Podcast
Questions and Answers
What is the primary goal of the pre-assessment phase in vulnerability management?
What is the primary goal of the pre-assessment phase in vulnerability management?
- To monitor systems continuously
- To create a baseline for vulnerability management (correct)
- To conduct a vulnerability scan
- To implement remediation strategies
Which step is NOT included in creating a baseline during the pre-assessment phase?
Which step is NOT included in creating a baseline during the pre-assessment phase?
- Prioritize critical assets
- Identify business processes
- Conduct penetration testing (correct)
- Understand network architecture
What is one of the tasks involved in the pre-assessment phase?
What is one of the tasks involved in the pre-assessment phase?
- Performing vulnerability scans
- Identifying controls already in place (correct)
- Verifying the assessment results
- Remediation of vulnerabilities
In which phase do organizations typically identify vulnerabilities in their infrastructure?
In which phase do organizations typically identify vulnerabilities in their infrastructure?
What should be prioritized when creating an inventory of all assets during the pre-assessment phase?
What should be prioritized when creating an inventory of all assets during the pre-assessment phase?
What is a key aspect of understanding before defining the scope of the assessment?
What is a key aspect of understanding before defining the scope of the assessment?
What is accomplished during the risk assessment post the vulnerability assessment phase?
What is accomplished during the risk assessment post the vulnerability assessment phase?
During the pre-assessment phase, what type of documents or procedures are designed?
During the pre-assessment phase, what type of documents or procedures are designed?
What is the primary role of NVD staff in relation to CVEs?
What is the primary role of NVD staff in relation to CVEs?
What is the purpose of the Common Weakness Enumeration (CWE)?
What is the purpose of the Common Weakness Enumeration (CWE)?
Which of the following best describes a vulnerability assessment?
Which of the following best describes a vulnerability assessment?
Who provides the information that NVD relies on for CVE attributes?
Who provides the information that NVD relies on for CVE attributes?
What is one of the main goals of conducting a vulnerability assessment?
What is one of the main goals of conducting a vulnerability assessment?
What is the maximum prison sentence for a first conviction of obtaining national security information under the CFAA?
What is the maximum prison sentence for a first conviction of obtaining national security information under the CFAA?
What penalty is specified for intentionally disrupting the operation of an automated data processing system under Law 07-03?
What penalty is specified for intentionally disrupting the operation of an automated data processing system under Law 07-03?
Under the CFAA, how long can a second conviction for accessing a computer to defraud and obtain value result in imprisonment?
Under the CFAA, how long can a second conviction for accessing a computer to defraud and obtain value result in imprisonment?
Which of the following acts is punishable by a maximum fine of 200,000 dirhams under Law 07-03?
Which of the following acts is punishable by a maximum fine of 200,000 dirhams under Law 07-03?
What is the penalty for trafficking in passwords under the CFAA for a first conviction?
What is the penalty for trafficking in passwords under the CFAA for a first conviction?
Which of the following actions is punishable by a minimum of one year under the CFAA?
Which of the following actions is punishable by a minimum of one year under the CFAA?
What is the maximum imprisonment term for a second conviction of extortion involving computers under the CFAA?
What is the maximum imprisonment term for a second conviction of extortion involving computers under the CFAA?
What is the punishment for fraudulently accessing part of an automated data processing system under Law 07-03?
What is the punishment for fraudulently accessing part of an automated data processing system under Law 07-03?
What does the ACK flag indicate in a network packet?
What does the ACK flag indicate in a network packet?
Which of the following statements is true regarding the FIN flag?
Which of the following statements is true regarding the FIN flag?
What is Zenmap known for?
What is Zenmap known for?
Which command is used for performing a scan with Nmap from within Metasploit?
Which command is used for performing a scan with Nmap from within Metasploit?
What type of scanning technique is provided by the Metasploit framework?
What type of scanning technique is provided by the Metasploit framework?
In the context of Metasploit, what is the TCP Port Scan auxiliary module used for?
In the context of Metasploit, what is the TCP Port Scan auxiliary module used for?
What functionality does the PSH flag provide?
What functionality does the PSH flag provide?
Which of the following commands would initiate a ping sweep in Metasploit?
Which of the following commands would initiate a ping sweep in Metasploit?
What does receiving an RST packet in response to an empty TCP ACK packet indicate?
What does receiving an RST packet in response to an empty TCP ACK packet indicate?
