如何認為像黑客

黑客的主要宗旨將減弱目標計算機、網絡或者應用。 黑客開始以一點信息并且最終獲得一張詳細的地圖入系統。 有黑客跟隨對文丐入系統的五步：


偵察
這個調查階段的目標是會集信息關於域名、IP地址範圍、商務夥伴、軟件的電話號碼、類型和操作系統在使用中和現有的網絡防禦機制。

首先，黑客必須辨認目標的域名例如xxxx.com。 然後他們收集同樣多信息儘可能通過公開渠道。 一個好來源是通過新聞組。 信息技術(它)職員經常洩漏關於他們的配置和應用的許多信息，當為協助時接近。 工作公告也提供關於公司的計算機系統、操作系統和應用的重要消息。 如果工作為信息安全位置做廣告，目標的網絡防禦的種類可能容易地被辨認。

黑客能然後參觀互聯網檔案』網站(archive.org)檢查關於也許多年來回去的目標的信息。 SEC網站(www.sec.gov)可能顯露關於緊急公司合併的信息-這意味著它防禦為兩家公司將顯著被降下合併資源和保證一個平抑（穩定）物價。 當敵人的防禦下降時，是時間攻擊。

黑客能也使用社會工程學會集事實。 人文要素是經常弱鏈接在系統。 例如，如果您有被批准訪問網絡雇員的信任，您能假裝有喜歡人的自然有用的一個迫切問題。

掃描和列舉
其次，黑客使用軟件在目標網絡將掃描服務器和資源從所有「Warez」網站為自由。 一旦黑客通過掃描得到詳細的信息關於目標操作系統或應用，它在系統只採取小的天分和堅固耐心辨認弱點。 一次參觀到所有亂砍的工具網站在正確的方向將給初學者黑客推擠。 有時，如果黑客問計算機一個適當地格式化的問題，計算機系統甚而將提供關於密碼長度的信息或繞過需要對於密碼。 一次通過防火牆，內部安全通常是自由散漫的。

能够存取
在掃描為相關信息以後，黑客現在有對系統或網絡的自由存取。 They will have a free run of the place with complete administrative access and can change any information or play havoc to the system. A tip: an easy way to do this is a call to the company help desk and impersonate the manager to get a password reset if an email sent to the manager earlier triggers an automatic ‘I’m on leave’ message.

Perfect
If the hacker still has difficulty getting administrative access into the system, a Trojan disguised as a service pack or system update can be sent to company staff. This can be sent from the System Administrator’s email account (obtained from a newsgroup message in the reconnaissance phase) –The Trojan appears harmless but will install a key-logger program in the background when run by employees. When the employees key in their user-IDs and passwords throughout the day, the program will automatically forward these to the hacker.

Maintaining Access
Once the hacker has access to critical computer systems, the password file or the Security Account Manager (SAM) is easily obtainable. This contains the user-IDs and passwords for all the system users. From here, they can hack into other systems. Hackers also install backdoor programs on all compromised systems so that they will continue to have access even when the passwords are changed. Furthermore, this will be totally overlooked by even experienced IT staff as normal network traffic. The perfect crime!

IMPORTANT: This is a machine translated page which is provided "as is" without warranty. Machine translation may be difficult to understand. Please refer to original English article whenever possible.

Share and contribute or get technical support and help at My Digital Life Forums.

Related Articles

• Hacker Unlocks iPhone 3G with Hacked SIM Card Adapter with YouTube Video Proof
• Cold Hard Jolt about Encryption Protection
• Hacker Sentenced to Jail for Stealing VoIP Services
• Microsoft Pushes WgaLogon.dll and WgaTray.exe in WGA v1.7.59.1
• Facebook Source Code Leaked
• Review Gmail Account Recent Login or Access Activity History and Remote Logout Intruder or Hacker
• WordPress 2.1.1 Critical Security Alert - Download Upgrade to 2.1.2
• How to Get Actual Build and Revision Number of Windows Vista or Longhorn Server Installed
• Personal Firewall Look ‘n’ Stop v2.06 p3 Released
• Manhunt 2 Uncensor/Uncut Execution Style Killing Death Scene Video Compilation

This entry was posted on Monday, May 21st, 2007 at 10:40 pm and is filed under Security. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.