You are on page 1of 39

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.

com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&KDSWHU&U\SWRJUDSK\
7HFKQRORJ\%ULHI
$VZHKDYHVWXGLHGHDUOLHUFRQILGHQWLDOLW\LQWHJULW\DQGDYDLODELOLW\DUHWKH
WKUHH EDVLF FRPSRQHQWV DURXQG ZKLFK ZH VKRXOG EXLOG DQG PDLQWDLQ RXU
VHFXULW\ PRGHO :H PXVW NQRZ GLIIHUHQW PHWKRGV E\ ZKLFK ZH FDQ
LPSOHPHQWHDFKRQHRIWKHVHIHDWXUHV)RUH[DPSOHE\XVLQJHQFU\SWLRQZH
FDQPDNHVXUHWKDWRQO\WKHVHQGHUDQGWKHUHFHLYHUFDQUHDGFOHDUWH[WGDWD
$Q\ERG\EHWZHHQWKHWZRQRGHVQHHGVWRNQRZWKHNH\WRGHFU\SWWKHGDWD
6LPLODUO\ KDVKLQJ LV XVHG WR HQVXUH WKH LQWHJULW\ RI GDWD 7KLV VHFWLRQ
H[SODLQV WKH FRQFHSWV DQG GLIIHUHQW PHWKRGV E\ ZKLFK ZH FDQ LPSOHPHQW
HQFU\SWLRQ DQG KDVKLQJ LQ RXU QHWZRUN 6HYHUDO WHUPLQRORJLHV QHHG WR EH
H[SODLQHGEHIRUHPRYLQJWRWKHPDLQDJHQGDRIWKLVVHFWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&U\SWRJUDSK\&RQFHSWV
&U\SWRJUDSK\
&U\SWRJUDSK\LVDWHFKQLTXHRIHQFU\SWLQJWKHFOHDUWH[WGDWDLQWRDVFUDPEOHG
FRGH 7KLV HQFU\SWHG GDWD LV VHQW RYHU SXEOLF RU SULYDWH QHWZRUN WRZDUG
GHVWLQDWLRQ WR HQVXUH WKH FRQILGHQWLDOLW\ 7KLV HQFU\SWHG GDWD NQRZQ DV
&LSKHUWH[WLVGHFU\SWHGDWWKHGHVWLQDWLRQIRUSURFHVVLQJ6WURQJHQFU\SWLRQ
NH\VDUHXVHGWRDYRLGNH\FUDFNLQJ7KHREMHFWLYHRIFU\SWRJUDSK\LVQRWDOO
DERXW FRQILGHQWLDOLW\ LV DOVR FRQFHUQ LQWHJULW\ DXWKHQWLFDWLRQ DQG 1RQ
UHSXGLDWLRQ
7\SHVRI&U\SWRJUDSK\
6\PPHWULF&U\SWRJUDSK\
6\PPHWULF .H\ &U\SWRJUDSK\ LV WKH ROGHVW DQG PRVW ZLGHO\ XVHG
FU\SWRJUDSK\ WHFKQLTXH LQ WKH GRPDLQ RI FU\SWRJUDSK\ 6\PPHWULF FLSKHUV
XVH WKH VDPH VHFUHW NH\ IRU WKH HQFU\SWLRQ DQG GHFU\SWLRQ RI GDWD 0RVW
ZLGHO\XVHGV\PPHWULFFLSKHUVDUH$(6DQG'(6

)LJXUH6\PPHWULF&U\SWRJUDSK\
$V\PPHWULF&U\SWRJUDSK\3XEOLF.H\&U\SWRJUDSK\
8QOLNH6\PPHWULF&LSKHUVWZRNH\VDUHXVHG2QHNH\LVSXEOLFDOO\NQRZQ
WR HYHU\RQH ZKLOH RQH NH\ LV NHSW VHFUHW DQG LV XVHG WR HQFU\SW WKH GDWD E\
VHQGHUKHQFHLWLVDOVRFDOOHG3XEOLF.H\FU\SWRJUDSK\(DFKVHQGHUXVHVLWV
VHFUHW NH\ DOVR NQRZQ DV D SULYDWH NH\  IRU HQFU\SWLQJ LWV GDWD EHIRUH
VHQGLQJ7KHUHFHLYHUXVHVWKHUHVSHFWLYHSXEOLFNH\RIWKHVHQGHUWRGHFU\SW
WKHGDWD56$'6$DQG'LIILH+HOOPDQ$OJRULWKPDUHSRSXODUH[DPSOHVRI
DV\PPHWULFFLSKHUV$V\PPHWULF.H\&U\SWRJUDSK\GHOLYHUV&RQILGHQWLDOLW\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

LQWHJULW\ DXWKHQWLFLW\ DQG 1RQUHSXGLDWLRQ E\ XVLQJ 3XEOLF DQG 3ULYDWH NH\
FRQFHSW 7KH SULYDWH NH\ LV RQO\ NQRZQ E\ WKH RZQHU LWVHOI :KHUHDV WKH
3XEOLFNH\LVLVVXHGE\XVLQJ3XEOLF.H\,QIUDVWUXFWXUH 3., ZKHUHDWUXVWHG
&HUWLILFDWLRQ$XWKRULW\ &$ FHUWLI\WKHRZQHUVKLSRINH\SDLUV

)LJXUH$V\PPHWULF&U\SWRJUDSK\
*RYHUQPHQW$FFHVVWR.H\V *$.
*RYHUQPHQW $FFHVV WR NH\V *$.  UHIHUV WR WKH DJUHHPHQW EHWZHHQ
JRYHUQPHQWDQGVRIWZDUHFRPSDQLHV$OORUQHFHVVDU\NH\VDUHGHOLYHUHGWRD
JRYHUQPHQWDORUJDQL]DWLRQZKLFKNHHSVLWVHFXUHO\DQGRQO\XVHVWKHPZKHQ
WKHFRXUWLVVXHVDZDUUDQWWRGRVR

