CEH v10 Module 08 - Sniffing PDF

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.
com/ethicalhackx
Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&KDSWHU6QLIILQJ
7HFKQRORJ\%ULHI
7KLVFKDSWHUIRFXVHVRQ6QLIILQJFRQFHSWV%\6QLIILQJ\RXFDQPRQLWRUDOO
VRUWV RI WUDIILF HLWKHU SURWHFWHG RU XQSURWHFWHG 8VLQJ 6QLIILQJ DWWDFNHU FDQ
JDLQ VXFK LQIRUPDWLRQ ZKLFK PLJKW EH KHOSIXO IRU IXUWKHU DWWDFNV DQG FDQ
FDXVH WURXEOH IRU WKH YLFWLP )XUWKHUPRUH LQ WKLV FKDSWHU \RX ZLOO OHDUQ
0HGLD $FFHVV &RQWURO 0$& $WWDFNV '\QDPLF +RVW &RQILJXUDWLRQ
3URWRFRO '+&3 $WWDFNV $GGUHVV 5HVROXWLRQ 3URWRFRO $53 3RLVRQLQJ
0$&6SRRILQJ$WWDFN'163RLVRQLQJ2QFH\RXKDYHGRQHZLWKVQLIILQJ
\RX FDQ SURFHHG WR ODXQFK DWWDFNV VXFK DV 6HVVLRQ +LMDFNLQJ 'R6 $WWDFNV
0,70 DWWDFN HWF 5HPHPEHU WKDW 6QLIIHUV DUH QRW KDFNLQJ WRROV WKH\ DUH
GLDJQRVWLFWRROVW\SLFDOO\XVHGIRUREVHUYLQJQHWZRUNWURXEOHVKRRWLQJLVVXHV

6QLIILQJ&RQFHSWV
,QWURGXFWLRQWR6QLIILQJ
6QLIILQJ LV WKH SURFHVV RI VFDQQLQJ DQG PRQLWRULQJ RI WKH FDSWXUHG GDWD
SDFNHWVSDVVLQJWKURXJKDQHWZRUNXVLQJ6QLIIHUV7KHSURFHVVRIVQLIILQJLV
SHUIRUPHG E\ XVLQJ 3URPLVFXRXV SRUWV %\ HQDEOLQJ SURPLVFXRXV PRGH
IXQFWLRQRQWKHFRQQHFWHGQHWZRUNLQWHUIDFHDOORZFDSWXULQJDOOWUDIILFHYHQ
ZKHQ WUDIILF LV QRW LQWHQGHG IRU WKHP 2QFH WKH SDFNHW LV FDSWXUHG \RX FDQ
HDVLO\SHUIRUPWKHLQVSHFWLRQ
7KHUHDUHWZRW\SHVRI6QLIILQJ
$FWLYH6QLIILQJ
SDVVLYH6QLIILQJ
8VLQJ 6QLIILQJ WKH DWWDFNHU FDQ FDSWXUH SDFNHW OLNH 6\VORJ WUDIILF '16
WUDIILF:HEWUDIILF(PDLODQGRWKHUW\SHVRIGDWDWUDIILFIORZLQJDFURVVWKH
QHWZRUN%\FDSWXULQJWKHVHSDFNHWVDQDWWDFNHUFDQUHYHDOLQIRUPDWLRQVXFK
DVGDWDXVHUQDPHDQGSDVVZRUGVIURPSURWRFROVVXFKDV+773323,0$3
6073 1073 )73 7HOQHW DQG 5ORJLQ DQG RWKHU LQIRUPDWLRQ $Q\RQH
ZLWKLQVDPH/$1RUFRQQHFWHGWRWKHWDUJHWQHWZRUNFDQVQLIIWKHSDFNHWV
/HWIRFXVKRZVQLIIHUVSHUIRUPWKHLUDFWLRQDQGZKDWZHJHWXVLQJVQLIILQJ
:RUNLQJRI6QLIIHUV
,QWKHSURFHVVRI6QLIILQJDQDWWDFNHUJHWVFRQQHFWHGWRWKHWDUJHWQHWZRUNLQ
RUGHUWRVQLIIWKHSDFNHWV8VLQJ6QLIIHUVZKLFKWXUQV1HWZRUN,QWHUIDFH&DUG
1,&RIWKHDWWDFNHU
VV\VWHPLQWRSURPLVFXRXVPRGHDWWDFNHUFDSWXUHVWKH
SDFNHW3URPLVFXRXVPRGHLVDPRGHRIWKHLQWHUIDFHLQZKLFK1,&UHVSRQG
IRU HYHU\ SDFNHW LW UHFHLYHV $V \RX FDQ REVHUYH LQ WKH ILJXUH EHORZ WKH
DWWDFNHULVFRQQHFWHGLQSURPLVFXRXVPRGHDFFHSWLQJHDFKSDFNHWHYHQWKRVH
SDFNHWZKLFKLVQRWLQWHQGHGIRUKLP
2QFHWKHDWWDFNHUFDSWXUHVWKHSDFNHWVLWFDQGHFU\SWWKHVHSDFNHWVWRH[WUDFW
LQIRUPDWLRQ 7KH IXQGDPHQWDO FRQFHSW EHKLQG WKLV WHFKQLTXH LV LI \RX DUH
FRQQHFWHGWRDWDUJHWQHWZRUNZLWKDVZLWFKDVRSSRVHGWRDKXEEURDGFDVW
DQG PXOWLFDVW WUDIILF LV WUDQVPLWWHG RQ DOO SRUWV 6ZLWFK IRUZDUG WKH XQLFDVW
SDFNHW WR WKH VSHFLILF SRUW ZKHUH WKH DFWXDO KRVW LV FRQQHFWHG 6ZLWFK
PDLQWDLQ LWV 0$& WDEOH WR YDOLGDWH ZKR LV FRQQHFWHG WR ZKLFK SRUW ,Q WKLV
FDVH DWWDFNHU DOWHUV WKH VZLWFK FRQILJXUDWLRQ E\ XVLQJ GLIIHUHQW WHFKQLTXHV

VXFK DV 3RUW 0LUURULQJ RU 6ZLWFKHG 3RUW $QDO\]HU 63$1 $OO SDFNHWV
SDVVLQJWKURXJKDFHUWDLQSRUWZLOOEHFRSLHGRQWRDFHUWDLQSRUWWKHSRUWRQ
ZKLFKDWWDFNHULVFRQQHFWHGZLWKSURPLVFXRXVPRGH,I\RXDUHFRQQHFWHGWR
DKXELWZLOOWUDQVPLWDOOSDFNHWWRDOOSRUWV
)LJXUH3DFNHW6QLIILQJ
7\SHVRI6QLIILQJ
3DVVLYH6QLIILQJ
3DVVLYH 6QLIILQJ LV WKH VQLIILQJ W\SH LQ ZKLFK WKHUH LV QR QHHG RI VHQGLQJ
DGGLWLRQDO SDFNHWV RU LQWHUIHULQJ WKH GHYLFH VXFK DV +XE WR UHFHLYH SDFNHWV
$V ZH NQRZ +XE EURDGFDVW HYHU\ SDFNHW WR LWV SRUWV ZKLFK KHOSV WKH
DWWDFNHUWRPRQLWRUDOOWUDIILFSDVVLQJWKURXJKKXEZLWKRXWDQ\HIIRUW
$FWLYH6QLIILQJ
$FWLYH6QLIILQJLVWKHVQLIILQJW\SHLQZKLFKDWWDFNHUKDVWRVHQGDGGLWLRQDO
SDFNHWVWRWKHFRQQHFWHGGHYLFHVXFKDV6ZLWFKWRVWDUWUHFHLYLQJSDFNHWV$V
ZH NQRZ D XQLFDVW SDFNHW IURP WKH VZLWFK LV WUDQVPLWWHG WR D VSHFLILF SRUW
RQO\ 7KH DWWDFNHU XVHV FHUWDLQ WHFKQLTXHV VXFK DV 0$& )ORRGLQJ '+&3
$WWDFNV'16SRLVRQLQJ6ZLWFK3RUW6WHDOLQJ$533RLVRQLQJDQG6SRRILQJ
WRPRQLWRUWUDIILFSDVVLQJWKURXJKWKHVZLWFK7KHVHWHFKQLTXHVDUHGHILQHGLQ
GHWDLOODWHULQWKLVFKDSWHU

