एथिकल हैकर कैसे बने । How To Become A Ethical Hacker

 Chapter Outline

1. What is System Hacking
2. Introduction to password Cracking Techniques:
3. manual password cracking
4. Automated Password Cracking:
5. Process of System Hacking:
6. Introduction to Keylogger

System Hacking:-

In the phase of system hacking attacker actually performs HACKS This is the exploitation phase of hacking. Information gathered from previous phases is required to perform a hack Form the various phases like scanning and footprinting, the attacker gathers information about the target and finds the vulnerability. Now using the same vulnerability, in the phase of system hacking, the attacker performs the actual HACK.

in system hacking, we perform cracking system passwords to escalate the privileges.

Password Cracking-:

Password Cracking attacks are of the following types:

1. Passive Online Cracking:

In passive online cracking, the attacker tries to authenticate into the system by cracking the passwords using brute-force dictionary attacks or rainbow tables.

This method is quite complex and time-consuming. Also, there is no surety of getting the password cracked.

2. Active online Cracking:

Inactive online cracking, the attacker generally guesses the passwords to gain access into the system. Generally, bad passwords and open authentication points are vulnerable to active online cracking. Although it consumes a lot of time and is a less efficient way.

3. Offline attacks:

In offline attacks attacker tries to exploit Lan manager hash (LM Hash), LM hashes are much vulnerable because of the short length and short key they use. Offline attacks also take much time to crack the passwords. Generally in offline attacks attacker performs dictionary hybrid or brute force attacks.

4. Non-electric media attacks:

In this, password cracking took place without using any technical medium. Generally, shoulder surfing dumpster diving, and social engineering are used to gain passwords and sensitive information Hardware key-logger can also be used to sniff each and every type the keyboard. This is commonly used in non-electric media attacks.

Default password databases:

many websites contain databases of default usernames, passwords, ports, and various information of networking or other devices. Sometimes, the default password provides access into the target system. Form the attacker's point of view each and every possibility should be covered. Some of the websites which contain default password database are: 

Manual Password Cracking:

• Ping the target network to check whether it is life or not. ultimately choose a valid target. 
• Make a list of all possible passwords (easily available online).
• Define the priority of each password based on the key defined
• Try to get access using a password, in case of failure, again try with a different password.

Automated Password Cracking:

automated password cracking uses algorithms to crack passwords. Automated password cracking provides attackers ease and is quite faster than manual password cracking.

A. Dictionary Attack:

1. In the dictionary attack, firstly the encryption algorithm used is found.
2. The encrypted password is then obtained.
3. Form the lists of passwords, each password is encrypted using the same encryption algorithm and matched with the original encrypted password 
4. It matches each encrypted password with the original encrypted password until the match is found.
5. If a match is found it shows the password, else the procedure is repeated again.

B. Lan manager Hash:

LM Hash is an algorithm by which the passwords are encrypted.

Process of System Hacking:

A. Privilege Escalation:

In this, When the user gained access to the target system by any user account, the next requirement is to gain access into an administrative account or to gain higher privileges than that of the administrator. This process is known as privilege escalation.

B. Executing Applications to maintain access:

Once the privileges are successfully escalated, the attacker executes applications like backdoors or Trojans to maintain his access into the system. This is one of the important phases where the attacker needs to be careful, else he might get caught.

Keyloggers:-

Keyloggers are especially designer software or hardware which are used to track keystroke activities of the target system. A keylogger may also track the activity of the target system depending upon the keylogger's construction. 

I hope you would have helped a lot with this information, if you have broken even a little bit from this post, then you can tell me by commenting. And if you are in any kind of information related to this post, then you can ask me.

And you can also follow me on Facebook, Instagram, and Youtube. So let's meet in another post And Take Care |