHIDXOWSDVVZRUGLQIR
KWWSZZZSDVVZRUGVGDWDEDVHFRP

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE2QOLQHWRROIRUGHIDXOWSDVVZRUGV
([HUFLVH
2SHQ\RXUIDYRULWH,QWHUQHWEURZVHU*RWRDQ\RIWKHZHEVLWHV\RXZRXOG
OLNHWRXVHIRUVHDUFKLQJGHIDXOWSDVVZRUGRIDGHYLFH)RUH[DPSOHJRWR
KWWSVFLUWQHW

)LJXUH2QOLQHWRROIRUWKHGHIDXOWSDVVZRUG

1RZ6HOHFWWKHPDQXIDFWXUHURI\RXUGHYLFH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH2QOLQHWRROIRUWKHGHIDXOWSDVVZRUG

2QFH\RXVHOHFWHGWKHPDQXIDFWXUHULWZLOOVKRZDOODYDLODEOHSDVVZRUGRQ
DOOGHYLFHVE\WKHPDQXIDFWXUHU
 2IIOLQH$WWDFNV
3UH&RPSXWHGKDVKHVDQG5DLQERZ7DEOH
$Q H[DPSOH RI RIIOLQH DWWDFNV LV FRPSDULQJ WKH SDVVZRUG XVLQJ D
UDLQERZWDEOH(YHU\SRVVLEOHFRPELQDWLRQRIFKDUDFWHULVFRPSXWHGIRU
WKH KDVK WR FUHDWH D UDLQERZ WDEOH :KHQ D UDLQERZ WDEOH FRQWDLQV DOO
SRVVLEOH SUHFRPSXWHG KDVKHV DWWDFNHU FDSWXUHV WKH SDVVZRUG KDVK RI
WDUJHW DQG FRPSDUHV LW ZLWK WKH UDLQERZ WDEOH 7KH DGYDQWDJH RI
5DLQERZ WDEOH LV DOO KDVKHV DUH SUHFRPSXWHG +HQFH LW WRRN IHZ
PRPHQWVWRFRPSDUHDQGUHYHDOWKHSDVVZRUG/LPLWDWLRQRIDUDLQERZ
WDEOHLVLWWDNHVDORQJWLPHWRFUHDWHDUDLQERZWDEOHE\FRPSXWLQJDOO
KDVKHV
7R JHQHUDWH UDLQERZ WDEOHV 8WLOLWLHV \RX FDQ XVH WR SHUIRUP WKLV WDVN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

DUHZLQUWJHQD*8,EDVHGJHQHUDWRUDQGUWJHQDFRPPDQGOLQHWRRO
6XSSRUWHGKDVKLQJIRUPDWVDUHWKHIROORZLQJ
0'
0'
0'
6+$
6+$
6+$
6+$DQGRWKHUKDVKLQJIRUPDWV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE5DLQERZ7DEOHXVLQJ:LQUWJHQWRRO
([HUFLVH

2SHQ:LQUWJHQDSSOLFDWLRQ&OLFN$GGWDEOHEXWWRQ WRDGGQHZ
5DLQERZWDEOH

)LJXUH:LQUWJHQWRROIRU5DLQERZ7DEOH

6HOHFW WKH +DVK 0LQLPXP OHQJWK PD[LPXP OHQJWK DQG DQRWKHU DWWULEXWH
DVUHTXLUHG

)LJXUH:LQUWJHQWRROIRU5DLQERZ7DEOH

6HOHFWWKH&KDUVHWYDOXH$YDLODEOHRSWLRQVDUH$OSKDEHWV$OSKD1XPHULF

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

DQGRWKHUFRPELQDWLRQRIFKDUDFWHUVDVVKRZQLQWKHILJXUHEHORZ

)LJXUH:LQUWJHQWRROIRU5DLQERZ7DEOH

&OLFN %HQFKPDUN %XWWRQ  WR (VWLPDWH +DVK 6SHHG 6WHS 6SHHG


7DEOH3UH&RPSXWDWLRQWLPHDQGRWKHUSDUDPHWHUV
&OLFN2N WRSURFHHG

)LJXUH:LQUWJHQWRROIRU5DLQERZ7DEOH

&OLFN6WDUWWR&RPSXWH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH:LQUWJHQWRROIRU5DLQERZ7DEOH

,WZLOOWDNHDORQJWLPHWRFRPSXWHDOOKDVKHV

)LJXUH:LQUWJHQWRROIRU5DLQERZ7DEOH

2QFHLWLVFRPSOHWH\RXFDQILQGWKH:LQGRZ7DEOHLQWKHGLUHFWRU\
'LVWULEXWHG1HWZRUN$WWDFN
'LVWULEXWHG 1HWZRUN $WWDFN '1$  LV DQ DGYDQFHG DSSURDFK WR
FUDFNLQJWKHSDVVZRUG8VLQJWKHXQXVHGSURFHVVLQJSRZHURIPDFKLQHV
DFURVV WKH QHWZRUN '1$ UHFRYHUV WKH SDVVZRUG E\ GHFU\SWLQJ WKH
KDVKHV 'LVWULEXWHG 1HWZRUN $WWDFN UHTXLUHV D '1$ 0DQDJHU DQG
'1$ FOLHQW '1$ PDQDJHU LV GHSOR\HG LQ D FHQWUDO ORFDWLRQ LQ D
QHWZRUN DFURVV WKH '1$ &OLHQWV '1$ PDQDJHU DOORFDWHV VPDOO WDVN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

RYHU WKH GLVWULEXWHG QHWZRUN WR EH FRPSXWHG LQ WKH EDFNJURXQG XVLQJ
XQXVHGUHVRXUFHVWRFUDFNWKHSDVVZRUG
 3DVVZRUG*XHVVLQJ
3DVVZRUG JXHVVLQJ LV WKH WULDO DQG HUURU PHWKRG RI JXHVVLQJ WKH SDVVZRUG
7KH DWWDFNHU XVHV WKH LQIRUPDWLRQ H[WUDFWHG E\ LQLWLDO SKDVHV DQG JXHVV WKH
SDVVZRUGDWWHPSWPDQXDOO\IRUFUDFNLQJWKHSDVVZRUG7KLVW\SHRIDWWDFNLV
QRW FRPPRQ DQG UDWH RI IDLOXUH LV KLJK EHFDXVH RI WKH UHTXLUHPHQW RI
SDVVZRUG SROLFLHV 1RUPDOO\ LQIRUPDWLRQ FROOHFWHG IURP VRFLDO HQJLQHHULQJ
KHOSVWRFUDFNWKHSDVVZRUG
 86%'ULYH
,QDQDFWLYHRQOLQHDWWDFNXVLQJD86%GULYHDWWDFNHUSOXJVLQD86%GULYH
FRQWDLQLQJDSDVVZRUGKDFNLQJWRROVXFKDV3DVVYLHZLQLW$V86%GULYH
SOXJV LQ :LQGRZ $XWRUXQ IHDWXUH DOORZV UXQQLQJ WKH DSSOLFDWLRQ
DXWRPDWLFDOO\ LI WKH IHDWXUH LV HQDEOHG 2QFH WKH DSSOLFDWLRQ LV DOORZLQJ WR
H[HFXWHLWZLOOH[WUDFWWKHSDVVZRUG

)LJXUH3DVVZRUG&UDFNLQJ)ORZ&KDUW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

