Ethical Hacking - Florian Dalwigk

. .

Biographie:
Florian Dalwigk is an expert in cybercrime, cyberespionage, and IT security. After studying computer science, he worked for a security agency and has been a volunteer lecturer since 2024, teaching modules on Ethical Hacking, IT Forensics, Cyberespionage, Cybercrime and Crypto Forensics, and Post-Quantum Cryptography, among others. As an author of specialist books, he conveys his knowledge in a clear and practical way. He is interested in the interface between technological innovation and security, particularly in the context of state-controlled cyber operations and cryptographic resilience in the post-quantum era....

Sommaire:

1 ... Introduction ... 19

1.1 ... What Is Ethical Hacking? ... 19

1.2 ... Protection Goals of Information Security ... 21 1.3 ... Motivations for Hacking Attacks ... 23 1.4 ... Types of Hackers ... 24 1.5 ... The Cyber Kill Chain ... 26 1.6 ... Hacker Ethics ... 28 1.7 ... Advanced Persistent Threats ... 30 1.8 ... Common Vulnerabilities and Exposures ... 32 1.9 ... Common Vulnerability Scoring System ... 35 1.10 ... Classification of Attacks ... 38 1.11 ... The MITRE ATT&CK Framework ... 39 1.12 ... Tactics, Techniques, and Procedures ... 45 1.13 ... Indicators of Compromise ... 46 1.14 ... Security Models ... 47 1.15 ... Information Warfare ... 52 1.16 ... Practice Questions ... 54

2 ... TryHackMe ... 73

2.1 ... TryHackMe Overview ... 73 2.2 ... Hacking Lab ... 76 2.3 ... Starting and Solving Hacking Challenges ... 90 2.4 ... Support from AI: ShellGPT ... 95

3 ... Footprinting and Reconnaissance ... 101

3.1 ... What is Footprinting? ... 101 3.2 ... Active and Passive Footprinting ... 102 3.3 ... Well-Known Files ... 124 3.4 ... Footprinting on the Dark Web ... 126 3.5 ... Tools for Footprinting ... 127 3.6 ... Protection against Footprinting ... 140 3.7 ... OhSINT ... 142 3.8 ... Practice Questions ... 149

4 ... Scanning ... 169

4.1 ... Ports and Services ... 169 4.2 ... The OSI Model ... 171 4.3 ... HTTP ... 173 4.4 ... ICMP, UDP, and TCP ... 177 4.5 ... Hping3 ... 181 4.6 ... Wireshark ... 184 4.7 ... Nmap ... 188 4.8 ... Banner Grabbing ... 201 4.9 ... Practice Questions ... 205

5 ... Enumeration and Fuzzing ... 231

5.1 ... What Is Enumeration? ... 231 5.2 ... Gobuster ... 236 5.3 ... What Is Fuzzing? ... 238 5.4 ... Fuzz Faster U Fool ... 241 5.5 ... WPScan ... 243 5.6 ... Practice Questions ... 244

6 ... Metasploit ... 251

6.1 ... Exploits ... 251 6.2 ... Searching for Exploits ... 252 6.3 ... The Metasploit Framework ... 255 6.4 ... Practice Questions ... 275

7 ... Cryptography ... 283

7.1 ... Introduction to Cryptography ... 283 7.2 ... Ciphers ... 286 7.3 ... The XOR Operation ... 295 7.4 ... The Feistel Network ... 296 7.5 ... Encryption Algorithms ... 301 7.6 ... Hash Algorithms ... 306 7.7 ... One-Time Pad ... 308 7.8 ... Digital Signatures ... 310 7.9 ... Quantum Cryptography ... 311 7.10 ... Public Key Infrastructure ... 312 7.11 ... Email Encryption ... 315 7.12 ... Cryptanalysis ... 315 7.13 ... Practice Questions ... 319

8 ... Covert Communication ... 337

8.1 ... Why Is Covert Communication Used? ... 337 8.2 ... Classic Techniques and Modern Equivalents ... 337 8.3 ... Steganography ... 339 8.4 ... Communication via Side Channels ... 350 8.5 ... The Darknet ... 353 8.6 ... c4ptur3-th3-fl4g ... 366 8.7 ... Practice Questions ... 373

9 ... Cracking Passwords ... 381

9.1 ... Hash Functions and Password Hashes ... 381 9.2 ... Kerberos ... 384 9.3 ... Salt and Pepper ... 386 9.4 ... hashcat ... 387 9.5 ... Attacks on Passwords ... 396 9.6 ... Protection Against Password Attacks ... 405 9.7 ... CrackIT ... 405 9.8 ... Practice Questions ... 413

10 ... OWASP Top 10 ... 425

10.1 ... A01:2021 Broken Access Control ... 425 10.2 ... A02:2021 Cryptographic Failures ... 428 10.3 ... A03:2021 Injection ... 431 10.4 ... A04:2021 Insecure Design ... 435 10.5 ... A05:2021 Security Misconfiguration ... 438 10.6 ... A06:2021 Vulnerable and Outdated Components ... 441 10.7 ... A07:2021 Identification and Authentication Failures ... 443 10.8 ... A08:2021 Software and Data I...