BELEATED HACK ATTACKS
TABLE OF CONTENTS PART ONE IN THE BEGINNING 1 CHAPTER 1 UNDERSTANDING COMMUNICATION PROTOCOLS 2 CHAPTER 2 NETWARE AND NETBIOS TECHNOLOGY 30 PART TWO PUTTING IT ALL TOGETHER 41 CHAPTER 3 UNDERSTANDING COMMUNICATION MEDIUMS 42 PART THREE UNCOVERING VULNERABILITIES 61 ACT 1 A LITTLE TERMINOLOGY 62 CHAPTER 4 WELL KNOWN PORTS AND THEIR SERVICES 69 CHAPTER 5 DISCOVERY AND SCANNING TECHNIQUES 116 PART ONE IN THE BEGINNING 1 CHAPTER 1 UNDERSTANDING COMMUNICATION PROTOCOLS APPROXIMATELY 30 YEARS AGO COMMUNICATION PROTOCOLS WERE DEVELOPED SO THAT INDIVIDUAL STATIONS COULD BE CONNECTED TO FORM A LOCAL AREA NETWORK LAN THIS GROUP OF COMPUTERS AND OTHER DEVICES DISPERSED OVER A RELATIVELY LIMITED AREA AND CONNECTED BY A COMMUNICATIONS LINK ENABLED ANY STATION TO INTERACT WITH ANY OTHER ON THE NETWORK THESE NETWORKS ALLOWED STATIONS TO SHARE RESOURCES SUCH AS LASER PRINTERS AND LARGE HARD DISKS THIS CHAPTER AND CHAPTER 2 DISCUSS THE COMMUNICATION PROTOCOLS THAT BECAME A SET OF RULES OR STANDARDS DESIGNED TO ENABLE THESE STATIONS TO CONNECT WITH ONE ANOTHER AND TO EXCHANGE INFORMATION THE PROTOCOL GENERALLY ACCEPTED FOR STANDARDIZING OVERALL COMPUTER COMMUNICATIONS IS A SEVEN LAYER SET OF HARDWARE AND SOFTWARE GUIDELINES KNOWN AS THE OPEN SYSTEMS INTERCONNECTION OSI MODEL BEFORE ONE CAN ACCURATELY DEFINE IMPLEMENT AND TEST HACK INTO SECURITY POLICIES IT IS IMPERATIVE TO HAVE A SOLID UNDERSTANDING OF THESE PROTOCOLS THESE CHAPTERS WILL COVER THE FOUNDATION OF RULES AS THEY PERTAIN TO TCP IP ARP UDP ICMP IPX SPX NETBIOS AND NETBEUI A BRIEF HISTORY OF THE INTERNET DURING THE 1960S THE U S DEPARTMENT OF DEFENSE S ADVANCED RESEARCH PROJECTS AGENCY ARPA LATER CALLED DARPA BEGAN AN EXPERIMENTAL WIDE AREA NETWORK WAN THAT SPANNED THE UNITED STATES CALLED ARPANET ITS ORIGINAL GOAL WAS TO ENABLE GOVERNMENT AFFILIATIONS EDUCATIONAL INSTITUTIONS AND RESEARCH LABORATORIES TO SHARE COMPUTING RESOURCES AND TO COLLABORATE VIA FILE SHARING AND ELECTRONIC MAIL IT DIDN T TAKE LONG HOWEVER FOR DARPA TO REALIZE THE ADVANTAGES OF ARPANET AND THE POSSIBILITIES OF PROVIDING THESE NETWORK LINKS ACROSS THE WORLD BY THE 1970S DARPA CONTINUED AGGRESSIVELY FUNDING AND CONDUCTING RESEARCH ON ARPANET TO MOTIVATE THE DEVELOPMENT OF THE FRAMEWORK FOR A COMMUNITY OF NETWORKING TECHNOLOGIES THE RESULT OF THIS FRAMEWORK WAS THE TRANSMISSION CONTROL PROTOCOL INTERNET PROTOCOL TCP IP SUITE A PROTOCOL IS BASICALLY DEFINED AS A SET OF RULES FOR COMMUNICATION OVER A COMPUTER NETWORK TO INCREASE ACCEPTANCE OF THE USE OF PROTOCOLS DARPA DISCLOSED A LESS EXPENSIVE IMPLEMENTATION OF THIS PROJECT TO THE COMPUTING COMMUNITY THE UNIVERSITY OF CALIFORNIA AT BERKELEY S BERKELEY SOFTWARE DESIGN BSD UNIX SYSTEM WAS A PRIMARY TARGET FOR THIS EXPERIMENT DARPA FUNDED A COMPANY CALLED BOLT BERANEK AND NEWMAN INC BBN TO HELP DEVELOP THE TCP IP SUITE ON BSD UNIX THIS NEW TECHNOLOGY CAME ABOUT DURING A TIME WHEN MANY ESTABLISHMENTS WERE IN THE PROCESS OF DEVELOPING LOCAL AREA NETWORK TECHNOLOGIES TO CONNECT TWO OR MORE COMPUTERS ON A COMMON SITE BY JANUARY 1983 ALL OF THE COMPUTERS CONNECTED