How to Think Like a Big Hacker

Step-by-Step Guide

1. 1

   Step 1: Identify possible exploits and their domain names

   Consider the size of the target, the number of potential entry points and the security mechanisms that may be in place.
   
   A hacker should think about company names and subsidiaries, phone numbers, domain names and their IP networks.
2. 2

   Step 2: gathering as much information as you can to create a footprint analysis.

   For example, identify startup companies that most likely have weak security, especially those recently acquired by large companies.
   
   Hacking into these smaller companies may provide information about the unrestricted virtual private networks the larger target companies. , Many TCP and UDP services send data that will identify the running application as a response to random data.
   
   You can find exploits by cross-referencing the data you find in vulnerability databases, like SecurityFocus. , You will need a password and user account, which is usually acquired through a sneak attack.
   
   That is, many hackers will take information from a company website and directly contact an employee by phone, pretending to be the help desk or a web technician.
   
   Many unsuspecting employees will give valuable information to a person who sounds authoritative. , For example, you can enter with the user's name and password and replace an everyday piece of software like Notepad.exe with a piece of Trojan code.
   
   This code can allow a hacker to become an administrator in the system, so that the next time that the hacker logs on, they will automatically be added to the administrators' group and will have instant access to "admin only" information.
3. 3

   Step 3: Pay attention to "back door" entry points.

4. 4

   Step 4: Connect to the listening UDP and TCP ports of your possible targets and send random data

5. 5

   Step 5: attempting to determine what versions of File Transfer Protocol

6. 6

   Step 6: or mail servers that they may be using.

7. 7

   Step 7: Think about how you will gain access to the target once you have learned the basic information.

8. 8

   Step 8: Take the username and password obtained and "Trojan" the system.

Detailed Guide

About the Author