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

(QFU\SWLRQ$OJRULWKPV
&LSKHUV
$FLSKHULVDVHWRIUXOHVE\ZKLFKZHLPSOHPHQWHQFU\SWLRQ7KRXVDQGVRI
FLSKHUDOJRULWKPVDUHDYDLODEOHRQWKHLQWHUQHW6RPHRIWKHPDUHSURSULHWDU\
ZKLOH RWKHUV DUH RSHQ VRXUFH &RPPRQ PHWKRGV E\ ZKLFK FLSKHUV UHSODFH
RULJLQDOGDWDZLWKHQFU\SWHGGDWDDUH
6XEVWLWXWLRQ
,Q WKLV PHWKRG HYHU\ VLQJOH FKDUDFWHU RI GDWD LV VXEVWLWXWHG ZLWK DQRWKHU
FKDUDFWHU $ YHU\ VLPSOH H[DPSOH LQ WKLV UHJDUG ZRXOG EH WR UHSODFH WKH
FKDUDFWHU E\ VKLIWLQJ LW WKUHH FKDUDFWHUV DKHDG RI LW 7KHUHIRUH ߡ'ߢ ZRXOG
UHSODFHߡ$ߢDQGVRRQ7RPDNHLWPRUHFRPSOH[ZHFDQVHOHFWFHUWDLQOHWWHUV
WREHUHSODFHGLQWKHZKROHWH[W,QWKLVH[DPSOHWKHYDOXHRIWKHNH\LVWKUHH
DQGERWKQRGHVVKRXOGNQRZLWRWKHUZLVHWKH\ZRXOGQRWEHDEOHWRGHFU\SW
WKHGDWD
3RO\DOSKDEHWLF
7KLV PHWKRG PDNHV VXEVWLWXWLRQ HYHQ PRUH GLIILFXOW WR EUHDN E\ XVLQJ
PXOWLSOHFKDUDFWHUVXEVWLWXWLRQ
.H\V
,QWKHDERYHH[DPSOHRIVXEVWLWXWLRQZHXVHGDNH\RIߡWKUHHߢ.H\SOD\VWKH
PDLQUROHLQHYHU\FLSKHUDOJRULWKP:LWKRXWNQRZLQJWKHNH\GDWDFDQQRWEH
GHFU\SWHG
6WUHDP&LSKHU
$W\SHRIV\PPHWULFNH\FLSKHUWKDWHQFU\SWVWKHSODLQWH[WRQHE\RQH7KHUH
DUHYDULRXVW\SHVRIVWUHDPFLSKHUVVXFKDVV\QFKURQRXVDV\QFKURQRXV5&
LV WKH PRVW FRPPRQ W\SH RI VWUHDP FLSKHU GHVLJQ 7KH WUDQVIRUPDWLRQ RI
HQFU\SWHGRXWSXWYDULHVGXULQJWKHHQFU\SWLRQF\FOH
%ORFN&LSKHU
$ W\SH RI V\PPHWULF NH\ FLSKHU WKDW HQFU\SWV WKH SODLQ WH[W RQ WKH IL[HG
OHQJWKRIWKHJURXS7KHWUDQVIRUPDWLRQRIHQFU\SWHGGDWDGRHVQRWYDU\LQD
EORFNFLSKHU,WHQFU\SWVWKHEORFNRIGDWDXVLQJWKHVDPHNH\RQHDFKEORFN
'(6DQG$(6DUHFRPPRQW\SHVRIEORFNFLSKHUGHVLJQ
'DWD(QFU\SWLRQ6WDQGDUG '(6

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

'DWD (QFU\SWLRQ $OJRULWKP '(6  LV D 6\PPHWULF .H\ $OJRULWKP WKDW ZDV
XVHGIRUHQFU\SWLRQEXWQRZLWLVFRQVLGHUHGDVLQVHFXUHKRZHYHUVXFFHVVRUV
VXFKDV7ULSOH'(6*'(6UHSODFHG'(6HQFU\SWLRQ'(6XVHVELW.H\
VL]HWKDWLVWRRVPDOOWRSURWHFWGDWDFRQVLVWLQJ

)LJXUH'(6$OJRULWKP
'(6 DOJRULWKP LV FRQVLVWLQJ RI  URXQGV SURFHVVLQJ WKH GDWD ZLWK WKH 
LQWHUPHGLDU\ URXQG NH\V RI ELW JHQHUDWHG IURP ELW FLSKHU NH\ E\ D
5RXQG .H\ *HQHUDWRU 6LPLODUO\ '(6 UHYHUVH FLSKHU FRPSXWHV WKH GDWD LQ
FOHDUWH[WIRUPDWIURPFLSKHUWH[WXVLQJVDPH&LSKHUNH\
7KHIROORZLQJDUHWKHPDMRUSDUDPHWHURI'(6
'(6$OJRULWKPV3DUDPHWHUV 9DOXHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

%ORFNVL]H ELWV
.H\VL]H ELWV
1XPEHURIURXQGV 
LQWHUPHGLDU\NH\V ELWV
7DEOH'(6$OJRULWKP3DUDPHWHUV

$GYDQFHG(QFU\SWLRQ6WDQGDUG $(6
:KHQ'(6EHFRPHLQVHFXUHDQG3HUIRUPLQJ'(6HQFU\SWLRQWKUHHWLPHV 
'(6 RU 7ULSOH'(6  WRRN KLJK FRPSXWDWLRQ DQG WLPH WKHUH ZDV D QHHG IRU
DQRWKHU HQFU\SWLRQ DOJRULWKP WKDW LV PRUH VHFXUH DQG HIIHFWLYH WKDQ '(6
5LMQGDHO LVVXHV D QHZ DOJRULWKP LQ  NQRZQ DV $GYDQFHG
(QFU\SWLRQ $OJRULWKP $(6  $(6 LV DOVR D 3ULYDWH .H\ 6\PPHWULF
$OJRULWKPEXWVWURQJHUDQGIDVWHUWKDQ7ULSOH'(6$(6FDQHQFU\SWELW
GDWDZLWKELWNH\V
7KHIROORZLQJDUHWKHPDMRUSDUDPHWHURI$(6
$(6 $OJRULWKPV $(6 $(6 $(6
3DUDPHWHUV
%ORFN6L]H   
ELWV ELWV
.H\6L]H   
ELWV ELWV ELWV
1XPEHURIURXQGV   
5RXQG.H\6L]H   
ELWV ELWV ELWV
([SDQGHG.H\6L]H ELWV  
7DEOH$(6$OJRULWKP3DUDPHWHUV
7RXQGHUVWDQGWKH$(6DOJRULWKP&RQVLGHU$(6ELWVFHQDULR,QELW
$(6 WKHUH ZLOO EH  URXQGV ,QLWLDO  URXQGV ZLOO EH WKH SHUIRUPLQJ WKH
VDPH VWHS LH 6XEVWLWXWH E\WHV VKLIWLQJ RU URZV PL[LQJ RI FROXPQV DQG
$GGLQJURXQGNH\V7KHODVWURXQGLVVOLJKWO\GLIIHUHQWZLWKRQO\6XEVWLWXWH
E\WHVVKLIWLQJRUURZVDQG$GGLQJURXQGNH\V7KHIROORZLQJILJXUHVKRZV
WKH$(6DOJRULWKPDUFKLWHFWXUH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH$(6$OJRULWKP
5&5&5&$OJRULWKPV
5&LVDQROGHUHQFU\SWLRQWHFKQLTXHGHVLJQHGLQE\5RQ5LYHVWEDVHG
RQ VWUHDP FLSKHU 5& LV XVHG LQ 66/ :(3 SURWRFROV 5& JHQHUDWHV D
SVHXGRUDQGRP VWUHDP WKDW LV XVHG IRU HQFU\SWLRQ RI SODLQ WH[W E\ ELWZLVH
H[FOXVLYH2U VLPLODU WR WKH 9HUQDP FLSKHU H[FHSW IRU WKDW JHQHUDWHG
SVHXGRUDQGRPELWV 6LPLODUO\WKHSURFHVVRIGHFU\SWLRQLVSHUIRUPHGDVLWLV
V\PPHWULFRSHUDWLRQ,QWKH5&DOJRULWKPELW,QLWLDOL]DWLRQ9HFWRU ,9
JHQHUDWHVDRUELWNH\
5&ZDVD6\PPHWULF.H\%ORFN&LSKHULQWURGXFHLQ5&KDVYDULDEOH
EORFNVL]H RUELW .H\VL]HRIWRELWVDQGWRURXQGV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