0LFURVRIW$XWKHQWLFDWLRQ
,Q&RPSXWHUQHWZRUNLQJ$XWKHQWLFDWLRQLVDYHULILFDWLRQSURFHVVWRLGHQWLI\
DQ\ XVHU RU GHYLFH :KHQ \RX DXWKHQWLFDWH DQ HQWLW\ WKH PRWLYH RI
DXWKHQWLFDWLRQ LV WR YDOLGDWH LI WKH GHYLFH LV OHJLWLPDWH RU QRW :KHQ \RX
DXWKHQWLFDWH D XVHU LW PHDQV \RX DUH YHULI\LQJ WKH DFWXDO XVHU DJDLQVW WKH
LPSRVWHU
:LWKLQ 0LFURVRIW SODWIRUP RSHUDWLQJ V\VWHP LPSOHPHQWV D GHIDXOW VHW RI
DXWKHQWLFDWLRQ SURWRFROV LQFOXGLQJ .HUEHURV 6HFXULW\ $FFRXQW 0DQDJHU
6$0  17 /$1 0DQDJHU 17/0  /0 DQG RWKHU DXWKHQWLFDWLRQ
PHFKDQLVPV 7KHVH SURWRFROV HQVXUH WKH DXWKHQWLFDWLRQ RI XVHUV FRPSXWHUV
DQGVHUYLFHV
6HFXULW\$FFRXQW0DQDJHU 6$0
6HFXULW\ $FFRXQW 0DQDJHU 6$0 LV D GDWDEDVH WKDW VWRUHV FUHGHQWLDOV DQG
RWKHUDFFRXQWSDUDPHWHUVVXFKDVSDVVZRUGVIRUWKHDXWKHQWLFDWLRQSURFHVVLQ
D :LQGRZV 2SHUDWLQJ V\VWHP :LWKLQ 0LFURVRIW SODWIRUP 6$0 GDWDEDVH
FRQWDLQV SDVVZRUGV LQ D KDVKHG IRUP DQG RWKHU DFFRXQW LQIRUPDWLRQ :KLOH
WKHRSHUDWLQJV\VWHPLVUXQQLQJWKLVGDWDEDVHLVORFNHGWREHDFFHVVHGE\DQ\
RWKHU VHUYLFH DQG SURFHVV 7KHUH DUH VHYHUDO RWKHU VHFXULW\ DOJRULWKPV DUH
DSSOLHGWRWKHGDWDEDVHWRVHFXUHDQGYDOLGDWHWKHLQWHJULW\RIGDWD
0LFURVRIW:LQGRZVVWRUHSDVVZRUGLQ/017/0KDVKLQJIRUPDW:LQGRZV
;3 DQG /DWHU YHUVLRQ RI :LQGRZV GR QRW VWRUH WKH YDOXH RI /0 KDVK RU
ZKHQ WKH YDOXH RI /0 KDVK LV H[FHHGLQJ  FKDUDFWHUV LW VWRUHV EODQN RU
GXPP\YDOXHLQVWHDG
8VHUQDPHXVHU,'/0+DVK17/0+DVK
7KHKDVKHGSDVVZRUGVDUHVWRUHGDVVKRZQLQWKHILJXUHEHORZ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH6WRUHGKDVKHGSDVVZRUGLQ6$0)LOH
7KH6$0ILOHORFDWHGLQGLUHFWRU\F?ZLQGRZV?V\VWHP?FRQILJ?6$0

)LJXUH6$0)LOH'LUHFWRU\
17/0$XWKHQWLFDWLRQ
17 /DQ 0DQDJHU 17/0  LV D SURSULHWDU\ DXWKHQWLFDWLRQ SURWRFRO E\
0LFURVRIW,QWKH17/0DXWKHQWLFDWLRQSURFHVV8VHUVHQGVORJLQFUHGHQWLDOV
WRDGRPDLQFRQWUROOHU'RPDLQ&RQWUROOHUUHVSRQGVWRDFKDOOHQJHNQRZQDV
ߡQRQFHߢWREHHQFU\SWHGE\WKHSDVVZRUG
VKDVK7KLVFKDOOHQJHLVDE\WH
UDQGRP QXPEHU JHQHUDWHG E\ WKH GRPDLQ FRQWUROOHU %\ FRPSDULQJ WKH
UHFHLYHGHQFU\SWHGFKDOOHQJHZLWKWKHGDWDEDVH'RPDLQFRQWUROOHUSHUPLWRU
GHQ\ WKH ORJLQ VHVVLRQ 0LFURVRIW KDV XSJUDGHG LWV GHIDXOW DXWKHQWLFDWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

PHFKDQLVPIURP17/0WR.HUEHURV

)LJXUH17/0$XWKHQWLFDWLRQ3URFHVV
17/0DXWKHQWLFDWLRQFRPHVLQWZRYHUVLRQV
 17/0Y 2OGHUYHUVLRQ
 17/0Y ,PSURYHGYHUVLRQ
7RSURYLGHDQDGGLWLRQDOOD\HURIVHFXULW\17/0LVFRPELQHGZLWKDQRWKHU
VHFXULW\OD\HUNQRZQDV6HFXULW\6XSSRUW3URYLGHU 663

7KH IROORZLQJ DUH VRPH 2SHUDWLQJ V\VWHP DQG WKHLU ILOHV FRQWDLQLQJ
HQFU\SWHGSDVVZRUGV
2SHUDWLQJ6\VWHP )LOH FRQWDLQLQJ HQFU\SWHG
SDVVZRUGV
:LQGRZV 6$0)LOH
/LQX[ 6+$'2:
'RPDLQ&RQWUROOHU :LQGRZV 17'6',7
7DEOH)LOHVVWRULQJ(QFU\SWHGKDVKHVRIGLIIHUHQWSODWIRUPV
.HUEHURV
7KH 0LFURVRIW .HUEHURV $XWKHQWLFDWLRQ SURWRFRO LV DQ DGYDQFHG
$XWKHQWLFDWLRQ SURWRFRO ,Q .HUEHURV &OLHQWV UHFHLYH WLFNHWV IURP .HUEHURV
.H\ 'LVWULEXWLRQ &HQWHU .'&  .'& GHSHQGV XSRQ WKH IROORZLQJ
FRPSRQHQWV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

 $XWKHQWLFDWLRQ6HUYHU
 7LFNHW*UDQWLQJ6HUYHU

)LJXUH.HUEHURV$XWKHQWLFDWLRQ3URFHVV
,Q RUGHU WR DXWKHQWLFDWH LWVHOI WKH FOLHQW KDV WR VHQG D UHTXHVW WR WKH
DXWKHQWLFDWLRQVHUYHUWRJUDQW7LFNJUDQWLQJWLFNHW 7*7 7KHDXWKHQWLFDWLRQ
VHUYHU DXWKHQWLFDWHV WKH FOLHQW E\ FRPSDULQJ WKH XVHU LGHQWLW\ DQG SDVVZRUG
IURP LWV GDWDEDVH DQG UHSO\ ZLWK 7LFNJUDQWLQJWLFNHW 7*7  DQG D VHVVLRQ
NH\7KHVHVVLRQNH\LVIRUDVHVVLRQEHWZHHQ&OLHQWDQG7*61RZ&OLHQW
KDV EHHQ DXWKHQWLFDWHG DQG UHFHLYHG 7*7 DQG 6HVVLRQ NH\ IURP WKH
$XWKHQWLFDWLRQ VHUYHU $6  IRU FRPPXQLFDWLQJ 7LFNHW*UDQWLQJ 6HUYHU
7*6 7KHFOLHQWVHQGVWKH7*7WR7*6DVNIRUWKHWLFNHWWRFRPPXQLFDWLRQ
ZLWKDQRWKHUXVHU7*6UHSO\ZLWKWLFNHWDQGVHVVLRQNH\7LFNHWDQG6HVVLRQ
NH\LVIRUFRPPXQLFDWLQJZLWKDQRWKHUXVHUZLWKLQDWUXVWHGGRPDLQ
3DVVZRUG6DOWLQJ
3DVVZRUGVDOWLQJLVWKHSURFHVVRIDGGLQJDGGLWLRQDOFKDUDFWHULQWKHSDVVZRUG
WR RQHZD\ IXQFWLRQ 7KLV DGGLWLRQ RI FKDUDFWHUV PDNHV WKH SDVVZRUG PRUH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

GLIILFXOW WR UHYHUVH WKH KDVK 0DMRU DGYDQWDJH RU SULPDU\ IXQFWLRQ RI
3DVVZRUGVDOWLQJLVWRGHIHDWWKHGLFWLRQDU\DWWDFNVDQGSUHFRPSXWHGDWWDFNV
&RQVLGHUWKHIROORZLQJH[DPSOHRQHRIWKHKDVKHGYDOXHLVRIWKHSDVVZRUG
ZLWKRXW VDOWLQJ ZKLOH DQRWKHU KDVKHG YDOXH LV RI WKH VDPH SDVVZRUG ZLWK
VDOWLQJ
:LWKRXW6DOWLQJ GIIIEFIIFEFDFH
:LWK6DOWLQJ GGEFEGFHHEGF
%\ DGGLQJ D ORW RI UDQGRP FKDUDFWHUV LQ D SDVVZRUG PDNH LW PRUH FRPSOH[
DQGHYHQKDUGWRUHYHUVH
3DVVZRUG&UDFNLQJ7RROV
7KHUHDUHORWVRIWRROVDYDLODEOHRQWKHLQWHUQHWIRUSDVVZRUGFUDFNLQJ6RPH
RIWKHVHWRROVDUH
SZGXPS
IJGXPS
/SKW&UDFN
2SKFUDFN
5DLQERZ&UDFN
&DLQDQG$EHO
-RKQWKH5LSSHUDQGPDQ\PRUH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH2SKFUDFN6RIWZDUH
3DVVZRUG&UDFNLQJWRROIRU0RELOH
)OH[\6S\ LV RQH RI WKH PRVW SRZHUIXO PRQLWRULQJ VS\LQJ WRROV IRU PRELOH
DQG LV FRPSDWLEOH ZLWK $QGURLG L3DG L3KRQH %ODFNEHUU\ DQG 6\PELDQ
3KRQHV )RU RQFH \RX KDYH WR LQVWDOO WKH DSSOLFDWLRQ RQ PRELOH )RU PRUH
LQIRUPDWLRQYLVLWWKHZHEVLWHKWWSVZZZIOH[LVS\FRP

