You are on page 1of 36

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.

com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

&KDSWHU(YDGLQJ,'6)LUHZDOODQG+RQH\SRWV
7HFKQRORJ\%ULHI
,'6)LUHZDOODQG+RQH\SRW&RQFHSWV
$VWKHDZDUHQHVVRIF\EHUDQGQHWZRUNVHFXULW\LVLQFUHDVLQJGD\E\GD\LWLV
YHU\ LPSRUWDQW WR XQGHUVWDQG WKH FRUH FRQFHSWV RI ,QWUXVLRQ
'HWHFWLRQ'HIHQVH 6\VWHP ,'6  DV ZHOO DV ,QWUXVLRQ 3UHYHQWLRQ
6\VWHP ,36 ,'6DQG,36RIWHQFUHDWHFRQIXVLRQDVERWKPRGXOHVDUHFUHDWHG
E\PXOWLSOHYHQGRUVDQGGLIIHUHQWWHUPLQRORJLHVXVHGWRGHILQHWKHWHFKQLFDO
FRQFHSWV DUH DOVR VDPH 6RPHWLPHV WKH VDPH WHFKQRORJ\ PD\ EH XVHG IRU
GHWHFWLRQDQGSUHYHQWLRQRIVRPHWKUHDW
-XVWOLNHRWKHUSURGXFWV&LVFRDOVRKDVGHYHORSHGDQXPEHURIVROXWLRQVIRU
LPSOHPHQWLQJ ,'6,36 IRU WKH VHFXULW\ RI WKH QHWZRUN ,Q WKH ILUVW SKDVH RI
WKLV VHFWLRQ GLIIHUHQW FRQFHSWV ZLOO EH GLVFXVVHG EHIRUH PRYLQJ WR WKH
GLIIHUHQWLPSOHPHQWDWLRQPHWKRGRORJLHV
,QWUXVLRQ'HWHFWLRQ6\VWHPV ,'6
7KHSODFHPHQWRIVHQVRUZLWKLQDQHWZRUNGLIIHUHQWLDWHVWKHIXQFWLRQDOLW\RI
,36 RYHU WKH ,'6 :KHQ VHQVRU LV SODFHG LQ OLQH ZLWK WKH QHWZRUN LH WKH
FRPPRQ LQRXW RI VSHFLILF QHWZRUN VHJPHQW WHUPLQDWHV RQ D KDUGZDUH RU
ORJLFDOLQWHUIDFHRIWKHVHQVRUDQGJRHVRXWIURPVHFRQGKDUGZDUHRUORJLFDO
LQWHUIDFH RI WKH VHQVRU WKHQ HYHU\ VLQJOH SDFNHW ZLOO EH DQDO\]HG DQG SDVV
WKURXJKVHQVRURQO\LIGRHVQRWFRQWDLQDQ\WKLQJPDOLFLRXV%\GURSSLQJWKH
WUDIILF PDOLFLRXV WUDIILF WKH WUXVWHG QHWZRUN RU D VHJPHQW RI LW FDQ EH
SURWHFWHG IURP NQRZQ WKUHDWV DQG DWWDFNV 7KLV LV WKH EDVLF ZRUNLQJ RI
,QWUXVLRQ 3UHYHQWLRQ 6\VWHP ,36  +RZHYHU WKH LQOLQH LQVWDOODWLRQ DQG
LQVSHFWLRQ RI WUDIILF PD\ UHVXOW LQ D VOLJKWHU GHOD\ ,36 PD\ DOVR EHFRPH D
VLQJOHSRLQWRIIDLOXUHIRUWKHZKROHQHWZRUN,IߝIDLORSHQߞPRGHLVXVHGWKH
JRRG DQG PDOLFLRXV WUDIILF ZLOO EH DOORZHG LQ FDVH RI DQ\ NLQG RI IDLOXUH
ZLWKLQ,36VHQVRU6LPLODUO\LIߝIDLOFORVHߞPRGHLVFRQILJXUHGWKHZKROH,3
WUDIILFZLOOEHGURSSHGLQFDVHRIVHQVRUߞVIDLOXUH


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,QOLQH'HSOR\PHQWRI,366HQVRU
,IDVHQVRULVLQVWDOOHGLQWKHSRVLWLRQDVVKRZQEHORZDFRS\RIHYHU\SDFNHW
ZLOOEHVHQWWRWKHVHQVRUWRDQDO\]HDQ\PDOLFLRXVDFWLYLW\


)LJXUH6HQVRUGHSOR\PHQWDV,'6
,Q RWKHU PHDQV WKH VHQVRU UXQQLQJ LQ SURPLVFXRXV PRGH ZLOO SHUIRUP WKH
GHWHFWLRQDQGJHQHUDWHDQDOHUWLIUHTXLUHG$VWKHQRUPDOIORZRIWUDIILFLVQRW
GLVWXUEHGQRHQGWRHQGGHOD\ZLOOEHLQWURGXFHGE\LPSOHPHQWLQJ,'67KH
RQO\ GRZQVLGH RI WKLV FRQILJXUDWLRQ LV WKDW ,'6 ZLOO QRW EH DEOH WR VWRS
PDOLFLRXVSDFNHWVIURPHQWHULQJWKHQHWZRUNEHFDXVH,'6LVQRWFRQWUROOLQJ
WKHRYHUDOOSDWKRIWUDIILF
7KH IROORZLQJ WDEOH VXPPDUL]HV DQG FRPSDUHV YDULRXV IHDWXUHV RI ,'6 DQG
,36

)HDWXUH ,36 ,'6
1RW LQOLQH ZLWK WKH
,QOLQH ZLWK WKH QHWZRUN
3RVLWLRQLQJ QHWZRUN,WUHFHLYHVWKH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

(YHU\SDFNHWJRHVWKURXJKLW FRS\RIHYHU\SDFNHW
0RGH ,QOLQH7DS 3URPLVFXRXV
,QWURGXFHV GHOD\ EHFDXVH 'RHV QRW LQWURGXFH
HYHU\ SDFNHW LV DQDO\]HG GHOD\ EHFDXVH LW LV QRW
'HOD\
EHIRUH IRUZDUGHG WR WKH LQOLQH ZLWK WKH
GHVWLQDWLRQ QHWZRUN
<HV ,I WKH VHQVRU LV GRZQ LW
PD\GURSDVZHOODVPDOLFLRXV
WUDIILF IURP HQWHULQJ WKH 1RLPSDFWRQWUDIILFDV
3RLQWRIIDLOXUH" QHWZRUNGHSHQGLQJRQRQHRI ,'6 LV QRW LQOLQH ZLWK
WKH WZR PRGHV FRQILJXUHG RQ WKHQHWZRUN
LW QDPHO\ IDLORSHQ RU IDLO
FORVH
<HV %\ GURSSLQJ WKH ,'6 FDQQRW GLUHFWO\
PDOLFLRXV WUDIILF DWWDFNV FDQ VWRS DQ DWWDFN
$ELOLW\WR EH UHDGLO\ UHGXFHG RQ WKH +RZHYHU LW DVVLVWV
PLWLJDWHDQ QHWZRUN ,I GHSOR\HG LQ 7$3 VRPH LQOLQH GHYLFH
DWWDFN" PRGH WKHQ LW ZLOO JHW D FRS\ OLNH,36WRGURSFHUWDLQ
RI HDFK SDFNHW EXW FDQQRW WUDIILF WR VWRS DQ
PLWLJDWHWKHDWWDFN DWWDFN
1R $V ,'6 UHFHLYH
<HV&DQPRGLI\WKH,3WUDIILF
&DQGRSDFNHW PLUURUHG WUDIILF VR LW
DFFRUGLQJ WR D GHILQHG VHW RI
PDQLSXODWLRQ" FDQ RQO\ SHUIRUP WKH
UXOHV
LQVSHFWLRQ
7DEOH,'6,36&RPSDULVRQ
:D\VWR'HWHFWDQ,QWUXVLRQ
:KHQ D VHQVRU LV DQDO\]LQJ WUDIILF IRU VRPHWKLQJ VWUDQJH LW XVHV PXOWLSOH
WHFKQLTXHVEDVHRQWKHUXOHVGHILQHGLQWKH,36,'6VHQVRU)ROORZLQJWRROV
DQGWHFKQLTXHVFDQEHXVHGLQWKLVUHJDUG
ࢆ6LJQDWXUHEDVHG,'6,36
ࢆ3ROLF\EDVHG,'6,36
ࢆ$QRPDO\EDVHG,'6,36
ࢆ5HSXWDWLRQEDVHG,'6,36
6LJQDWXUHEDVHG ,'6,36 $ VLJQDWXUH ORRNV IRU VRPH VSHFLILF VWULQJ RU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