5&LVVXJJHVWHGZLWKWKHELWEORFNVL]HELWNH\DQGURXQGV5&
DOVRFRQVLVWVRIVRPHPRGXODUDGGLWLRQVDQGH[FOXVLYH25 ;25 V
5&LVDOVRD6\PPHWULF.H\EORFNFLSKHUWKDWLVGHULYHGIURP5&KDYLQJD
EORFNVL]HRIELWVZLWKXSWRELWNH\VXSSRUW5&LV
YHU\ VLPLODU WR 5& LQ VWUXFWXUH XVLQJ GDWDGHSHQGHQW URWDWLRQV PRGXODU
DGGLWLRQ DQG ;25 RSHUDWLRQV 5& GRHV XVH DQ H[WUD PXOWLSOLFDWLRQ
RSHUDWLRQQRWSUHVHQWLQ5&WRPDNHWKHURWDWLRQGHSHQGHQW
7KH'6$DQG5HODWHG6LJQDWXUH6FKHPHV
8VLQJDEDVLFFRQFHSWRIDVLJQDWXUHWKDWZHXVHLQRXUGDLO\OLIHWRSURYHWKH
DXWKHQWLFLW\DQGDFWXDORULJLQRIDGRFXPHQWLQFRPSXWHUQHWZRUNLQJ'LJLWDO
6LJQDWXUH $OJRULWKP '6$  LV XVHG 'LJLWDO 6LJQDWXUH FDQ SURYLGH WKUHH
FRPSRQHQWVRIQHWZRUNVHFXULW\LH$XWKHQWLFLW\RIDPHVVDJH,QWHJULW\RI
D PHVVDJH DQG 1RQUHSXGLDWLRQ 7KH GLJLWDO VLJQDWXUH FDQQRW SURYLGH WKH
FRQILGHQWLDOLW\ RI FRPPXQLFDWLRQ +RZHYHU LW FDQ EH DFKLHYHG E\ XVLQJ
HQFU\SWLQJWKHPHVVDJHDQGVLJQDWXUH
'LJLWDO6LJQDWXUHXVHV3XEOLF.H\WRVLJQDQGYHULI\WKHSDFNHWV7KHVLJQLQJ
RI D GRFXPHQW UHTXLUHV SULYDWH NH\ ZKHUHDV 9HULILFDWLRQ UHTXLUHV D 3XEOLF
NH\7KHVHQGHURIWKHPHVVDJHVLJQHGZLWKLWVSULYDWHNH\DQGVHQGLWWRWKH
UHFHLYHU7KHUHFHLYHUYHULILHVWKHDXWKHQWLFLW\RIWKHPHVVDJHE\GHFU\SWLQJ
WKHSDFNHWZLWKVHQGHUߞVSXEOLFNH\$VVHQGHUߞVSXEOLFNH\RQO\GHFU\SWVWKH
PHVVDJHLWYHULILHVWKDWVHQGHURIWKHPHVVDJH
7KHLQWHJULW\RIDPHVVDJHLVSUHVHUYHGE\VLJQLQJWKHHQWLUHPHVVDJH,IDQ\
FRQWHQWRIWKHPHVVDJHLVFKDQJHGLWZLOOQRWJHWWKHVDPHVLJQDWXUH,QWHJULW\
LVVLJQLQJDQGYHULI\LQJWKHPHVVDJHREWDLQHGE\XVLQJ+DVK)XQFWLRQV
'LJLWDO&HUWLILFDWHFRQWDLQVYDULRXVLWHPVDQGWKHVHLWHPVDUHOLVWHGEHORZ
6XEMHFWߙ&HUWLILFDWHKROGHUߞVQDPH
6HULDO1XPEHU8QLTXHQXPEHUIRUFHUWLILFDWHLGHQWLILFDWLRQ
3XEOLF.H\ߙ$FRS\RISXEOLFRIWKHFHUWLILFDWHKROGHU
,VVXHUߙ&HUWLILFDWHLVVXLQJDXWKRULW\ߞVGLJLWDOVLJQDWXUHWRYHULI\WKDWWKH
FHUWLILFDWHLVUHDO
6LJQDWXUH$OJRULWKPߙ$OJRULWKP XVHG WR GLJLWDOO\ VLJQ WKH FHUWLILFDWH
E\WKH&HUWLILFDWLRQ$XWKRULW\ &$ 
9DOLGLW\ߙ9DOLGLW\RIDFHUWLILFDWHRUZHFDQVD\H[SLU\GDWHDQGWLPHRI
WKHFHUWLILFDWH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

7KH'LJLWDOFHUWLILFDWHKDV;YHUVLRQVXSSRUWHGWKHIRUPDWDQGWKDWLVD
VWDQGDUGIRUPDW
56$ 5LYHVW6KDPLU$GOHPDQ
7KLV DOJRULWKP LV QDPHG DIWHU LWV FUHDWRUV QDPHO\ 5RQ 5LYHVW $GL 6KDPLU
DQG /HRQDUG $GOHPDQ $OVR NQRZQ DV SXEOLF NH\ FU\SWRJUDSK\ VWDQGDUG
3.&6   WKH PDLQ SXUSRVH RI LWV XVDJH WRGD\ LV DXWKHQWLFDWLRQ 7KH NH\
OHQJWKYDULHVIURPWRZLWKEHLQJSUHIHUUHGRQH56$LVRQHRI
WKHGHIDFWRHQFU\SWLRQVWDQGDUGV
7KH56$6LJQDWXUH6FKHPH
 7ZRYHU\ODUJHSULPHQXPEHUVSDQGTDUHUHTXLUHG
 0XOWLSO\WKHDERYHWZRSULPHVWRILQGQWKHPRGXOXVIRUHQFU\SWLRQDQG
GHFU\SWLRQ,QRWKHUZRUGVQ S T
 &DOFXODWHV͵  S   T 
 &KRRVHV D UDQGRP LQWHJHU H LH (QFU\SWLRQ .H\ DQG FDOFXODWHV G
'HFU\SWLRQ.H\VRWKDWG[H PRG͵
 $QQRXQFHHDQGQWRWKHSXEOLFKHNHHSV͵DQGGVHFUHW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE([DPSOHRI56$$OJRULWKP
&DVH6WXG\
$OLFH FUHDWHV D SDLU RI NH\V IRU KHUVHOI 6KH FKRRVHV S   DQG T  
&DOFXODWHWKHYDOXHRIIROORZLQJ
$&DOFXODWH
Q "
͵ "
%6KHWKHQFKRRVHVH 
G "
& 6KRZKRZ%REFDQVHQGDPHVVDJHߡߢWR$OLFHLIKHNQRZVHDQG
Q

$6ROXWLRQ
$VZHNQRZ
Q S T
Q  
Q 

/HWߞVILQG͵
͕  S   T
͕     
͕     
͕ 

%6ROXWLRQ
,IH OHWߞVFDOFXODWHWKHYDOXHRIG
$VZHNQRZWKDW
G[H PRG͵
G HPRG͵
G PRG
G 

&6ROXWLRQ
3ULYDWH.H\RI$OLFHZLOOEH GST   
3XEOLF.H\RI$OLFHZLOOEH HQ   

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


$OLFHZLOOVKDUHKHU3XEOLFNH\ZLWK%RE%REZLOOHQFU\SWWKHSDFNHWXVLQJ
$OLFH3XEOLFNH\DQGVHQGLWWRKHU
$VZHNQRZ
& 0HPRGQ
+HUH
ߡ&ߢLV&LSKHUWH[W
ߡ0ߢLV0HVVDJH