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH)OH[\6S\

%\ORJJLQJLQWR\RXUGDVKERDUG\RXFDQYLHZHDFKQHYHU\VHFWLRQRI\RXU
PRELOH VXFK DV PHVVDJHV (PDLOV FDOO UHFRUGV FRQWDFWV $XGLR 9LGHR
JDOOHU\/RFDWLRQSDVVZRUGDQGRWKHURSWLRQV

)LJXUH)OH[\6S\

,QWKH3DVVZRUGVHFWLRQ\RXFDQJHWWKHSDVVZRUGRIDFFRXQWV$ORQJZLWK
XVHUQDPHDQGODVWFDSWXUHGGHWDLOV

)LJXUH)OH[\6S\

3DVVZRUG&UDFNLQJ&RXQWHUPHDVXUHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE3DVVZRUG&UDFNLQJXVLQJ3ZGXPSDQG2SKFUDFN
WRRO
&DVH 6WXG\ ,Q WKLV ODE ZH DUH XVLQJ :LQGRZV  DQG :LQGRZV  ZLWK
3ZGXPSDQG2SKFUDFNWRRO:LQGRZVPDFKLQHLVKDYLQJPXOWLSOHXVHUV
FRQILJXUHGRQLW8VLQJ$GPLQLVWUDWLYHDFFHVVZHZLOODFFHVVWKHHQFU\SWHG
KDVKHVDQGIRUZDUGLWWR:LQGRZVPDFKLQHLQVWDOOHGZLWK2SKFUDFNWRRO
WRFUDFNWKHSDVVZRUG



3URFHGXUH
 *RWR:LQGRZVPDFKLQHDQGUXQ&RPPDQG3URPSWZLWKDGPLQLVWUDWLYH
SULYLOHJHV

)LJXUH:LQGRZV&RPPDQG/LQH

 (QWHUWKHIROORZLQJFRPPDQG
&?8VHUV?:LQ!ZPLFXVHUDFFRXQWJHWQDPHVLG


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH([WUDFWLQJ8VHUQDPHDQG6,'V

7KHRXWSXWRIWKLVFRPPDQGZLOOVKRZDOOXVHUVDQGWKHLUKDVKHGSDVVZRUGV
 1RZJRWRWKHGLUHFWRU\ZKHUHSZGXPSLVORFDWHGDQGUXQ,QRXUFDVH
3ZGXPSLVORFDWHGDWWKHGHVNWRS
&?8VHUV?:LQ?'HVNWRS?SZGXPS!SZGXPSH[H


)LJXUHUXQQLQJSZGXPSWRRO

 &RS\ WKH UHVXOW LQWR D WH[W ILOH XVLQJ FRPPDQG SZGXPSH[H !
&?8VHUV?:LQ?'HVNWRS?+DVKHVW[W

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH([WUDFWLQJUHVXOWV

 &KHFNWKHILOH+DVKHVW[WDWWKHGHVNWRS

)LJXUH([WUDFWHGKDVKHVLQDQRWHSDGILOH

 1RZVHQGLQJWKHILOH+DVKHVW[WWRDUHPRWHPDFKLQH :LQGRZV 


<RXFDQLQVWDOO2SKFUDFNWRRORQWKHVDPHPDFKLQHDVZHOO
 5XQ2SKFUDFNWRRORQ:LQGRZV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH2SKFUDFNWRRO

 &OLFNRQ/RDGEXWWRQ6HOHFW3:'803)LOHRSWLRQIURPWKHGURSGRZQ
PHQX

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH/RDGLQJ3:'803ILOH

 $VVKRZQEHORZ+DVKHVDUHORDGHGLQWKHDSSOLFDWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH)LOHORDGHG

 &OLFNRQ7DEOHVEXWWRQWRORDG,QVWDOODWDEOH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,QVWDOOLQJ7DEOH

 6HOHFW\RXUGHVLUHGWDEOHLQRXUFDVH9LVWDIUHHWDEOHLVXVHG
 6HOHFWDQGFOLFN,QVWDOO
 /RFDWHWKHIROGHUZKHUHWKHWDEOHLVORFDWHG,QRXUFDVHZHDUHXVLQJ
GHIDXOWWDEOHVZLWKWKHDSSOLFDWLRQKHQFHORFDWHGWKHIROGHUZKHUHWKH
DSSOLFDWLRQLVLQVWDOOHG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,QVWDOOLQJ7DEOH

 &OLFN2N

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&UDFNLQJ3DVVZRUG

 &OLFN&UDFN%XWWRQWRVWDUWFUDFNLQJ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH5HVXOWV

 7KHUHVXOWLVVKRZLQJXVHUKDYLQJQRSDVVZRUGFRQILJXUDWLRQ8VHUVZLWK
DFUDFNHGSDVVZRUG7KHUHVXOWPD\LQFOXGHVRPHSDVVZRUGZKLFKLVQRW
FUDFNHG\RXFDQWU\RWKHUWDEOHVWRFUDFNWKHP
 ,Q RXU FDVH 8VHU SDVVZRUG $OEHUW LV FUDFNHG 1RZ DFFHVV WKH
:LQGRZVPDFKLQHZLWK8VHU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH$FFHVVLQJ8VHUZLWKDFUDFNHGSDVVZRUG

 (QWHUWKHSDVVZRUG$OEHUW FUDFNHG 

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH6XFFHVVIXOORJLQ
6XFFHVVIXOO\ORJJHG,Q
(VFDODWLQJ3ULYLOHJHV
,QWKHVHFWLRQRI3ULYLOHJH(VFDODWLRQZHZLOOGLVFXVVZKDWWRGRDIWHUJDLQLQJ
DFFHVV WR WKH WDUJHW 7KHUH LV VWLOO D ORW RI WDVNV WR SHUIRUP LQ 3ULYLOHJH
(VFDODWLRQ <RX PD\ QRW DOZD\V KDFN DQ DGPLQ DFFRXQW VRPHWLPHV \RX
KDYH FRPSURPLVHG WKH XVHU DFFRXQW ZKLFK KDV ORZHU SULYLOHJHV 8VLQJ WKH
FRPSURPLVHGDFFRXQWZLWKOLPLWHGSULYLOHJHZLOOQRWKHOS\RXWRDFKLHYH\RXU
JRDOV 3ULRU WR DQ\WKLQJ DIWHU JDLQLQJ DFFHVV \RX KDYH WR SHUIRUP SULYLOHJH
HVFDODWLRQ WR KDYH FRPSOHWH \RX KLJKOHYHO DFFHVV ZLWK QR RU OLPLWHG
UHVWULFWLRQV
(DFK 2SHUDWLQJ V\VWHP FRPHV ZLWK VRPH GHIDXOW VHWWLQJ DQG XVHU DFFRXQWV
VXFK DV DGPLQLVWUDWRU DFFRXQW URRW DFFRXQW DQG JXHVW DFFRXQW HWF ZLWK
GHIDXOW SDVVZRUGV ,W LV HDV\ IRU DQ DWWDFNHU WR ILQG YXOQHUDELOLWLHV RI SUH
FRQILJXUHGDFFRXQWLQDQRSHUDWLQJV\VWHPWRH[SORLWDQGJDLQDFFHVV7KHVH
GHIDXOW VHWWLQJV DQG DFFRXQW PXVW EH VHFXUHG DQG PRGLILHG WR SUHYHQW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