+DUGZDUH3URWRFRO$QDO\]HU
3URWRFRO$QDO\]HUVHLWKHU+DUGZDUHRU6RIWZDUHDQDO\]HUDUHXVHGWRDQDO\]H
WKH FDSWXUHG SDFNHWV DQG VLJQDOV RYHU WKH WUDQVPLVVLRQ FKDQQHO +DUGZDUH
3URWRFRO $QDO\]HUV DUH WKH SK\VLFDO HTXLSPHQW ZKLFK LV XVHG WR FDSWXUH
ZLWKRXW LQWHUIHULQJ WKH QHWZRUN WUDIILF $ PDMRU DGYDQWDJH RIIHUHG E\ WKHVH
KDUGZDUH SURWRFRO DQDO\]HUV DUH PRELOLW\ IOH[LELOLW\ DQG WKURXJKSXW 8VLQJ
WKHVHKDUGZDUHDQDO\]HUVDQDWWDFNHUFDQ
0RQLWRU1HWZRUN8VDJH
,GHQWLI\7UDIILFIURPKDFNLQJVRIWZDUH
'HFU\SWWKHSDFNHWV
([WUDFWWKHLQIRUPDWLRQ
6L]HRI3DFNHW
.(<6,*+7 7HFKQRORJLHV RIIHUV YDULRXV SURGXFWV 7R JHW XSGDWHV DQG
LQIRUPDWLRQ YLVLW WKH ZHEVLWH ZZZNH\VLJKWFRP 7KHUH LV DOVR DQRWKHU
+DUGZDUH SURWRFRO DQDO\]HU SURGXFWV DYDLODEOH LQ WKH PDUNHW E\ GLIIHUHQW
YHQGRUVOLNH5$'&20DQG)OXNH


)LJXUH.(<6,*+77HFKQRORJLHV+DUGZDUH3URWRFRO$QDO\VHU3URGXFWV
63$13RUW
<RX KDYH D XVHU ZKR KDV FRPSODLQHG DERXW QHWZRUN SHUIRUPDQFH QR RQH
HOVH LQ WKH EXLOGLQJ LV H[SHULHQFLQJ WKH VDPH LVVXHV <RX ZDQW WR UXQ D
1HWZRUN$QDO\VHURQWKHSRUWOLNH:LUHVKDUNWRPRQLWRULQJUHVVDQGHJUHVV
WUDIILF RQ WKH SRUW 7R GR WKLV \RX FDQ FRQILJXUH 63$1 6ZLWFK 3RUW
$QDO\VHU63$1DOORZV\RXWRFDSWXUHWUDIILFIURPRQHSRUWRQDVZLWFKWR
DQRWKHUSRUWRQWKHVDPHVZLWFK
63$1PDNHVDFRS\RIDOOIUDPHVGHVWLQHGIRUDSRUWDQGFRSLHVWKHPWRWKH
63$1GHVWLQDWLRQSRUW&HUWDLQWUDIILFW\SHVDUHQRWIRUZDUGHGE\63$1OLNH
%'38V &'3 '73 973 673 WUDIILF 7KH QXPEHU RI 63$1 VHVVLRQV WKDW
FDQEHFRQILJXUHGRQDVZLWFKLVPRGHOGHSHQGHQW)RUH[DPSOH&LVFR
DQG VZLWFKHV RQO\ VXSSRUW XS WR 63$1 VHVVLRQV DW RQFH ZKHUHDV
&LVFRVHULHVVZLWFKHVVXSSRUWXSWR
63$1 FDQ EH FRQILJXUHG WR FDSWXUH HLWKHU LQERXQG RXWERXQG RU ERWK
GLUHFWLRQV RI WUDIILF <RX FDQ FRQILJXUH D 63$1 VRXUFH DV HLWKHU D VSHFLILF
SRUW D VLQJOH SRUW LQ DQ (WKHU FKDQQHO JURXS DQ (WKHU FKDQQHO JURXS RU D
9/$1 63$1 FDQQRW EH FRQILJXUHG ZLWK D VRXUFH SRUW RI D 0(& 0XOWL
FKDVVLV (WKHU FKDQQHO <RX DOVR FDQQRW FRQILJXUH D VRXUFH RI D VLQJOH SRUW
DQG D 9/$1 :KHQ FRQILJXULQJ PXOWLSOH VRXUFHV IRU D 63$1 VHVVLRQ \RX
VLPSO\VSHFLI\PXOWLSOHVRXUFHLQWHUIDFHV
2QH WKLQJ WR NHHS LQ PLQG ZKHQ FRQILJXULQJ 63$1 LV LI \RX DUH XVLQJ D
VRXUFHSRUWWKDWKDVDKLJKHUEDQGZLGWKWKDQWKHGHVWLQDWLRQSRUWVRPHRIWKH
WUDIILFLIWKHOLQNLVFRQJHVWHGWUDIILFZLOOEHGURSSHG
6LPSOH/RFDO63$1&RQILJXUDWLRQ
&RQVLGHU WKH IROORZLQJ GLDJUDP LQ ZKLFK D 5RXWHU 5 LV FRQQHFWHG WR
6ZLWFKWKURXJK6ZLWFKߞV)DVW(WKHUQHWSRUWWKLVSRUWLVFRQILJXUHGDVWKH
6RXUFH63$1SRUW7UDIILFFRSLHGIURP)(LVWREHPLUURUHGRXW)(
ZKHUHRXUPRQLWRULQJZRUNVWDWLRQLVZDLWLQJWRFDSWXUHWKHWUDIILF

)LJXUH63$13RUW
2QFHZHKDYHRXUQHWZRUNDQDO\]HULVVHWXSDQGUXQQLQJWKHILUVWVWHSLVWR
FRQILJXUH)DVW(WKHUQHWDVDVRXUFH63$1SRUWFRQILJXUH)DVW(WKHUQHW
DV WKH GHVWLQDWLRQ 63$1 SRUW $IWHU FRQILJXULQJ ERWK LQWHUIDFHV
GHVWLQDWLRQߞV 63$1 SRUW /(' )( EHJDQ IODVKLQJ LQ V\QFKURQL]DWLRQ
ZLWK WKDW RI )(ߞV /(' ߙ DQ H[SHFWHG EHKDYLRU FRQVLGHULQJ DOO )(
SDFNHWVZHUHEHLQJFRSLHGWR)(
:LUHWDSSLQJ
:LUHWDSSLQJLVWKHSURFHVVRIJDLQLQJLQIRUPDWLRQE\WDSSLQJWKHVLJQDOIURP
ZLUHVXFKDVWHOHSKRQHOLQHVRUWKH,QWHUQHW0RVWO\ZLUHWDSSLQJLVSHUIRUPHG
E\ D WKLUG SDUW\ WR PRQLWRU WKH FRQYHUVDWLRQ :LUHWDSSLQJ LV EDVLFDOO\
HOHFWULFDO WDS RQ WKH WHOHSKRQH OLQH /HJDO :LUHWDSSLQJ LV FDOOHG /HJDO
,QWHUFHSWLRQ ZKLFK LV PRVWO\ SHUIRUPHG E\ JRYHUQPHQWDO RU VHFXULW\
DJHQFLHV
:LUHWDSSLQJLVFODVVLILHGLQWRLWVWZRW\SHV
$FWLYH:LUHWDSSLQJ
$FWLYH:LUHWDSSLQJLVPRQLWRULQJUHFRUGLQJRILQIRUPDWLRQE\ZLUHWDSSLQJ
DGGLWLRQDOO\DFWLYHZLUHWDSSLQJLQFOXGHVDOWHUDWLRQRIWKHFRPPXQLFDWLRQ
3DVVLYH:LUHWDSSLQJ
0RQLWRULQJ DQG 5HFRUGLQJ WKH LQIRUPDWLRQ E\ ZLUHWDSSLQJ ZLWKRXW DQ\
DOWHUDWLRQLQFRPPXQLFDWLRQ
/DZIXO,QWHUFHSWLRQ
/DZIXO,QWHUFHSWLRQ/,LVDSURFHVVRIZLUHWDSSLQJZLWKOHJDODXWKRUL]DWLRQ