& 0HPRGQ
&   PRG
& 

%REZLOOVHQGߡߢWR$OLFH$OLFHZLOOGHFU\SWWKH&LSKHUXVLQJKHUSULYDWH
NH\WRH[WUDFWWKHRULJLQDOPHVVDJH

$VZHNQRZ
0 &GPRGQ
0   PRG
0 

0HVVDJH'LJHVW 2QHZD\+DVK )XQFWLRQV
7KH PHVVDJH GLJHVW LV D FU\SWRJUDSKLF KDVKLQJ WHFKQLTXH WKDW LV XVHG WR
HQVXUH WKH LQWHJULW\ RI D PHVVDJH 0HVVDJH DQG PHVVDJH GLJHVW FDQ EH VHQW
WRJHWKHU RU VHSDUDWHO\ WKURXJK D FRPPXQLFDWLRQ FKDQQHO 5HFHLYHU
UHFDOFXODWHVWKH+DVKRIWKHPHVVDJHDQGFRPSDUHVLWZLWKWKH0HVVDJHGLJHVW
WRHQVXUHLIDQ\FKDQJHVKDYHEHHQPDGH2QH:D\+DVKRI0HVVDJHGLJHVW
PHDQV WKH KDVKLQJ IXQFWLRQ PXVW EH D RQHZD\ RSHUDWLRQ 7KH RULJLQDO
PHVVDJHPXVWQRWEHDEOHWRUHFUHDWH7KHPHVVDJHGLJHVWLVDXQLTXHIL[HG
VL]H ELW VWULQJ WKDW LV FDOFXODWHG LQ D ZD\ WKDW LI D VLQJOH ELW LV PRGLILHG LW
FKDQJHVRIWKHPHVVDJHGLJHVWYDOXH
0HVVDJH'LJHVW)XQFWLRQ0'
7KH0'DOJRULWKPLVRQHIURPWKH0HVVDJHGLJHVWVHULHV0'SURGXFHVD
ELWKDVKYDOXHWKDWLVXVHGDVDFKHFNVXPWRYHULI\WKHLQWHJULW\+DVKLQJ
LV WKH WHFKQLTXH WR HQVXUH WKH LQWHJULW\ 7KH KDVK YDOXH LV FDOFXODWHG E\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

FRPSXWLQJ VSHFLILF DOJRULWKPV WR YHULI\ WKH LQWHJULW\ WKDW WKH GDWD ZDV QRW
PRGLILHG+DVKYDOXHVSOD\DQLPSRUWDQWUROHLQSURYLQJWKHLQWHJULW\QRWRQO\
RIGRFXPHQWVDQGLPDJHVEXWDOVRXVHGLQSURWRFROVWRHQVXUHVWKHLQWHJULW\RI
WUDQVSRUWLQJSD\ORDG
6HFXUH+DVKLQJ$OJRULWKP 6+$
$V 0HVVDJH 'LJHVW  0'  LV D FU\SWRJUDSKLF KDVKLQJ DOJRULWKP DQRWKHU
PRVW SRSXODU PRUH VHFXUH DQG ZLGHO\ XVHG KDVKLQJ DOJRULWKP LV 6HFXUH
+DVKLQJ $OJRULWKP 6+$  6+$ LV D VHFXUH KDVKLQJ DOJRULWKP SURGXFLQJ
ELW KDVKLQJ YDOXH DV FRPSDUHG WR 0' SURGXFLQJ ELW YDOXH
+RZHYHU 6+$ LV HYHQ PRUH VHFXUH UREXVW DQG VDIHU KDVKLQJ DOJRULWKP
QRZ
6\QWD[7KHSDVVZRUGLV
6+$FEEHEFHDEDGEGFEI
6HFXUH+DVK$OJRULWKP 6+$
6+$KDVWKHRSWLRQWRYDU\GLJHVWEHWZHHQELWVWRELWV6+$LVD
JURXSRIGLIIHUHQWKDVKHVLQFOXGLQJ6+$6+$DQG6+$7KH
VWURQJHUFU\SWRJUDSKLFDOJRULWKPZLOOPLQLPL]HWKHFKDQFHVRIFRPSURPLVH
6+$
6\QWD[7KHSDVVZRUGLV
6+$
GDDIGIIEEIEHDFGEI

6+$
6\QWD[7KHSDVVZRUGLV
6+$
IFFEGEGFIFGHHDHGHEIG

6+$
6\QWD[7KHSDVVZRUGLV
6+$
GDFHEHGGEEGEFEEEFDDE
+DVKHG0HVVDJH$XWKHQWLFDWLRQ&RGH +0$&
+0$&XVHVWKHPHFKDQLVPRIKDVKLQJEXWLWDGGVDQRWKHUIHDWXUHRIXVLQJ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

WKH VHFUHW NH\ LQ LWV RSHUDWLRQ %RWK SHHUV RQO\ NQRZ WKLV VHFUHW NH\
7KHUHIRUHLQWKLVFDVHRQO\SDUWLHVZLWKVHFUHWNH\VFDQFDOFXODWHDQGYHULI\
KDVK%\XVLQJ+0$&LIWKHUHLVDQDWWDFNHUZKRLVHDYHVGURSSLQJLWZLOO
QRW EH DEOH WR LQMHFW RU PRGLI\ WKH GDWD DQG UHFDOFXODWH WKH FRUUHFW KDVK
EHFDXVHKHZLOOQRWNQRZWKHFRUUHFWNH\XVHGE\+0$&

)LJXUH+0$&:RUNLQJ&RQFHSWXDO'LDJUDP

66+ 6HFXUH6KHOO
6HFXUH 6KHOO 3URWRFRO FRPPRQO\ NQRZQ LQ VKRUW DV 66+ SURWRFRO LV D
SURWRFROWKDWLVXVHGIRUVHFXUHUHPRWHFRQQHFWLRQV,WLVDVHFXUHDOWHUQDWLYH
WRLQVHFXUHSURWRFROVVXFKDV7HOQHWUORJLQDQG)7366+LVQRWRQO\XVHGIRU
UHPRWH ORJLQ EXW DOVR ZLWK RWKHU SURWRFROV VXFK DV )LOH 7UDQVIHU 3URWRFRO
)73  6HFXUH &RS\ 3URWRFRO 6&3  6)73 66+ )LOH 7UDQVIHU 3URWRFRO  LV
SRSXODUO\ XVHG IRU VHFXUH ILOH WUDQVIHU DV LW UXQV RYHU 66+ 66+ SURWRFRO
IXQFWLRQV RYHU FOLHQWVHUYHU DUFKLWHFWXUH ZKHUH 66+ FOLHQW FRQQHFWV WR 66+
VHUYHUWKURXJKDVHFXUH66+FKDQQHORYHUDQLQVHFXUHQHWZRUN
6HFXUH6KHOO 66+ SURWRFROLVFRQVLVWVRIWKUHHPDMRUFRPSRQHQWV
7KH 7UDQVSRUW /D\HU 3URWRFRO >66+75$16@ SURYLGHV VHUYHU
DXWKHQWLFDWLRQ FRQILGHQWLDOLW\ DQG LQWHJULW\ ,W PD\ RSWLRQDOO\ DOVR
SURYLGH FRPSUHVVLRQ 7KH WUDQVSRUW OD\HU ZLOO W\SLFDOO\ EH UXQ RYHU D
7&3,3FRQQHFWLRQEXWPLJKWDOVREHXVHGRQWRSRIDQ\RWKHUUHOLDEOH
GDWDVWUHDP
7KH 8VHU $XWKHQWLFDWLRQ 3URWRFRO >66+86(5$87+@ DXWKHQWLFDWHV
WKH FOLHQWVLGH XVHU WR WKH VHUYHU  ,W UXQV RYHU WKH WUDQVSRUW OD\HU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

SURWRFRO
7KH&RQQHFWLRQ3URWRFRO>66+&211(&7@PXOWLSOH[HVWKHHQFU\SWHG
WXQQHOLQWRVHYHUDOORJLFDOFKDQQHOV,WUXQVRYHUWKHXVHUDXWKHQWLFDWLRQ
SURWRFRO

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&U\SWRJUDSK\7RROV
0'+DVK&DOFXODWRUV
7KHUH DUH VHYHUDO 0' &DOFXODWLQJ WRROV DYDLODEOH ZKLFK FDQ GLUHFWO\
FDOFXODWH WKH +DVK YDOXH RI WH[W DV ZHOO DV RIIHUV WR XSORDG WKH GHVLUHG ILOH
0RVWSRSXODUWRROVDUH
 +DVK&DOF
 0'&DOFXODWRU
 +DVK0\)LOHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE&DOFXODWLQJ0'XVLQJ7RRO
&DOFXODWLQJ0'YDOXHXVLQJ+DVK&DOF
 2SHQ+DVK&DOFWRRO

