Ethical Hacking Tools and Techniques

Jun 9 • General • 3675 Views • 1 Comment on Ethical Hacking Tools and Techniques

About Ethical Hacking

Ethical Hacking

Ethical Hacking conceptually is a mode of helping an organization in finding weak loop holes which might raise security threats. Ethical Hackers find a way to get through the organizations’ security system so that these flaws can be taken care of in order to improve the security and prevent the system from being exploited by external hackers.

Ethical Hacking has been constantly criticized as people believe hacking can never be ethical even if it has been done to protect an organization. Very few people know, that there is a vast difference between hackers and ethical hackers. Where hacking is actually a big cyber crime, an Ethical Hacker is at all ethical if and only if it follows a certain norms.

Norms to be followed by an Ethical Hacker:

1. One is supposed to posses permission (or a written consent) to get into the network.
2. One is supposed to respect and obey the privacy of the organization and should only be looking for security issues in the network.
3. One should not leave loop holes unreported in order to allow oneself or someone else to probe the network later on.
4. All security issues detected should be reported to the concerned authorities for further verifications.

Tools for Ethical Hacking

Also known as Penetration Testing, Ethical Hacking has been automated to a large extend with the development of various Ethical Hacking Tools and Techniques. Ethical Hackers use tools like Static Analysis and Dynamic Analysis.

Few of the best tools used in Ethical Hacking are as follows:

1. Nmap:

   

   Nmap

   Network Mapper (Nmap) is a powerful security scanner which produces a map of the network in order to detect the services and hosts in the network. This is done by sending packets to targets and analyzing the received packets.
   The software provides various features like service and operating system detection and host discovery.

   Features

   • Host Discovery
   • Port Scanning
   • Version Detection
   • OS Detection
   • Scriptable interaction with the target

2. Nessus:

   

   Nessus

   This is a free of cost vulnerability scanner and is the most popular tool being used worldwide.

   Operations

   • Vulnerabilities that allow hacker to access sensitive data
   • Misconfiguration
   • Default, common or few blank passwords in system. Hydra (external tool) can also be called by nessus for launching dictionary attack.
   • Denial of service using mangled packets against TCP/IP stack.
   • PCI DSS audit preparation.

3. Nikto:

   

   Nikto

   It is a web server scanner that tests for outdated server software, dangerous files/CGIs and other problems.

   Features

   This is an open source, free to use software which performs multiple tests on web servers for different items including 6700 vulnerable files/CGIs, version specific problems for over 270 servers, outdated files check for 1250 servers.

4. Kismet:

   

   Kismet

   It is a intrusion detection system, network detector and packet sniffer for 802.11 wireless LANs. It works with any raw monitoring mode supporting wireless card.

   Features

   • Basic IDS features
   • Log all sniffed packets
   • Fault detection
   • find as many networks as possible
   • logging of geographical coordinates

5. MetaSploit:

   

   MetaSploit

   This as a computer security project which checks securityvulnerabilities and does testing in order to provide information.

   Metasploit Framework

   • to choose and configure an exploit
   • To check if target system is susceptible to exploit
   • To choose and configure a payload
   • To choose encoding system so that IPS does ignore encoded payload
   • execute exploit

6. Netstumbler:

   

   Netstumbler

   This is a windows tool for the detection of Wireless LANs using 802.11g, 802.11a and 802.11b WLAN standards.

   Uses

   • to verify network connections
   • wardriving
   • to find poor coverage locations in WLAN
   • To detect wireless interference causes
   • To detect unauthorized access
   • aiming directional antennas

Ethical Hacking Techniques

Ethical Hacking Techniques

As non government organizations migrate their important functions to Internet, criminals have better opportunity to gain access to critical information through Web applications. There is an estimation that 75% of Web hacks happen at application level as it easily gives access to valuable business information. Attackers enter the web application thinking like programmers and identifying how is the application supposed to work and find out shortcuts used. The hacker interacts with the app and its infrastructure maliciously by the use of browser.
Understanding the ways employed by hackers in manipulating web applications and stealing credit card data etc, is the most important step in determining ways to facilitate security for Web application.

Certified Ethical Hacker

Certified Ethical Hacker

For a person seeking to pursue ethical hacking as a professional career option, one is supposed to posses the Certified Ethical Hacker professional certification.

Examination

This certification is obtained by clearing CEH exam after either a two years training for ATC or self study, also one should possess two years experience in Information Technology.

Although we have tried to bring Ethical Hacking Tools and Techniques through oureducation research and this research is conducted in Sep 2014 but by the time you decide to take decision in Ethical Hacking Tools and Techniques, teachers and management of coaching may change so for updated information please mail with contact number ( your number is safe with us) at our email id mail@oureducation.in. 

Please write your views and comments in the comment box below for quick and better response.Please go through the link and fill this form click here

Related Search:
Cyber Security
What is Ethical Hacking?
Learning Hacking
Ethical Hacking Certification Via Distance Learning by Indian Cyber Army

« Top Engineering Coaching Institutes in Rangareddy Top Engineering Colleges in Kannur »