HACKING EXPOSED LINUX: LINUX SECURITY SECRETS AND SOLUTIONS
CONTENTS PART I SECURITY AND CONTROLS ? APPLYING SECURITY CASE STUDY FREE FROM RISK THE FOUR COMPREHENSIVE CONSTRAINTS THE ELEMENTS OF SECURITY SUMMARY APPLYING INTERACTIVE CONTROLS THE FIVE INTERACTIVE CONTROLS APPLYING PROCESS CONTROLS THE FIVE PROCESS CONTROLS PART II HACKING THE SYSTEM ? LOCAL ACCESS CONTROL PHYSICAL ACCESS TO LINUX SYSTEMS CONSOLE ACCESS PRIVILEGE ESCALATION SUDO FILE PERMISSIONS AND ATTRIBUTES CHROOTING PHYSICAL ACCESS, ENCRYPTION, AND PASSWORD RECOVERY VOLATILE DATA DATA NETWORKS SECURITY NETWORK VISIBILITY NETWORK AND SYSTEMS PRO? LING NETWORK ARCHITECTURE COVERT COMMUNICATIONS AND CLANDESTINE ADMINISTRATION UNCONVENTIONAL DATA ATTACK VECTORS OVERVIEW OF PSTN, ISDN, AND PSDN ATTACK VECTORS INTRODUCING PSTN INTRODUCING ISDN INTRODUCING PSDN AND X25 COMMUNICATION NETWORK ATTACKS TESTS TO PERFORM PSTN ISDN PSDN TOOLS TO USE PAW AND PAWS INTELLIGENT WARDIALER SHOKDIAL WARD THCSCAN NEXT GENERATION PSDN TESTING TOOLS ADMX25 SUN SOLARIS MULTITHREAD AND MULTICHANNEL X25 SCANNER BY ANONYMOUS VUDU TSCAN COMMON BANNERS HOW X25 NETWORKS WORK BASIC ELEMENTS CALL SETUP ERROR CODES X3/X28 PAD ANSWER CODES X25 ADDRESSING FORMAT DCC ANNEX LIST KEY POINTS FOR GETTING X25 ACCESS X28 DIALUP WITH NUI X28 DIALUP VIA REVERSE CHARGE PRIVATE X28 PAD VIA A STANDARD OR TOLL-FREE PSTN OR ISDN NUMBER INTERNET TO X25 GATEWAYS CISCO SYSTEMS VAX/VMS OR AXP/OPENVMS *NIX SYSTEMS VOICE OVER IP VOIP ATTACK TAXONOMY NETWORK ATTACKS SYSTEM ATTACKS SIGNALING ATTACKS INTRODUCTION TO VOIP TESTING TOOLS TRANSPORT ATTACKS VOIP SECURITY CHALLENGES FIREWALLS AND NAT ENCRYPTION WIRELESS NETWORKS THE STATE OF THE WIRELESS WIRELESS HACKING PHYSICS: RADIO FREQUENCY RF SPECTRUM ANALYSIS EXPLOITING 80211 THE HACKER WAY WIRELESS AUDITING ACTIVITIES AND PROCEDURES AUDITING WIRELESS POLICIES INPUT/OUTPUT DEVICES ABOUT BLUETOOTH BLUETOOTH PRO? LES ENTITIES ON THE BLUETOOTH PROTOCOL STACK RFID—RADIO FREQUENCY IDENTI? CATION HISTORY OF RFID: LEON THEREMIN AND “THE THING” IDENTI? CATION-FRIEND-OR-FOE RFID COMPONENTS PURPOSE OF RFID PASSIVE TAGS ACTIVE TAGS RFID USES RFID-ENABLED PASSPORTS TICKETING OTHER CURRENT RFID USES RFID FREQUENCY STANDARDS RFID TECHNOLOGY STANDARDS RFID ATTACKS RFID HACKER’S TOOLKIT IMPLEMENTING RFID SYSTEMS USING LINUX RFID READERS CONNECTED TO A LINUX SYSTEM RFID READERS WITH EMBEDDED LINUX LINUX SYSTEMS AS BACKEND/MIDDLEWARE/DATABASE SERVERS IN RFID SYSTEMS LINUX AND RFID-RELATED PROJECTS AND PRODUCTS OPENMRTD OPENPCD OPENPICC MAGELLAN TECHNOLOGY RFIDIOT RFID GUARDIAN OPENBEACON OMNIKEY LINUX RFID KIT EMANATION ATTACKS VAN ECK PHREAKING OTHER “SIDE-CHANNEL” ATTACKS TRUSTED COMPUTING INTRODUCTION TO TRUSTED COMPUTING PLATFORM ATTACK TAXONOMY HARDWARE ATTACKS LOW-LEVEL SOFTWARE ATTACKS SYSTEM SOFTWARE ATTACKS APPLICATION ATTACKS GENERAL SUPPORT FOR TRUSTED COMPUTING APPLICATIONS TPM DEVICE DRIVER TROUSERS TPM EMULATOR JTSS WRAPPER TPM MANAGER EXAMPLES OF TRUSTED COMPUTING APPLICATIONS ENFORCER TRUSTEDGRUB (TGRUB) TPM KEYRING TURAYAVPN AND TURAYACRYPT OPEN TRUSTED COMPUTING TCG INDUSTRIAL APPLICATIONS PART III HACKING THE USERS ? WEB APPLICATION HACKING ENUMERATION ACCESS AND CONTROLS EXPLOITATION INSUF? CIENT DATA VALIDATION WEB 20 ATTACKS TRUST MANIPULATION TRUST AND AWARENESS HIJACKING MAN-IN-THE-MIDDLE WEB INFRASTRUCTURE ATTACKS MAIL SERVICES SMTP BASICS UNDERSTANDING SENDER AND ENVELOPE SENDER EMAIL ROUTING SMTP ATTACK TAXONOMY FRAUD ALTERATION OF DATA OR INTEGRITY DENIAL OF SERVICE OR AVAILABILITY NAME SERVICES DNS BASICS DNS AND IPV6 THE SOCIAL ASPECT: DNS AND PHISHING WHOIS AND DOMAIN REGISTRATION AND DOMAIN HIJACKING THE TECHNICAL ASPECT: SPOO? NG, CACHE POISONING, AND OTHER ATTACKS BIND HARDENING PART IV CARE AND MAINTENANCE ? RELIABILITY: STATIC ANALYSIS OF C CODE FORMAL VS SEMIFORMAL METHODS SEMIFORMAL METHODS FORMAL METHODS STATIC ANALYSIS C CODE STATIC ANALYSIS ANALYZING C CODE USING HOARE LOGICS THE WEAKEST PRECONDITION CALCULUS VERI? CATION CONDITIONS TERMINATION METHODOLOGY SOME C ANALYSIS TOOLS TOOLS BASED ON ABSTRACT INTERPRETATION TOOLS BASED ON HOARE LOGICS TOOLS BASED ON MODEL CHECKING ADDITIONAL REFERENCES SECURITY TWEAKS IN THE LINUX KERNEL LINUX SECURITY MODULES CRYPTOAPI NETFILTER ENHANCEMENTS ENHANCED WIRELESS STACK FILE SYSTEM ENHANCEMENT POSIX ACCESS CONTROL LISTS NFSV4 ADDITIONAL KERNEL RESOURCES MAN PAGES ONLINE ONLINE DOCUMENTATION OTHER REFERENCES I SECURITY AND CONTROLS THIS PAGE INTENTIONALLY LEFT BLANK