)LJXUH+DVK&DOF7RRO
 &UHDWHDQHZILOHZLWKVRPHFRQWHQWLQLWDVVKRZQEHORZ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&UHDWLQJ)LOHIRU0'&DOFXODWLRQ
 6HOHFW'DWD)RUPDWDVߡ)LOHߢDQGXSORDG\RXUILOH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH8SORDGLQJ)LOHWRFDOFXODWH+DVK

 6HOHFW+DVKLQJ$OJRULWKPDQG&OLFN&DOFXODWH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&DOFXODWLQJ+DVK
 1RZ6HOHFWWKH'DWD)RUPDWWRߡ7H[W6WULQJߢDQG7\SHߡ,36SHFLDOLVWߨߢ
LQWR'DWDILOHGDQGFDOFXODWHG0'

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&DOFXODWLQJ+DVKZLWK7H[W6WULQJ

0'&DOFXODWHGIRUWKHWH[WVWULQJߡ,36SHFLDOLVWߨߢLV
ߡDEHFEGEDߢ

 1RZOHW
VVHHKRZ0'YDOXHLVFKDQJHGIURPPLQRUFKDQJH


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&RPSDULQJ+DVKRIGLIIHUHQW7H[W6WULQJ


-XVWORZHULQJWKHFDVHRIVLQJOHDOSKDEHWFKDQJHVHQWLUHKDVKLQJYDOXH0'
&DOFXODWHG IRU WKH WH[W VWULQJ ߡ,3VSHFLDOLVWߨߢ LV
ߡEGDGGHIHDEDߢ


6WULQJ 0'
,36SHFLDOLVWߨ DEHFEGED
,3VSHFLDOLVWߨ EGDGGHIHDED
7DEOH&RPSDULQJ0'9DOXHV
+DVK&DOFXODWRUVIRU0RELOH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

+DVKFDOFXODWLQJWRROVIRU0RELOHSKRQHVDUH
0'+DVK&DOFXODWRU
+DVK'URLG
+DVK&DOFXODWRU

)LJXUH+DVKLQJWRROVIRU0RELOH
&U\SWRJUDSK\7RRO
7KHUH DUH VHYHUDO WRROV DYDLODEOH IRU HQFU\SWLQJ ILOHV VXFK DV $GYDQFHG
(QFU\SWLRQ 3DFNDJH DQG %&7H[W(QFRGHU 6LPLODUO\ VRPH PRELOH
FU\SWRJUDSK\DSSOLFDWLRQLV6HFUHW6SDFH(QFU\SWRU&U\SWR6\PPDQG&LSKHU
6HQGHU


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE$GYDQFHG(QFU\SWLRQ3DFNDJH
3URFHGXUH
 'RZQORDG DQG ,QVWDOO $GYDQFH (QFU\SWLRQ 3DFNDJH /DWHVW 9HUVLRQ ,Q
WKLV/DEZHDUHXVLQJ$GYDQFHG(QFU\SWLRQ3DFNDJHDQGWR
HQVXUHFRPSDWLELOLWLHVRQ:LQGRZVDQG:LQGRZV

)LJXUH$GYDQFHG(QFU\SWLRQ3DFNDJH

 6HOHFWWKH)LOH\RXZDQWWR(QFU\SW
 6HWSDVVZRUG
 6HOHFW$OJRULWKP


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH8SORDGLQJ)LOHWR(QFU\SW

 &OLFN(QFU\SW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH(QFU\SWLQJZLWK$(6ELW

 &RPSDUHERWK)LOHV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&RPSDULQJ(QFU\SWHGDQG2ULJLQDO)LOHV

 1RZ$IWHUIRUZDUGLQJLWWRDQRWKHU3&LQRXUFDVHLQ:LQGRZV3&
GHFU\SWLQJLWXVLQJ$GYDQFHG(QFU\SWLRQSDFNDJH
 (QWHUSDVVZRUG


)LJXUH'HFU\SWLQJ)LOHXVLQJ$GYDQFHG(QFU\SWLRQ3DFNDJH

 )LOH6XFFHVVIXOO\GHFU\SWHG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH'HFU\SWHG)LOH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

3XEOLF.H\,QIUDVWUXFWXUH 3.,
3XEOLF.H\,QIUDVWUXFWXUH
3., LV WKH FRPELQDWLRQ RI SROLFLHV SURFHGXUHV KDUGZDUH VRIWZDUH DQG
SHRSOHWKDWDUHUHTXLUHGWRFUHDWHPDQDJHDQGUHYRNHGLJLWDOFHUWLILFDWHV
%HIRUH PRYLQJ WR WKH RULJLQDO GLVFXVVLRQ EDVLF WHUPLQRORJLHV QHHGV
H[SODQDWLRQ
3XEOLFDQG3ULYDWH.H\3DLU
3XEOLF DQG 3ULYDWH .H\ SDLU ZRUN OLNH D WHDP LQ HQFU\SWLRQGHFU\SWLRQ
SURFHVV7KHSXEOLFNH\LVSURYLGHGWRHYHU\RQHDQGWKHSULYDWHNH\LVVHFUHW
(YHU\ GHYLFH PDNHV VXUH WKDW QR RQH KDV LWV SULYDWH NH\ :H HQFU\SW GDWD
VHQGLQJWRDSDUWLFXODUQRGHE\XVLQJLWVSXEOLFNH\6LPLODUO\WKHSULYDWHNH\
LV XVHG WR GHFU\SW WKH GDWD ,W LV DOVR WUXH LQ WKH RSSRVLWH FDVH ,I D QRGH
HQFU\SWVDGDWDZLWKLWVSULYDWHNH\WKHSXEOLFNH\LVIRUGHFU\SWLRQ
&HUWLILFDWLRQ$XWKRULWLHV &$
$ FHUWLILFDWH DXWKRULW\ &$  LV D FRPSXWHU RU HQWLW\ WKDW FUHDWHV DQG LVVXHV
GLJLWDOFHUWLILFDWHV1XPEHURIWKLQJVOLNH,3DGGUHVVIXOO\TXDOLILHGGRPDLQ
QDPH DQG WKH SXEOLF NH\ RI D SDUWLFXODU GHYLFH LV SUHVHQW LQ WKH GLJLWDO
FHUWLILFDWH&$DOVRDVVLJQVDVHULDOQXPEHUWRWKHGLJLWDOFHUWLILFDWHDQGVLJQV
WKHFHUWLILFDWHZLWKLWVGLJLWDOVLJQDWXUH
5RRW&HUWLILFDWH
5RRWFHUWLILFDWHSURYLGHVWKHSXEOLFNH\DQGRWKHUGHWDLOVRI&$$QH[DPSOH
RIRQHLV