ZKLFK DOORZV ODZ HQIRUFHPHQW DJHQFLHV WR ZLUHWDS WKH FRPPXQLFDWLRQ RI

LQGLYLGXDO XVHU VHOHFWLYHO\ 7HOHFRPPXQLFDWLRQ VWDQGDUGL]DWLRQ RUJDQL]DWLRQ
VWDQGDUGL]HG WKH OHJDO LQWHUFHSWLRQ JDWHZD\V IRU WKH LQWHUFHSWLRQ RI
FRPPXQLFDWLRQE\DJHQFLHV
3ODQQLQJ7RROIRU5HVRXUFH,QWHJUDWLRQ35,60
35,60 3ODQQLQJ 7RRO IRU 5HVRXUFH ,QWHJUDWLRQ VWDQGV IRU 6\QFKURQL]DWLRQ
DQG 0DQDJHPHQW 35,60 LV D WRRO WKDW LV VSHFLDOO\ GHVLJQHG WR FROOHFW
LQIRUPDWLRQDQGSURFHVVSDVVLQJWKURXJK$PHULFDQVHUYHUV35,60SURJUDP
LV GHYHORSHG E\ 6SHFLDO 6RXUFH 2SHUDWLRQ 662 GLYLVLRQ RI 1DWLRQDO
6HFXULW\$JHQF\16$35,60LVLQWHQGHGIRULGHQWLILFDWLRQDQGPRQLWRULQJ
RI VXVSLFLRXV FRPPXQLFDWLRQ RI WDUJHW ,QWHUQHW WUDIILF URXWLQJ WKURXJK WKH
86RUGDWDVWRUHGRQ86VHUYHUVDUHZLUHWDSE\16$
0LQG0DS

0$&$WWDFNV
0$&$GGUHVV7DEOH&$07DEOH
0HGLD$FFHVV&RQWURO$GGUHVVLVLQVKRUWNQRZQDV0$&DGGUHVVRUSK\VLFDO
DGGUHVV RI D GHYLFH 0$& DGGUHVV LV ELWV XQLTXH LGHQWLILFDWLRQ QXPEHU
WKDW LV DVVLJQHG WR D QHWZRUN GHYLFH IRU FRPPXQLFDWLRQ DW GDWD OLQN OD\HU
0$&DGGUHVVLVFRPSULVHGRI2EMHFW8QLTXH,GHQWLILHU48,ELWVDQG
ELWV RI 1HWZRUN ,QWHUIDFH &RQWUROOHU 1,& ,Q FDVH RI PXOWLSOH 1,& WKH
GHYLFHZLOOKDYHPXOWLSOHXQLTXH0$&DGGUHVVHV
)LJXUH0$&$GGUHVV
0$&DGGUHVVWDEOHRU&RQWHQW$GGUHVVDEOH0HPRU\&$0WDEOHLVXVHGLQ
(WKHUQHW VZLWFKHV WR UHFRUG 0$& DGGUHVV DQG LW
V DVVRFLDWHG LQIRUPDWLRQ
ZKLFKLVXVHGWRIRUZDUGSDFNHWV&$0WDEOHUHFRUGVDWDEOHLQZKLFKHDFK
0$& DGGUHVV LQIRUPDWLRQ VXFK DV DVVRFLDWHG 9/$1 LQIRUPDWLRQ OHDUQLQJ
W\SHDQGDVVRFLDWHGSRUWSDUDPHWHUV7KHVHSDUDPHWHUKHOSVDWGDWDOLQNOD\HU
WRIRUZDUGSDFNHWV
+RZ&RQWHQW$GGUHVVDEOH0HPRU\:RUNV
7R /HDUQ WKH 0$& DGGUHVV RI GHYLFHV LV WKH IXQGDPHQWDO UHVSRQVLELOLW\ RI
VZLWFKHV7KHVZLWFKWUDQVSDUHQWO\REVHUYHVLQFRPLQJIUDPHV,WUHFRUGVWKH
VRXUFH0$&DGGUHVVRIWKHVHIUDPHVLQLWV0$&DGGUHVVWDEOH,WDOVRUHFRUGV
WKH VSHFLILF SRUW IRU WKH VRXUFH 0$& DGGUHVV %DVHG RQ WKLV LQIRUPDWLRQ LW
FDQ PDNH LQWHOOLJHQW IUDPH IRUZDUGLQJ VZLWFKLQJ GHFLVLRQV 1RWLFH WKDW D
QHWZRUNPDFKLQHFRXOGEHWXUQHGRIIRUPRYHGDWDQ\SRLQW$VDUHVXOWWKH
VZLWFKPXVWDOVRDJH0$&DGGUHVVHVDQGUHPRYHWKHPIURPWKHWDEOHDIWHU
WKH\KDYHQRWEHHQVHHQIRUVRPHGXUDWLRQ

