Hacking : The Next Generation - Nitesh Dhanjani

Instant online reading.
Don't wait for delivery!

Hacking

The Next Generation

By: Nitesh Dhanjani

Write A Review

Paperback | 29 September 2009

At a Glance

Paperback
298 Pages

Dimensions(cm)
23.2 x 17.9 x 1.7

Paperback

RRP $76.00

$39.75

48%OFF

or 4 interest-free payments of $9.94 with

Ships in 15 to 25 business days

With the advent of rich Internet applications, the explosion of social media, and the increased use of powerful cloud computing infrastructures, a new generation of attackers has added cunning new techniques to its arsenal. For anyone involved in defending an application or a network of systems, Hacking: The Next Generation is one of the few books to identify a variety of emerging attack vectors. You'll not only find valuable information on new hacks that attempt to exploit technical flaws, you'll also learn how attackers take advantage of individuals via social networking sites, and abuse vulnerabilities in wireless technologies and cloud infrastructures. Written by seasoned Internet security professionals, this book helps you understand the motives and psychology of hackers behind these attacks, enabling you to better prepare and defend against them. Learn how "inside out" techniques can poke holes into protected networks Understand the new wave of "blended threats" that take advantage of multiple application vulnerabilities to steal corporate data Recognize weaknesses in today's powerful cloud infrastructures and how they can be exploited Prevent attacks against the mobile workforce and their devices containing valuable data Be aware of attacks via social networking sites to obtain confidential information from executives and their assistants Get case studies that show how several layers of vulnerabilities can be used to compromise multinational corporations

Shipping

	Standard Shipping	Express Shipping
Metro postcodes:	$9.99	$14.95
Regional postcodes:	$9.99	$14.95
Rural postcodes:	$9.99	$14.95

Orders over $89.00 qualify for free shipping.

How to return your order

At Booktopia, we offer hassle-free returns in accordance with our returns policy. If you wish to return an item, please get in touch with Booktopia Customer Care.

Additional postage charges may be applicable.

Defective items

If there is a problem with any of the items received for your order then the Booktopia Customer Care team is ready to assist you.

For more info please visit our Help Centre.

You Can Find This Book In

Non-Fiction Computing & I.T.Computer Networking & Communications Network Security Computer Security Computer Fraud & Hacking O'Reilly Data Encryption Computer Viruses Booktopia Publisher Services John Wiley & Sons Publishers UK