EHKDYLRULQDVLQJOHSDFNHWRUVWUHDPRISDFNHWVWRGHWHFWWKHDQRPDO\&LVFR
,36,'6PRGXOHVDVZHOODVQH[WJHQHUDWLRQILUHZDOOVFRPHZLWKSUHORDGHG
GLJLWDO VLJQDWXUHV ZKLFK FDQ EH XVHG WR PLWLJDWH DJDLQVW DOUHDG\ GLVFRYHUHG
DWWDFNV &LVFR FRQVWDQWO\ XSGDWHV WKH VLJQDWXUHV VHW ZKLFK DOVR QHHGV WR
XSORDGWRDGHYLFHE\WKHQHWZRUNDGPLQLVWUDWRU
1RWDOOVLJQDWXUHVDUHHQDEOHGE\GHIDXOW,IVRPHVLJQDWXUHLVJHQHUDWLQJDQ
DOHUWIRUWUDIILFZKLFKLVLQWHQGHGWREHDOORZHGGXHWRVRPHEXVLQHVVQHHGV
WKH QHWZRUN DGPLQLVWUDWRU QHHGV WR WXQH WKH ,36,'6 PRGXOH VR WKDW IDOVH
SRVLWLYHJHQHUDWHGIRUOHJLWLPDWHWUDIILFPXVWQRWEHJHQHUDWHG
3ROLF\%DVHG,'6,36$VWKHQDPHVXJJHVWVSROLF\EDVHG,'6,36PRGXOH
ZRUNV EDVHG RQ WKH SROLF\ RU 623 RI DQ RUJDQL]DWLRQ )RU H[DPSOH LI DQ
RUJDQL]DWLRQ KDV D VHFXULW\ SROLF\ WKDW HYHU\ PDQDJHPHQW VHVVLRQ ZLWK
QHWZRUNLQJ GHYLFHV DV ZHOO DV HQGGHYLFHV PXVW QRW LQLWLDWH YLD 7(/1(7
SURWRFRO$FXVWRPUXOHVSHFLI\LQJWKLVSROLF\QHHGVWREHGHILQHGRQVHQVRUV
,ILWLVFRQILJXUHGRQ,36ZKHQHYHU7(/1(7WUDIILFKLWVWKH,36DQDOHUWZLOO
EH JHQHUDWHG IROORZHG E\ WKH GURS RI SDFNHWV ,I LW LV LPSOHPHQWHG RQ ,'6
EDVHG VHQVRU WKHQ DQ DOHUW ZLOO JHQHUDWH IRU LW EXW WUDIILF NHHSV IORZLQJ
EHFDXVH,'6ZRUNVLQSURPLVFXRXVPRGH
$QRPDO\%DVHG,'6,36,QWKLVW\SHDEDVHOLQHLVFUHDWHGIRUVSHFLILFNLQG
RIWUDIILF)RUH[DPSOHDIWHUDQDO\]LQJWKHWUDIILFLWLVQRWLFHGWKDWKDOI
RSHQ7&3VHVVLRQVDUHFUHDWHGHYHU\PLQXWH$IWHUGHFLGLQJWKHEDVHOLQHVD\
KDOIRSHQ7&3FRQQHFWLRQVLQDPLQXWHDVVXPHWKHQXPEHURIKDOIRSHQ
7&3 FRQQHFWHG KDV LQFUHDVHG WR  WKHQ EDVHG RQ WKLV DQRPDO\ ,36 ZLOO
GURSWKHH[WUDKDOIRSHQFRQQHFWLRQVDQGJHQHUDWHDOHUWIRULW
5HSXWDWLRQ%DVHG ,'6,36 ,I WKHUH LV VRPH VRUW RI JOREDO DWWDFN )RU
H[DPSOH UHFHQW ''R6 DWWDFNV RQ VHUYHUV RI WZLWWHU DQG VRPH RWKHU VRFLDO
ZHEVLWHV ,W ZRXOG EH JUHDW WR ILOWHU RXW WKH NQRZQ WUDIILF ZKLFK UHVXOWV LQ
SURSDJDWLRQ RI WKHVH DWWDFNV EHIRUH LW KLWV WKH RUJDQL]DWLRQV FULWLFDO
LQIUDVWUXFWXUH 5HSXWDWLRQEDVHG ,'6,36 FROOHFW LQIRUPDWLRQ IURP V\VWHPV
SDUWLFLSDWLQJLQJOREDOFRUUHODWLRQ5HSXWDWLRQEDVHG,'6,36LQFOXGHUHODWLYH
GHVFULSWRUVOLNHNQRZQ85/VGRPDLQQDPHVHWF*OREDOFRUUHODWLRQVHUYLFHV
DUHPDLQWDLQHGE\&LVFR&ORXG6HUYLFHV

7KH IROORZLQJ WDEOH VXPPDUL]HV WKH GLIIHUHQW WHFKQRORJLHV XVHG LQ ,'6,36

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

DORQJZLWKVRPHDGYDQWDJHVRYHUGLVDGYDQWDJHV

,'6,36 $GYDQWDJHV 'LVDGYDQWDJHV
7HFKQRORJ\
'RHV QRW GHWHFW WKH DWWDFNV
ZKLFK FDQ E\SDVV WKH
(DVLHU
VLJQDWXUHV 0D\ UHTXLUH VRPH
6LJQDWXUH%DVHG ,PSOHPHQWDWLRQ DQG
WZHDNLQJ WR VWRS JHQHUDWLQJ
PDQDJHPHQW
IDOVH SRVLWLYH IRU OHJLWLPDWH
WUDIILF
&DQ GHWHFW PDOLFLRXV
WUDIILF EDVHG RQ WKH
,W UHTXLUHV EDVHOLQH SROLF\
FXVWRP EDVHOLQH ,W
'LIILFXOW WR EDVHOLQH ODUJH
FDQGHQ\DQ\NLQGRI
$QRPDO\%DVHG QHWZRUN GHVLJQV ,W PD\
ODWHVW DWWDFNV DV WKH\
JHQHUDWHIDOVHSRVLWLYHVGXHWR
ZLOO QRW EH GHILQHG
PLVFRQILJXUHGEDVHOLQH
ZLWKLQ WKH VFRSH RI
EDVHOLQHSROLF\
,W LV D VLPSOH
,WUHTXLUHVPDQXDO
LPSOHPHQWDWLRQ ZLWK
LPSOHPHQWDWLRQRISROLF\$Q\
UHOLDEOH UHVXOWV
VOLJKWHUFKDQJHZLWKLQD
3ROLF\%DVHG (YHU\WKLQJ HOVH
QHWZRUNZLOOUHTXLUHDFKDQJH
RXWVLGH WKH VFRSH RI
LQSROLF\FRQILJXUHGLQ
GHILQHGSROLF\ZLOOEH
,36,'6PRGXOH
GURSSHG
8VHV WKH LQIRUPDWLRQ
SURYLGHG E\ &LVFR
&RXOG 6HUYLFHV LQ 5HTXLUHV UHJXODU XSGDWHV DQG
ZKLFK V\VWHPV VKDUH SDUWLFLSDWLRQ LQ &LVFR &RXOG
5HSXWDWLRQ WKHLU H[SHULHQFH ZLWK VHUYLFHRIJOREDOFRUUHODWLRQLQ
%DVHG QHWZRUN DWWDFNV ZKLFK V\VWHPV VKDUH WKHLU
6RPHRQHߞV H[SHULHQFH ZLWK RWKHU
H[SHULHQFH EHFRPH PHPEHUV
SURWHFWLRQ IRU
RUJDQL]DWLRQߞV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

7DEOH&RPSDULVRQRI7HFKQLTXHVXVHGE\,'6,36VHQVRUV
7\SHVRI,QWUXVLRQ'HWHFWLRQ6\VWHPV
'HSHQGLQJRQWKHQHWZRUNVFHQDULR,'6,36PRGXOHVDUHGHSOR\HGLQRQHRI
WKHIROORZLQJFRQILJXUDWLRQV
ࢆ+RVWEDVHG,QWUXVLRQ'HWHFWLRQ
ࢆ1HWZRUNEDVHG,QWUXVLRQ'HWHFWLRQ
+RVWEDVHG,36,'6LVQRUPDOO\GHSOR\HGIRUWKHSURWHFWLRQRIVSHFLILFKRVW
PDFKLQHDQGLWZRUNVFORVHO\ZLWKWKH2SHUDWLQJ6\VWHP.HUQHORIWKHKRVW
PDFKLQH,WFUHDWHVDILOWHULQJOD\HUDQGILOWHUVRXWDQ\PDOLFLRXVDSSOLFDWLRQ
FDOOWRWKH267KHUHDUHIRXUPDMRUW\SHVRI+RVWEDVHG,'6,36
ࢆ    )LOH6\VWHP0RQLWRULQJ,QWKLVFRQILJXUDWLRQ,'6,36ZRUNVE\
FORVHO\FRPSDULQJWKHYHUVLRQVRIILOHVZLWKLQVRPHGLUHFWRU\ZLWKWKH
SUHYLRXV YHUVLRQV RI VDPH ILOH DQG FKHFNV IRU DQ\ XQDXWKRUL]HG
WDPSHULQJ DQG FKDQJLQJ ZLWKLQ D ILOH +DVKLQJ DOJRULWKPV DUH RIWHQ
XVHG WR YHULI\ WKH LQWHJULW\ RI ILOHV DQG GLUHFWRULHV ZKLFK JLYHV DQ
LQGLFDWLRQRISRVVLEOHFKDQJHVZKLFKDUHQRWVXSSRVHGWREHWKHUH
ࢆ    /RJ )LOHV $QDO\VLV ,Q WKLV FRQILJXUDWLRQ ,'6,36 ZRUNV E\
DQDO\]LQJ WKH ORJ ILOHV RI WKH KRVW PDFKLQH DQG JHQHUDWHV ZDUQLQJ IRU
V\VWHP DGPLQLVWUDWRUV ZKR DUH UHVSRQVLEOH IRU PDFKLQH VHFXULW\
6HYHUDOWRROVDQGDSSOLFDWLRQVDUHDYDLODEOHZKLFKZRUNVE\DQDO\]LQJ
WKHSDWWHUQVRIEHKDYLRUDQGIXUWKHUFRUUHODWHLWZLWKDFWXDOHYHQWV
ࢆ    &RQQHFWLRQ $QDO\VLV ,'6,36 ZRUNV E\ PRQLWRULQJ WKH RYHUDOO
QHWZRUNFRQQHFWLRQVEHLQJPDGHZLWKWKHVHFXUHPDFKLQHDQGWULHVWR
ILJXUH RXW ZKLFK RI WKHP DUH OHJLWLPDWH DQG KRZ PDQ\ RI WKHP DUH
XQDXWKRUL]HG ([DPSOHV RI WHFKQLTXHV XVHG DUH RSHQ SRUWV VFDQQLQJ
KDOIRSHQDQGURJXH7&3FRQQHFWLRQVDQGVRIRUWK
ࢆ    .HUQHO /HYHO 'HWHFWLRQ ,Q WKLV FRQILJXUDWLRQ WKH NHUQHO RI 26
LWVHOIGHWHFWVWKHFKDQJLQJZLWKLQWKHV\VWHPELQDULHVDQGDQDQRPDO\
LQV\VWHPFDOOVWRGHWHFWWKHLQWUXVLRQDWWHPSWVRQWKDWPDFKLQH
7KH QHWZRUNEDVHG ,36 VROXWLRQ ZRUNV DV LQOLQH ZLWK WKH SHULPHWHU HGJH
GHYLFH RU VRPH VSHFLILF VHJPHQW RI WKH RYHUDOO QHWZRUN $V QHWZRUNEDVHG
VROXWLRQZRUNVE\PRQLWRULQJWKHRYHUDOOQHWZRUNWUDIILF RUGDWDSDFNHWVLQ
VSHFLILF VRLWVKRXOGEHDVIDVWDVSRVVLEOHLQWHUPVRISURFHVVLQJSRZHUVR
WKDW RYHUDOO ODWHQF\ PD\ QRW EH LQWURGXFHG LQ WKH QHWZRUN 'HSHQGLQJ RQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