)LJXUH0$&$GGUHVV7DEOH
7KHVZLWFKVXSSRUWVPXOWLSOH0$&DGGUHVVHVRQDOOSRUWVVRZHFDQFRQQHFW
LQGLYLGXDOZRUNVWDWLRQDVZHOODVPXOWLSOHGHYLFHVWKURXJKVZLWFKRUURXWHUDV
ZHOO %\ WKH IHDWXUH RI '\QDPLF $GGUHVVLQJ VZLWFK XSGDWHV WKH VRXUFH
DGGUHVVUHFHLYHGIURPWKHLQFRPLQJSDFNHWVDQGELQGVLWWRWKHLQWHUIDFHIURP
ZKLFKLWLVUHFHLYHG$VWKHGHYLFHVDUHDGGHGRUUHPRYHGWKH\DUHXSGDWHG
G\QDPLFDOO\ %\ GHIDXOW DJLQJ WLPH RI 0$& DGGUHVV LV VHFRQGV 7KH
VZLWFKLVFRQILJXUHGWROHDUQWKH0$&DGGUHVVHVG\QDPLFDOO\E\GHIDXOW
0$&)ORRGLQJ
0$&IORRGLQJLVDWHFKQLTXHLQZKLFKDWWDFNHUVHQGVUDQGRPPDFDGGUHVVHV
PDSSHGZLWKUDQGRP,3WRRYHUIORZWKHVWRUDJHFDSDFLW\RI&$0WDEOH$V
ZH NQRZ &$0 WDEOH KDV LWV IL[HG OHQJWK VZLWFK WKHQ DFWV DV D KXE ,W ZLOO
QRZEURDGFDVWSDFNHWRQDOOSRUWVZKLFKKHOSWKHDWWDFNHUWRVQLIIWKHSDFNHW
ZLWK HDVH )RU 0$& )ORRGLQJ 8QL[ /LQX[ XWLOLW\ ߡPDFRIߢ RIIHUV 0$&
IORRGLQJ XVLQJ PDFRI UDQGRP VRXUFH 0$& DQG ,3 FDQ EH VHQW RQ DQ
LQWHUIDFH
6ZLWFK3RUW6WHDOLQJ
6ZLWFK SRUW VWHDOLQJ LV DOVR D SDFNHW VQLIILQJ WHFKQLTXH WKDW XVHV 0$&
IORRGLQJWRVQLIIWKHSDFNHWV,QWKLVWHFKQLTXHWKHDWWDFNHUVHQGVERJXV$53
SDFNHWZLWKWKHVRXUFH0$&DGGUHVVRIWDUJHWDQGGHVWLQDWLRQDGGUHVVRILWV
RZQDVWKHDWWDFNHULVLPSHUVRQDWLQJWKHWDUJHWKRVWOHW
VVD\+RVW$:KHQ
WKLVLVIRUZDUGHGWRVZLWFKWKHVZLWFKZLOOXSGDWHWKH&$0WDEOH:KHQ+RVW
$ VHQGV D SDFNHW 6ZLWFK ZLOO KDYH WR XSGDWH LW DJDLQ 7KLV ZLOO FUHDWH WKH
ZLQQLQJWKHUDFHFRQGLWLRQLQZKLFKLIWKHDWWDFNHUVHQGV$53ZLWK+RVW$
V
0$&DGGUHVVWKHVZLWFKZLOOVHQGSDFNHWVWRWKHDWWDFNHUDVVXPLQJ+RVW$
LVFRQQHFWHGWRWKLVSRUW

'HIHQGDJDLQVW0$&$WWDFNV
3RUW 6HFXULW\ LV XVHG WR ELQG WKH 0$& DGGUHVV RI NQRZQ GHYLFHV WR WKH
SK\VLFDO SRUWV DQG YLRODWLRQ DFWLRQ LV DOVR GHILQHG 6R LI DQ DWWDFNHU WULHV WR
FRQQHFWLWV3&RUHPEHGGHGGHYLFHWRWKHVZLWFKSRUWWKHQLWZLOOVKXWGRZQ
RU UHVWULFW WKH DWWDFNHU IURP HYHQ JHQHUDWLQJ DQ DWWDFN ,Q G\QDPLF SRUW
VHFXULW\\RXFRQILJXUHWKHWRWDOQXPEHURIDOORZHG0$&DGGUHVVHVDQGWKH
VZLWFK ZLOO DOORZ RQO\ WKDW QXPEHU VLPXOWDQHRXVO\ ZLWKRXW UHJDUG WR ZKDW
WKRVH0$&DGGUHVVHVDUH
&RQILJXULQJ3RUW6HFXULW\
&LVFR6ZLWFKRIIHUVSRUWVHFXULW\WRSUHYHQW0$&DWWDFNV<RXFDQFRQILJXUH
WKH VZLWFK HLWKHU IRU VWDWLFDOO\ GHILQHG 0$& $GGUHVVHV RQO\ RU G\QDPLF
0$&OHDUQLQJXSWRWKHVSHFLILHGUDQJHRU\RXFDQFRQILJXUHSRUWVHFXULW\
ZLWK WKH FRPELQDWLRQ RI ERWK DV VKRZQ EHORZ 7KH IROORZLQJ FRQILJXUDWLRQ
RQ &LVFR 6ZLWFK ZLOO DOORZ VSHFLILF 0$& DGGUHVV DQG DGGLWLRQDO 0$&
DGGUHVVHV,IWKHVZLWFKKDVOHDUQHGWKHVWDWLF0$&DGGUHVV
3RUW6HFXULW\&RQILJXUDWLRQ
6ZLWFKFRQILJLQWHUIDFHHWKHUQHW
6ZLWFKFRQILJLIVZLWFKSRUWPRGHDFFHVV
6ZLWFKFRQILJLIVZLWFKSRUWSRUWVHFXULW\
(QDEOLQJ3RUW6HFXULW\
6ZLWFKFRQILJLIVZLWFKSRUWSRUWVHFXULW\PDFDGGUHVVPDFDGGUHVV!
$GGLQJVWDWLF0$&DGGUHVVWREHDOORZHGRQ(WKHUQHW
6ZLWFKFRQILJLIVZLWFKSRUWSRUWVHFXULW\PD[LPXP
&RQILJXULQJ G\QDPLF 0$& DGGUHVVHV PD[LPXP XS WR 0$& DGGUHVVHV WR EH DOORZHG RQ
(WKHUQHW
6ZLWFKFRQILJLIVZLWFKSRUWSRUWVHFXULW\YLRODWLRQVKXWGRZQ
&RQILJXULQJ9LRODWLRQDFWLRQDVVKXWGRZQ
6ZLWFKFRQILJLIH[LW

'+&3$WWDFNV
'\QDPLF+RVW&RQILJXUDWLRQ3URWRFRO'+&32SHUDWLRQ
'+&3 LV WKH SURFHVV RI DOORFDWLQJ WKH ,3 DGGUHVV G\QDPLFDOO\ VR WKDW WKHVH
DGGUHVVHVDUHDVVLJQHGDXWRPDWLFDOO\DQGDOVRWKDWWKH\FDQEHUHXVHGZKHQ
KRVWV GRQߞW QHHG WKHP 5RXQG 7ULS WLPH LV WKH PHDVXUHPHQW RI WLPH IURP
GLVFRYHU\RI'+&3VHUYHUXQWLOREWDLQLQJWKHOHDVHG,3DGGUHVV577FDQEH
XVHG WR GHWHUPLQH WKH SHUIRUPDQFH RI '+&3 %\ XVLQJ 8'3 EURDGFDVW
'+&3 FOLHQW VHQGV DQ LQLWLDO '+&3'LVFRYHU SDFNHW EHFDXVH LW LQLWLDOO\
GRHVQߞWKDYHQHWZRUNLQIRUPDWLRQWRZKLFKWKH\DUHFRQQHFWHG7KLV'+&3
'LVFRYHUSDFNHWLVUHSOLHGE\'+&3VHUYHUZLWK'+&32IIHU3DFNHWRIIHULQJ
WKHFRQILJXUDWLRQSDUDPHWHUV'+&3&OLHQWZLOOVHQG'+&35HTXHVWSDFNHW
GHVWLQHG IRU '+&3 VHUYHU IRU UHTXHVWLQJ IRU FRQILJXUDWLRQ SDUDPHWHUV
)LQDOO\ '+&3 6HUYHU ZLOO VHQG WKH '+&3$FNQRZOHGJHPHQW SDFNHW
FRQWDLQLQJFRQILJXUDWLRQSDUDPHWHUV
'+&3YXVHVWZRGLIIHUHQWSRUWV
ߧ8'3SRUWIRU6HUYHU
ߧ8'3SRUWIRU&OLHQW
)LJXUH,3Y'+&3SURFHVV
'+&3 5HOD\ DJHQW IRUZDUGV WKH '+&3 SDFNHWV IURP VHUYHU WR FOLHQW DQG
&OLHQW WR VHUYHU 5HOD\ DJHQW KHOSV WKH FRPPXQLFDWLRQ OLNH IRUZDUGLQJ
UHTXHVWDQGUHSOLHVEHWZHHQFOLHQWDQGVHUYHUV5HOD\DJHQWZKHQUHFHLYLQJD
'+&3PHVVDJHLWJHQHUDWHVDQHZ'+&3UHTXHVWWRVHQGLWRXWIURPDQRWKHU
LQWHUIDFHZLWKLQFOXGLQJGHIDXOWJDWHZD\LQIRUPDWLRQDVZHOODV5HOD\$JHQW
LQIRUPDWLRQ RSWLRQ 2SWLRQ :KHQ WKH 5HOD\ $JHQW JHWV WKH UHSO\ IURP
WKHVHUYHULWUHPRYHVWKH2SWLRQDQGIRUZDUGVLWEDFNWRWKHFOLHQW
7KHZRUNLQJRI5HOD\DJHQWDQG'+&3Y6HUYHULVVDPHDVWKH,3Y5HOD\