Preface	p. ix
Intelligence Gathering: Peering Through the Windows to Your Organization	p. 1
Physical Security Engineering	p. 1
Dumpster Diving	p. 2
Hanging Out at the Corporate Campus	p. 3
Google Earth	p. 5
Social Engineering Call Centers	p. 6
Search Engine Hacking	p. 7
Google Hacking	p. 8
Automating Google Hacking	p. 9
Extracting Metadata from Online Documents	p. 9
Searching for Source Code	p. 12
Leveraging Social Networks	p. 13
Facebook and MySpace	p. 13
Twitter	p. 16
Tracking Employees	p. 17
Email Harvesting with theHarvester	p. 18
Resumés	p. 19
Job Postings	p. 21
Google Calendar	p. 23
What Information Is Important?	p. 24
Summary	p. 25
Inside-Out Attacks: The Attacker Is the Insider	p. 27
Man on the Inside	p. 28
Cross-Site Scripting (XSS)	p. 28
Stealing Sessions	p. 29
Injecting Content	p. 30
Stealing Usernames and Passwords	p. 32
Advanced and Automated Attacks	p. 36
Cross-Site Request Forgery (CSRF)	p. 39
Inside-Out Attacks	p. 39
Content Ownership	p. 50
Abusing Flash's crossdomain.xml	p. 51
Abusing Java	p. 52
Advanced Content Ownership Using GIFARs	p. 55
Stealing Documents from Online Document Stores	p. 57
Stealing Files from the Filesystem	p. 64
Safari File Stealing	p. 65
Summary	p. 70
The Way It Works: There Is No Patch	p. 71
Exploiting Telnet and FTP	p. 72
Sniffing Credentials	p. 72
Brute-Forcing Your Way In	p. 74
Hijacking Sessions	p. 75
Abusing SMTP	p. 76
Snooping Emails	p. 78
Spoofing Emails to Perform Social Engineering	p. 79
Abusing ARP	p. 80
Poisoning the Network	p. 81
Cain & Abel	p. 82
Sniffing SSH on a Switched Network	p. 83
Leveraging DNS for Remote Reconnaissance	p. 85
DNS Cache Snooping	p. 86
Summary	p. 90
Blended Threats: When Applications Exploit Each Other	p. 91
Application Protocol Handlers	p. 93
Finding Protocol Handlers on Windows	p. 96
Finding Protocol Handlers on Mac OS X	p. 99
Finding Protocol Handlers on Linux	p. 101
Blended Attacks	p. 102
The Classic Blended Attack: Safari's Carpet Bomb	p. 103
The FireFoxUrl Application Protocol Handler	p. 108
Mailto:// and the Vulnerability in the ShellExecute Windows API	p. 111
The iPhoto Format String Exploit	p. 114
Blended Worms: Conficker/Downadup	p. 115
Finding Blended Threats	p. 118
Summary	p. 119
Cloud Insecurity: Sharing the Cloud with Your Enemy	p. 121
What Changes in the Cloud	p. 121
Amazon's Elastic Compute Cloud	p. 122
Google's App Engine	p. 122
Other Cloud Offerings	p. 123
Attacks Against the Cloud	p. 123
Poisoned Virtual Machines	p. 124
Attacks Against Management Consoles	p. 126
Secure by Default	p. 140
Abusing Cloud Billing Models and Cloud Phishing	p. 141
Googling for Gold in the Cloud	p. 144
Summary	p. 146
Abusing Mobile Devices: Targeting Your Mobile Workforce	p. 149
Targeting Your Mobile Workforce	p. 150
Your Employees Are on My Network	p. 150
Getting on the Network	p. 152
Direct Attacks Against Your Employees and Associates	p. 162
Putting It Together: Attacks Against a Hotspot User	p. 166
Tapping into Voicemail	p. 171
Exploiting Physical Access to Mobile Devices	p. 174
Summary	p. 175
Infiltrating the Phishing Underground: Learning from Online Criminals?	p. 177
The Fresh Phish Is in the Tank	p. 178
Examining the Phishers	p. 179
No Time to Patch	p. 179
Thank You for Signing My Guestbook	p. 182
Say Hello to Pedro!	p. 184
Isn't It Ironic?	p. 189
The Loot	p. 190
Uncovering the Phishing Kits	p. 191
Phisher-on-Phisher Crime	p. 193
Infiltrating the Underground	p. 195
Google ReZulT	p. 196
Fullz for Sale!	p. 197
Meet Cha0	p. 198
Summary	p. 200
Influencing Your Victims: Do What We Tell You, Please	p. 201
The Calendar Is a Gold Mine	p. 201
Information in Calendars	p. 202
Who Just Joined?	p. 203
Calendar Personalities	p. 204
Social Identities	p. 206
Abusing Social Profiles	p. 207
Stealing Social Identities	p. 210
Breaking Authentication	p. 212
Hacking the Psyche	p. 217
Summary	p. 220
Hacking Executives: Can Your CEO Spot a Targeted Attack?	p. 223
Fully Targeted Attacks Versus Opportunistic Attacks	p. 223
Motives	p. 224
Financial Gain	p. 224
Vengeance	p. 225
Benefit and Risk	p. 226
Information Gathering	p. 226
Identifying Executives	p. 226
The Trusted Circle	p. 227
Twitter	p. 230
Other Social Applications	p. 232
Attack Scenarios	p. 232
Email Attack	p. 233
Targeting the Assistant	p. 238
Memory Sticks	p. 239
Summary	p. 240
Case Studies: Different Perspectives	p. 241
The Disgruntled Employee	p. 241
The Performance Review	p. 241
Spoofing into Conference Calls	p. 243
The Win	p. 245
The Silver Bullet	p. 245
The Free Lunch	p. 246
The SSH Server	p. 247
Turning the Network Inside Out	p. 249
A Fool with a Tool Is Still a Fool	p. 252
Summary	p. 253
Chapter 2 Source Code Samples	p. 255
Cache_Snoop.pl	p. 265
Index	p. 269
Table of Contents provided by Ingram. All Rights Reserved.

Hacking

The Next Generation

At a Glance

Paperback

Shipping

How to return your order

Defective items

You Can Find This Book In

More in Computer Security

The Pentagon's Brain

An Uncensored History of DARPA

Operation Paperclip

Nazi Scientists in America

Careless People

A story of where I used to work

The New Age of Sexism

How the AI Revolution is Reinventing Misogyny

ESG Investment, German Industrie 4.0, and Blockchain

Security Standardisation Research

10th International Conference, SSR 2025, Passau, Germany, December 4â"5, 2025, Proceedings

Deceptive Intelligence

AI, Social Engineering, and Securing the Human Element

The New Age of Sexism

How the AI Revolution is Reinventing Misogyny

Hardware Security

The Practical Guide to Penetration Testing and Prevention

Dark Wire

The Incredible True Story of the Largest Sting Operation Ever

Phenomena

US Government Investigations into ESP and Psychokinesis

Instagram & Facebook All-in-One For Dummies

Revealing Secrets

An unofficial history of Australian Signals intelligence & the advent of cyber

Liars and Outliers

Enabling the Trust that Society Needs to Thrive

Blockchain

Blueprint for a New Economy

Cryptography and Network Security

8th Edition - Principles and Practice, Global Edition

Cybercrime and Digital Forensics

3rd Edition - An Introduction

Security Risk Management Body of Knowledge

Wiley Series in Systems Engineering and Management

Principles of Information Security

7th edition

Cybersecurity All-in-One For Dummies

For Dummies

CompTIA Security+

8th Edition - Guide to Network Security Fundamentals

CompTIA PenTest+ Study Guide

Exam PT0-003

Hacking For Dummies

For Dummies (Computer/Tech)

Code Dependent

Living in the Shadow of AI

This product is categorised by