ON ARPANET WERE RUNNING THE NEW TCP IP SUITE FOR COMMUNICATIONS IN 1989 CONSEIL EUROPE N POUR LA RECHERCHE NUCL AIRE CERN EUROPE S HIGH ENERGY PHYSICS LABORATORY INVENTED THE WORLD WIDE WEB WWW CERN S PRIMARY OBJECTIVE FOR THIS DEVELOPMENT WAS TO GIVE PHYSICISTS AROUND THE GLOBE THE MEANS TO COMMUNICATE MORE EFFICIENTLY USING HYPERTEXT AT THAT TIME HYPERTEXT ONLY INCLUDED DOCUMENT TEXT WITH COMMAND TAGS WHICH WERE ENCLOSED IN ANGLE BRACKETS THE TAGS WERE USED TO MARKUP THE DOCUMENT S LOGICAL ELEMENTS FOR EXAMPLE THE TITLE HEADERS AND PARAGRAPHS THIS SOON DEVELOPED INTO A LANGUAGE BY WHICH PROGRAMMERS COULD GENERATE VIEWABLE PAGES OF INFORMATION CALLED HYPERTEXT MARKUP LANGUAGE HTML IN FEBRUARY 1993 THE NATIONAL CENTER FOR SUPERCOMPUTING APPLICATIONS AT THE UNIVERSITY 2 OF ILLINOIS NCSA PUBLISHED THE LEGENDARY BROWSER MOSAIC WITH THIS BROWSER USERS COULD VIEW HTML GRAPHICALLY PRESENTED PAGES OF INFORMATION AT THE TIME THERE WERE APPROXIMATELY 50 WEB SERVERS PROVIDING ARCHIVES FOR VIEWABLE HTML NINE MONTHS LATER THE NUMBER HAD GROWN TO MORE THAN 500 APPROXIMATELY ONE YEAR LATER THERE WERE MORE THAN 10 000 WEB SERVERS IN 84 COUNTRIES COMPRISING THE WORLD WIDE WEB ALL RUNNING ON ARPANET S BACKBONE CALLED THE INTERNET TODAY THE INTERNET PROVIDES A MEANS OF COLLABORATION FOR MILLIONS OF HOSTS ACROSS THE WORLD THE CURRENT BACKBONE INFRASTRUCTURE OF THE INTERNET CAN CARRY A VOLUME WELL OVER 45 MEGABITS PER SECOND MB ABOUT ONE THOUSAND TIMES THE BANDWIDTH OF THE ORIGINAL ARPANET BANDWIDTH IS A MEASURE OF THE AMOUNT OF TRAFFIC A MEDIA CAN HANDLE AT ONE TIME IN DIGITAL COMMUNICATION THIS DESCRIBES THE AMOUNT OF DATA THAT CAN BE TRANSMITTED OVER A COMMUNICATION LINE AT BITS PER SECOND COMMONLY ABBREVIATED AS BPS INTERNET PROTOCOL THE INTERNET PROTOCOL IP PART OF THE TCP IP SUITE IS A FOUR LAYER MODEL SEE FIGURE 1 1 IP IS DESIGNED TO INTERCONNECT NETWORKS TO FORM AN INTERNET TO PASS DATA BACK AND FORTH IP CONTAINS ADDRESSING AND CONTROL INFORMATION THAT ENABLES PACKETS TO BE ROUTED THROUGH THIS INTERNET A PACKET IS DEFINED AS A LOGICAL GROUPING OF INFORMATION WHICH INCLUDES A HEADER CONTAINING CONTROL INFORMATION AND USUALLY USER DATA THE EQUIPMENT THAT IS ROUTERS THAT ENCOUNTER THESE PACKETS STRIP OFF AND EXAMINE THE HEADERS THAT CONTAIN THE SENSITIVE ROUTING INFORMATION THESE HEADERS ARE MODIFIED AND REFORMULATED AS A PACKET TO BE PASSED ALONG PACKET HEADERS CONTAIN CONTROL INFORMATION ROUTE SPECIFICATIONS AND USER DATA THIS INFORMATION CAN BE COPIED MODIFIED AND OR SPOOFED MASQUERADED BY HACKERS ONE OF THE IP S PRIMARY FUNCTIONS IS TO PROVIDE A PERMANENTLY ESTABLISHED CONNECTION TERMED CONNECTIONLESS UNRELIABLE BEST EFFORT DELIVERY OF DATAGRAMS THROUGH AN INTERNETWORK DATAGRAMS CAN BE DESCRIBED AS A LOGICAL GROUPING OF INFORMATION SENT AS A NETWORK LAYER UNIT OVER A COMMUNICATION MEDIUM IP DATAGRAMS ARE THE PRIMARY INFORMATION UNITS IN THE INTERNET ANOTHER OF IP S PRINCIPAL RESPONSIBILITIES IS THE FRAGMENTATION AND REASSEMBLY OF DATAGRAMS TO SUPPORT LINKS WITH DIFFERENT TRANSMISSION SIZES FIGURE 1 1 THE FOUR LAYER TCP IP MODEL 3 BELEATED HACK ATTACKS