YHQGRU DQG VHULHV RI ,'6,36 LW PD\ XVH RQH RI DERYH WHFKQRORJLHV LQ LWV
ZRUNLQJ
7KH IROORZLQJ WDEOH VXPPDUL]HV WKH GLIIHUHQFH EHWZHHQ WKH KRVW EDVHG DQG
QHWZRUNEDVHG,'6,36VROXWLRQ

)HDWXUH +RVWEDVHG,'6,36 1HWZRUNEDVHG,'6,36
1RWVFDODEOHDVWKH +LJKO\VFDODEOH1RUPDOO\
6FDODELOLW\ QXPEHURIVHFXUHKRVWV GHSOR\HGDWSHULPHWHU
LQFUHDVHV JDWHZD\
/RZ0RUHV\VWHPV
&RVW +LJK2QHSDLUFDQPRQLWRU
PHDQPRUH,'6,36
HIIHFWLYHQHVV WKHRYHUDOOQHWZRUN
PRGXOHV
&DSDEOHRIYHULI\LQJLI
2QO\FDSDEOHRIJHQHUDWLQJ
&DSDELOLW\ DQDWWDFNZDVVXFFHHGHG
DQDOHUWRIDQDWWDFN
RUQRW
0XVWKDYHKLJKSURFHVVLQJ
3URFHVVLQJ 7KHSURFHVVLQJSRZHU
SRZHUWRRYHUFRPHODWHQF\
3RZHU RIKRVWGHYLFHLVXVHG
LVVXHV
7DEOH+RVWEDVHGYV1HWZRUNEDVHG,'6,36VROXWLRQ
)LUHZDOO
7KHSULPDU\IXQFWLRQRIXVLQJDGHGLFDWHGGHYLFHQDPHGDVWKHILUHZDOODWWKH
HGJH RI WKH FRUSRUDWH QHWZRUN LV LVRODWLRQ $ ILUHZDOO SUHYHQWV WKH GLUHFW
FRQQHFWLRQRILQWHUQDO/$1ZLWKLQWHUQHWRURXWVLGHZRUOG7KLVLVRODWLRQFDQ
EHSHUIRUPHGLQPXOWLSOHVZD\EXWQRWOLPLWHGWR
$/D\HUGHYLFHXVLQJDQ$FFHVV/LVWIRUUHVWULFWLQJWKHVSHFLILFW\SH
RIWUDIILFRQDQ\RILWVLQWHUIDFHV
$ /D\HU  GHYLFH XVLQJ WKH FRQFHSW RI 9/$1V RU 3ULYDWH 9/$1V
39/$1 IRUVHSDUDWLQJWKHWUDIILFRIWZRRUPRUHQHWZRUNV
$GHGLFDWHGKRVWGHYLFHZLWKVRIWZDUHLQVWDOOHGRQLW7KLVKRVWGHYLFH
DOVR DFWLQJ DV D SUR[\ ILOWHUV WKH GHVLUHG WUDIILF ZKLOH DOORZLQJ WKH
UHPDLQLQJWUDIILF
$OWKRXJKWKHIHDWXUHVDERYHSURYLGHLVRODWLRQLQVRPHVHQVH7KHIROORZLQJ
DUH WKH IHZ UHDVRQV D GHGLFDWHG ILUHZDOO DSSOLDQFH HLWKHU LQ KDUGZDUH RU
VRIWZDUH LVSUHIHUUHGLQSURGXFWLRQHQYLURQPHQWV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

5LVNV 3URWHFWLRQE\ILUHZDOO
)LUHZDOOV WU\ WR FDWHJRUL]H WKH QHWZRUN LQWR
GLIIHUHQW SRUWLRQV 2QH SRUWLRQ LV FRQVLGHUHG DV
D WUXVWHG SRUWLRQ RI LQWHUQDO /$1 3XEOLF
LQWHUQHW DQG LQWHUIDFHV FRQQHFWHG WR DUH
FRQVLGHUHG DV DQ XQWUXVWHG SRUWLRQ 6LPLODUO\
VHUYHUVDFFHVVHGE\XQWUXVWHGHQWLWLHVDUHSODFHG
$FFHVVE\XQWUXVWHG
LQ D VSHFLDO VHJPHQW NQRZQ DV D GHPLOLWDUL]HG
HQWLWLHV
]RQH '0=  %\ DOORZLQJ RQO\ VSHFLILF DFFHVV
WRWKHVHVHUYHUVOLNHSRUWRIWKHZHEVHUYHU
ILUHZDOOKLGHWKHIXQFWLRQDOLW\RIQHWZRUNGHYLFH
ZKLFK PDNHV LW GLIILFXOW IRU DQ DWWDFNHU WR
XQGHUVWDQG WKH SK\VLFDO WRSRORJ\ RI WKH
QHWZRUN
2QH RI WKH LQWHUHVWLQJ IHDWXUHV RI WKH GHGLFDWHG
ILUHZDOOLVWKHLUDELOLW\WRLQVSHFWWKHWUDIILFPRUH
WKDQ MXVW ,3 DQG SRUW OHYHO %\ XVLQJ GLJLWDO
'HHS 3DFNHW
FHUWLILFDWHV1H[W*HQHUDWLRQ)LUHZDOOVDYDLODEOH
,QVSHFWLRQ DQG
WRGD\FDQLQVSHFWWUDIILFXSWROD\HU$ILUHZDOO
SURWRFROVH[SORLWDWLRQ
FDQDOVROLPLWWKHQXPEHURIHVWDEOLVKHGDVZHOO
DV KDOIRSHQ 7&38'3 FRQQHFWLRQV WR PLWLJDWH
''R6DWWDFNV
%\ LPSOHPHQWLQJ ORFDO $$$ RU E\ XVLQJ
$FFHVV&RQWURO $&6,6(VHUYHUVWKHILUHZDOOFDQSHUPLWWUDIILF
EDVHGRQ$$$SROLF\
$QWLYLUXV DQG %\ LQWHJUDWLQJ ,36,'3 PRGXOHV ZLWK ILUHZDOO
SURWHFWLRQ IURP PDOLFLRXVGDWDFDQEHGHWHFWHGDQGILOWHUHGDWWKH
LQIHFWHGGDWD HGJHRIWKHQHWZRUNWRSURWHFWWKHHQGXVHUV
7DEOH)LUHZDOO5LVN0LWLJDWLRQ)HDWXUHV
$OWKRXJK ILUHZDOO SURYLGHV JUHDW VHFXULW\ IHDWXUHV DV GLVFXVVHG LQ WKH WDEOH
DERYH DQ\ PLVFRQILJXUDWLRQ RU EDG QHWZRUN GHVLJQ PD\ UHVXOW LQ VHULRXV
FRQVHTXHQFHV $QRWKHU LPSRUWDQW GHFLGLQJ IDFWRU RI GHSOR\LQJ D ILUHZDOO LQ
FXUUHQW QHWZRUN GHVLJQ GHSHQGV RQ ZKHWKHU FXUUHQW EXVLQHVV REMHFWLYHV FDQ
EHDUWKHIROORZLQJOLPLWDWLRQV
0LVFRQILJXUDWLRQ DQG ,WV &RQVHTXHQFHV  7KH SULPDU\ IXQFWLRQ RI D

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

ILUHZDOOLVWRSURWHFWQHWZRUNLQIUDVWUXFWXUHLQDPRUHHOHJDQWZD\WKDQD
WUDGLWLRQDO OD\HU GHYLFHV 'HSHQGLQJ RQ GLIIHUHQW YHQGRUV DQG WKHLU
LPSOHPHQWDWLRQ WHFKQLTXHV PDQ\ IHDWXUHV QHHG WR EH FRQILJXUHG IRU D
ILUHZDOO WR ZRUN SURSHUO\ 6RPH RI WKHVH IHDWXUHV PD\ LQFOXGH 1HWZRUN
$GGUHVV 7UDQVODWLRQ 1$7  $FFHVV/LVWV $&/  $$$ EDVH SROLFLHV DQG
VRRQ0LVFRQILJXUDWLRQRIDQ\RIWKHVHIHDWXUHVPD\UHVXOWLQOHDNDJHRI
GLJLWDO DVVHWV ZKLFK PD\ KDYH D ILQDQFLDO LPSDFW RQ EXVLQHVV ,Q VKRUW
FRPSOH[ GHYLFHV OLNH ILUHZDOO DOVR UHTXLUHV GHHS LQVLJKW NQRZOHGJH RI
HTXLSPHQWDORQJZLWKWKHJHQHUDODSSURDFKWRGHSOR\PHQW
$SSOLFDWLRQV DQG 6HUYLFHV 6XSSRUW 0RVW RI WKH ILUHZDOOV XVH GLIIHUHQW
WHFKQLTXHVWRPLWLJDWHWKHDGYDQFHGDWWDFNV)RUH[DPSOH1$7LQJLVRQH
RIWKHPRVWFRPPRQO\XVHGIHDWXUHVLQILUHZDOOVDQGLWLVXVHGWRPLWLJDWH
WKH UHFRQQDLVVDQFH DWWDFNV  ,Q VLWXDWLRQV ZKHUH QHWZRUN LQIUDVWUXFWXUH LV
XVHGWRVXSSRUWFXVWRPPDGHDSSOLFDWLRQVLWPD\EHUHTXLUHGWRUHZULWH
WKH ZKROH DSSOLFDWLRQ LQ RUGHU WR ZRUN SURSHUO\ XQGHU QHZ QHWZRUN
FKDQJHV
/DWHQF\-XVWOLNHLPSOHPHQWLQJ1$7LQJRQDURXWHDGGVVRPHHQGWRHQG
GHOD\ ILUHZDOO DORQJ ZLWK KHDY\ SURFHVVLQJ GHPDQGLQJ IHDWXUHV DGG D
QRWLFHDEOH GHOD\ RYHU WKH QHWZRUN $SSOLFDWLRQV OLNH 9RLFH 2YHU ,3
92,3 PD\UHTXLUHVSHFLDOFRQILJXUDWLRQWRGHDOZLWKLW
$QRWKHU LPSRUWDQW IDFWRU WR EH FRQVLGHUHG ZKLOH GHVLJQLQJ WKH VHFXULW\
SROLFLHVRIQHWZRUNLQIUDVWUXFWXUHXVHVWKHOD\HUHGDSSURDFKLQVWHDGRIUHO\LQJ
RQDVLQJOHHOHPHQW)RUH[DPSOHFRQVLGHUWKHIROORZLQJVFHQDULR

