HACK NOTES: WINDOWS SECURITY PORTABLE REFERENCE
FOOTPRINTING: KNOWING WHERE TO LOOK FOOTPRINTING EXPLAINED FOOTPRINTING USING DNS FOOTPRINTING USING PUBLIC NETWORK INFORMATION SUMMARY SCANNING: SKULKING ABOUT SCANNING EXPLAINED HOW PORT SCANNING WORKS PORT SCANNING UTILITIES ENUMERATION: SOCIAL ENGINEERING, NETWORK STYLE ENUMERATION OVERVIEW DNS ENUMERATION (TCP/53, UDP/53) NETBIOS OVER TCP/IP HELPERS (UDP/137, UDP 138, TCP/139, AND TCP/445) PACKET SNIFFING: THE ULTIMATE AUTHORITY THE VIEW FROM THE WIRE WINDOWS PACKET SNIFFING FUNDAMENTALS OF WINDOWS SECURITY COMPONENTS OF THE WINDOWS SECURITY MODEL SECURITY OPERATORS: USERS AND USER CONTEXTS AUTHENTICATION WINDOWS SECURITY PROVIDERS ACTIVE DIRECTORY AND DOMAINS PROBING COMMON WINDOWS SERVICES MOST COMMONLY ATTACKED WINDOWS SERVICES SERVER MESSAGE BLOCK REVISITED PROBING MICROSOFT SQL SERVER MICROSOFT TERMINAL SERVICES / REMOTE DESKTOP (TCP 3389) HACKING INTERNET INFORMATION SERVICES WORKING WITH HTTP SERVICES SIMPLE HTTP REQUESTS SPEAKING HTTP DELIVERING ADVANCED EXPLOITS INTRODUCING THE DOORS THE BIG NASTIES: COMMAND EXECUTION A KINDER, GENTLER ATTACK UNDERSTANDING WINDOWS DEFAULT SERVICES WINDOWS SERVICES REVEALED THE TOP THREE OFFENDERS INTERNET INFORMATION SERVICES/ WORLD WIDE WEB PUBLISHING SERVICE TERMINAL SERVICES MICROSOFT SQL SERVER / SQL SERVER RESOLUTION SERVICE THE REST OF THE FIELD HARDENING LOCAL USER PERMISSIONS WINDOWS ACCESS CONTROL FACILITIES FILE SYSTEM PERMISSIONS LOCAL SECURITY SETTINGS DOMAIN SECURITY WITH GROUP POLICIES GROUP POLICY OVERVIEW GROUP POLICY APPLICATION WORKING WITH GROUP POLICIES WORKING WITH GROUP POLICIES IN ACTIVE DIRECTORY EDITING DEFAULT DOMAIN POLICIES CONTROLLING WHO IS AFFECTED BY GROUP POLICIES USING THE GROUP POLICY MANAGEMENT CONSOLE PATCH AND UPDATE MANAGEMENT HISTORY OF WINDOWS OPERATING SYSTEM UPDATES AUTOMATIC OR MANUAL? HOW TO UPDATE WINDOWS MANUALLY MANUAL UPDATES IN DISCONNECTED ENVIRONMENTS WINDOWS UPDATE: WHAT’S IN A NAME? HOW TO UPDATE WINDOWS AUTOMATICALLY VERIFYING PATCH LEVELS: THE BASELINE SECURITY ANALYZER IP SECURITY POLICIES IP SECURITY OVERVIEW WORKING WITH IPSEC POLICIES DEFAULT POLICIES: QUICK AND EASY ADVANCED IPSEC POLICIES TROUBLESHOOTING NOTES ENCRYPTING FILE SYSTEM HOW EFS WORKS PUBLIC KEY CRYPTOGRAPHY AND EFS USER ENCRYPTION CERTIFICATES IMPLEMENTING EFS ADDING DATA RECOVERY AGENTS CONFIGURING AUTO-ENROLL USER CERTIFICATES SETTING UP CERTIFICATE SERVER USING ENCRYPTING FILE SYSTEM SIMPLIFYING SECURITY THE IIS LOCKDOWN TOOL HOW THE IIS LOCKDOWN TOOL WORKS URLSCAN ISAPI FILTER APPLICATION DISABLING URLSCAN IIS METABASE EDITOR WINDOWS 2003 SECURITY ADVANCEMENTS WHAT’S NEW IN WINDOWS INTERNET INFORMATION SERVICES 60 MORE DEFAULT SECURITY IMPROVED SECURITY FACILITIES PART I HACKING FUNDAMENTALS CHAPTER FOOTPRINTING: KNOWING WHERE TO LOOK CHAPTER SCANNING: SKULKING ABOUT CHAPTER ENUMERATION: SOCIAL ENGINEERING, NETWORK STYLE CHAPTER PACKET SNIFFING: THE ULTIMATE AUTHORITY CHAPTER