INTRODUCTION TO HACKING (post 2)

                                              INTRODUCTION TO HACKING (post 2)

 PLANNING AN ATTACK 

 How to plan  and perform an attack?

                                            

                                                     

      First thing you need to think about is what are you trying to get out of the attack or hack.The people usually think that the hackers steal their user names and password of their bank accounts but in real thing is the hacker generally hack what they are profitable in that means they get the money by hacking not the bank accounts instead of that the things like the accounts on Internet like:-The pay-pal account, amazon.com accounts, or e-bay etc. or like the e-commerce sites why people put in their all credit card information.

      That type of information we can use to get the  money  from the client or victim.The other thing is that while hacking you need to understand what type of data are you trying to accomplish or acquire which is valuable to you. (like :- snapshots,or user names/passwords,or their instant messaging chats).

                                                     

 Now,when you are thinking about the hacking or planning the attacks you have to think about how you are going to do the hack.

1.     Are you trying to do the massive attack(something to deploy viruses,malwares,spy-wares or something like the crap whatever information on the Internet ).

2.     Are you trying to do the semi targeted attack or targeted attack.

Think about how you or others will plan and perform a hack attack to maximise what you get out of it. Attack styles vary widely and understanding this will be helpful in protecting yourself:

• ·         Some hackers prepare far in advance of an attack. They gather small bits of information and methodically carry out their hacks. These hackers are the most difficult to track.
• ·         Other hackers - usually the inexperienced script kiddies — act before they think through the consequences. Such hackers may try, for example, to telnet directly into an organization’s router without hiding their identities. Other hackers may try to launch a DOS attack against a Microsoft Exchange server without first determining the version of Exchange or the patches that are installed. These hackers usually are caught.
• ·         Malicious users are all over the map. Some can be quite savvy based on their knowledge of the network and of how IT operates inside the organisation. Others go poking and prodding around into systems they shouldn’t be in — or shouldn’t have had access to in the first place — and often do stupid things that lead security or network administrators back to them.

NOTE:-Hackers who network with one another use private message boards, anonymous e-mail addresses, hacker websites, and Internet Relay Chat (IRC). You can log in to many of these sites to see what hackers are doing.

PROTECTING YOURSELF

                                                         

Whatever approach they take, most malicious attackers prey on ignorance. They know the following aspects of real-world security:

• ·         The majority of computer systems aren’t managed properly. The computer systems aren’t properly patched, hardened, or monitored. Attackers can often fly below the radar of the average firewall, an intrusion prevention system (IPS), or an access control system. This is especially true for malicious users whose actions are often not monitored at all while, at the same time, they have full access to the very environment they can exploit.
• ·         Most network and security administrators simply can’t keep up with the deluge of new vulnerabilities and attack methods. These people often have too many tasks to stay on top of and too many other fires to put out. Network and security administrators may also fail to notice or respond to security events because of poor time management and goal setting, but that’s for another discussion.
• ·         Information systems grow more complex every year. This is yet another reason why overburdened administrators find it difficult to know what’s happening across the wire and on the hard drives of all their systems. Mobile devices such as laptops, tablets, and phones are making things exponentially worse.Time is an attacker’s friend — and it’s almost always on his or her side. By attacking through computers rather than in person, hackers have more control over the timing for their attacks:
• ·         Attacks can be carried out slowly, making them hard to detect.
• ·         Attacks are frequently carried out after typical business hours, often in the middle of the night, and from home, in the case of malicious users. Defenses are often weaker after hours — with less physical security and less intrusion monitoring — when the typical network administrator (or security guard) is sleeping.
• ·         Leave No traces of your activities on your computer, when you boot up a computer they create temporary file or log files etc.after the completion of attack most people don't  delete those files the thing happens if somebody try to track back to you they get the warrant back to your computer and they can open up system and  find all the files of attacking with timing when they took place.Make sure you don't leave any traces back and the best way to get out  from this problem is to use somebody Else's computer.

       

                                                                  -----INTRODUCTION TO HACKING (post 1)