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH3RVLWLRQLQJ)LUHZDOOLQDSURGXFWLRQHQYLURQPHQW
7KH SUHYLRXV ILJXUH VKRZV D W\SLFDO VFHQDULR RI 62+2 DQG PLGVL]HG
FRUSRUDWHHQYLURQPHQWZKHUHZKROHQHWZRUNLQIUDVWUXFWXUHLVVXSSRUWHGE\D
FRXSOHRIURXWHUVDQGVZLWFKHV,IWKHHGJHILUHZDOOLVVXSSRVHGWREHWKHIRFDO
SRLQW RI VHFXULW\ LPSOHPHQWDWLRQ WKHQ DQ\ VOLJKWHU PLVFRQILJXUDWLRQ PD\
UHVXOW LQ KLJK VFDOH DWWDFNV ,Q JHQHUDO D OD\HUHG VHFXULW\ DSSURDFK LV
IROORZHG DQG SDFNHW SDVVHV WKURXJK PXOWLSOH VHFXULW\ FKHFNV EHIRUH KLWWLQJ
WKHLQWHQGHGGHVWLQDWLRQ
7KHSRVLWLRQRIILUHZDOOYDULHVLQGLIIHUHQWGHVLJQYDULDQWV,QVRPHGHVLJQVLW
LVSODFHGRQWKHSHULPHWHUURXWHURIWKHFRUSRUDWLRQZKLOHLQVRPHGHVLJQVLW
LVSODFHGDWWKHHGJHRIWKHQHWZRUNDVVKRZQLQWKHODVWILJXUH,UUHOHYDQWWR
WKHSRVLWLRQLWLVDJRRGSUDFWLFHWRLPSOHPHQWWKHOD\HUHGVHFXULW\LQZKLFK
VRPHRIWKHIHDWXUHVOLNHXQLFDVWUHYHUVHSDWKIRUZDUGLQJDFFHVVOLVWVHWFDUH
HQDEOHG RQ SHULPHWHU URXWHU )HDWXUHV OLNH GHHS SDFNHW LQVSHFWLRQ GLJLWDO
VLJQDWXUHVDUHPDWFKHGRQWKHILUHZDOO,IHYHU\WKLQJORRNVJRRGWKHSDFNHWLV
DOORZHGWRKLWWKHLQWHQGHGGHVWLQDWLRQDGGUHVV
1HWZRUN OD\HU ILUHZDOOV SHUPLW RU GURS ,3 WUDIILF EDVHG RQ /D\HU  DQG 
LQIRUPDWLRQ $ URXWHU ZLWK DFFHVVOLVW FRQILJXUHG RQ LWV LQWHUIDFHV LV D
FRPPRQH[DPSOHRIQHWZRUNOD\HUILUHZDOO$OWKRXJKYHU\IDVWLQRSHUDWLRQ
DQG QHWZRUN OD\HU ILUHZDOOV GR QRW SHUIRUP GHHS SDFNHW LQVSHFWLRQ
WHFKQLTXHVDQGGHWHFWDQ\PDOLFLRXVDFWLYLW\
$SDUWIURPDFWLQJDVWKHILUVWOLQHRIGHIHQVHQHWZRUNOD\HUILUHZDOOVDUHDOVR
GHSOR\HG ZLWKLQ LQWHUQDO /$1 VHJPHQWV IRU HQKDQFHG OD\HUHG VHFXULW\ DQG
LVRODWLRQ
)LUHZDOO$UFKLWHFWXUH
 %DVWLRQ+RVW
%DVWLRQ +RVW LV D FRPSXWHU V\VWHP WKDW LV SODFHG LQ EHWZHHQ SXEOLF DQG
SULYDWH QHWZRUN ,W LV LQWHQGHG WR EH WKH FURVVLQJ SRLQW ZKHUH DOO WUDIILF LV
SDVVHG WKURXJK &HUWDLQ UROHV DQG UHVSRQVLELOLWLHV DUH DVVLJQHG WR WKLV
FRPSXWHU WR SHUIRUP %DVWLRQ KRVW KDV WZR LQWHUIDFHV RQH FRQQHFWHG WR WKH
SXEOLFQHWZRUNZKLOHWKHDQRWKHULVFRQQHFWHGWRWKHSULYDWHQHWZRUN

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH%DVWLRQ+RVW
 6FUHHQHG6XEQHW
6FUHHQHG 6XEQHW FDQ EH VHW XS ZLWK D ILUHZDOO ZLWK WKUHH LQWHUIDFHV  7KHVH
WKUHH LQWHUIDFHV DUH FRQQHFWHG ZLWK WKH LQWHUQDO SULYDWH QHWZRUN 3XEOLF
QHWZRUN DQG 'HPLOLWDUL]HG =RQH '0=  ,Q WKLV DUFKLWHFWXUH HDFK ]RQH LV
VHSDUDWHG E\ DQRWKHU ]RQH KHQFH FRPSURPLVH RI RQH ]RQH ZLOO QRW DIIHFW
DQRWKHU]RQH

)LJXUH6FUHHQHG6XEQHW
 0XOWLKRPHG)LUHZDOO
0XOWLKRPHGILUHZDOOUHIHUUHGWRWZRRUPRUHQHWZRUNVZKHUHHDFKLQWHUIDFH
LV FRQQHFWHG WR LWV QHWZRUN ,W LQFUHDVHV WKH HIILFLHQF\ DQG UHOLDELOLW\ RI D
QHWZRUN$ILUHZDOOZLWKWZRRUPRUHLQWHUIDFHVDOORZVIXUWKHUVXEGLYLVLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH0XOWL+RPHG)LUHZDOO
'H0LOLWDUL]HG=RQH '0=
,26]RQHEDVHGILUHZDOOVLVDVSHFLILFVHWRIUXOHVZKLFKPD\KHOSWRPLWLJDWH
PLGOHYHOVHFXULW\DWWDFNVLQHQYLURQPHQWVZKHUHVHFXULW\LVDOVRPHDQWWREH
LPSOHPHQWHGYLDURXWHUV,Q]RQHEDVHGILUHZDOOV =%) LQWHUIDFHVRIGHYLFHV
DUHSODFHGWRGLIIHUHQWXQLTXH]RQHVOLNH LQVLGHRXWVLGHRU'0= DQGWKHQ
SROLFLHV DUH DSSOLHG RQ WKHVH ]RQHV 1DPLQJ FRQYHQWLRQV IRU ]RQHV PXVW EH
HDVLHUWRXQGHUVWDQGLQRUGHUWREHKHOSIXODWWKHKRXURIWURXEOHVKRRWLQJ
=%)V DOVR XVHV VWDWHIXO ILOWHULQJ ZKLFK PHDQV WKDW LI WKH UXOH LV GHILQHG WR
SHUPLW RULJLQDWLQJ WUDIILF IURP RQH ]RQH VD\ LQVLGH WR DQRWKHU ]RQH OLNH
'0= WKHQ UHWXUQ WUDIILF ZRXOG DXWRPDWLFDOO\ EH DOORZHG 7UDIILF IURP
GLIIHUHQW ]RQHV FDQ EH DOORZHG XVLQJ SROLFLHV SHUPLWLQJ WKH WUDIILF LQ HDFK
GLUHFWLRQ
2QHRIWKHDGYDQWDJHVRIDSSO\LQJSROLFLHVRQ]RQHVLQVWHDGRILQWHUIDFHVLV
WKDW ZKHQHYHU QHZ FKDQJHV UHTXLUHG DW WKH LQWHUIDFH OHYHO WKHQ VLPSO\
UHPRYLQJ RU DGGLQJ LQWHUIDFH LQ SDUWLFXODU ]RQH DSSO\ SROLFLHV RQ LW
DXWRPDWLFDOO\
=%)PD\XVHWKHIROORZLQJIHDWXUHVHWLQLWVLPSOHPHQWDWLRQ
ࢆ6WDWHIXOLQVSHFWLRQ
ࢆ3DFNHWILOWHULQJ
ࢆ85/ILOWHULQJ
ࢆ7UDQVSDUHQWILUHZDOO
ࢆ9LUWXDO5RXWLQJ)RUZDUGLQJ 95)
7KLVILJXUHVKRZVWKHVFHQDULRH[SODLQHGDERYH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&LVFR,26=RQH%DVHG)LUHZDOO6FHQDULR
7\SHVRI)LUHZDOO
 3DFNHW)LOWHULQJ)LUHZDOO
3DFNHW )LOWHULQJ )LUHZDOO LQFOXGHV WKH XVH RI DFFHVVOLVWV WR SHUPLW RU GHQ\
WUDIILFEDVHGRQOD\HUDQGOD\HULQIRUPDWLRQ:KHQHYHUDSDFNHWKLWVDQ
$&/FRQILJXUHGOD\HUGHYLFHߞVLQWHUIDFHLWFKHFNVIRUDPDWFKLQDQ$&/
VWDUWLQJIURPWKHILUVWOLQHRI$&/ 8VLQJDQH[WHQGHG$&/LQ&LVFRGHYLFH
IROORZLQJLQIRUPDWLRQFDQEHXVHGIRUPDWFKLQJWUDIILF
ࢆ6RXUFHDGGUHVV
ࢆ'HVWLQDWLRQDGGUHVV
ࢆ6RXUFHSRUW
ࢆ'HVWLQDWLRQSRUW
ࢆ6RPHH[WUDIHDWXUHVOLNH7&3HVWDEOLVKHGVHVVLRQVHWF
7KLVWDEOHVKRZVWKHDGYDQWDJHVDQGGLVDGYDQWDJHVRIXVLQJSDFNHWILOWHULQJ
WHFKQLTXHV
$GYDQWDJHV 'LVDGYDQWDJHV
&DQQRWPLWLJDWH,3VSRRILQJ
DWWDFNV$QDWWDFNHUFDQ
(DVHRILPSOHPHQWDWLRQE\XVLQJ FRPSURPLVHWKHGLJLWDODVVHWVE\
SHUPLWDQGGHQ\VWDWHPHQWV VSRRILQJ,3VRXUFHDGGUHVVWRRQH
RIWKHSHUPLWVWDWHPHQWVLQWKH