Which Nmap command is used to perform a TCP ACK ping?
Which Nmap command is used to perform a TCP ACK ping?
What is the purpose of the UDP ping technique in host discovery?
What is the purpose of the UDP ping technique in host discovery?
What response is expected from the targeted host when an ICMP 'echo request' is sent?
What response is expected from the targeted host when an ICMP 'echo request' is sent?
What kind of packets are used in the IP Protocol Ping technique?
What kind of packets are used in the IP Protocol Ping technique?
Which of the following commands would you use for an ICMP ping using Nmap?
Which of the following commands would you use for an ICMP ping using Nmap?
What type of errors might be returned if a target host is offline during a UDP ping?
What type of errors might be returned if a target host is offline during a UDP ping?
Which statement about TCP ACK Ping is accurate?
Which statement about TCP ACK Ping is accurate?
What protocol is used for remote desktop access?
What protocol is used for remote desktop access?
Which protocol uses TCP port 445?
Which protocol uses TCP port 445?
Which tool is specifically designed for service enumeration and includes modules for various services?
Which tool is specifically designed for service enumeration and includes modules for various services?
What is the default port for Microsoft's SQL Server protocol?
What is the default port for Microsoft's SQL Server protocol?
What syntax is used in Nmap for running a script against a specific port?
What syntax is used in Nmap for running a script against a specific port?
On which UDP ports does NetBIOS operate?
On which UDP ports does NetBIOS operate?
What does a NetBIOS name record type's 16th character represent?
What does a NetBIOS name record type's 16th character represent?
Nmap's Scripting Engine (NSE) is primarily used for which of the following?
Nmap's Scripting Engine (NSE) is primarily used for which of the following?
Flashcards
Hacking
Hacking
Getting into someone else's computer system without permission to find information or do something illegal.
Ethical Hacking
Ethical Hacking
Using hacking techniques for defensive or protective purposes.
Penetration Testing
Penetration Testing
Simulating a cyberattack on a system, network, or application to find vulnerabilities.
Ethical Hacking vs. Penetration Testing
Ethical Hacking vs. Penetration Testing
Signup and view all the flashcards
Ethical Hacker Requirements
Ethical Hacker Requirements
Signup and view all the flashcards
Penetration Testing Requirements
Penetration Testing Requirements
Signup and view all the flashcards
Importance of Ethical Hacking
Importance of Ethical Hacking
Signup and view all the flashcards
Security Risks
Security Risks
Signup and view all the flashcards
Vulnerabilities
Vulnerabilities
Signup and view all the flashcards
Security Posture
Security Posture
Signup and view all the flashcards
Tactics
Tactics
Signup and view all the flashcards
Techniques
Techniques
Signup and view all the flashcards
Procedures
Procedures
Signup and view all the flashcards
TTPs
TTPs
Signup and view all the flashcards
System Hacking
System Hacking
Signup and view all the flashcards
Network Hacking
Network Hacking
Signup and view all the flashcards
Information Gathering
Information Gathering
Signup and view all the flashcards
Scanning
Scanning
Signup and view all the flashcards
Enumeration
Enumeration
Signup and view all the flashcards
Vulnerability Analysis
Vulnerability Analysis
Signup and view all the flashcards
CFAA Penalties
CFAA Penalties
Signup and view all the flashcards
Moroccan Cybercrime Law
Moroccan Cybercrime Law
Signup and view all the flashcards
Unauthorized Access to Data System
Unauthorized Access to Data System
Signup and view all the flashcards
Disrupting or Falsifying Data System
Disrupting or Falsifying Data System
Signup and view all the flashcards
Data Modification or Deletion
Data Modification or Deletion
Signup and view all the flashcards
Penalties for Unauthorized Access
Penalties for Unauthorized Access
Signup and view all the flashcards
Penalties for System Disruption
Penalties for System Disruption
Signup and view all the flashcards
Penalties for Data Modification
Penalties for Data Modification
Signup and view all the flashcards
ACK Flag
ACK Flag
Signup and view all the flashcards
FIN Flag
FIN Flag
Signup and view all the flashcards
URG Flag
URG Flag
Signup and view all the flashcards
PSH Flag
PSH Flag
Signup and view all the flashcards
RST Flag
RST Flag
Signup and view all the flashcards
Metasploit Framework
Metasploit Framework
Signup and view all the flashcards
Nmap
Nmap
Signup and view all the flashcards
Zenmap
Zenmap
Signup and view all the flashcards
What is the NVD?