XQDXWKRUL]HGDFFHVV
3ULYLOHJH(VFDODWLRQLVIXUWKHUFODVVLILHGLQWRWZRW\SHV
 +RUL]RQWDO3ULYLOHJHV(VFDODWLRQ
 9HUWLFDO3ULYLOHJHV(VFDODWLRQ
+RUL]RQWDO3ULYLOHJHV(VFDODWLRQ
,Q +RUL]RQWDO 3ULYLOHJHV (VFDODWLRQ DQ DWWDFNHU DWWHPSWV WR WDNH FRPPDQG
RYHUWKHSULYLOHJHVRIDQRWKHUXVHUKDYLQJWKHVDPHVHWRISULYLOHJHVIRUKLV
DFFRXQW +RUL]RQWDO SULYLOHJHV HVFDODWLRQ RFFXUV ZKHQ DQ DWWDFNHU LV
DWWHPSWLQJ WR JDLQ DFFHVV WR WKH VDPH VHW RI UHVRXUFHV DOORZHG IRU WKH
SDUWLFXODUXVHU
&RQVLGHU DQ H[DPSOH RI KRUL]RQWDO SULYLOHJHV HVFDODWLRQ E\ FRQVLGHULQJ DQ
RSHUDWLQJ V\VWHP KDYLQJ PXOWLSOH XVHUV LQFOXGLQJ $GPLQLVWUDWRU KDYLQJ IXOO
SULYLOHJHV 8VHU $ 8VHU % DQG VR RQ KDYLQJ OLPLWHG SULYLOHJHV WR UXQ
DSSOLFDWLRQ RQO\ QRW DOORZHG WR LQVWDOO RU XQLQVWDOO DQ\ DSSOLFDWLRQ  (DFK
XVHULVDVVLJQHGZLWKWKHVDPHOHYHORISULYLOHJHV%\ILQGLQJDQ\ZHDNQHVV
RUH[SORLWLQJDQ\YXOQHUDELOLW\8VHU$JDLQDFFHVVWR8VHU%1RZXVHU$LV
DEOHWRFRQWURODQGDFFHVVWKH8VHU%DFFRXQW
9HUWLFDO3ULYLOHJHV(VFDODWLRQ
,Q9HUWLFDO3ULYLOHJHV(VFDODWLRQDQDWWDFNHUDWWHPSWVWRHVFDODWHSULYLOHJHVWR
D KLJKHU OHYHO 9HUWLFDO SULYLOHJHV HVFDODWLRQ RFFXUV ZKHQ DQ DWWDFNHU LV
DWWHPSWLQJ WR JDLQ DFFHVV XVXDOO\ WR WKH DGPLQLVWUDWRU DFFRXQW +LJKHU
SULYLOHJHV DOORZ WKH DWWDFNHU WR DFFHVV VHQVLWLYH LQIRUPDWLRQ LQVWDOO PRGLI\
DQGGHOHWHILOHVDQGSURJUDPVVXFKDVDYLUXV7URMDQVHWF
3ULYLOHJH(VFDODWLRQXVLQJ'//+LMDFNLQJ
$SSOLFDWLRQVQHHG'\QDPLF/LQN/LEUDULHV '// IRUH[HFXWDEOHILOHVWRUXQ
,Q :LQGRZV RSHUDWLQJ V\VWHP PRVW RI WKH DSSOLFDWLRQ VHDUFK IRU '// LQ
GLUHFWRULHV LQVWHDG RI XVLQJ IXOO\ TXDOLILHG SDWK 7DNLQJ DGYDQWDJH RI WKLV
OHJLWLPDWH '// LV UHSODFLQJ PDOLFLRXV '// 2QFH WKHVH '//V DUH UHQDPHG
ZLWKH[DFWO\WKHVDPHQDPHRIOHJLWLPDWH'//VDQGUHSODFHGLQWKHGLUHFWRU\
WKH H[HFXWDEOH ILOH ZLOO ORDG PDOLFLRXV '// IURP DSSOLFDWLRQ GLUHFWRU\
LQVWHDGRIUHDO'//

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH9HUWLFDO3ULYLOHJH(VFDODWLRQ
8VLQJ '// KLMDFNLQJ WRRO VXFK DV 0HWDVSORLW FDQ EH XVHG IRU JHQHUDWLQJ
'//ZKLFKUHWXUQVZLWKDVHVVLRQZLWKSULYLOHJHV7KLVJHQHUDWHGPDOLFLRXV
'// LV UHQDPHG DQG SDVWHG LQ WKH GLUHFWRU\ :KHQ DSSOLFDWLRQ UXQ LW ZLOO
RSHQWKHVHVVLRQZLWKV\VWHPSULYLOHJHV,Q:LQGRZVSODWIRUP.QRZQ'//V

DUHVSHFLILHGLQWKHUHJLVWU\NH\
+.(<B/2&$/B0$&+,1(?6<67(0?&XUUHQW&RQWURO6HW?&RQWURO?6HVVLRQ
0DQDJHU?


)LJXUH+RUL]RQWDO3ULYLOHJH(VFDODWLRQ
7KH DSSOLFDWLRQ QRUPDOO\ VHDUFKHV IRU '// LQ WKH H[DFW GLUHFWRU\ LI LW LV
FRQILJXUHG ZLWK WKH IXOO\ TXDOLILHG SDWK HOVH LI WKH DSSOLFDWLRQ LV QRW XVLQJ
VSHFLILHGSDWKLWPD\VHDUFKLQWKHIROORZLQJVHDUFKSDWKVXVHGE\0LFURVRIW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

'LUHFWRU\RI$SSOLFDWLRQRUFXUUHQWGLUHFWRU\
6\VWHP'LUHFWRU\LH&??:LQGRZV??6\VWHP?
:LQGRZV'LUHFWRU\
([HFXWLQJ$SSOLFDWLRQV
2QFH DQ DWWDFNHU JDLQV XQDXWKRUL]HG DFFHVV WR WKH V\VWHP DQG HVFDODWHV
SULYLOHJHV QRZ WKH QH[W VWHS RI WKH DWWDFNHU LV WR H[HFXWH PDOLFLRXV
DSSOLFDWLRQV RQ WKH WDUJHW V\VWHP 7KLV H[HFXWLRQ RI PDOLFLRXV SURJUDPV LV
LQWHQGHG IRU JDLQLQJ XQDXWKRUL]HG DFFHVV WR V\VWHP UHVRXUFHV FUDFN
SDVVZRUGV VHW XS EDFNGRRUV DQG IRU RWKHU PRWLYHV 7KHVH H[HFXWDEOH
SURJUDPVFDQEHFXVWRPL]HGDSSOLFDWLRQRUDYDLODEOHVRIWZDUH7KLVSURFHVV
H[HFXWLRQRIWKHDSSOLFDWLRQLVDOVRFDOOHGDV6\VWHP2ZQLQJ7KHDWWDFNHU
LVWRRZQWKHV\VWHP,QWHQWLRQVRUJRDOVDQDWWDFNHUZDQWHGWRDFKLHYHE\
H[HFXWLQJVXFKPDOLFLRXVDSSOLFDWLRQDUH
,QVWDOODWLRQRI0DOZDUHWRFROOHFWLQIRUPDWLRQ
7RVHWXS%DFNGRRUWRPDLQWDLQDFFHVV
7RLQVWDOO&UDFNHUWRFUDFNSDVVZRUGDQGVFULSWV
7RLQVWDOO.H\ORJJHUVIRUJDWKHULQJLQIRUPDWLRQYLDLQSXWGHYLFHVVXFK
DVDNH\ERDUG
5HPRWH([HF
5HPRWH([HF LV D VRIWZDUH GHVLJQHG IRU LQVWDOODWLRQ RI WKH DSSOLFDWLRQ
H[HFXWLRQRIFRGHDQGVFULSWVUHPRWHO\DGGLWLRQDOO\5HPRWH([HFFDQXSGDWH
ILOHV RQ WKH WDUJHW V\VWHP DFURVV D QHWZRUN 0DMRU IHDWXUHV RIIHUHG E\ WKH
5HPRWH([HFDSSOLFDWLRQDUH
'HSOR\SDFNDJHVRQWKHWDUJHWV\VWHP
5HPRWHO\H[HFXWLRQRISURJUDPVDQGVFULSWV
6FKHGXOLQJ([HFXWLRQEDVHGRQSDUWLFXODUGDWHDQGWLPH
5HPRWH &RQILJXUDWLRQ PDQDJHPHQW VXFK DV PRGLILFDWLRQ RI UHJLVWU\
GLVDEOLQJDFFRXQWVPRGLILFDWLRQDQGPDQLSXODWLRQRIILOHV
5HPRWHFRQWUROOLQJRIWDUJHWV\VWHPVXFKDVSRZHURIIVOHHSZDNHXS
UHERRWDQGORFNHWF