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

$&/
/HVV&38LQWHQVLYHWKDQGHHS 'LIILFXOWWRPDLQWDLQZKHQ$&/6
SDFNHWLQVSHFWLRQWHFKQLTXHV VL]HJURZV
&RQILJXUDEOHRQDOPRVWHYHU\ &DQQRWLPSOHPHQWILOWHULQJEDVHG
&LVFR,26 RQVHVVLRQVWDWHV
6FHQDULRVLQZKLFKG\QDPLFSRUWV
DUHXVHGDUDQJHRISRUWVZLOOEH
(YHQDPLGUDQJHGHYLFHFDQ
UHTXLUHGWREHRSHQHGLQ$&/
SHUIRUP$&/EDVHGILOWHULQJ
ZKLFKPD\DOVREHXVHGE\
PDOLFLRXVXVHUV
7DEOH$GYDQWDJHVDQG'LVDGYDQWDJHVRI3DFNHW)LOWHULQJ7HFKQLTXHV
 &LUFXLW/HYHO*DWHZD\)LUHZDOO
&LUFXLW/HYHOJDWHZD\ILUHZDOORSHUDWHVDWWKHVHVVLRQOD\HURIWKH26,PRGHO
7KH\FDSWXUHWKHSDFNHWWRPRQLWRU7&3+DQGVKDNLQJLQRUGHUWRYDOLGDWHLI
WKH VHVVLRQV DUH OHJLWLPDWH 3DFNHWV IRUZDUGHG WR WKH UHPRWH GHVWLQDWLRQ
WKURXJKDFLUFXLWOHYHOILUHZDOODSSHDUVWRKDYHRULJLQDWHGIURPWKHJDWHZD\
 $SSOLFDWLRQ/HYHO)LUHZDOO
$SSOLFDWLRQ /HYHO )LUHZDOO FDQ ZRUN DW OD\HU  XS WR WKH OD\HU  RI 26,
PRGHO1RUPDOO\DVSHFLDOL]HGRURSHQVRXUFHVRIWZDUHUXQQLQJRQKLJKHQG
VHUYHU DFWV DV DQ LQWHUPHGLDU\ EHWZHHQ FOLHQW DQG GHVWLQDWLRQ DGGUHVV $V
WKHVH ILUHZDOOV FDQ RSHUDWH XS WR OD\HU  PRUH JUDQXODU FRQWURO RI SDFNHWV
PRYLQJLQDQGRXWRIQHWZRUNLVSRVVLEOH6LPLODUO\LWEHFRPHVYHU\GLIILFXOW
IRUDQDWWDFNHUWRJHWWKHWRSRORJ\YLHZRILQVLGHRUWUXVWHGQHWZRUNEHFDXVH
FRQQHFWLRQUHTXHVWVWHUPLQDWHRQ$SSOLFDWLRQ3UR[\ILUHZDOOV
6RPH RI WKH DGYDQWDJHV DQG GLVDGYDQWDJHV RI XVLQJ DSSOLFDWLRQSUR[\
ILUHZDOOVDUH
$GYDQWDJHV 'LVDGYDQWDJHV
*UDQXODU FRQWURO RYHU WKH WUDIILF LV $VSUR[\DQGDSSOLFDWLRQILUHZDOOV
SRVVLEOHE\XVLQJLQIRUPDWLRQXSWR UXQ LQ VRIWZDUH $ YHU\ KLJKHQG
OD\HURI26,PRGHO PDFKLQHPD\EHUHTXLUHGWRIXOOILOO
WKHFRPSXWDWLRQDOUHTXLUHPHQWV
7KH LQGLUHFW FRQQHFWLRQ EHWZHHQ -XVW OLNH 1$7 QRW HYHU\
HQG GHYLFHV PDNHV LW YHU\ GLIILFXOW DSSOLFDWLRQ KDV VXSSRUW IRU SUR[\
WRJHQHUDWHDQDWWDFN ILUHZDOOVDQGIHZDPHQGPHQWVPD\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

EH QHHGHG LQ FXUUHQW DSSOLFDWLRQV


DUFKLWHFWXUH
'HWDLOHG ORJJLQJ LV SRVVLEOH DV $QRWKHU VRIWZDUH PD\ EH UHTXLUHG
HYHU\ VHVVLRQ LQYROYHV WKH ILUHZDOO IRU ORJJLQJ IHDWXUH ZKLFK WDNHV
DVDQLQWHUPHGLDU\ H[WUDSURFHVVLQJSRZHU
$Q\ FRPPHUFLDOO\ DYDLODEOH $ORQJ ZLWK FRPSXWDWLRQDO SRZHU
KDUGZDUHFDQEHXVHGWRLQVWDOODQG KLJK VWRUDJH PD\ EH UHTXLUHG LQ
UXQSUR[\ILUHZDOOVRQLW GLIIHUHQWVFHQDULRV
7DEOH$GYDQWDJHVDQG'LVDGYDQWDJHVRI$SSOLFDWLRQ3UR[\)LUHZDOOV
 6WDWHIXO0XOWLOD\HU,QVSHFWLRQ)LUHZDOO
$VWKHQDPHGHSLFWVWKLVVDYHVWKHVWDWHRIFXUUHQWVHVVLRQVLQDWDEOHNQRZQ
DV D VWDWHIXO GDWDEDVH 6WDWHIXO LQVSHFWLRQ DQG ILUHZDOOV XVLQJ WKLV WHFKQLTXH
QRUPDOO\ GHQ\ DQ\ WUDIILF EHWZHHQ WUXVWHG DQG XQWUXVWHG LQWHUIDFHV
:KHQHYHU DQ HQGGHYLFH IURP WUXVWHG LQWHUIDFH ZDQWV WR FRPPXQLFDWH ZLWK
VRPHGHVWLQDWLRQDGGUHVVDWWDFKHGWRWKHXQWUXVWHGLQWHUIDFHRIWKHILUHZDOOLWV
HQWU\ZLOOEHPDGHLQDVWDWHIXOGDWDEDVHWDEOHFRQWDLQLQJOD\HUDQGOD\HU
LQIRUPDWLRQ )ROORZLQJ WDEOH FRPSDUHV GLIIHUHQW IHDWXUHV RI VWDWHIXO
LQVSHFWLRQEDVHGILUHZDOOV
$GYDQWDJHV 'LVDGYDQWDJHV
+HOSVLQILOWHULQJXQH[SHFWHGWUDIILF 8QDEOH WR PLWLJDWH DSSOLFDWLRQ
OD\HUDWWDFNV
&DQ EH LPSOHPHQWHG RQ D EURDG ([FHSWIRU7&3RWKHUSURWRFROVGR
UDQJHRIURXWHUVDQGILUHZDOOV QRW KDYH ZHOOGHILQHG VWDWH
LQIRUPDWLRQ WR EH XVHG E\ WKH
ILUHZDOO
&DQ KHOS LQ PLWLJDWLQJ GHQLDO RI 6RPH DSSOLFDWLRQV PD\ XVH PRUH
VHUYLFH ''R6 DWWDFNV WKDQ RQH SRUW IRU VXFFHVVIXO
RSHUDWLRQ $SSOLFDWLRQ DUFKLWHFWXUH
UHYLHZ PD\ EH QHHGHG LQ RUGHU WR
ZRUN DIWHU WKH GHSOR\PHQW RI
VWDWHIXOLQVSHFWLRQEDVHGILUHZDOO
7DEOH$GYDQWDJHVDQG'LVDGYDQWDJHVRI6WDWHIXO,QVSHFWLRQEDVHG)LUHZDOOV
 7UDQVSDUHQWILUHZDOOV
0RVW RI WKH ILUHZDOOV GLVFXVVHG DERYH ZRUN RQ OD\HU  DQG EH\RQG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

7UDQVSDUHQWILUHZDOOVZRUNH[DFWO\OLNHDERYHPHQWLRQHGWHFKQLTXHVEXWWKH
LQWHUIDFHV RI WKH ILUHZDOO LWVHOI DUH OD\HU  LQ QDWXUH ,3 DGGUHVVHV DUH QRW
DVVLJQHGWRDQ\LQWHUIDFHWKLQNRILWDVDVZLWFKZLWKSRUWVDVVLJQHGWRVRPH
9/$1 7KH RQO\ ,3 DGGUHVV DVVLJQHG WR WKH WUDQVSDUHQW ILUHZDOO LV IRU
PDQDJHPHQW SXUSRVHV  6LPLODUO\ DV WKHUH LV QR DGGLWLRQ RI H[WUD KRS
EHWZHHQ HQGGHYLFHV WKH XVHU ZLOO QRW EH DEOH WR EH DZDUH RI DQ\ QHZ
DGGLWLRQVWRQHWZRUNLQIUDVWUXFWXUHDQGFXVWRPPDGHDSSOLFDWLRQVPD\ZRUN
ZLWKRXWDQ\SUREOHP
 1H[W*HQHUDWLRQ 1*): ILUHZDOOV
1*): LV UHODWLYHO\ D QHZ WHUP XVHG IRU ODWHVW ILUHZDOOV ZLWK WKH DGYDQFHG
IHDWXUH VHW 7KLV NLQG RI ILUHZDOOV SURYLGHV LQGHSWK VHFXULW\ IHDWXUHV WR
PLWLJDWH DJDLQVW NQRZQ WKUHDWV DQG PDOZDUH DWWDFNV $Q H[DPSOH RI QH[W
JHQHUDWLRQILUHZDOOVLV&LVFR$6$VHULHVZLWK)LUH32:(5VHUYLFHV1*):
SURYLGHVFRPSOHWHYLVLELOLW\LQWRQHWZRUNWUDIILFXVHUVPRELOHGHYLFHVYLUWXDO
PDFKLQH 90 WR90GDWDFRPPXQLFDWLRQHWF
 3HUVRQDO)LUHZDOOV
3HUVRQDO )LUHZDOO LV DOVR NQRZQ DV GHVNWRS ILUHZDOOV KHOSV WKH HQGXVHUV
SHUVRQDO FRPSXWHUV IURP JHQHUDO DWWDFNV IURP LQWUXGHUV 6XFK ILUHZDOOV
DSSHDU WR EH JUHDW VHFXULW\ OLQH RI GHIHQVH IRU XVHUV ZKR DUH FRQVWDQWO\
FRQQHFWHGWRWKHLQWHUQHWYLD'6/RUFDEOHPRGHP3HUVRQDOILUHZDOOVKHOSE\
SURYLGLQJLQERXQGDQGRXWERXQGILOWHULQJFRQWUROOLQJLQWHUQHWFRQQHFWLYLW\WR
DQG IURP WKH FRPSXWHU ERWK LQ D GRPDLQ EDVHG DQG ZRUNJURXS PRGH  DQG
DOWHULQJWKHXVHUIRUDQ\DWWHPSWVRILQWUXVLRQV
+RQH\SRW
+RQH\SRWV DUH WKH GHYLFHV RU V\VWHP WKDW DUH GHSOR\HG WR WUDS DWWDFNHUV
DWWHPSWLQJWRJDLQXQDXWKRUL]HGDFFHVVWRWKHV\VWHPRUQHWZRUNDVWKH\DUH
GHSOR\HG LQ DQ LVRODWHG HQYLURQPHQW DQG EHLQJ PRQLWRUHG 7\SLFDOO\
KRQH\SRWVDUHGHSOR\HGLQ'0=DQGFRQILJXUHGLGHQWLFDOO\WRDVHUYHU$Q\
SUREHPDOZDUHLQIHFWLRQWKHLQMHFWLRQZLOOEHLPPHGLDWHO\GHWHFWHGE\WKLV
ZD\DVKRQH\SRWVDSSHDUWREHDOHJLWLPDWHSDUWRIWKHQHWZRUN
7\SHVRI+RQH\SRWV
 +LJK,QWHUDFWLRQ+RQH\SRWV
+LJK,QWHUDFWLRQ+RQH\SRWVDUHFRQILJXUHGZLWKDYHULW\RIVHUYLFHVZKLFKLV
EDVLFDOO\HQDEOHGWRZDVWHWKHWLPHRIDQDWWDFNHUDQGJDLQPRUHLQIRUPDWLRQ

