HACK ATTACKS TESTING: HOW TO CONDUCT YOUR OWN SECURITY AUDIT
PART BUILDING A MULTISYSTEM TIGER BOX CHAPTER 1: BASIC WINDOWS 2000/WINDOWS 2000 SERVER INSTALLATION AND CONFIGURATION LAUNCHING WINDOWS 2000 SERVER BASIC WINDOWS 2000/WINDOWS 2000 SERVER CONFIGURATION ACTIVE DIRECTORY TCP/IP CUSTOMIZATION DOMAIN NAME SERVICE CHAPTER BASIC LINUX AND SOLARIS INSTALLATIONS AND CONFIGURATIONS *NIX MINIMUM SYSTEM REQUIREMENTS (INTEL-BASED) INSTALLING AND CONFIGURING RED HAT LINUX INSTALLING AND CONFIGURING SOLARIS INSTALLATION COMPLETION MAC OS X TIGER BOX SOLUTIONS MINIMUM SYSTEM REQUIREMENTS: STEP INSTALLING MAC OS X: STEP INSTALLING OS X UPGRADING TO OS X INSTALLING DEVELOPER TOOLS: STEP DOWNLOADING THE SOFTWARE INSTALLING AND CONFIGURING A PORT SCANNER INFRASTRUCTURE: STEP INSTALLING NETSCAPE ENABLING THE ROOT ACCOUNT CONTENTS MODIFYING THE PATH NESSUS SECURITY SCANNER EXAMPLE CONFIGURATION LOGGING IN WITH THE CLIENT CONCLUSION INSTALLING AND CONFIGURING A TESTING TARGET MINIMUM HARDWARE REQUIREMENTS INSTALLATION METHODS SERVER LICENSING SERVER TYPES STEP-BY-STEP INSTALLATION LOGGING IN OPTIONAL SERVICES FOR YOUR TESTING TARGET INSTALLING WINS SETTING PREFERENCES FOR WINS MANAGER CONFIGURING A WINS SERVER WINS STATIC MAPPINGS WINS DATABASE INSTALLING DNS DNS ZONES, HOSTS, AND RECORDS INTERNET INFORMATION SERVER STEP BY STEP IIS INSTALLATION AND CONFIGURATION IIS ADMINISTRATION UTILITY USING SECURITY ANALYSIS TOOLS FOR YOUR WINDOWS-BASED TIGER BOX OPERATING SYSTEM CERBERUS INTERNET SCANNER SYSTEM REQUIREMENTS INSTALLATION TARGET CONFIGURATION VULNERABILITY SCANNING REPORTING CYBERCOP SCANNER INITIAL CONFIGURATION AND PRODUCT UPDATE WELCOME TO UPDATE SETUP CONFIGURATION OPTIONS SELECTING MODULES FOR A SCAN PERFORMING INTRUSION DETECTION SYSTEM SOFTWARE TESTS ADVANCED SOFTWARE UTILITIES CASL CREATING AND SENDING AN EXAMPLE PACKET CRACK SMB GRIND NETWORK MAP OUTPUT FILE EXAMPLE REPORT INTERNET SCANNER STARTING INTERNET SCANNER FOR THE FIRST TIME COMMAND-LINE OPTION SCANNING FROM THE GUI MODE SCANNING FROM THE CONSOLE MODE SCANNING FROM THE COMMAND-LINE MODE SAMPLE REPORT SECURITY THREAT AVOIDANCE TECHNOLOGY SCANNER STARTING STAT SCANNER FOR THE FIRST TIME TARGET SELECTION VULNERABILITY SELECTION COMMAND-LINE USAGE VULNERABILITY DISPLAY LOCAL INSTALLATION METHOD MOBILE INSTALLATION METHOD PROGRAM MODULES SYSTEM STATUS MODULES HARDWARE MODULES SYSTEM STATUS INTERNETWORKING MODULES TIGERBOX TOOLKIT TIGERBOX TOOLS TIGERBOX SCANNERS TIGERBOX PENETRATORS TIGERBOX SIMULATORS USING THE SESSION SNIFFERS PORTSPY COMMUNICATION SNIFFER TIGERWIPE ACTIVE PROCESSES PRACTICAL APPLICATION TRACING BACK WITH TIGERSUITE USING SECURITY ANALYSIS TOOLS FOR *NIX AND MAC OS X IDLE HOST SCANNING AND IP SPOOFING LINUX INSTALLATION AND CONFIGURATION OTHER INSTALLATIONS NESSUS SECURITY SCANNER INSTALLATION AND CONFIGURATION AUTOMATIC INSTALLATION CONFIGURING NESSUS SECURITY SCANNER STARTING THE SERVER DAEMON ADDITIONAL NOTES FOR LINUX AND SOLARIS USERS FOR MAC OS X USERS PLUGINS SCAN OPTIONS NMAP USING NMAP TCP SCANNING UDP SCANNING HALF-OPEN (STEALTH) SCANNING OPERATING SYSTEM FINGERPRINTING MIXING IT UP SAINT VULNERABILITY SCANNING WITH SAINT SAINT HOME DATA MANAGEMENT CONFIGURATION MANAGEMENT VULNERABILITIES HOST INFORMATION SEVERITY LEVELS USING SAINT REMOTELY THE CONFIG/PASSWD FILE THE COMMAND-LINE INTERFACE SCHEDULING SCANS USING CRON SUMMING UP SARA ADVANCED CONFIGURATIONS SARA DATABASE FORMAT TARGET CONFIGURATION AND STARTING A SCAN FROM THE COMMAND LINE VULNERABILITY ASSESSMENT COMPARATIVE ANALYSIS TARGET NETWORK SPECIFICATIONS RED HAT LINUX 73 PROFESSIONAL SUN SOLARIS 8 SPARC NT AND *NIX AUDITING CHECKLISTS WINDOWS NT SYSTEM SECURITY CHECKLIST VULNERABILITY SCANNER RESULTS AND COMPARISON WHAT’S NEXT FIREWALLS AND INTRUSION DETECTION SYSTEM SOFTWARE NETWORK MONITORS