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH([DPSOH5RRW&HUWLILFDWH

7KHUHDUHPXOWLSOHLQIRUPDWLYHVHFWLRQVLQWKHILJXUHDERYHLQFOXGLQJDVHULDO
QXPEHU LVVXHU FRXQWU\ DQG RUJDQL]DWLRQ QDPHV YDOLGLW\ GDWHV DQG SXEOLF
NH\ LWVHOI (YHU\ 26 KDV LWV SODFHPHQW SURFHGXUH UHJDUGLQJ WKH FHUWLILFDWHV
&HUWLILFDWHFRQWDLQHUIRUVSHFLILF26FDQEHVHDUFKHGRQWKHLQWHUQHWWRJHWWR
WKHFHUWLILFDWHVVWRUHGRQWKHORFDOFRPSXWHU
,GHQWLW\&HUWLILFDWH
7KHSXUSRVHRILGHQWLW\FHUWLILFDWHLVVLPLODUWRURRWFHUWLILFDWHH[FHSWWKDWLW
SURYLGHV WKH SXEOLF NH\ DQG LGHQWLW\ RI FOLHQW FRPSXWHU RU GHYLFH )RU
H[DPSOHDFOLHQWURXWHURUZHEVHUYHUZKRZLVKHVWRPDNH66/FRQQHFWLRQV
ZLWKRWKHUSHHUV
6LJQHG&HUWLILFDWH9V6HOI6LJQHG&HUWLILFDWH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

6HOI6LQJHG&HUWLILFDWHVDQG6LJQHG&HUWLILFDWHVIURPD&HUWLILFDWH$XWKRULW\
&$ SURYLGHVHFXULW\LQWKHVDPHZD\&RPPXQLFDWLRQXVLQJWKHVHW\SHVRI
FHUWLILFDWHV DUH SURWHFWHG HQFU\SWHG E\ KLJKOHYHO VHFXULW\ 3UHVHQFH RI
&HUWLILFDWH $XWKRULW\ LPSOLHV WKDW D WUXVWHG VRXUFH FHUWLILHV FRPPXQLFDWLRQ
7KH VLJQHG VHFXULW\ FHUWLILFDWH LV WR EH SXUFKDVH ZKHUHDV 6HOIVLJQHG
FHUWLILFDWHV FDQ EH FRQILJXUHG WR RSWLPL]H FRVW $ 7KLUGSDUW\ &HUWLILFDWH
$XWKRULW\ &$  UHTXLUHV YHULILFDWLRQ RI GRPDLQ RZQHUVKLS DQG RWKHU
YHULILFDWLRQWRLVVXHDFHUWLILFDWH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

(PDLO(QFU\SWLRQ
'LJLWDO6LJQDWXUH
'LJLWDO 6LJQDWXUH LV D WHFKQLTXH WR HYDOXDWH WKH DXWKHQWLFLW\ RI GLJLWDO
GRFXPHQWV DV VLJQDWXUH DXWKHQWLFDWH WKH DXWKHQWLFLW\ RI D GRFXPHQW 'LJLWDO
6LJQDWXUHHQVXUHVWKHDXWKRURIWKHGRFXPHQWGDWHDQGWLPHRIVLJQLQJDQG
DXWKHQWLFDWHVWKHFRQWHQWRIWKHPHVVDJH
7KHUHDUHWZRFDWHJRULHVRI'LJLWDO6LJQDWXUHV
 'LUHFW'LJLWDO6LJQDWXUH
 $UELWUDWHG'LJLWDO6LJQDWXUH
'LUHFW'LJLWDO6LJQDWXUH
'LUHFW 'LJLWDO 6LJQDWXUHV LQYROYHV RQO\ VHQGHU DQG UHFHLYHU RI WKH PHVVDJH
DVVXPLQJ WKDW UHFHLYHU KDV VHQGHU
V 3XEOLF .H\ 7KH VHQGHU PD\ VLJQ HQWLUH
PHVVDJHRUKDVKZLWKWKHSULYDWHNH\DQGVHQGLWWRZDUGVWKHGHVWLQDWLRQ7KH
UHFHLYHUGHFU\SWVLWXVLQJWKH3XEOLFNH\
$UELWUDWHG'LJLWDO6LJQDWXUH
$UELWUDWHG'LJLWDO6LJQDWXUHVLQYROYHVDWKLUGSDUW\FDOOHG7UXVWHG$UELWHU
7KH UROH RI WKLV $UELWHU LV WR YDOLGDWH WKH VLJQHG PHVVDJHV LQVHUW GDWH DQG
WKHQ VHQG LW WR WKH UHFLSLHQW ,W UHTXLUHV D VXLWDEOH OHYHO RI WUXVW DQG FDQ
LPSOHPHQWZLWKHLWKHUSXEOLFRUSULYDWHNH\
66/ 6HFXUH6RFNHWV/D\HU
,Q D FRUSRUDWH HQYLURQPHQW ZH FDQ LPSOHPHQW WKH VHFXULW\ RI FRUSRUDWH
WUDIILFRYHUWKHSXEOLFFORXGE\XVLQJVLWHWRVLWHRUUHPRWH931,QSXEOLF
WKHUHLVQR,3VHFVRIWZDUHUXQQLQJ1RUPDOXVHUVDOVRQHHGWRGRHQFU\SWLRQ
LQGLIIHUHQWFDVHVOLNHRQOLQHEDQNLQJHOHFWURQLFVKRSSLQJ,QVXFKVLWXDWLRQV
66/ FRPHV LQ WR SOD\ 7KH JRRG WKLQJ DERXW 6HFXUH 6RFNHW /D\HU 66/  LV
WKDW DOPRVW HYHU\ VLQJOH ZHE EURZVHU LQ XVH WRGD\ VXSSRUWV 66/ %\ XVLQJ
66/WKHZHEEURZVHUPDNHVDQ+7736EDVHGVHVVLRQZLWKWKHVHUYHULQVWHDG
RI +773 :KHQHYHU D EURZVHU WULHV WR PDNH +7736 EDVHG VHVVLRQ ZLWK D
VHUYHUDFHUWLILFDWHUHTXHVWLVVHQWWRWKHVHUYHULQWKHEDFNJURXQG7KHVHUYHU
LQUHWXUQUHSO\ZLWKLWVGLJLWDOFHUWLILFDWHFRQWDLQLQJLWVSXEOLFNH\7KHZHE
EURZVHUFKHFNVWKHDXWKHQWLFLW\RIWKLVFHUWLILFDWHZLWKDFHUWLILFDWHDXWKRULW\
&$ /HWߞVDVVXPHWKDWFHUWLILFDWHLVYDOLGQRZVHUYHUDQGWKHZHEEURZVHU
KDYHDVHFXUHVHVVLRQEHWZHHQWKHP