DJHQWDQG'+&3Y6HUYHU'+&3VHUYHUUHFHLYHVWKHUHTXHVWDQGDVVLJQVWKH
,3 DGGUHVV '16 /HDVH WLPH DQG RWKHU QHFHVVDU\ LQIRUPDWLRQ WR WKH FOLHQW
ZKHUHDVUHOD\VHUYHUIRUZDUGVWKH'+&3PHVVDJHV
)LJXUH,3Y'+&3SURFHVV
'+&3YXVHVWZRGLIIHUHQWSRUWV
ߧ8'3SRUWIRUFOLHQWV
ߧ8'3SRUWIRUVHUYHUV
'+&36WDUYDWLRQ$WWDFN
'+&3 6WDUYDWLRQ DWWDFN LV D 'HQLDORI6HUYLFH DWWDFN RQ '+&3 VHUYHU ,Q
'+&3 6WDUYDWLRQ DWWDFN $WWDFNHU VHQGV ERJXV UHTXHVWV IRU EURDGFDVWLQJ WR
'+&3VHUYHUZLWKVSRRIHG0$&DGGUHVVHVWROHDVHDOO,3DGGUHVVHVLQ'+&3
DGGUHVV SRRO 2QFH DOO ,3 DGGUHVVHV DUH DOORFDWHG XSFRPLQJ XVHUV ZLOO EH
XQDEOH WR REWDLQ DQ ,3 DGGUHVV RU UHQHZ WKH OHDVH '+&3 6WDUYDWLRQ DWWDFN
FDQEHSHUIRUPHGE\XVLQJWRROVVXFKDVߡ'KFSVWDUYߢRUߡ<HUVLQLDߢ
)LJXUH'+&36WDUYDWLRQ$WWDFN

5RJXH'+&36HUYHU$WWDFN
5RJXH '+&3 6HUYHU DWWDFN LV SHUIRUPHG E\ GHSOR\LQJ WKH URJXH '+&3
6HUYHU LQ WKH QHWZRUN DORQJ ZLWK WKH 6WDUYDWLRQ DWWDFN :KHQ D OHJLWLPDWH
'+&3VHUYHULVLQ'HQLDORI6HUYLFHDWWDFNV'+&3FOLHQWVDUHXQDEOHWRJDLQ
,3 DGGUHVV IURP WKH OHJLWLPDWH '+&3 VHUYHU 8SFRPLQJ '+&3 'LVFRYHU\
,3Y RU 6ROLFLW ,3Y SDFNHW DUH UHSOLHG E\ ERJXV '+&3 VHUYHU ZLWK
FRQILJXUDWLRQSDUDPHWHUZKLFKGLUHFWVWKHWUDIILFWRZDUGVLW
)LJXUH5RJXH'+&36HUYHU$WWDFN
'HIHQGLQJ$JDLQVW'+&36WDUYDWLRQDQG5RJXH6HUYHU$WWDFN
'+&36QRRSLQJ
,W LV DFWXDOO\ YHU\ HDV\ IRU VRPHRQH WR DFFLGHQWDOO\ RU PDOLFLRXVO\ EULQJ D
'+&3 VHUYHU LQ D FRUSRUDWH HQYLURQPHQW '+&3 VQRRSLQJ LV DOO DERXW
SURWHFWLQJ DJDLQVW LW ,Q RUGHU WR PLWLJDWH VXFK DWWDFNV '+&3 VQRRSLQJ
IHDWXUH LV HQDEOHG RQ QHWZRUNLQJ GHYLFHV WR LGHQWLI\ WKH RQO\ WUXVWHG SRUWV
IURP '+&3 WUDIILF HLWKHU LQ LQJUHVV RU HJUHVV GLUHFWLRQ LV FRQVLGHUHG
OHJLWLPDWH $Q\ DFFHVV SRUW ZKR WULHV WR UHSO\ WKH '+&3 UHTXHVWV ZLOO EH
LJQRUHG EHFDXVH WKH GHYLFH ZLOO RQO\ DOORZ '+&3 SURFHVV IURP WKH WUXVWHG
SRUWDVGHILQHGE\QHWZRUNLQJWHDP,WLVDVHFXULW\IHDWXUHZKLFKSURYLGHV
QHWZRUN VHFXULW\ YLD ILOWHULQJ RI XQWUXVWHG '+&3 PHVVDJHV DQG E\ EXLOGLQJ
DQG PDLQWDLQLQJ D '+&3 VQRRSLQJ ELQGLQJ GDWDEDVH NQRZQ DV D '+&3
VQRRSLQJ ELQGLQJ WDEOH '+&3 VQRRSLQJ GLIIHUHQWLDWHV EHWZHHQ XQWUXVWHG
LQWHUIDFHV WKDW DUH FRQQHFWHG WR WKH HQG XVHUKRVW DQG WUXVWHGLQWHUIDFHV WKDW

DUHFRQQHFWHGWRWKHOHJLWLPDWH'+&3VHUYHURUDQ\WUXVWHGGHYLFH
3RUW6HFXULW\
(QDEOLQJ3RUWVHFXULW\ZLOODOVRPLWLJDWHWKHVHDWWDFNE\OLPLWLQJWKHOHDUQLQJ
RI D PD[LPXP QXPEHU RI 0$& DGGUHVVHV RQ D SRUW FRQILJXULQJ YLRODWLRQ
DFWLRQDJLQJWLPHHWF

$533RLVRQLQJ
$GGUHVV5HVROXWLRQ3URWRFRO$53
$53LVDVWDWHOHVVSURWRFROWKDWLVXVHGZLWKLQDEURDGFDVWGRPDLQWRHQVXUH
WKHFRPPXQLFDWLRQE\UHVROYLQJWKH,3DGGUHVVWR0$&DGGUHVVPDSSLQJ,W
LVLQFKDUJHRI/WR/DGGUHVVPDSSLQJV$53SURWRFROHQVXUHVWKHELQGLQJ
RI,3DGGUHVVHVDQG0$&DGGUHVVHV%\EURDGFDVWLQJWKH$53UHTXHVWZLWK
,3 DGGUHVV WKH VZLWFK FDQ OHDUQ WKH DVVRFLDWHG 0$& DGGUHVV LQIRUPDWLRQ
IURPWKHUHSO\RIWKHVSHFLILFKRVW,QWKHHYHQWWKDWWKHUHLVQRPDSRUWKH
PDSLVXQNQRZQWKHVRXUFHZLOOVHQGDEURDGFDVWWRDOOQRGHV-XVWWKHQRGH
ZLWKDFRRUGLQDWLQJ0$&DGGUHVVIRUWKDW,3ZLOODQVZHUWRWKHGHPDQGZLWK
WKHSDFNHWWKDWLQYROYHVWKH0$&DGGUHVVPDSSLQJ7KHVZLWFKZLOOOHDUQWKH
0$&DGGUHVVDQGLWVFRQQHFWHGSRUWLQIRUPDWLRQLQWRLWVIL[HGOHQJWK&$0
WDEOH
)LJXUH$532SHUDWLRQ
$VVKRZQLQWKHILJXUHWKHVRXUFHJHQHUDWHVWKH$53TXHU\E\EURDGFDVWLQJ
WKH$53SDFNHW$QRGHKDYLQJWKH0$&DGGUHVVWKHTXHU\LVGHVWLQHGIRU
ZLOO UHSO\ RQO\ WR WKH SDFNHW 7KH IUDPH LV IORRGHG RXW DOO SRUWV RWKHU WKDQ
WKHSRUWRQZKLFKWKHIUDPHZDVUHFHLYHGLI&$0WDEOHHQWULHVDUHIXOO7KLV
DOVRKDSSHQVZKHQWKHGHVWLQDWLRQ0$&DGGUHVVLQWKHIUDPHLVWKHEURDGFDVW
DGGUHVV0$&IORRGLQJWHFKQLTXHLVXVHGWRWXUQDVZLWFKLQWRDKXELQZKLFK
VZLWFKVWDUWVEURDGFDVWLQJHDFKDQGHYHU\SDFNHW,QWKLVVFHQDULRHDFKXVHU
FDQFDWFKWKHSDFNHWHYHQWKRVHSDFNHWVZKLFKLVQRWLQWHQGHGIRU

