Web-Based Password Cracking Techniques

• List the authentication types

  • Authentication types include password-based, token-based, biometric-based, and multifactor authentication.

• /What is a password cracker?

  • A password cracker is a tool or program used to recover passwords from data that has been stored or transmitted by a computer system.

• How does a password cracker work?

  • Password crackers use various techniques such as dictionary attacks, brute-force attacks, rainbow table attacks, and hybrid attacks to guess or recover passwords.

• Password attacks - classification

  • Password attacks are classified into offline attacks (where attackers have access to hashed passwords) and online attacks (attempting to guess passwords through direct access to login interfaces).

• Password cracking counter measures

  • Countermeasures include using strong passwords, implementing multi-factor authentication, limiting login attempts, encrypting password databases, and monitoring for suspicious activities.

SQL Injection

• What is SQL injection?

  • SQL injection is a code injection technique that attackers use to exploit vulnerabilities in SQL database queries to execute malicious SQL statements.

• Understand the steps to conduct SQL injection

  • Steps include identifying vulnerable input fields, crafting malicious SQL queries, exploiting the vulnerability to extract or modify database contents.

• Understand SQL Server vulnerabilities

  • SQL Server vulnerabilities include improper input validation, weak authentication mechanisms, and insufficient database permissions.

• Describe SQL injection countermeasures

  • Countermeasures involve using parameterized queries, input validation and sanitization, least privilege principle, and regular security assessments and patches.

Wireless Hacking

• Overview of WEP, WPA authentication systems and cracking techniques

  • WEP and WPA are wireless security protocols. WEP is vulnerable to attacks like packet sniffing and key cracking. WPA has stronger encryption but also has vulnerabilities.

• Overview of wireless sniffers and SSID, MAC spoofing

  • Wireless sniffers capture wireless traffic, while SSID and MAC spoofing involve impersonating legitimate network access points or clients.

• Understand rogue access points

  • Rogue access points are unauthorized wireless access points deployed within a network, posing security risks.

• Understand wireless hacking techniques

  • Techniques include brute-force attacks against wireless encryption, exploiting weak configurations, and using tools like Aircrack-ng for packet sniffing and analysis.

• Describe the methods of securing wireless

  • Secure wireless networks by using strong encryption (e.g., WPA2), disabling SSID broadcast, enabling MAC address filtering, updating firmware, and monitoring for rogue APs.

Virus and Worms

• Understand the difference between a virus and a worm

  • A virus is a malicious program that attaches itself to other executable files, while a worm is a standalone malicious program that replicates itself and spreads across networks.

• Understand the types of viruses

  • Types include file viruses, boot sector viruses, macro viruses, polymorphic viruses, and multipartite viruses.

• How a virus spreads and infects the system

  • Viruses spread through infected files, email attachments, malicious websites, and removable media. They infect systems by modifying or deleting files, stealing data, or causing system malfunctions.

• Understand antivirus evasion techniques

  • Evasion techniques include polymorphism (changing virus code), encryption, obfuscation, and using rootkits to hide malicious activities.

• Understand virus detection methods

  • Detection methods include signature-based detection, heuristic analysis, behavior-based detection, sandboxing, and using antivirus software and firewalls.