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

IURPWKLVLQWUXVLRQ0XOWLSOHKRQH\SRWVFDQEHGHSOR\HGRQDVLQJOHSK\VLFDO
PDFKLQHWREHUHVWRUHGLIDWWDFNHUHYHQFRPSURPLVHGWKHKRQH\SRW
 /RZ,QWHUDFWLRQ+RQH\SRWV
/RZ,QWHUDFWLRQ+RQH\SRWVDUHFRQILJXUHGWRHQWHUWDLQRQO\WKHVHUYLFHVWKDW
DUH FRPPRQO\ UHTXHVWHG E\ WKH XVHUV 5HVSRQVH WLPH OHVV FRPSOH[LW\ DQG
IHZ UHVRXUFHV PDNH /RZLQWHUDFWLRQ KRQH\SRW GHSOR\PHQW PRUH HDV\ DV
FRPSDUHGWR+LJKLQWHUDFWLRQKRQH\SRWV
'HWHFWLQJ+RQH\SRWV
7KH EDVLF ORJLF RI GHWHFWLQJ D KRQH\SRW LQ D QHWZRUN LV E\ SURELQJ WKH
VHUYLFHV 7KH DWWDFNHU XVXDOO\ FUDIWV D PDOLFLRXV SDFNHW WR VFDQ UXQQLQJ
VHUYLFHVRQWKHV\VWHPDQGRSHQDQGFORVHGSRUWVLQIRUPDWLRQ7KHVHVHUYLFHV
PD\ EH +7736 60736 RU ,0$36 RU HOVH 2QFH DWWDFNHU H[WUDFWV WKH
LQIRUPDWLRQ LW FDQ DWWHPSW WR EXLOG D FRQQHFWLRQ WKH DFWXDO VHUYHU ZLOO
FRPSOHWHWKHSURFHVVRIWKUHHZD\KDQGVKDNLQJEXWWKHGHQ\RIKDQGVKDNLQJ
LQGLFDWHV WKH SUHVHQFH RI D KRQH\SRW 6HQG6DIH +RQH\SRW +XQWHU 1HVVXV
DQG+SLQJWRROVFDQEHXVHGWRGHWHFWKRQH\SRWV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

,'6)LUHZDOODQG+RQH\SRW6\VWHP
,QWUXVLRQ'HWHFWLRQ7RROV
6QRUW
6QRUWLVDQRSHQVRXUFHLQWUXVLRQSUHYHQWLRQV\VWHPZKLFKGHOLYHUVWKHPRVW
HIIHFWLYH DQG FRPSUHKHQVLYH UHDOWLPH QHWZRUN GHIHQVH VROXWLRQV 6QRUW LV
FDSDEOH RI SURWRFRO DQDO\VLV UHDOWLPH SDFNHW DQDO\VLV DQG ORJJLQJ ,W FDQ
DOVR VHDUFK DQG ILOWHU FRQWHQW GHWHFW D ZLGH YDULHW\ RI DWWDFNV DQG SUREHV
LQFOXGLQJ EXIIHU RYHUIORZV SRUW VFDQV 60% SUREHV DQG PXFK PRUH 6QRUW
FDQDOVREHXVHGLQYDULRXVIRUPVLQFOXGLQJDSDFNHWVQLIIHUDSDFNHWORJJHU
QHWZRUNILOHORJJLQJGHYLFHRUDVDIXOOEORZQQHWZRUNLQWUXVLRQSUHYHQWLRQ
V\VWHP
6QRUW5XOH
5XOHV DUH D FULWHULRQ IRU SHUIRUPLQJ GHWHFWLRQ DJDLQVW WKUHDWV DQG
YXOQHUDELOLWLHV WR WKH V\VWHP DQG QHWZRUN ZKLFK OHDGV WR WKH DGYDQWDJH RI
]HURGD\ GHWHFWLRQ 8QOLNH VLJQDWXUHV UXOHV DUH IRFXVHG RQ GHWHFWLQJ WKH
DFWXDOYXOQHUDELOLWLHV7KHUHDUHWZRZD\VWRJHW6QRUWUXOHV
 6QRUW6XEVFULEHUV5XOH
 6QRUW&RPPXQLW\5XOH
7KHUH LV QR PXFK GLIIHUHQFH LQ EHWZHHQ 6QRUW 6XEVFULEHUV UXOH DQG
&RPPXQLW\ UXOH +RZHYHU 6XEVFULEHU UXOHV DUH XSGDWHG IUHTXHQWO\ DQG
XSGDWHGRQWKHGHYLFHDVZHOO,WUHTXLUHVDSDLGVXEVFULSWLRQWRJHWUHDOWLPH
XSGDWHV RI 6QRUW 5XOHV &RPPXQLW\ UXOHV DUH XSGDWHG E\ 6QRUW &RPPXQLW\
FRQWDLQLQJDOOUXOHVDVWKH6XEVFULEHUVVHWRIWKHUXOHFRQWDLQVEXWWKH\DUHQRW
XSGDWHGTXLFNO\DVVXEVFULEHUUXOHLV
6QRUWUXOHVDUHFRPSULVHGRIWZRORJLFDOVHFWLRQV
 7KHUXOHKHDGHU
7KHUXOHKHDGHUFRQWDLQVWKHUXOH
VDFWLRQSURWRFROVRXUFHDQGGHVWLQDWLRQ,3
DGGUHVVHVDQGQHWPDVNVDQGWKHVRXUFHDQGGHVWLQDWLRQSRUWVLQIRUPDWLRQ
 7KHUXOHRSWLRQV
7KH UXOH RSWLRQ VHFWLRQ FRQWDLQV DOHUW PHVVDJHV DQG LQIRUPDWLRQ RQ ZKLFK
SDUWVRIWKHSDFNHWVKRXOGEHLQVSHFWHGWRGHWHUPLQHLIWKHUXOHDFWLRQVKRXOG
EHWDNHQ
&DWHJRULHVRI6QRUW5XOHV
6QRUWUXOHVDUHFDWHJRUL]HGLQWRGLIIHUHQWFDWHJRULHVDQGIUHTXHQWO\XSGDWHGE\

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

7$/266RPHRIWKHVHFDWHJRULHVDUH
$SSOLFDWLRQ 'HWHFWLRQ 5XOH &DWHJRU\ LQFOXGHV WKH UXOHV PRQLWRULQJ
&RQWUROOLQJRIWUDIILFRIFHUWDLQDSSOLFDWLRQ7KHVHUXOHVFRQWUROWKHEHKDYLRU
DQGQHWZRUNDFWLYLWLHVRIWKHVHDSSOLFDWLRQV
DSSGHWHFWUXOHV
%ODFN/LVW5XOHVFDWHJRU\LQFOXGHWKH85/,3DGGUHVV'16DQGRWKHUUXOHV
WKDWKDYHEHHQGHWHUPLQHGWREHDQLQGLFDWRURIPDOLFLRXVDFWLYLWLHV
EODFNOLVWUXOHV
%URZVHUV&DWHJRU\LQFOXGHWKHUXOHIRUGHWHFWLRQRIYXOQHUDELOLWLHVLQFHUWDLQ
EURZVHUV
EURZVHUFKURPHUXOHV
EURZVHUILUHIR[UXOHV
EURZVHULHUXOHV
EURZVHUZHENLW
EURZVHURWKHU
EURZVHUSOXJLQV
2SHUDWLQJ6\VWHP5XOHVFDWHJRU\LQFOXGHUXOHVORRNLQJIRUYXOQHUDELOLWLHVLQ
26
RV6RODULV
RVZLQGRZV
RVPRELOH
RV/LQX[
RVRWKHU
6LPLODUO\WKHUHLVDQXPEHURIFDWHJRULHVDQGW\SHVRIUXOHV
2WKHU,QWUXVLRQ'HWHFWLRQ7RROV
=RQH$ODUP352)LUHZDOO
&RPRGR)LUHZDOO
&LVFR$6$9&ORXG)LUHZDOO

)LUHZDOOVIRU0RELOH
$QGURLG)LUHZDOO
)LUHZDOO,3
+RQH\SRW7RRO
.)6HQVRU

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

63(&7(5
3DWULRW%R[
+,+$7

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

(YDGLQJ,'6
,QVHUWLRQ$WWDFN
$Q,QVHUWLRQDWWDFNLVDW\SHRIHYDVLRQRI,'6GHYLFHE\WDNLQJDGYDQWDJHRI
EOLQGO\ EHOLHYLQJ RI ,'6 ,QWUXVLRQ 'HWHFWLRQ 6\VWHP ,'6  DVVXPHV WKDW
DFFHSWHG SDFNHWV DUH DOVR DFFHSWHG E\ WKH HQG V\VWHPV EXW WKHUH PD\ EH D
SRVVLELOLW\ WKDW HQG V\VWHP PD\ UHMHFW WKHVH SDFNHWV 7KLV W\SH RI DWWDFN LV
VSHFLDOO\WDUJHWHGWR6LJQDWXUHEDVHG,'6GHYLFHLQRUGHUWRLQVHUWGDWDLQWR
,'67DNLQJDGYDQWDJHRIYXOQHUDELOLW\DWWDFNHUFDQLQVHUWSDFNHWVZLWKDEDG
FKHFNVXPRU77/YDOXHVDQGVHQGWKHPRXWRIRUGHU,'6DQGHQGKRVWZKHQ
UHDVVHPEOLQJWKHSDFNHWWKH\PLJKWKDYHWZRGLIIHUHQWVWUHDPV)RUH[DPSOH
DQDWWDFNHUPD\VHQGWKHIROORZLQJVWUHDP