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH5HPRWH([HF$SSOLFDWLRQ
3'4'HSOR\
3'4 'HSOR\ LV EDVLFDOO\ VRIWZDUH V\VWHP DGPLQLVWUDWRU WRRO XVHG WR LQVWDOO
DQGVHQGXSGDWHVVLOHQWO\WRWKHUHPRWHV\VWHP3'4'HSOR\DOORZRUDVVLVW
WKHDGPLQLQLQVWDOOLQJDSSOLFDWLRQDQGVRIWZDUHWRDSDUWLFXODUV\VWHPDVZHOO
DV PXOWLSOH V\VWHPV LQ D QHWZRUN ,W FDQ VLOHQWO\ GHSOR\ DOPRVW HYHU\
DSSOLFDWLRQ VXFK DV H[H RU PVL  WR WKH WDUJHW V\VWHP 8VLQJ 3'4 'HSOR\
\RXFDQLQVWDOODQGXQLQVWDOOFRS\H[HFXWHDQGVHQGILOHV
.H\ORJJHUV
.H\VWURNH ORJJLQJ .H\ORJJLQJ DQG NH\ERDUG FDSWXULQJ LV D SURFHVV RI
PRQLWRULQJ RU UHFRUGLQJ WKH DFWLRQV SHUIRUPHG E\ DQ\ XVHU VXFK DV
PRQLWRULQJDXVHUXVLQJNH\ERDUGXVLQJ.H\ORJJHUV.H\ORJJHUVFDQEHHLWKHU
KDUGZDUHRUVRIWZDUH7KHPDMRUSXUSRVHRIXVLQJ.H\ORJJHUVDUHPRQLWRULQJ
GDWDFRSLHGWRWKHFOLSERDUGVFUHHQVKRWVFDSWXUHGE\WKHXVHUVFUHHQORJJLQJ
E\FDSWXULQJDVFUHHQVKRWDWHYHU\PRPHQWHYHQZKHQWKHXVHUMXVWFOLFNHG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH7\SHVRI.H\ORJJHUV
7\SHVRI.H\VWURNH/RJJHUV
6RIWZDUH.H\ORJJHUV
6RIWZDUHEDVHG.H\ORJJHUVSHUIRUPVLWVIXQFWLRQE\ORJJLQJWKHDFWLRQVLQ
RUGHU WR VWHDO LQIRUPDWLRQ IURP WKH WDUJHW PDFKLQH 6RIWZDUHEDVHG
.H\ORJJHUVDUHUHPRWHO\LQVWDOOHGRUDQDWWDFNHUPD\VHQGLWWRXVHUDQG
XVHU FDQ DFFLGHQWDOO\ H[HFXWH WKH DSSOLFDWLRQ 6RIWZDUH .H\ORJJHUV
LQFOXGHV
$SSOLFDWLRQ.H\ORJJHUV
.HUQHO.H\ORJJHUV
+\SHUYLVRUEDVHG.H\ORJJHUV
)RUP*UDEELQJEDVHG.H\ORJJHUV
+DUGZDUH.H\ORJJHUV
+DUGZDUHEDVHG.H\ORJJHUVDUHSK\VLFDOKDUGZDUHߞVRU.H\ORJJHUVZKLFK
DUH LQVWDOOHG RQ KDUGZDUH E\ SK\VLFDOO\ DFFHVVLQJ WKH GHYLFH )LUPZDUH
EDVHG.H\ORJJHUVUHTXLUHVSK\VLFDODFFHVVWKHWRWKHPDFKLQHWRORDGWKH
VRIWZDUH LQWR %,26 NH\ERDUG KDUGZDUH VXFK DV NH\ JUDEEHU 86% LV D
SK\VLFDOGHYLFHQHHGVWREHLQVWDOOHGLQOLQHZLWKWKHNH\ERDUG+DUGZDUH
.H\ORJJHUVDUHIXUWKHUFODVVLILHGLQWRIROORZLQJW\SHVLQFOXGHV
3&%,26(PEHGGHG.H\ORJJHUV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

.H\ORJJHUV.H\ERDUG
([WHUQDO.H\ORJJHUV
+DUGZDUH.H\ORJJHUV
+DUGZDUH.H\ORJJHUV :HEVLWH
.H\*UDEEHU86% KWWSZZZNH\GHPRQFRP
.H\*UDEEHU36 KWWSZZZNH\GHPRQFRP
9LGHR*KRVW KWWSZZZNH\GHPRQFRP
.H\*UDEEHU1DQR:L)L KWWSZZZNH\GHPRQFRP
.H\*UDEEHU:L)L3UHPLXP KWWSZZZNH\GHPRQFRP
.H\*UDEEHU7LPH.HHSHU KWWSZZZNH\GHPRQFRP
.H\*UDEEHU0RGXOH KWWSZZZNH\GHPRQFRP
.H\*KRVW86%.H\ORJJHU KWWSZZZNH\JKRVWFRP
.H\&REUD+DUGZDUH.H\ORJJHU 86% KWWSZZZNH\FREUDFRP
DQG36
7DEOH.H\ORJJLQJ+DUGZDUH'HYLFHV
$QWL.H\ORJJHUV
$QWL.H\ORJJHUV DUH DSSOLFDWLRQ VRIWZDUH ZKLFK HQVXUHV SURWHFWLRQ DJDLQVW
NH\ORJJLQJ 7KLV VRIWZDUH HOLPLQDWHV WKH WKUHDW RI NH\ORJJLQJ E\ SURYLGLQJ
66/ SURWHFWLRQ .H\ORJJLQJ SURWHFWLRQ &OLSERDUG ORJJLQJ SURWHFWLRQ DQG
VFUHHQ ORJJLQJ SURWHFWLRQ 6RPH RI WKH $QWL.H\ORJJHU VRIWZDUH DUH OLVWHG
EHORZ
=HPDQD$QWL.H\ORJJHU KWWSVZZZ]HPDQDFRP
6S\VKHOWHU$QWL.H\ORJJHUVRIWZDUH KWWSVZZZVS\VKHOWHUFRP
$QWL.H\ORJJHU KWWSDQWLNH\ORJJHUVFRP
0LQG0DS

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

6S\ZDUH
6S\ZDUHVDUHWKHVRIWZDUHGHVLJQHGIRUJDWKHULQJXVHULQWHUDFWLRQLQIRUPDWLRQ
ZLWK D V\VWHP VXFK DV DQ HPDLO DGGUHVV ORJLQ FUHGHQWLDOV DQG RWKHU GHWDLOV
ZLWKRXWLQIRUPLQJWKHXVHURIWKHWDUJHWV\VWHP0RVWO\6S\ZDUHLVXVHGIRU
WUDFNLQJLQWHUQHWLQWHUDFWLRQRIWKHXVHU7KLVJDWKHUHGLQIRUPDWLRQLVVHQWWRD
UHPRWHGHVWLQDWLRQ6S\ZDUHKLGHVLWVILOHVDQGSURFHVVHVWRDYRLGGHWHFWLRQ
7KHPRVWFRPPRQW\SHVRI6S\ZDUHVDUH
$GZDUH
6\VWHP0RQLWRUV
7UDFNLQJ&RRNLHV
7URMDQV
)HDWXUHVRI6S\ZDUH
7KHUH LV D QXPEHU RI 6S\ZDUH WRROV DYDLODEOH RQ WKH LQWHUQHW SURYLGLQJ
VHYHUDODGYDQFHGIHDWXUHVOLNH
7UDFNLQJ8VHUVVXFKDV.H\ORJJLQJ
0RQLWRULQJXVHUߞVDFWLYLW\VXFKDV:HEVLWHVYLVLWHG
5HFRUGVFRQYHUVDWLRQV
%ORFNLQJ$SSOLFDWLRQ 6HUYLFHV
5HPRWHGHOLYHU\RIORJV
(PDLO&RPPXQLFDWLRQWUDFNLQJ
5HFRUGLQJUHPRYDEOHPHGLDFRPPXQLFDWLRQOLNH86%
9RLFH5HFRUGLQJ
9LGHR5HFRUGLQJ
7UDFNLQJ/RFDWLRQ *36