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

66/DQG7/6IRU6HFXUH&RPPXQLFDWLRQ
7KH WHUPV 66/ 6HFXUH 6RFNHW /D\HU  DQG 7/6 7UDQVSRUW /D\HU 6HFXULW\
DUHRIWHQXVHGLQWHUFKDQJHDEO\DQGSURYLGHHQFU\SWLRQDQGDXWKHQWLFDWLRQRI
GDWDLQPRWLRQ7KHVHSURWRFROVDUHLQWHQGHGIRUDVFHQDULRZKHUHXVHUVZDQW
VHFXUH FRPPXQLFDWLRQ RYHU DQ XQVHFXUHG QHWZRUN OLNH WKH SXEOLF LQWHUQHW
0RVWFRPPRQDSSOLFDWLRQVRIVXFKSURWRFROVDUHZHEEURZVLQJ9RLFHRYHU
,3 92,3 DQGHOHFWURQLFPDLO
&RQVLGHUDVFHQDULRZKHUHDXVHUZDQWVWRVHQGDQHPDLOWRVRPHRQHRUZDQWV
WRSXUFKDVHVRPHWKLQJIURPDQRQOLQHVWRUHZKHUHFUHGLWFDUGFUHGHQWLDOVPD\
EHQHHGHG66/RQO\VSLOOVWKHGDWDDIWHUDSURFHVVNQRZQDVߝKDQGVKDNHߞ,ID
KDFNHU E\SDVVHV WKH HQFU\SWLRQ SURFHVV WKDQ HYHU\WKLQJ IURP EDQN DFFRXQW
LQIRUPDWLRQWRDVHFUHWFRQYHUVDWLRQLVYLVLEOHZKLFKPDOLFLRXVXVHUVPD\XVH
IRUSHUVRQDOJDLQ
66/ ZDV GHYHORSHG E\ 1HWVFDSH LQ  ZLWK DQ LQWHQWLRQ WR SURWHFW ZHE
WUDQVDFWLRQV7KHODVWYHUVLRQIRU66/ZDVYHUVLRQ,Q,(7)FUHDWHG
7UDQVSRUW/D\HU6HFXULW\ZKLFKLVDOVRNQRZQDV66/DV7/6LVLQIDFW
DQDGDSWHGYHUVLRQRI66/
7KH IROORZLQJ DUH VRPH RI WKH LPSRUWDQW IXQFWLRQDOLWLHV 66/7/6 KDV EHHQ
GHVLJQHGWRGR
6HUYHUDXWKHQWLFDWLRQWRFOLHQWDQGYLFHYHUVD
6HOHFWFRPPRQFU\SWRJUDSKLFDOJRULWKP
*HQHUDWHVKDUHGVHFUHWVEHWZHHQSHHUV
3URWHFWLRQRIQRUPDO7&38'3FRQQHFWLRQ
:RUNLQJ
:RUNLQJRI66/DQG76/LVGLYLGHGLQWRWZRSKDVHV
3KDVH 6HVVLRQ(VWDEOLVKPHQW
,Q WKLV SKDVH FRPPRQ FU\SWRJUDSKLF SURWRFRO DQG SHHU DXWKHQWLFDWLRQ WDNH
SODFH 7KHUH DUH WKUHH VXESKDVHV ZLWKLQ RYHUDOO SKDVH  RI 66/7/6 DV
H[SODLQHGEHORZ
6XESKDVH,QWKLVSKDVHKHOORPHVVDJHVDUHH[FKDQJHGWRQHJRWLDWH
FRPPRQSDUDPHWHUVRI66/7/6VXFKDVDXWKHQWLFDWLRQDQGHQFU\SWLRQ
DOJRULWKPV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

6XESKDVH7KLVSKDVHLQFOXGHVRQHZD\RUWZRZD\DXWKHQWLFDWLRQ
EHWZHHQFOLHQWDQGVHUYHUHQG$PDVWHUNH\IURPLVVHQWE\FOLHQWVLGH
E\XVLQJVHUYHUߞVSXEOLFNH\WRVWDUWSURWHFWLQJWKHVHVVLRQ
6XESKDVH7KHODVWSKDVHFDOFXODWHVDVHVVLRQNH\DQGFLSKHUVXLWH
LV ILQDOO\ DFWLYDWHG +0$& SURYLGHV GDWD LQWHJULW\ IHDWXUHV E\ XVLQJ
HLWKHU 6+$ RU 0' 6LPLODUO\ XVLQJ '(6 '(6&%& '(&
('( '(6&%& 5& RU 5& SURYLGHV FRQILGHQWLDOLW\
IHDWXUHV
X    6HVVLRQ .H\V &UHDWLRQ 0HWKRGV IRU JHQHUDWLQJ VHVVLRQ NH\V
DUHDVIROORZV
56$ %DVHG 8VLQJ SXEOLF NH\ RI SHHU HQFU\SWV VKDUHG VHFUHW
VWULQJ
$ IL[HG '+ .H\ ([FKDQJH )L[HG 'LIILH+HOOPDQ EDVHG NH\
H[FKDQJHGLQDFHUWLILFDWHFUHDWHVDVHVVLRQNH\
$QHSKHPHUDO'+.H\([FKDQJH,WLVFRQVLGHUHGWREHWKHEHVW
SURWHFWLRQ RSWLRQ DV DFWXDO '+ YDOXH LV VLJQHG ZLWK WKH SULYDWH
NH\ RI WKH VHQGHU DQG KHQFH HDFK VHVVLRQ KDV D GLIIHUHQW VHW RI
NH\V
$Q DQRQ\PRXV '+ .H\ ([FKDQJH ZLWKRXW DQ\ &HUWLILFDWH RU
6LJQDWXUH$YRLGLQJWKLVRSWLRQLVDGYLVHGDVLWFDQQRWSUHYHQW
PDQLQWKHPLGGOHDWWDFNV
3KDVH 6HFXUH'DWD7UDQVIHU
,Q WKLV SKDVH VHFXUH GDWD WUDQVIHU WDNHV SODFH EHWZHHQ HQFDSVXODWLQJ
HQGSRLQWV(DFK66/VHVVLRQKDVXQLTXHVHVVLRQ,'ZKLFKH[FKDQJHVGXULQJ
WKHDXWKHQWLFDWLRQSURFHVV7KHVHVVLRQ,'LVXVHGWRGLIIHUHQWLDWHEHWZHHQROG
DQG QHZ VHVVLRQ 7KH FOLHQW FDQ UHTXHVW WKH VHUYHU WR UHVXPH WKH VHVVLRQ
EDVHGRQWKLV,' ,QFDVHVHYHUKDVDVHVVLRQ,'LQLWVFDFKH 
7/6  LV FRQVLGHUHG WR EH D ELW PRUH VHFXUH WKDQ WKH ODVW YHUVLRQ RI 66/
66/Y (YHQ86*RYHUQPHQWKDVDOVRGHFODUHGQRWWRXVH66/YIRU
KLJKO\ VHQVLWLYH FRPPXQLFDWLRQV GXH WR ODWHVW YXOQHUDELOLW\ QDPHG DV
322'/( $IWHU 322'/( YXOQHUDELOLW\ PRVW ZHE EURZVHUV KDYH GLVDEOHG
66/ Y IRU PRVW RI WKH FRPPXQLFDWLRQ DQG VHUYLFHV &XUUHQW EURZVHUV
*RRJOH&KURPH)LUHIR[DQGRWKHUV VXSSRUW7/6E\GHIDXOWDQGODWHVW
YHUVLRQVRI7/6 7/6DQG7/6 RSWLRQDOO\7/6LVFRQVLGHUHGWR

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

EHHTXLYDOHQWWR66/+RZHYHUQHZHUYHUVLRQVRI7/6DUHFRQVLGHUHGWR
EHIDUPRUHVHFXUHWKDQ66/.HHSLQPLQGWKDW66/YDQG7/6LVQRW
FRPSDWLEOH ZLWK HDFK RWKHU DV 7/6 XVHV 'LIILH+HOOPDQ DQG 'DWD 6HFXULW\
6WDQGDUG '66 ZKLOH66/XVHV56$
$SDUWIURPVHFXUHZHEEURZVLQJE\XVLQJ+773666/7/6FDQDOVRXVHIRU
VHFXULQJRWKHUSURWRFROVOLNH)736073DQG6173DQGRWKHUSURWRFROV
3UHWW\*RRG3ULYDF\ 3*3
2SHQ3*3LVWKHPRVWZLGHO\XVHGHPDLOHQFU\SWLRQVWDQGDUG,WLVGHILQHGE\
WKH2SHQ3*3:RUNLQJ*URXSRIWKH,QWHUQHW(QJLQHHULQJ7DVN)RUFH ,(7)
DV D 3URSRVHG 6WDQGDUG LQ 5)&  2SHQ3*3 LV GHULYHG IURP WKH 3*3
VRIWZDUHFUHDWHGE\3KLO=LPPHUPDQQ7KHPDLQSXUSRVHRI2SHQ3*3LVWR
HQVXUHDQHQGWRHQGHQFU\SWLRQRYHUHPDLOFRPPXQLFDWLRQLWDOVRSURYLGHV
PHVVDJHHQFU\SWLRQDQGGHFU\SWLRQDQGSDVVZRUGPDQDJHUGDWDFRPSUHVVLRQ
DQGGLJLWDOVLJQLQJ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