)LJXUH,QVHUWLRQDWWDFNRQ,'6
(YDVLRQ
(YDVLRQLVDWHFKQLTXHLQWHQGHGWRVHQGWKHSDFNHWWKDWLVDFFHSWHGE\WKHHQG
V\VWHP ZKLFK LV UHMHFWHG E\ WKH ,'6 (YDVLRQ WHFKQLTXHV DUH LQWHQGHG WR
H[SORLW WKH KRVW $Q ,'6 WKDW PLVWDNHQO\ UHMHFWV VXFK D SDFNHW PLVVHV LWV
FRQWHQWV HQWLUHO\ $Q DWWDFNHU PD\ WDNH DGYDQWDJH RI WKLV FRQGLWLRQ DQG
H[SORLWLW

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH,'6(YDVLRQ
)UDJPHQWDWLRQ$WWDFN
)UDJPHQWDWLRQ LV WKH SURFHVV RI VSOLWWLQJ WKH SDFNHW LQWR IUDJPHQWV 7KLV
WHFKQLTXH LV XVXDOO\ DGRSWHG ZKHQ ,'6 DQG +RVW GHYLFH LV FRQILJXUHG ZLWK
GLIIHUHQWWLPHRXWV)RUH[DPSOHLIDQ,'6LVFRQILJXUHGZLWK6HFRQGVRI
WLPHRXW ZKHUHDV KRVW LV FRQILJXUHG ZLWK  VHFRQGV RI D WLPHRXW 6HQGLQJ
SDFNHWVZLWKVHFGHOD\ZLOOE\SDVVUHDVVHPEO\DW,'6DQGUHDVVHPEOHDWWKH
KRVW
6LPLODUO\ RYHUODSSLQJ IUDJPHQWV DUH VHQW ,Q 2YHUODSSLQJ IUDJPHQWDWLRQ D
SDFNHW ZLWK WKH 7&3 VHTXHQFH QXPEHU FRQILJXUHG LV RYHUODSSLQJ
5HDVVHPEO\ RI WKHVH RYHUODSSLQJ IUDJPHQWHG SDFNHWV LV EDVHG RQ KRZ DQ
RSHUDWLQJV\VWHPFRQILJXUHGWRGR+RVW26PD\XVHRULJLQDOIUDJPHQWDWLRQ
ZKHUHDV,26GHYLFHVPD\XVHVXEVHTXHQWIUDJPHQWXVLQJRIIVHW
'HQLDORI6HUYLFH$WWDFN 'R6
3DVVLYH,'6GHYLFHVDUHLQKHUHQWO\)DLORSHQLQVWHDGRI)DLO&ORVHG7DNLQJ
DGYDQWDJH RI WKLV OLPLWDWLRQ DQ DWWDFNHU PD\ ODXQFK D 'HQLDORI6HUYLFH
DWWDFNRQWKHQHWZRUNWRRYHUORDGWKH,'66\VWHP7RSHUIRUP'R6DWWDFNRQ
,'6 DQ DWWDFNHU PD\ WDUJHW &38 H[KDXVWLRQ RU 0HPRU\ ([KDXVWLRQ
WHFKQLTXHV WR RYHUORDG WKH ,'6 7KHVH FDQ EH GRQH E\ VHQGLQJ VSHFLDOO\
FUDIWHGSDFNHWFRQVXPLQJPRUH&38UHVRXUFHVRUVHQGLQJDODUJHQXPEHURI
IUDJPHQWHGRXWRIRUGHUSDFNHWV
2EIXVFDWLQJ
2EIXVFDWLRQLVWKHHQFU\SWLRQRISD\ORDGRIDSDFNHWGHVWLQHGWRDWDUJHWLQD
PDQQHUWKDWWDUJHWKRVWFDQUHYHUVHLWEXWWKH,'6FRXOGQRW,WZLOOH[SORLWWKH
HQG XVHU ZLWKRXW DOHUWLQJ WKH ,'6 XVLQJ GLIIHUHQW WHFKQLTXHV VXFK DV

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

HQFRGLQJ HQFU\SWLRQ SRO\PRUSKLVP (QFU\SWHG SURWRFROV DUH QRW LQVSHFWHG


E\WKH,'6XQOHVV,'6LVFRQILJXUHGZLWKWKHSULYDWHNH\XVHGE\WKHVHUYHUWR
HQFU\SWWKHSDFNHWV6LPLODUO\DQDWWDFNHUPD\XVHSRO\PRUSKLFVKHOOFRGHWR
FUHDWHXQLTXHSDWWHUQVWRHYDGH,'6
)DOVH3RVLWLYH*HQHUDWLRQ
)DOVH3RVLWLYHDOHUWJHQHUDWLRQLVWKHIDOVHLQGLFDWLRQRIDUHVXOWLQVSHFWHGIRU
DSDUWLFXODUFRQGLWLRQRUSROLF\$QDWWDFNHUPD\JHQHUDWHDODUJHQXPEHURI
IDOVH SRVLWLYH DOHUW E\ VHQGLQJ D 6XVSLFLRXV SDFNHW WR PDQLSXODWH DQG KLGH
UHDOPDOLFLRXVSDFNHWZLWKLQWKLVSDFNHWWRSDVV,'6
6HVVLRQ6SOLFLQJ
6HVVLRQ6SOLFLQJLVDWHFKQLTXHLQZKLFKDWWDFNHUVSOLWVWKHWUDIILFLQWRDODUJH
QXPEHURIWKHVPDOOHUSDFNHWLQDZD\WKDWQRWHYHQDVLQJOHSDFNHWWULJJHUV
WKH DOHUW 7KLV FDQ DOVR EH GRQH E\ D VOLJKWO\ GLIIHUHQW WHFKQLTXH VXFK DV
DGGLQJ D GHOD\ EHWZHHQ SDFNHWV 7KLV WHFKQLTXH LV HIIHFWLYH IRU WKRVH ,'6
ZKLFKGRQRWUHDVVHPEOHWKHVHTXHQFHWRFKHFNDJDLQVWLQWUXVLRQ
8QLFRGH(YDVLRQ7HFKQLTXH
8QLFRGH HYDVLRQ WHFKQLTXH LV DQRWKHU WHFKQLTXH LQ ZKLFK DWWDFNHU PD\ XVH
8QLFRGH WR PDQLSXODWH ,'6 8QLFRGH LV EDVLFDOO\ D FKDUDFWHU HQFRGLQJ DV
GHILQHGHDUOLHULQ+70/(QFRGLQJVHFWLRQ&RQYHUWLQJVWULQJXVLQJ8QLFRGH
FKDUDFWHUVFDQDYRLGVLJQDWXUHPDWFKLQJDQGDOHUWLQJWKH,'6WKXVE\SDVVLQJ
WKHGHWHFWLRQV\VWHP



0LQG0DS

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

(YDGLQJ)LUHZDOOV
)LUHZDOO,GHQWLILFDWLRQ
,GHQWLILFDWLRQ RI ILUHZDOO LQFOXGHV ILUHZDOO ILQJHUSULQWLQJ WR REWDLQ VHQVLWLYH
LQIRUPDWLRQVXFKDVRSHQSRUWVYHUVLRQLQIRUPDWLRQRIVHUYLFHVUXQQLQJLQD
QHWZRUN HWF 7KLV LQIRUPDWLRQ LV H[WUDFWHG E\ GLIIHUHQW WHFKQLTXHV VXFK DV
3RUWVFDQQLQJ)LUHZDONLQJ%DQQHUJUDEELQJHWF
3RUW6FDQQLQJ
3RUW 6FDQQLQJ LV WKH H[DPLQDWLRQ SURFHGXUH WKDW LV PRVWO\ XVHG E\ WKH
DWWDFNHUV WR LGHQWLI\ WKH RSHQ SRUW +RZHYHU LW PD\ DOVR EH XVHG E\ WKH
OHJLWLPDWHXVHUV3RUWVFDQQLQJLWGRHVQRWDOZD\VOHDGWRDQDWWDFNDVLWXVHG
E\ ERWK RI WKHP +RZHYHU LW LV D QHWZRUN UHFRQQDLVVDQFH WKDW FDQ EH XVHG
EHIRUH DQ DWWDFN WR FROOHFW LQIRUPDWLRQ ,Q WKLV VFHQDULR VSHFLDO SDFNHWV DUH
IRUZDUGHGWRDSDUWLFXODUKRVWZKRVHUHVSRQVHLVH[DPLQHGE\WKHDWWDFNHUWR
JHWLQIRUPDWLRQUHJDUGLQJRSHQSRUWV
)LUHZDONLQJ
)LUHZDONLQJLVDWHFKQLTXHLQZKLFKDQDWWDFNHUXVLQJ,&03SDFNHWILQGRXW
WKHORFDWLRQRIILUHZDOODQGQHWZRUNPDSE\SURELQJWKH,&03HFKRUHTXHVW
ZLWK 77/ YDOXHV H[FHHGLQJ RQH E\ RQH ,W KHOSV WKH DWWDFNHU WR ILQG RXW D
QXPEHURIKRSV
%DQQHU*UDEELQJ
%DQQHUJUDEELQJLVDQRWKHUWHFKQLTXHLQZKLFKLQIRUPDWLRQIURPDEDQQHULV
JUDEEHG 'LIIHUHQW GHYLFHV VXFK DV URXWHUV ILUHZDOOV DQG ZHE VHUYHU HYHQ
GLVSOD\ D EDQQHU LQ WKH FRQVROH DIWHU ORJLQ WKURXJK )73 WHOQHW  9HQGRU
LQIRUPDWLRQ IRU D WDUJHW GHYLFH DQG ILUPZDUH YHUVLRQ LQIRUPDWLRQ FDQ EH
H[WUDFWHGXVLQJEDQQHUJUDEELQJ
,3$GGUHVV6SRRILQJ
$VGHILQHGHDUOLHULQWKHZRUNERRN,3$GGUHVV6SRRILQJLVDWHFKQLTXHWKDW
LVXVHGWRJDLQXQDXWKRUL]HGDFFHVVWRPDFKLQHVE\VSRRILQJ,3DGGUHVV$Q
DWWDFNHU LOOLFLWO\ LPSHUVRQDWHV DQ\ XVHU PDFKLQH E\ VHQGLQJ PDQLSXODWHG ,3
SDFNHWVZLWKVSRRIHG,3DGGUHVV6SRRILQJSURFHVVLQYROYHVPRGLILFDWLRQRI
KHDGHUZLWKDVSRRIHGVRXUFH,3DGGUHVVDFKHFNVXPDQGWKHRUGHUYDOXHV
6RXUFH5RXWLQJ
6RXUFH URXWLQJ LV D WHFKQLTXH RI VHQGLQJ WKH SDFNHW YLD VHOHFWHG URXWH ,Q