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

0RELOH7UDFNLQJ
+LGLQJ)LOHV
5RRWNLWV
$URRWNLWLVDFROOHFWLRQRIVRIWZDUHGHVLJQHGWRSURYLGHSULYLOHJHGDFFHVVWRD
UHPRWH XVHU RYHU WKH WDUJHW V\VWHP 0RVWO\ 5RRWNLWV DUH WKH FROOHFWLRQ RI
PDOLFLRXV VRIWZDUH GHSOR\HG DIWHU DQ DWWDFN ZKHQ WKH DWWDFNHU KDV WKH
DGPLQLVWUDWLYHDFFHVVWRWKHWDUJHWV\VWHPWRPDLQWDLQLWVSULYLOHJHGDFFHVVIRU
IXWXUH ,W FUHDWHV D EDFNGRRU IRU DQ DWWDFNHU 5RRWNLWV RIWHQ PDVN WKH
H[LVWHQFHRILWVVRIWZDUHZKLFKKHOSVWRDYRLGGHWHFWLRQ
7\SHVRI5RRWNLWV
$SSOLFDWLRQ/HYHO5RRWNLWV
$SSOLFDWLRQ /HYHO 5RRWNLWV SHUIRUP PDQLSXODWLRQ RI VWDQGDUG
DSSOLFDWLRQILOHVPRGLILFDWLRQRIWKHEHKDYLRURIWKHFXUUHQWDSSOLFDWLRQ
ZLWKDQLQMHFWLRQRIFRGHV
.HUQHO/HYHO5RRWNLWV
7KHNHUQHOLVWKHFRUHRIDQ26.HUQHO/HYHO5RRWNLWVDGGDGGLWLRQDO
FRGHV PDOLFLRXV  UHSODFH WKH VHFWLRQ RI FRGHV RI RULJLQDO 2SHUDWLQJ
V\VWHPNHUQHO
+DUGZDUH)LUPZDUH/HYHO5RRWNLWV
7\SH RI 5RRWNLWV WKDW KLGHV LQ KDUGZDUH VXFK DV KDUG GULYH QHWZRUN
LQWHUIDFH FDUG V\VWHP %,26 ZKLFK DUH QRW LQVSHFWHG IRU LQWHJULW\
7KHVHURRWNLWVDUHEXLOWLQWRDFKLSVHWIRUUHFRYHULQJVWROHQFRPSXWHUV
GHOHWHGDWDRUUHQGHUWKHPXVHOHVV$GGLWLRQDOO\5RRWNLWVKDVSULYDF\
DQGVHFXULW\FRQFHUQVRIXQGHWHFWDEOHVS\LQJ
+\SHUYLVRU/HYHO5RRWNLWV
+\SHUYLVRU /HYHO 5RRWNLWV H[SORLWV KDUGZDUH IHDWXUHV OLNH $0'9
+DUGZDUHDVVLVWHG YLUWXDOL]DWLRQ WHFKQRORJLHV  RU ,QWHO 97 ZKLFK
KRVWVWKHWDUJHW26DVDYLUWXDOPDFKLQH
%RRW/RDGHU/HYHO5RRWNLWV
%RRWORDGHU /HYHO 5RRWNLWV %RRWNLWV  UHSODFHV WKH OHJLWLPDWH ERRW
ORDGHU ZLWK WKH PDOLFLRXV RQH ZKLFK HQDEOHV WKH %RRWNLWV WR EH
DFWLYDWHGEHIRUHDQ26UXQ%RRWNLWVDUHDVHULRXVWKUHDWWRWKHV\VWHP
VHFXULW\ EHFDXVH WKH\ FDQ LQIHFW VWDUWXS FRGHV VXFK DV 0DVWHU %RRW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

5HFRUG 0%5 9ROXPH%RRW5HFRUG 9%5 RUERRWVHFWRU,WFDQEH


XVHG WR DWWDFN IXOO GLVN HQFU\SWLRQ V\VWHPV KDFN HQFU\SWLRQ NH\V DQG
SDVVZRUGV
5RRWNLW7RROV
$YDWDU
1HFXUV
$]D]HO
=HUR$FFHVV
'HWHFWLQJ 'HIHQGLQJ5RRWNLWV
,QWHJULW\%DVHG 'HWHFWLRQ XVLQJ 'LJLWDO 6LJQDWXUHV 'LIIHUHQFHEDVHG
GHWHFWLRQEHKDYLRUDOGHWHFWLRQPHPRU\GXPSVDQGRWKHUDSSURDFKHVFDQEH
XVHGIRUGHWHFWLQJ5RRWNLWV,Q8QL[3ODWIRUP5RRWNLWGHWHFWLRQWRROVVXFKDV
=HSSRR FKURRWNLW DQG RWKHU WRROV DUH DYDLODEOH IRU GHWHFWLRQ ,Q :LQGRZV
0LFURVRIW 6\VLQWHUQDOV 5RRWNLW5HYHDOHU $YDVW DQG 6RSKRV DQWL5RRWNLW
VRIWZDUHDUHDYDLODEOH











0LQG0DS

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

17)6'DWD6WUHDP
17)6 6WDQGV IRU 1HZ 7HFKQRORJ\ )LOH 6\VWHP 17)6 LV D :LQGRZV
3URSULHWDU\ ILOH V\VWHP E\ 0LFURVRIW 17)6 ZDV WKH GHIDXOW )LOH V\VWHP RI
:LQGRZV 17  ,W LV DOVR WKH SULPDU\ ILOH V\VWHP IRU :LQGRZV 
:LQGRZV:LQGRZV:LQGRZV9LVWD:LQGRZV;3:LQGRZVDQG
:LQGRZV17RSHUDWLQJV\VWHPV
$OWHUQDWH'DWD6WUHDP
$OWHUQDWH 'DWD 6WUHDPV $'6  LV D ILOH DWWULEXWH LQ 17)6 ILOH V\VWHP 7KLV
)HDWXUHRI17)6FRQWDLQVPHWDGDWDIRUORFDWLQJDSDUWLFXODUILOH$'6IHDWXUH
ZDV LQWURGXFHG IRU 0DFLQWRVK +LHUDUFKLFDO )LOH 6\VWHP +)6  $'6 LV
FDSDEOHRIKLGLQJILOHGDWDLQWRDQH[LVWLQJILOHZLWKRXWDOWHULQJRUPRGLI\LQJ
DQ\ QRWLFHDEOH FKDQJHV ,Q D SUDFWLFDO HQYLURQPHQW $'6 LV D WKUHDW WR
VHFXULW\ EHFDXVH RI LWV GDWD KLGLQJ FDSDELOLW\ ZKLFK FDQ KLGH D PDOLFLRXV
SLHFHRIGDWDKLGGHQLQDILOHZKLFKFDQEHH[HFXWHGZKHQDQDWWDFNHUGHFLGHV
WRUXQ


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE17)66WUHDP0DQLSXODWLRQ
17)66WUHDP0DQLSXODWLRQ
$WWKHFRPPDQGOLQHHQWHUQRWHSDG7HVWILOHW[W,WZLOORSHQQRWHSDGZLWK
DWH[WILOHQDPHGDV7HVW

)LJXUH&UHDWLQJ&RYHU)LOH 7H[W)LOH

3XWVRPHGDWDLQWKHILOH

)LJXUH&RYHU)LOH 7H[W)LOH

6DYHWKHILOHDQG&ORVH1RWHSDG
&KHFNWKH)LOH6L]H

)LJXUH'HWHUPLQLQJ)LOH6L]H

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

$WWKHFRPPDQGOLQHHQWHUQRWHSDG7HVWILOHW[WKLGGHQW[W

)LJXUH&UHDWLQJ+LGGHQ)LOH

7\SHVRPHWH[WLQWR1RWHSDG

)LJXUH+LGGHQ)LOH $'6

6DYHWKHILOHDQGFORVHLW
&KHFNWKHILOHVL]HDJDLQ LWVKRXOGEHWKHVDPH 

)LJXUH&RPSDULQJ)LOH6L]H

2SHQ7HVWW[W<RXVHHRQO\WKHRULJLQDOGDWD

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&RPSDULQJ)LOH

(QWHUߡW\SH7HVWILOHW[WKLGGHQW[WߡDWWKHFRPPDQGOLQH$V\QWD[HUURU
PHVVDJHLVGLVSOD\HG

)LJXUH$FFHVVLQJ+LGGHQ)LOH

,I\RXFKHFNWKHGLUHFWRU\QRDGGLWLRQDOILOHLVFUHDWHG

)LJXUH)LOHGLUHFWRU\

1RZ\RXFDQXVHDXWLOLW\VXFKDV0DNHVWUPH[HWRH[WUDFWKLGGHQ
LQIRUPDWLRQIURP$'6VWUHDP

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


17)66WUHDP'HWHFWLRQ
1RZDVWKLVILOHGRHVQRWVKRZDQ\PRGLILFDWLRQDQGDOWHUDWLRQLWLVXQDEOH
WR GHWHFW WKDW WKLV ILOH LV D QRUPDO ILOH RU FRQWDLQLQJ DQ\ KLGGHQ ILOH LQ LW
$'6GHWHFWLRQUHTXLUHVDWRROVXFKDV$'66S\2SHQ$'66S\DSSOLFDWLRQ
DQGVHOHFWWKHRSWLRQLI\RXZDQWWR
4XLFN6FDQ
)XOO6FDQ
6FDQ6SHFLILF)ROGHU

)LJXUH$'66S\$SSOLFDWLRQ

$VZHVWRUHWKHILOHLQWKH'RFXPHQWIROGHU6HOHFWLQJ'RFXPHQWIROGHUWR
VFDQSDUWLFXODUIROGHURQO\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH%URZVLQJ'LUHFWRU\

6HOHFWDQ2SWLRQLI\RXZDQWWRVFDQIRU$'6FOLFNߡ6FDQWKHV\VWHPIRU
$'6ߢRUFOLFNUHPRYHVEXWWRQWRUHPRYHWKHILOH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH6FDQQLQJIRU$'6