$536SRRILQJ$WWDFN
,Q $53 VSRRILQJ $WWDFNHU VHQGV IRUJHG $53 SDFNHWV RYHU /RFDO $UHD
1HWZRUN/$1,QWKHFDVH6ZLWFKZLOOXSGDWHWKHDWWDFNHU
V0$&$GGUHVV
ZLWK WKH ,3 DGGUHVV RI D OHJLWLPDWH XVHU RU VHUYHU 2QFH DWWDFNHU
V 0$&
DGGUHVV LV OHDUQHG ZLWK WKH ,3 DGGUHVV RI D OHJLWLPDWH XVHU WKH VZLWFK ZLOO
VWDUW IRUZDUGLQJ WKH SDFNHWV WR DWWDFNHU LQWHQGLQJ WKDW LW LV WKH 0$& RI WKH
XVHU 8VLQJ $53 6SRRILQJ DWWDFN DQ DWWDFNHU FDQ VWHDO LQIRUPDWLRQ E\
H[WUDFWLQJIURPWKHSDFNHWUHFHLYHGLQWHQGHGIRUDXVHURYHU/$1$SDUWIURP
VWHDOLQJLQIRUPDWLRQ$53VSRRILQJFDQEHXVHGIRU
6HVVLRQ+LMDFNLQJ
'HQLDORI6HUYLFH$WWDFN
0DQLQWKH0LGGOH$WWDFN
3DFNHW6QLIILQJ
'DWD,QWHUFHSWLRQ
&RQQHFWLRQ+LMDFNLQJ
9R,3WDSSLQJ
&RQQHFWLRQ5HVHWWLQJ
6WHDOLQJ3DVVZRUG
)LJXUH$536SRRILQJ$WWDFN
'HIHQGLQJ$533RLVRQLQJ
'\QDPLF$53,QVSHFWLRQ'$,
'$,LVXVHGZLWK'+&3VQRRSLQJ,3WR0$&ELQGLQJVFDQEHDWUDFNIURP

'+&3 WUDQVDFWLRQV WR SURWHFW DJDLQVW $53 SRLVRQLQJ ZKLFK LV DQ DWWDFNHU
WU\LQJ WR JHW \RXU WUDIILF LQVWHDG RI WR \RXU GHVWLQDWLRQ '+&3 VQRRSLQJ LV
UHTXLUHGLQRUGHUWREXLOGWKH0$&WR,3ELQGLQJVIRU'$,YDOLGDWLRQ
&RQILJXULQJ'+&36QRRSLQJDQG'\QDPLF$53,QVSHFWLRQRQ&LVFR
6ZLWFKHV
)LJXUH&RQILJXULQJ'+&36QRRSLQJ

&RQILJXUDWLRQ
6ZLWFK!HQ
6ZLWFKFRQILJW
(QWHUFRQILJXUDWLRQFRPPDQGVRQHSHUOLQH(QGZLWK&17/=
6ZLWFKFRQILJLSGKFSVQRRSLQJ
6ZLWFKFRQILJLSGKFSVQRRSLQJYODQ

6ZLWFKFRQILJLQWHWK
6ZLWFKFRQILJLILSGKFSVQRRSLQJWUXVW
6ZLWFKFRQILJLIH[
6ZLWFKFRQILJ


6ZLWFKFRQILJLQWHWK

6ZLWFKFRQILJLILSGKFSVQRRSLQJLQIRUPDWLRQRSWLRQDOORZXQWUXVWHG

6ZLWFKFRQILJLQWHWK

6ZLWFKFRQILJLQWHWK

9HULILFDWLRQ
6ZLWFKVKRZLSGKFSVQRRSLQJ
)LJXUH9HULI\LQJ'+&36QRRSLQJ

6KRZLQJWUXVWHGDQG8QWUXVWHG,QWHUIDFHVDORQJZLWK$OORZ2SWLRQV


&RQILJXULQJ'\QDPLF$53,QVSHFWLRQ
6ZLWFKFRQILJLSDUSLQVSHFWLRQYODQYODQQXPEHU!

9HULILFDWLRQ&RPPDQG
6ZLWFKFRQILJGRVKRZLSDUSLQVSHFWLRQ

6SRRILQJ$WWDFN
0$&6SRRILQJ'XSOLFDWLQJ
0$&6SRRILQJLVDWHFKQLTXHRIPDQLSXODWLQJ0$&DGGUHVVWRLPSHUVRQDWH
WKHOHJLWLPDWHXVHURUODXQFKDWWDFNVXFKDV'HQLDORI6HUYLFHDWWDFN$VZH
NQRZ0$&DGGUHVVLVEXLOWLQRQ1HWZRUNLQWHUIDFHFRQWUROOHUZKLFKFDQQRW
EH FKDQJHG EXW VRPH GULYHUV DOORZ WR FKDQJH WKH 0$& DGGUHVV 7KLV
PDVNLQJ SURFHVV RI 0$& DGGUHVV LV NQRZQ DV 0$& 6SRRILQJ $WWDFNHU
VQLIIV WKH 0$& DGGUHVV RI XVHUV ZKLFK DUH DFWLYH RQ VZLWFK SRUWV DQG
GXSOLFDWH WKH 0$& DGGUHVV 'XSOLFDWLQJ WKH 0$& FDQ LQWHUFHSW WKH WUDIILF
DQGWUDIILFGHVWLQHGWRWKHOHJLWLPDWHXVHUPD\GLUHFWWRWKHDWWDFNHU

/DE&RQILJXULQJORFDOO\DGPLQLVWHUHG0$&DGGUHVV
3URFHGXUH
*RWR&RPPDQG3URPSWDQGW\SHWKHFRPPDQG
&?!LSFRQILJDOO
2EVHUYHWKH0$&DGGUHVVFXUUHQWO\XVHGE\WKHQHWZRUNDGDSWHU
)LJXUH)LQGLQJ0$&$GGUHVV
*RWR&RQWURO3DQHODQG&OLFN+DUGZDUHDQG6RXQGV