What is the NVD?
Signup and view all the flashcards
What does the NVD do?
What does the NVD do?
Signup and view all the flashcards
What is CWE?
What is CWE?
Signup and view all the flashcards
What is a vulnerability assessment?
What is a vulnerability assessment?
Signup and view all the flashcards
Why are vulnerability assessments important?
Why are vulnerability assessments important?
Signup and view all the flashcards
What is TCP ACK Ping?
What is TCP ACK Ping?
Signup and view all the flashcards
What is UDP Ping?
What is UDP Ping?
Signup and view all the flashcards
What is ICMP Ping?
What is ICMP Ping?
Signup and view all the flashcards
What is IP Protocol Ping?
What is IP Protocol Ping?
Signup and view all the flashcards
Empty TCP SYN Packet
Empty TCP SYN Packet
Signup and view all the flashcards
RST Packet
RST Packet
Signup and view all the flashcards
Nmap -sn
Nmap -sn
Signup and view all the flashcards
Nmap -PS
Nmap -PS
Signup and view all the flashcards
What is SNMP used for?
What is SNMP used for?
Signup and view all the flashcards
What does LDAP access?
What does LDAP access?
Signup and view all the flashcards
What is SMB used for?
What is SMB used for?
Signup and view all the flashcards
What is the purpose of NFS?
What is the purpose of NFS?
Signup and view all the flashcards
What is RDP used for?
What is RDP used for?
Signup and view all the flashcards
What is Nmap used for?
What is Nmap used for?
Signup and view all the flashcards
How does Metasploit help with enumeration?
How does Metasploit help with enumeration?
Signup and view all the flashcards
What is NetBIOS enumeration?
What is NetBIOS enumeration?
Signup and view all the flashcards
Vulnerability Assessment
Vulnerability Assessment
Signup and view all the flashcards
Pre-Assessment Phase
Pre-Assessment Phase
Signup and view all the flashcards
Post-Assessment Phase
Post-Assessment Phase
Signup and view all the flashcards
Scope and Asset Identification
Scope and Asset Identification
Signup and view all the flashcards
Vulnerability Scan
Vulnerability Scan
Signup and view all the flashcards
Risk Assessment
Risk Assessment
Signup and view all the flashcards
Remediation
Remediation
Signup and view all the flashcards
Verification
Verification
Signup and view all the flashcards
Study Notes
Abdelmalek Essaadi University
- Ethical Hacking course
- GCyB - II
- 2024-2025
- Instructor: Youssef SBAYTRI
Ethical Hacking Topics
- Introduction to hacking
- Footprinting/Information gathering
- Scanning and Enumeration
- Vulnerability Analysis
- Systems Hacking
- Networks Hacking
What is Hacking?
- The activity of getting into someone else's computer system without permission, to gain information or do illegal actions.
- The use of unconventional or illicit means to gain unauthorized access to a digital device, computer system, or computer network.
- Refers to unauthorized access to a system or network, often to exploit data or manipulate its normal behavior.
- Identifying and exploiting weaknesses in a computer system or network, usually to gain unauthorized access to personal or organizational data.
What is Ethical Hacking ?
- The use of hacking techniques for defensive or protective purposes.
- Ethical hackers use their skills to test the security of computer systems, networks, or applications.
- The term “ethical hacking” is usually used interchangeably with penetration testing.
- Penetration testing (Pentesting) is the practice of simulating a cyber attack on a computer system, network, or application to identify vulnerabilities
- Ethical hacking and penetration testing are legal as long as they are done with the permission and knowledge of the system owner.
Key Differences Between Ethical Hacking and Penetration Testing
- Ethical Hacking: Less defined scope of work. Utilizes any attack vector to breach a system. Has visibility to organization's infrastructure. Not a requirement for compliance frameworks. Should have detailed knowledge of TTP (Tactics, Techniques, and Procedures) and various tools. No mandatory requirement to be an expert in report writing.
- Penetration Testing: Well-defined scope of work. Attack vectors defined before testing. Limited/no information of organization's infrastructure. Required for some compliance frameworks. Requires sound knowledge of the dedicated domain. Comes with fool-proof report writing.
Why Ethical Hacking is Necessary
- To prevent hackers from gaining access to an organization's systems and data.