$VVKRZQLQWKHILJXUHEHORZ$'66S\KDVGHWHFWHGWKH
7HVWILOHW[WKLGGHQW[WILOHIURPWKHGLUHFWRU\

)LJXUH$'6'HWHFWLRQ

17)66WUHDPV&RXQWHUPHDVXUHV
8VLQJ 7KLUGSDUW\ WRROV DQG WHFKQLTXH FDQ SURYLGH VHFXULW\ DQG SURWHFWLRQ
IRUP17)6VWUHDPV7KHPRVWEDVLFPHWKRGWRILOHWRSUHYHQW17)66WUHDP
LVE\PRYLQJWKH)LOHVXFKDV6XVSHFWHG17)6VWUHDPWR)$7SDUWLWLRQ)$7
GRHVQRWVXSSRUW$OWHUQDWH'DWD6WUHDP $'6 0RYLQJ$'6IURP17)6WR
)$7SDUWLWLRQZLOOFRUUXSWWKHILOH7KHUHDUHVHYHUDOWRROVVXFKDV$'66S\
$'6 7RROV /$'6 6WUHDP $UPRU DQG RWKHU WRROV FDQ DOVR GHWHFW DQG
UHPRYHWKHPFRPSOHWHO\
6WHJDQRJUDSK\
6WHJDQRJUDSK\LVEDVLFDOO\DWHFKQLTXHIRUKLGLQJVHQVLWLYHLQIRUPDWLRQLQDQ
RUGLQDU\ PHVVDJH WR HQVXUH WKH FRQILGHQWLDOLW\ +LGGHQ LQIRUPDWLRQ LV
H[WUDFWHG DW WKH GHVWLQDWLRQ E\ D OHJLWLPDWH UHFHLYHU 6WHJDQRJUDSK\ XVHV
HQFU\SWLRQWRPDLQWDLQFRQILGHQWLDOLW\DQGLQWHJULW\$GGLWLRQDOO\LWKLGHVWKH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

HQFU\SWHGGDWDWRDYRLGGHWHFWLRQ7KHJRDORIXVLQJVWHJDQRJUDSK\LVKLGLQJ
WKH LQIRUPDWLRQ IURP WKH WKLUG SDUW\ $Q DWWDFNHU PD\ XVH WKLV WHFKQLTXH WR
KLGHLQIRUPDWLRQOLNHVRXUFHFRGHVSODQVDQ\RWKHUVHQVLWLYHLQIRUPDWLRQWR
WUDQVIHUZLWKRXWEHLQJGHWHFWHG
&ODVVLILFDWLRQRI6WHJDQRJUDSK\
6WHJDQRJUDSK\ LV FODVVLILHG LQWR WZR W\SHV 7HFKQLFDO DQG /LQJXLVWLF
6WHJDQRJUDSK\ 7HFKQLFDO 6WHJDQRJUDSK\ LQFOXGHV FRQFHDOLQJ LQIRUPDWLRQ
XVLQJPHWKRGVOLNHXVLQJLQYLVLEOHLQNPLFURGRWVDQGDQRWKHUPHWKRGWRKLGH
LQIRUPDWLRQ /LQJXLVWLF 6WHJDQRJUDSK\ XVHV WH[W DV FRYHULQJ PHGLD WR KLGH
LQIRUPDWLRQOLNHXVLQJ&LSKHUVDQGFRGHWRKLGHLQIRUPDWLRQ

)LJXUH&ODVVLILFDWLRQRI6WHJDQRJUDSK\
7\SHVRI6WHJDQRJUDSK\
7KHUHDUHVHYHUDOSRSXODUW\SHVRI6WHJDQRJUDSK\VRPHRIWKHPDUHOLVWHG
EHORZ
:KLWHVSDFH6WHJDQRJUDSK\
,PDJH6WHJDQRJUDSK\
,PDJH6WHJDQRJUDSK\
'RFXPHQW6WHJDQRJUDSK\
9LGHR6WHJDQRJUDSK\
$XGLR6WHJDQRJUDSK\
)ROGHU6WHJDQRJUDSK\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

6SDP(PDLO6WHJDQRJUDSK\





0LQG0DS


:KLWH6SDFH6WHJDQRJUDSK\
:KLWH6SDFH6WHJDQRJUDSK\LVDWHFKQLTXHWRKLGHLQIRUPDWLRQLQDWH[WILOH
XVLQJ H[WUD EODQN VSDFH LQVHUWHG LQ EHWZHHQ ZRUGV FRYHULQJ ILOH 7KH VHFUHW
PHVVDJH LV DGGHG DV EODQN VSDFHV 8VLQJ /=: DQG +XIIPDQ FRPSUHVVLRQ
PHWKRGWKHVL]HRIWKHPHVVDJHLVGHFUHDVHG


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE6WHJDQRJUDSK\
([HUFLVH
&UHDWHDWH[WILOHZLWKVRPHGDWDLQWKHVDPHGLUHFWRU\ZKHUH6QRZ7RROLV
LQVWDOOHG

)LJXUH7H[W)LOH &RYHU

*RWR&RPPDQG3URPSW
&KDQJHWKHGLUHFWRU\WRUXQ6QRZWRRO


)LJXUH&KDQJLQJ'LUHFWRU\

7\SHWKHFRPPDQG
6QRZߙ&ߙPߡWH[WWREHKLGHߢߙSߡSDVVZRUGߢ6RXUFHILOH!
'HVWLQDWLRQILOH!
7KHVRXUFHILOHLVD+HOORW[WILOHDVVKRZQDERYH'HVWLQDWLRQILOHZLOOEH
WKHH[DFWFRS\RIVRXUFHILOHFRQWDLQLQJKLGGHQLQIRUPDWLRQ


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH:KLWH6SDFH6WHJDQRJUDSK\XVLQJ6QRZWRRO

*RWRWKHGLUHFWRU\\RXZLOODQHZILOH+HOOR:RUOGW[W2SHQWKH)LOH

)LJXUH)LOH&RQWDLQLQJ+LGGHQ(QFU\SWHGLQIRUPDWLRQ

1HZ)LOHKDVWKHVDPHWH[WDVDQRULJLQDOILOHZLWKRXWDQ\KLGGHQ
LQIRUPDWLRQ7KLVILOHFDQEHVHQWWRWKHWDUJHW

5HFRYHULQJ+LGGHQ,QIRUPDWLRQ
2QGHVWLQDWLRQ5HFHLYHUFDQUHYHDOLQIRUPDWLRQE\XVLQJWKHFRPPDQG
6QRZߙ&ߙSߡSDVVZRUGߢ+HOOR:RUOGW[W


)LJXUH'HFU\SWLQJ)LOH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

$VVKRZQLQWKHDERYHILJXUH)LOHGHFU\SWHGVKRZLQJKLGGHQLQIRUPDWLRQ
HQFU\SWHGLQWKHSUHYLRXVVHFWLRQ
,PDJH6WHJDQRJUDSK\
,Q,PDJH6WHJDQRJUDSK\KLGGHQLQIRUPDWLRQFDQEHNHSWLQGLIIHUHQWIRUPDWV
RI ,PDJH VXFK DV 31* -3* %03 HWF 7KH EDVLF WHFKQLTXH EHKLQG ,PDJH
VWHJDQRJUDSK\LVWKHWRROXVHGIRU,PDJHVWHJDQRJUDSK\UHSODFHVUHGXQGDQW
ELWV RI WKH LPDJH LQ WKH PHVVDJH 7KLV UHSODFHPHQW LV GRQH LQ D ZD\ WKDW LW
FDQQRWEHGHWHFWHGE\KXPDQH\H<RXFDQSHUIRUP,PDJHVWHJDQRJUDSK\E\
GLIIHUHQWWHFKQLTXHVOLNH
/HDVWVLJQLILFDQW%LW,QVHUWLRQ
0DVNLQJDQG)LOWHULQJ
$OJRULWKPDQG7UDQVIRUPDWLRQ
7RROVIRU,PDJH6WHJDQRJUDSK\
2SHQ6WHJR
4XLFN6WHJR


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE,PDJH6WHJDQRJUDSK\
,PDJH6WHJDQRJUDSK\XVLQJ4XLFN6WHJR
 2SHQ4XLFN6WHJR$SSOLFDWLRQ

)LJXUH4XLFN6WHJR$SSOLFDWLRQIRU,PDJH6WHJDQRJUDSK\

 8SORDGDQ,PDJH7KLV,PDJHLVWHUPDV&RYHUDVLWZLOOKLGHWKHWH[W

)LJXUH8SORDGLQJ&RYHU,PDJH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

 (QWHUWKH7H[WRU8SORDG7H[W)LOH

)LJXUH(QWHULQJ6HFUHW,QIRUPDWLRQ

 &OLFN+LGH7H[W%XWWRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,PDJH6WHJDQRJUDSK\