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

VHVVLRQKLMDFNLQJWKLVWHFKQLTXHLVXVHGWRDWWHPSW,3VSRRILQJDVDOHJLWLPDWH
KRVW ZLWK WKH KHOS RI 6RXUFH URXWLQJ WR GLUHFW WKH WUDIILF WKURXJK WKH SDWK
LGHQWLFDOWRWKHYLFWLP
VSDWK
%\SDVVLQJ7HFKQLTXHV
%\SDVVLQJ%ORFNHG6LWHV8VLQJ,3$GGUHVV
,QWKLVWHFKQLTXH%ORFNHG:HEVLWHLQDQHWZRUNLVDFFHVVHGXVLQJ,3DGGUHVV
&RQVLGHU D ILUHZDOO EORFNLQJ WKH LQFRPLQJ WUDIILF GHVWLQHG WR D SDUWLFXODU
GRPDLQ,WFDQEHDFFHVVHGE\W\SLQJ,3DGGUHVVLQ85/LQVWHDGRIHQWHULQJ
GRPDLQQDPHXQOHVV,3DGGUHVVLVDOVRFRQILJXUHGLQDFFHVVFRQWUROOLVW
%\SDVV%ORFNHG6LWHV8VLQJ3UR[\
$FFHVVLQJWKHEORFNHGZHEVLWHVXVLQJDSUR[\LVYHU\FRPPRQ7KHUHDUHD
ORW RI RQOLQH SUR[\ VROXWLRQ DYDLODEOH ZKLFK KLGH \RXU DFWXDO ,3 DGGUHVV WR
DOORZWRDFFHVVUHVWULFWHGZHEVLWHV
%\SDVVLQJWKURXJK,&037XQQHOLQJ0HWKRG
,&03 WXQQHOLQJ LV D WHFKQLTXH RI LQMHFWLQJ DUELWUDU\ GDWD LQ WKH SD\ORDG RI
HFKRSDFNHWDQGIRUZDUGHGWRWDUJHWKRVW,&03WXQQHOLQJIXQFWLRQVRQ,&03
HFKR UHTXHVWV DQG UHSO\ SDFNHWV %DVLFDOO\ XVLQJ WKLV ,&03 WXQQHOLQJ 7&3
FRPPXQLFDWLRQ LV WXQQHOHG RYHU SLQJ UHTXHVW DQG UHSOLHV EHFDXVH SD\ORDG
ILHOG RI ,&03 SDFNHWV DUH QRW H[DPLQHG E\ PRVW RI WKH ILUHZDOOV ZKHUHDV
VRPH QHWZRUN DGPLQLVWUDWRUV DOORZ ,&03 EHFDXVH RI WURXEOHVKRRWLQJ
SXUSRVH
%\SDVVLQJ)LUHZDOOWKURXJK+7737XQQHOLQJ0HWKRG
+773WXQQHOLQJLVDQRWKHUZD\WRE\SDVVILUHZDOOV&RQVLGHUDFRPSDQ\ZLWK
D ZHE VHUYHU OLVWHQLQJ WUDIILF RQ SRUW  IRU +773 WUDIILF +773 WXQQHOLQJ
DOORZV WKH DWWDFNHU WR GHVSLWH WKH UHVWULFWLRQ LPSRVHG E\ WKH ILUHZDOO E\
HQFDSVXODWLQJWKHGDWDLQ+773WUDIILF7KHILUHZDOOZLOODOORZWKHSRUWDQ
DWWDFNHU PD\ SHUIRUP WKH YDULRXV WDVN E\ KLGLQJ LQWR +773 VXFK DV XVLQJ
)73YLD+773SURWRFRO
+7737XQQHOLQJ7RROV
+773RUW
+77+RVW
6XSHU1HWZRUN7XQQHO
+7737XQQHO
%\SDVVLQJWKURXJK66+7XQQHOLQJ0HWKRG

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

2SHQ66+ LV DQ HQFU\SWLRQ SURWRFRO WKDW LV EDVLFDOO\ XVHG IRU VHFXULQJ WKH
WUDIILF IURP GLIIHUHQW WKUHDWV DQG DWWDFNV VXFK DV HDYHVGURSSLQJ KLMDFNLQJ
HWF 66+ FRQQHFWLRQ LV PRVWO\ XVHG E\ DSSOLFDWLRQV WR FRQQHFW WR WKH
DSSOLFDWLRQVHUYHUV7KHDWWDFNHUXVHV2SHQ66+WRHQFU\SWWKHWUDIILFWRDYRLG
GHWHFWLRQE\VHFXULW\GHYLFHV
%\SDVVLQJ)LUHZDOOWKURXJK([WHUQDO6\VWHPV
%\SDVVLQJWKURXJKWKHH[WHUQDOV\VWHPLVDSURFHVVRIKLMDFNLQJDVHVVLRQRID
OHJLWLPDWH XVHU RI D FRUSRUDWH QHWZRUN ZKLFK LV DOORZHG WR FRQQHFW WR DQ
H[WHUQDO QHWZRUN $Q DWWDFNHU FDQ HDVLO\ VQLII WKH WUDIILF WR H[WUDFW WKH
LQIRUPDWLRQVWHDOLQJ6HVVLRQ,'FRRNLHVDQGLPSHUVRQDWHKLPWRE\SDVVWKH
ILUHZDOO $Q DWWDFNHU FDQ DOVR LQIHFW WKH H[WHUQDO V\VWHP XVHG E\ WKH
OHJLWLPDWHXVHUZLWKPDOZDUHRU7URMDQWRVWHDOLQIRUPDWLRQ

0LQG0DS

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

,'6)LUHZDOO(YDVLRQ&RXQWHUPHDVXUHV
0DQDJLQJDQGSUHYHQWLQJDQHYDVLRQWHFKQLTXHLVDJUHDWFKDOOHQJH7KHUHDUH
VR PDQ\ WHFKQLTXHV WR PDNH LW GLIILFXOW IRU DQ DWWDFNHU WR HYDGH GHWHFWLRQ
7KHVH GHIHQVLYH DQG PRQLWRULQJ WHFKQLTXHV HQVXUH WKH GHWHFWLRQ V\VWHP WR
SURWHFW WKH QHWZRUN DQG KDYH PRUH FRQWURO RYHU WUDIILF 6RPH RI WKHVH
WHFKQLTXHV DUH EDVLF WURXEOHVKRRWLQJ DQG PRQLWRULQJ ZKHUHDV VRPH
WHFKQLTXHV DUH IRFXVHG RQ SURSHU FRQILJXUDWLRQ RI ,36,'6 DQG ILUHZDOOV
,QLWLDOO\REVHUYHDQGWURXEOHVKRRWWKHILUHZDOOE\
3RUWVFDQQLQJ
%DQQHUJUDEELQJ
)LUHZDONLQJ
,3DGGUHVVVSRRILQJ
6RXUFHURXWLQJ
%\SDVVLQJILUHZDOOXVLQJ,3LQ85/
$WWHPSWDIUDJPHQWDWLRQDWWDFN
7URXEOHVKRRWLQJEHKDYLRUXVLQJSUR[\VHUYHUV
7URXEOHVKRRWLQJEHKDYLRUXVLQJ,&03WXQQHOLQJ
6KXWWLQJGRZQWKHXQXVHGSRUWVSRUWVWKDWDUHDVVRFLDWHGZLWKNQRZQDWWDFNV
LQDQHIIHFWLYHVWHSWRSUHYHQWHYDVLRQ3HUIRUPLQGHSWKDQDO\VLVUHVHWWLQJ
WKHPDOLFLRXVVHVVLRQXSGDWLQJSDWFKHV,'6GHSOR\PHQWIUDJPHQWHGSDFNHW
QRUPDOL]DWLRQLQFUHDVLQJ77/H[SLU\EORFNLQJ77/H[SLUHGSDFNHW
UHDVVHPEO\RIWKHSDFNHWDW,'6KDUGHQLQJWKHVHFXULW\DQGFRUUHFWO\
HQIRUFHPHQWRISROLFLHVDUHHIIHFWLYHVWHSRISUHYHQWLQJWKHVHDWWDFNV


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

/DE&RQILJXULQJ+RQH\SRWRQ:LQGRZV6HUYHU
0DFKLQHV
:LQGRZV6HUYHU 90
:LQGRZV 90
6RIWZDUHXVHG
+RQH\%RWV KWWSVZZZDWRPLFVRIWZDUHVROXWLRQVFRP

3URFHGXUH
 2SHQ+RQH\%RW$SSOLFDWLRQ
 6HWSDUDPHWHUVRUOHDYHLWWRGHIDXOW


)LJXUH+RQH\%RW$SSOLFDWLRQ
 6HOHFW$GDSWHUV


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH+RQH\%RW$SSOLFDWLRQ
 *RWR:LQGRZVPDFKLQH
 2SHQ&RPPDQG3URPSW
 *HQHUDWHVRPHWUDIILFOLNH)73


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH&RPPDQG3URPSW :LQGRZV
 %DFNWR:LQGRZV6HUYHUDQGREVHUYHWKHORJV


)LJXUH/RJV

 &OLFNRQ3RUW!DQGVHOHFWWKHORJ


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUHORJV

 5LJKWFOLFNDQGJRWR9LHZ'HWDLOV


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH'HWDLORIORJHQWU\

 5LJKWFOLFNDQGJRWR5HYHUVH'16

Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH5HYHUVH'16


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

)LJXUH5HYHUVH'16


Certified Ethical Hacker v10 https://www.ethicalhackx.com fb.com/ethicalhackx

You might also like