)LJXUH&RQWURO3DQHO
&OLFN'HYLFH0DQDJHU

)LJXUH+DUGZDUHDQG6RXQGV
6HOHFW\RXU1HWZRUN$GDSWHU

)LJXUH'HYLFH0DQDJHU
5LJKW&OLFNRQWKHGHVLUHG1HWZRUN$GDSWHUDQGFOLFN3URSHUWLHV


)LJXUH1HWZRUN$GDSWHUV
&OLFN$GYDQFHG
6HOHFW/RFDOO\$GPLQLVWHUHG$GGUHVV
7\SHD0$&DGGUHVV

)LJXUH1HWZRUN$GDSWHU3URSHUWLHV

9HULILFDWLRQ
7RYHULI\JRWR&RPPDQG3URPSWDQGW\SHWKHIROORZLQJFRPPDQG
&?!LSFRQILJDOO

)LJXUH9HULI\LQJ0$&$GGUHVV
0$&6SRRILQJ7RRO
7KHUHVHYHUDOWRROVDYDLODEOHZKLFKRIIHU0$&VSRRILQJZLWKHDVH3RSXODU
WRROVDUH
7HFKQLWLXP0$&DGGUHVV&KDQJHU
60$&

)LJXUH7HFKQLWLXP0$&$GGUHVV&KDQJHU
+RZWR'HIHQG$JDLQVW0$&6SRRILQJ
,QRUGHUWRGHIHQGDJDLQVW0$&VSRRILQJ'+&36QRRSLQJ'\QDPLF$53
LQVSHFWLRQ DUH HIIHFWLYH WHFKQLTXHV WR PLWLJDWH 0$& VSRRILQJ DWWDFNV
$GGLWLRQDOO\ 6RXUFH JXDUG IHDWXUH LV FRQILJXUHG RQ FOLHQW IDFLQJ 6ZLWFK
SRUWV
,3 VRXUFH JXDUG LV D SRUWEDVHG IHDWXUH ZKLFK SURYLGHV 6RXUFH ,3 DGGUHVV
ILOWHULQJDW/D\HU6RXUFHJXDUGIHDWXUHPRQLWRUVDQGSUHYHQWVWKHKRVWIURP
LPSHUVRQDWLQJDQRWKHUKRVWE\DVVXPLQJWKHOHJLWLPDWHKRVWߞV,3DGGUHVV,Q
WKLVZD\WKHPDOLFLRXVKRVWLVUHVWULFWHGWRXVHLWVDVVLJQHG,3DGGUHVV6RXUFH
JXDUGXVHVG\QDPLF'+&3VQRRSLQJRUVWDWLF,3VRXUFHELQGLQJWRPDWFK,3
DGGUHVVHVWRKRVWVRQXQWUXVWHG/D\HUDFFHVVSRUWV
,QLWLDOO\ DOO W\SH RI LQERXQG ,3 WUDIILF IURP WKH SURWHFWHG SRUW LV EORFNHG
H[FHSW IRU '+&3 SDFNHWV :KHQ D FOLHQW UHFHLYHV DQ ,3 DGGUHVV IURP WKH
'+&3VHUYHURUVWDWLF,3VRXUFHELQGLQJE\WKHDGPLQLVWUDWRUWKHWUDIILFZLWK
DQDVVLJQHGVRXUFH,3DGGUHVVLVSHUPLWWHGIURPWKDWSRUW$OOERJXVSDFNHWV
ZLOOEHGHQLHG,QWKLVZD\6RXUFHJXDUGSURWHFWVIURPWKHDWWDFNE\FODLPLQJ
D QHLJKERU KRVWߞV ,3 DGGUHVV 6RXUFH JXDUG FUHDWHV DQ LPSOLFLW SRUW DFFHVV
FRQWUROOLVW3$&/

'163RLVRQLQJ
'163RLVRQLQJ7HFKQLTXHV
'RPDLQ 1DPH 6\VWHP '16 LV XVHG LQ QHWZRUNLQJ WR WUDQVODWH KXPDQ
UHDGDEOH GRPDLQ QDPHV LQWR ,3 DGGUHVV :KHQ D '16 VHUYHU UHFHLYHV D
UHTXHVWLWGRHVQ
WKDYHWKHHQWU\LWJHQHUDWHVWKHTXHU\WRDQRWKHU'16VHUYHU
IRUWKHWUDQVODWLRQDQGVRRQ'16VHUYHUKDYLQJWKHWUDQVODWLRQZLOOUHSO\WRD
UHTXHVWWRWKHUHTXHVWLQJ'16VHUYHUDQGWKHQWKHFOLHQW
VTXHU\LVUHVROYHG
,QFDVHZKHQD'16VHUYHUUHFHLYHVDIDOVHHQWU\LWXSGDWHVLWVGDWDEDVH$V
ZH NQRZ WR LQFUHDVH SHUIRUPDQFH '16 VHUYHUV PDLQWDLQ D FDFKH LQ ZKLFK
WKLVHQWU\LVXSGDWHGWRSURYLGHTXLFNUHVROXWLRQRITXHULHV7KLVIDOVHHQWU\
FDXVLQJ SRLVRQ LQ '16 WUDQVODWLRQ FRQWLQXHV XQWLO WKH FDFKH H[SLUHV '16
SRLVRQLQJ LV SHUIRUPHG E\ DWWDFNHUV WR GLUHFW WKH WUDIILF WRZDUG WKH VHUYHUV
DQGFRPSXWHURZQHGRUFRQWUROOHGE\DWWDFNHUV
,QWUDQHW'166SRRILQJ
,QWUDQHW '16 6SRRILQJ LV QRUPDOO\ SHUIRUPHG RYHU /RFDO $UHD 1HWZRUN
/$1ZLWK6ZLWFKHG1HWZRUN7KHDWWDFNHUZLWKWKHKHOSRI$53SRLVRQLQJ
WHFKQLTXHSHUIRUPV,QWUDQHW'16VSRRILQJ$WWDFNHUVQLIIWKHSDFNHWH[WUDFW
WKH ,' RI '16 UHTXHVWV DQG UHSO\ ZLWK WKH IDNH ,3 WUDQVODWLRQ GLUHFWLQJ WKH
WUDIILF WR WKH PDOLFLRXV VLWH 7KH DWWDFNHU PXVW EH TXLFN HQRXJK WR UHVSRQG
EHIRUHWKHOHJLWLPDWH'16VHUYHUUHVROYHWKHTXHU\
,QWHUQHW'166SRRILQJ
,QWHUQHW'166SRRILQJLVSHUIRUPHGE\UHSODFLQJWKH'16FRQILJXUDWLRQRQ
WKH WDUJHW PDFKLQH $OO '16 TXHULHV ZLOO EH GLUHFWHG WR D PDOLFLRXV '16
VHUYHU FRQWUROOHG E\ WKH DWWDFNHU GLUHFWLQJ WKH WUDIILF WR PDOLFLRXV VLWHV
8VXDOO\ ,QWHUQHW '16 VSRRILQJ LV SHUIRUPHG E\ GHSOR\LQJ D 7URMDQ RU
LQIHFWLQJWKHWDUJHWDQGDOWHULQJWKH'16FRQILJXUDWLRQWRGLUHFWWKHTXHULHV
WRZDUGWKHP
3UR[\6HUYHU'163RLVRQLQJ
6LPLODUWR,QWHUQHW'166SRRILQJ3UR[\6HUYHU'16SRLVRQLQJLVSHUIRUPHG
E\ UHSODFLQJ WKH '16 FRQILJXUDWLRQ IURP WKH ZHE EURZVHU RI D WDUJHW $OO
ZHE TXHULHV ZLOO EH GLUHFWHG WR D PDOLFLRXV SUR[\ VHUYHU FRQWUROOHG E\ WKH
DWWDFNHUUHGLUHFWLQJWKHWUDIILFWRPDOLFLRXVVLWHV
'16&DFKH3RLVRQLQJ