 6DYH,PDJH
7KLV6DYHG,PDJHFRQWDLQLQJ+LGGHQLQIRUPDWLRQLVWHUPHGDV6WHJR2EMHFW

5HFRYHULQJ'DWDIURP,PDJH6WHJDQRJUDSK\XVLQJ4XLFN6WHJR
 2SHQ4XLFN6WHJR
 &OLFN*HW7H[W

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH8SORDGLQJ6WHJRREMHFWIRU'HFU\SWLRQ

 2SHQDQG&RPSDUH%RWK,PDJHV
/HIW,PDJHLVZLWKRXW+LGGHQ7H[W5LJKW,PDJHLVZLWKKLGGHQWH[W


)LJXUH&RPSDULQJ&RYHUDQG6WHJR2EMHFW

6WHJDQDO\VLV
6WHJDQDO\VLV LV DQ DQDO\VLV RI VXVSHFWHG LQIRUPDWLRQ XVLQJ VWHJDQRJUDSK\
WHFKQLTXHV WR GLVFRYHU WKH UHWULHYH WKH KLGGHQ LQIRUPDWLRQ 6WHJDQDO\VLV
LQVSHFWVLIDQ\LPDJHLVFRQWDLQLQJHQFU\SWHGGDWD$FFXUDF\(IILFLHQF\DQG
QRLV\VDPSOHVDUHWKHJUHDWFKDOOHQJHRIVWHJDQDO\VLVWRGHWHFWWKHHQFU\SWHG
GDWD

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH6WHJDQDO\VLV0HWKRGV
&RYHULQJ7UDFNV
$IWHUJDLQLQJDFFHVVHVFDODWLQJSULYLOHJHVH[HFXWLQJWKHDSSOLFDWLRQWKHQH[W
VWHS LV WR ZLSH WKH HYLGHQFH WR JHW EDFN ,Q WKH SKDVH RI FRYHULQJ WUDFN
DWWDFNHU UHPRYHV DOO WKH HYHQW ORJV HUURU PHVVDJHV DQG RWKHU HYLGHQFH WR
SUHYHQWLWVDWWDFNIURPEHLQJGLVFRYHUHGHDVLO\
0RVW&RPPRQWHFKQLTXHVWKDWDUHRIWHQXVHGE\DWWDFNHUVWRFRYHUWUDFNVRQ
WKHWDUJHWV\VWHPDUH
'LVDEOH$XGLWLQJ
&OHDULQJ/RJV
0DQLSXODWLQJ/RJV
'LVDEOLQJ$XGLWLQJ
7KHEHVWDSSURDFKWRDYRLGGHWHFWLRQSUHYHQWLQJDQRWKHUVHFXULW\PHFKDQLVP
WR LQGLFDWH DQ DOHUW DQ\ VRUW RI LQWUXVLRQ DQG OHDYLQJ WR WUDFN RQ WKH WDUJHW
PDFKLQH 7KH EHVW SUDFWLFH IRU OHDYLQJ QR WUDFN DQG SUHYHQW GHWHFWLRQ RU
OHDYLQJ YHU\ OLPLWHG HYLGHQFH RQ WDUJHW LV E\ GLVDEOLQJ WKH DXGLWLQJ DV \RX
ORJJHGRQWKHWDUJHWV\VWHP
:KHQ\RXGLVDEOHDXGLWLQJRQWKHWDUJHWPDFKLQHLWZLOOQRWRQO\SUHYHQWWR
ORJHYHQWVEXWDOVRUHVLVWLQWKHGHWHFWLRQ$XGLWLQJLQDV\VWHPLVHQDEOHGWR
GHWHFWDQGWUDFNHYHQWVRQFHDXGLWLQJLVGLVDEOHGWDUJHWPDFKLQHZLOOQRWEH
DEOHWRORJWKHFULWLFDODQGLPSRUWDQWORJVWKDWDUHQRWRQO\WKHHYLGHQFHRIDQ
DWWDFNEXWDJUHDWVRXUFHRILQIRUPDWLRQDERXWDQDWWDFNHU
7\SHWKHIROORZLQJFRPPDQGWROLVWWKH$XGLWLQJFDWHJRULHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&?:LQGRZV?6\VWHP!DXGLWSROOLVWFDWHJRU\Y
7R&KHFNDOO&DWHJRU\DXGLWSROLFLHV(QWHUWKHIROORZLQJFRPPDQG
&?:LQGRZV?V\VWHP!DXGLWSROJHWFDWHJRU\

)LJXUH$XGLW3ROLF\&DWHJRULHV


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE&OHDULQJ$XGLW3ROLFLHVRQ:LQGRZV
(QDEOLQJDQG&OHDULQJ$XGLW3ROLFLHV
7RFKHFNFRPPDQGߞVDYDLODEOHRSWLRQ(QWHU
&?:LQGRZV?V\VWHP!DXGLWSRO"

)LJXUH$XGLWSRO8WLOLW\2SWLRQV

(QWHU WKH IROORZLQJ FRPPDQG WR HQDEOH DXGLWLQJ IRU 6\VWHP DQG $FFRXQW
ORJRQ
&?:LQGRZV?V\VWHP!DXGLWSROVHWFDWHJRU\6\VWHP$FFRXQW
ORJRQVXFFHVVHQDEOHIDLOXUHHQDEOH

)LJXUH(QDEOLQJ$XGLW3ROLF\IRU6\VWHPDQG$FFRXQWORJLQ

7RFKHFN$XGLWLQJLVHQDEOHGHQWHUWKHFRPPDQG
&?:LQGRZV?V\VWHP!DXGLWSRO JHW FDWHJRU\$FFRXQW
ORJRQ6\VWHP

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH9HULI\LQJ(QDEOHG$XGLW3ROLFLHV

7RFOHDU$XGLW3ROLFLHV(QWHUWKHIROORZLQJFRPPDQG
&?:LQGRZV?V\VWHP!DXGLWSROFOHDU
$UH\RXVXUH 3UHVV1WRFDQFHORUDQ\RWKHUNH\WRFRQWLQXH "<

)LJXUH&OHDULQJ$XGLWSROLFLHV

7RFKHFN$XGLWLQJHQWHUWKHFRPPDQG
&?:LQGRZV?V\VWHP!DXGLWSRO JHW FDWHJRU\$FFRXQW
ORJRQ6\VWHP

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH9HULI\LQJ&OHDUHG$XGLW3ROLF\


&OHDULQJ/RJV
$QRWKHUWHFKQLTXHRIFRYHULQJWUDFNLVWRFOHDUWKHORJV%\FOHDULQJWKHORJV
DOOHYHQWVORJJHGGXULQJWKHFRPSURPLVHZLOOEHHUDVHG/RJVFDQEHFOHDUHG
XVLQJ &RPPDQG OLQH WRROV DV ZHOO DV PDQXDOO\ IURP &RQWURO SDQHO RQ D
:LQGRZVSODWIRUP

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE&OHDULQJ/RJVRQ:LQGRZV
0DQXDOO\&OHDULQJ(YHQW/RJVRQD:LQGRZV3ODWIRUP
 *RWR&RQWURO3DQHO

)LJXUH&RQWURO3DQHO2SWLRQV

 &OLFN6\VWHPDQG6HFXULW\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH6\VWHPDQG6HFXULW\2SWLRQV

 &OLFN(YHQW9LHZHU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH$GPLQLVWUDWLYH7RROV

 &OLFN:LQGRZV/RJ
+HUH\RXFDQILQGGLIIHUHQWW\SHVRIORJVVXFKDV$SSOLFDWLRQVHFXULW\
VHWXSV\VWHPDQGIRUZDUGHGHYHQWV<RXFDQLPSRUWH[SRUWDQGFOHDUWKHVH
ORJVXVLQJ$FWLRQ6HFWLRQRQWKHULJKWSDQH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH(YHQW9LHZHU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE&OHDULQJORJVRQ/LQX[
0DQXDOO\&OHDULQJ(YHQW/RJVRQD/LQX[3ODWIRUP
 *RWR.DOL/LQX[0DFKLQH

)LJXUH.DOL/LQX['HVNWRS
 2SHQWKHYDUGLUHFWRU\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&RPSXWHUGLUHFWRU\
 *RWR/RJVIROGHU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUHYDUGLUHFWRU\

 6HOHFWDQ\ORJILOH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUHYDUORJGLUHFWRU\

 2SHQDQ\ORJILOH\RXFDQGHOHWHDOORUDQ\FHUWDLQHQWU\IURPKHUH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH$XWKHQWLFDWLRQORJV













Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


0LQG0DS

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

You might also like