'LVN(QFU\SWLRQ
'LVN(QFU\SWLRQUHIHUVWRWKHHQFU\SWLRQRIGLVNWRVHFXUHILOHVDQGGLUHFWRULHV
E\ FRQYHUWLQJ LQWR DQ HQFU\SWHG IRUPDW 'LVN HQFU\SWLRQ HQFU\SWV HYHU\ ELW
RQGLVNWRSUHYHQWXQDXWKRUL]HGDFFHVVWRGDWDVWRUDJH7KHUHDUHVHYHUDOGLVN
HQFU\SWLRQWRROVDYDLODEOHWRVHFXUHGLVNYROXPHVXFKDV
6\PDQWHF'ULYH(QFU\SWLRQ
*LOL6RIW)XOO'LVN(QFU\SWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&U\SWRJUDSK\$WWDFNV
&U\SWRJUDSK\ DWWDFNV DUH LQWHQGHG WR UHFRYHU HQFU\SWLRQ NH\ 2QFH DQ
DWWDFNHU KDV WKH HQFU\SWLRQ NH\ KH FDQ GHFU\SW DOO PHVVDJHV :HDN
HQFU\SWLRQDOJRULWKPVDUHQRWUHVLVWDQWHQRXJKWRFU\SWRJUDSKLFDWWDFNV7KH
SURFHVV RI ILQGLQJ YXOQHUDELOLWLHV LQ D FRGH HQFU\SWLRQ DOJRULWKP RU NH\
PDQDJHPHQWVFKHPHLVFDOOHG&U\SWDQDO\VLV,WPD\EHXVHGWRVWUHQJWKHQD
FU\SWRJUDSKLFDOJRULWKPRUWRGHFU\SWWKHHQFU\SWLRQ
.QRZQ3ODLQWH[W$WWDFN
.QRZQ SODLQWH[W DWWDFN LV D FU\SWRJUDSKLF DWWDFN W\SH ZKHUH D FU\SWDQDO\VW
KDVDFFHVVWRSODLQWH[WDQGWKHFRUUHVSRQGLQJFLSKHUWH[WDQGVHHNVWRGLVFRYHU
DFRUUHODWLRQEHWZHHQWKHP
&LSKHUWH[W2QO\$WWDFN
$FLSKHUWH[WRQO\DWWDFNLVDFU\SWRJUDSKLFDWWDFNW\SHZKHUHDFU\SWDQDO\VW
KDV DFFHVV WR D FLSKHUWH[W EXW GRHV QRW KDYH DFFHVV WR WKH FRUUHVSRQGLQJ
SODLQWH[W7KHDWWDFNHUDWWHPSWVWRH[WUDFWWKHSODLQWH[WRUNH\E\UHFRYHULQJ
SODLQWH[WPHVVDJHVDVPXFKDVSRVVLEOHWRJXHVVWKHNH\2QFHWKHDWWDFNHU
KDVWKHHQFU\SWLRQNH\LWFDQGHFU\SWDOOPHVVDJHV
&KRVHQ3ODLQWH[W$WWDFN
$FKRVHQSODLQWH[WDWWDFNLVDFU\SWRJUDSKLFDWWDFNW\SHZKHUHDFU\SWDQDO\VW
FDQHQFU\SWDSODLQWH[WRIKLVFKRRVLQJDQGREVHUYHWKHUHVXOWLQJFLSKHUWH[W,W
LV WKH PRVW FRPPRQ DWWDFN DJDLQVW DV\PPHWULF FU\SWRJUDSK\ 7R DWWHPSW
FKRVHQ SODLQWH[W DWWDFN WKH DWWDFNHU KDV LQIRUPDWLRQ DERXW HQFU\SWLRQ
DOJRULWKP RU PD\ KDYH DFFHVV WR WKH ZRUNVWDWLRQ HQFU\SWLQJ WKH PHVVDJHV
7KHDWWDFNHUVHQGVFKRVHQSODLQWH[WVWKURXJKHQFU\SWLRQDOJRULWKPWRH[WUDFW
FLSKHUWH[WVDQGWKHQHQFU\SWLRQNH\&KRVHQSODLQWH[WDWWDFNLVYXOQHUDEOHLQ
WKH VFHQDULR ZKHUH SXEOLF NH\ FU\SWRJUDSK\ LV EHLQJ LQ XVH DQG WKH SXEOLF
NH\LVXVHGWRHQFU\SWWKHPHVVDJH,QWKHZRUVWFDVHDQDWWDFNHUFDQH[SRVH
VHQVLWLYHLQIRUPDWLRQ
&KRVHQ&LSKHUWH[W$WWDFN
$FKRVHQFLSKHUWH[WDWWDFNLVDFU\SWRJUDSKLFDWWDFNW\SHZKHUHDFU\SWDQDO\VW
FKRRVHVDFLSKHUWH[WDQGDWWHPSWVWRILQGWKHFRUUHVSRQGLQJSODLQWH[W
$GDSWLYH&KRVHQ&LSKHUWH[W$WWDFN
$GDSWLYHO\FKRVHQFLSKHUWH[WDWWDFNLVDQLQWHUDFWLYHW\SHRIFKRVHQSODLQWH[W
DWWDFNZKHUHDQDWWDFNHUVHQGVVRPHFLSKHUWH[WVWREHGHFU\SWHGDQGREVHUYH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

WKH UHVXOWV RI GHFU\SWLRQ $GDSWLYHO\ FKRVHQ FLSKHUWH[W DWWDFNV JUDGXDOO\


UHYHDOWKHLQIRUPDWLRQDERXWHQFU\SWLRQ
$GDSWLYH&KRVHQ3ODLQWH[W$WWDFN
$Q DGDSWLYH FKRVHQSODLQWH[W DWWDFN LV D IRUP RI &KRVHQ SODLQWH[W
FU\SWRJUDSKLF DWWDFN ZKHUH WKH FU\SWDQDO\VW LVVXHV D VHULHV RI LQWHUDFWLYH
TXHULHV FKRRVLQJ VXEVHTXHQW SODLQWH[WV EDVHG RQ WKH LQIRUPDWLRQ IURP WKH
SUHYLRXVHQFU\SWLRQV
5XEEHU+RVH$WWDFN
5XEEHUKRVHDWWDFNLVDWHFKQLTXHRIJDLQLQJLQIRUPDWLRQDERXWFU\SWRJUDSKLF
VHFUHWVXFKDVSDVVZRUGVNH\VHQFU\SWHGILOHVE\WRUWXULQJDSHUVRQ
&RGH%UHDNLQJ0HWKRGRORJLHV
&RGH %UHDNLQJ 0HWKRGRORJ\ LQFOXGHV VHYHUDO WULFNV DQG WHFKQLTXHV VXFK DV
WKURXJKVRFLDOHQJLQHHULQJWHFKQLTXHVZKLFKDUHKHOSIXOWREUHDNHQFU\SWLRQ
DQG H[SRVH WKH LQIRUPDWLRQ LQ LW OLNH FU\SWRJUDSKLF NH\V DQG PHVVDJH 7KH
IROORZLQJDUHVRPHHIIHFWLYHWHFKQLTXHVDQGPHWKRGRORJLHV
%UXWH)RUFH
2QH7LPH3DG
)UHTXHQF\$QDO\VLV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

0LQG0DS


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

You might also like