$V ZH NQRZ 1RUPDOO\ ,QWHUQHW XVHUV DUH XVLQJ '16 SURYLGHG E\ WKH
,QWHUQHW6HUYLFH3URYLGHU,63,QDFRUSRUDWHQHWZRUNWKHRUJDQL]DWLRQXVHV
WKHLU RZQ '16 VHUYHUV WR LPSURYH SHUIRUPDQFH E\ FDFKLQJ IUHTXHQWO\ RU
SUHYLRXVO\ JHQHUDWHG TXHULHV '16 &DFKH SRLVRQLQJ LV SHUIRUPHG E\
H[SORLWLQJIODZVLQ'16VRIWZDUH$WWDFNHUDGGVRUDOWHUVWKHHQWULHVLQ'16
UHFRUGFDFKHZKLFKUHGLUHFWWKHWUDIILFWRWKHPDOLFLRXVVLWH:KHQDQ,QWHUQDO
'16VHUYHULVXQDEOHWRYDOLGDWHWKH'16UHVSRQVHIURPDXWKRULWDWLYH'16
VHUYHULWXSGDWHVWKHHQWU\ORFDOO\WRHQWHUWDLQWKHXVHUUHTXHVWV
+RZWR'HIHQG$JDLQVW'166SRRILQJ

6QLIILQJ7RROV
:LUHVKDUN
:LUHVKDUNLVWKHPRVWSRSXODUZLGHO\XVHG1HWZRUN3URWRFRO$QDO\]HUWRRO
DFURVV FRPPHUFLDO JRYHUQPHQWDO QRQSURILW DQG HGXFDWLRQDO RUJDQL]DWLRQV
,W LV D IUHH RSHQ VRXUFH WRRO DYDLODEOH IRU :LQGRZV /LQX[ 0$& %6'
6RODULVDQGRWKHUSODWIRUPVQDWLYHO\:LUHVKDUNDOVRRIIHUVDWHUPLQDOYHUVLRQ
FDOOHGߡ76KDUNߢ

/DE,QWURGXFWLRQWR:LUHVKDUN
3URFHGXUH
2SHQ:LUHVKDUNWRFDSWXUHWKHSDFNHWV
)LJXUH:LUHVKDUN1HWZRUN$QDO\]HU
&OLFN&DSWXUH!2SWLRQVWRHGLWFDSWXUHRSWLRQV

+HUH \RX FDQ HQDEOH RU GLVDEOH SURPLVFXRXV PRGH RQ DQ ,QWHUIDFH
&RQILJXUHWKH&DSWXUH)LOWHUDQG&OLFN6WDUWEXWWRQ
&OLFN&DSWXUH!&DSWXUH)LOWHUWRVHOHFW'HILQHG)LOWHUV<RXFDQDGGWKH
)LOWHUE\&OLFNLQJWKH$GGEXWWRQEHORZ
)ROORZ7&36WUHDPLQ:LUHVKDUN

:RUNLQJRQ7&3EDVHGSURWRFROVFDQEHYHU\KHOSIXOE\XVLQJ)ROORZ7&3
VWUHDPIHDWXUH7RH[DPLQHWKHGDWDIURPD7&3VWUHDPLQWKHZD\WKDWWKH
DSSOLFDWLRQOD\HUVHHVLW3HUKDSV\RXDUHORRNLQJIRUSDVVZRUGVLQD7HOQHW
VWUHDP
([DPLQHWKHGDWDIURPWKHFDSWXUHGSDFNHWDVVKRZQEHORZ

)LOWHUVLQ:LUHVKDUN
7KHIROORZLQJDUHWKHILOWHUVRI:LUHVKDUNWRILOWHUWKHRXWSXW
2SHUDWRU )XQFWLRQ ([DPSOH
(TXDO LSDGGU
HT (TXDO WFSSRUWHT
1RWHTXDO LSDGGU
QH 1RWHTXDO LSVUFQH
FRQWDLQV &RQWDLQVVSHFLILHG KWWS
YDOXH FRQWDLQVKWWSZZZLSVSHFLDOLVWQHW
7DEOH:LUHVKDUN)LOWHUV

&RXQWHUPHDVXUHV
'HIHQGLQJ$JDLQVW6QLIILQJ
%HVWSUDFWLFHDJDLQVW6QLIILQJLQFOXGHVWKHIROORZLQJDSSURDFKHVWRSURWHFW
WKHQHWZRUNWUDIILF
8VLQJ+7736LQVWHDGRI+773
8VLQJ6)73LQVWHDGRI)73
8VH6ZLWFKLQVWHDGRI+XE
&RQILJXUH3RUW6HFXULW\
&RQILJXUH'+&36QRRSLQJ
&RQILJXUH'\QDPLF$53,QVSHFWLRQ
&RQILJXUH6RXUFHJXDUG
8VH6QLIILQJ'HWHFWLRQWRROWRGHWHFW1,&IXQFWLRQLQJLQDSURPLVFXRXV
PRGH
8VH6WURQJ(QFU\SWLRQSURWRFROV

6QLIILQJ'HWHFWLRQ7HFKQLTXHV
6QLIIHU'HWHFWLRQ7HFKQLTXH
3LQJ0HWKRG
3LQJWHFKQLTXHLVXVHGWRGHWHFWVQLIIHU$SLQJUHTXHVWLVVHQWWRWKHVXVSHFW
,3 DGGUHVV ZLWK VSRRIHG 0$& DGGUHVV ,I WKH 1,& LV QRW UXQQLQJ LQ
SURPLVFXRXVPRGHLWZLOOQRWUHVSRQGWRWKHSDFNHW,QFDVHLIWKHVXVSHFWLV
UXQQLQJDVQLIIHULWUHVSRQGVWKHSDFNHW7KLVLVDQROGHUWHFKQLTXHDQGQRW
UHOLDEOH
$530HWKRG
8VLQJ$536QLIIHUVFDQEHGHWHFWHGZLWKWKHKHOSRI$53&DFKH%\VHQGLQJ
DQRQEURDGFDVW$53SDFNHWWRWKHVXVSHFW0$&DGGUHVVZLOOEHFDFKHGLI
WKH 1,& LV UXQQLQJ LQ SURPLVFXRXV PRGH 1H[W VWHS LV WR VHQG D EURDGFDVW
SLQJ ZLWK VSRRIHG 0$& DGGUHVV ,I WKH PDFKLQH LV UXQQLQJ SURPLVFXRXV
PRGH LW ZLOO EH DEOH WR UHSO\ WKH SDFNHW RQO\ DV LW KDV DOUHDG\ OHDUQHG WKH
$FWXDO0$&IURPWKHVQLIIHG1RQEURDGFDVW$53SDFNHW
3URPLVFXRXV'HWHFWLRQ7RRO
3URPLVFXRXV'HWHFWLRQWRROVVXFKDV3URPTU\8,RU1PDSFDQDOVREHXVHG
IRUGHWHFWLRQRI1HWZRUN,QWHUIDFH&DUGUXQQLQJLQ3URPLVFXRXV0RGH7KHVH
WRROVDUH*8,EDVHGDSSOLFDWLRQVRIWZDUH


CEH v10 Module 08 - Sniffing PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CEH v10 Module 08 - Sniffing PDF

Uploaded by

Copyright:

Available Formats

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

ZKLFK DOORZV ODZ HQIRUFHPHQW DJHQFLHV WR ZLUHWDS WKH FRPPXQLFDWLRQ RI

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

6ZLWFK FRQILJ LQWHWK

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

You might also like

6ZLWFKFRQILJLQWHWK