- To identify and assess vulnerabilities in systems in order to evaluate their potential security risks.
- To provide adequate preventive measures to avoid security breaches.
- To assess and harden the organization's security posture.
- To enhance security awareness at all levels.
Required Skills of an Ethical Hacker
- Profound familiarity with leading operating environments such as Windows, Linux, and MacOS
- In-depth knowledge of networking concepts, technologies, and related hardware and software.
- The knowledge of security areas and related issues.
- Ability to quickly learn and adapt new technologies.
- Strong work ethic and good problem-solving and communication skills
- Commitment to an organization's security policies.
- Awareness of local standards and laws.
Hacking Methodologies
- Learning hacking methodologies and frameworks helps ethical hackers understand the different phases.
- This course presents various hacking methodologies such as:
- EC-Council CEH methodology
- Cyber Kill Chain methodology
- MITRE attack framework
CEH Hacking Methodology
- Footprinting
- Scanning
- Enumeration
- Vulnerability analysis
- Gaining Access
- Escalating privileges
- Maintaining Access
- Clearing Logs
Cyber Kill Chain Methodology
- Reconnaissance
- Gathering email addresses, personal information, etc.
- Delivery
- Delivering weaponized payload to the victim via email, USB, etc.
- Weaponization
- Coupling exploit with backdoor into deliverable payload
- Exploitation
- Exploiting a vulnerability
- Installation
- Installing malware on the asset
- Actions on Objectives
- Performing actions to achieve intended objectives
- Command & Control (C2)
- Command channel for remote manipulation of victim
MITRE ATT&CK Framework
- A globally accessible knowledge base of adversary tactics and techniques based on real-world observations.
- Comprises three collections of tactics and techniques (Enterprise, Mobile, and ICS).
Laws and Regulations
- Laws are a system of rules and guidelines that are enforced by a country/community.
- Ethical hacking involves probing systems.
- Understanding relevant laws, cybersecurity regulations (e.g., PCI-DSS, HIPAA), and industry standards ensures compliance and credibility. (Additional subsections on specific cyber laws are also included).
Footprinting and Reconnaissance
- Collecting maximum information about a target organization including infrastructure, assets, and personnel.
- Passive Footprinting: Collecting information without direct interaction.
- Active Footprinting: Collecting information with direct interaction.
Types of gathered information
- Organization information (employee details, phone numbers, locations)
- Network information (domain names, networks, IP addresses of systems)
- System information (OS, location of servers, email addresses, usernames, passwords)
Footprinting Techniques
-
Through Search Engines
- Google Dorking
- Advanced Operators
- Exploit Databases
-
Through Web Services
-
Website Footprinting
-
Email Footprinting
-
Whois and DNS Footprinting
-
Social Engineering
-
Eavesdropping, Shoulder Surfing, Dumpster Diving, Impersonation
OSINT Framework
- An open-source intelligence gathering framework.
- Focused on collecting information from free tools or resources.
- Lists various tools arranged by category.
Footprinting Countermeasures
- Security Training
- Password Policies
- Secure Data Handling
- Removing ex-employees and accounts
- Internet Registrar Sanitation
- Blocking External Access
- Monitoring
Vulnerability Analysis
- Introduction to vulnerabilities (weaknesses)
- Classification of vulnerabilities (misconfigurations, application flaws, outdated software, design flaws, etc.)
- Vulnerability research methods
- Vulnerability Scoring systems and Databases (e.g., CVSS)
Vulnerability Assessment
- Vulnerability Assessment process stages (pre-assessment, assessment, post-assessment)
- Types of Vulnerability Assessment (Active, Passive, External, Internal, etc.)
- Vulnerabilities Assessment tools
Network Hacking
- Network sniffing
- MAC flooding
- DHCP attacks
- ARP Spoofing Attacks
- DNS Posioning
- Proxy Server DNS poisoning
Wireless Networks
- Wireless concepts
- Wireless encryption
- Wireless threats
- Access Control
- Integrity
- Confidentiality
- Availability
- Wireless hacking methodology
- Wireless hacking tools
- Wireless hacking countermeasures
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Related Documents
Description
This quiz covers the essential topics from the Ethical Hacking course at Abdelmalek Essaadi University for the academic year 2024-2025. It includes questions on hacking fundamentals, vulnerability analysis, and techniques used by ethical hackers. Assess your knowledge on protecting systems and networks from unauthorized access.
