Intro to Hacking

1. ‫اﻻﺧﺘﺮاق‬ ‫ﻟﻌﺎﻟﻢ‬ ‫ﻣﻘﺪﻣﺔ‬

2. ‫أﻧﺎ؟‬ ‫ﻣﻦ‬
‫ﻣﺠﺎل‬ ‫ﻓﻲ‬ ‫ﺑﺎﺣﺜﺔ‬ ‫ﺎ‬ً‫ﻴ‬‫ﺣﺎﻟ‬ ،‫اﻟﻤﺎﺿﻲ‬ ‫اﻟﻌﺎم‬ ‫ﺧﺮﻳﺠﺔ‬ ،‫داﻓﻮرة‬ ،‫اﻟﺴﻠﻴﻢ‬ ‫ﻟﻤﻴﺎء‬
.‫اﻟﺴﻴﺒﺮاﻧﻲ‬ ‫اﻷﻣﻦ‬

3. ‫اﻷﺟﻨﺪة‬
‫اﻻﺧﻼﻗﻲ‬ ‫اﻻﺧﺘﺮاق‬ ‫اﺧﺘﺒﺎر‬ ‫ﺣﻴﺎة‬ ‫دورة‬
‫اﻟﻌﻠﻢ؟‬ ‫اﻟﺘﻘﺎط‬ ‫ﻣﺴﺎﺑﻘﺎت‬ ‫ﻣﺎﻫﻲ‬
‫ﻋﻤﻠﻲ‬ ‫ﺗﻄﺒﻴﻖ‬

4. ‫اﻻﺧﻼﻗﻲ‬ ‫اﻻﺧﺘﺮاق‬ ‫اﺧﺘﺒﺎر‬ ‫ﺣﻴﺎة‬ ‫دورة‬

5. ‫اﻻﺧﻼﻗﻲ‬ ‫اﻻﺧﺘﺮاق‬ ‫اﺧﺘﺒﺎر‬ ‫ﺣﻴﺎة‬ ‫دورة‬
‫اﻟﻔﺤﺺ‬
‫اﻟﺜﻐﺮات‬ ‫ﺗﻘﻴﻴﻢ‬
‫اﻻﺧﺘﺮاق‬
‫اﻟﻤﻌﻠﻮﻣﺎت‬ ‫ﺟﻤﻊ‬
‫اﻟﺘﻘﺮﻳﺮ‬

6. ‫اﻟﻤﻌﻠﻮﻣﺎت‬ ‫ﺟﻤﻊ‬
Social Media
Whois

7. ‫اﻟﻔﺤﺺ‬
‫اﻟﻔﺤﺺ؟‬ ‫ﻣﺎﻫﻮ‬
‫ﻛﺎﻧﺖ‬ ‫إن‬ ‫ﻟﻤﻌﺮﻓﺔ‬ ‫اﻟﺸﺒﻜﺔ‬ ‫ﻓﻲ‬ ‫اﻟﻤﺘﺼﻠﺔ‬ ‫ﻟﻸﺟﻬﺰه‬ ‫ﻣﻌﻴﻨﺔ‬ ‫أواﻣﺮ‬ ‫إرﺳﺎل‬
."‫"ﺣﻴﺔ‬

8. ‫اﻟﻔﺤﺺ‬
‫اﻟﻔﺤﺺ؟‬ ‫أﺣﺘﺎج‬ ‫ﻟﻴﻪ‬
‫اﻻﺧﻼﻗﻲ‬ ‫اﻻﺧﺘﺮاق‬ ‫ﻣﺨﺘﺒﺮ‬ ‫ﺟﻬﺎز‬
192.168.0.0/16

9. ‫اﻟﻔﺤﺺ‬
‫اﻟﻔﺤﺺ؟‬ ‫أﺣﺘﺎج‬ ‫ﻟﻴﻪ‬
‫اﻻﺧﻼﻗﻲ‬ ‫اﻻﺧﺘﺮاق‬ ‫ﻣﺨﺘﺒﺮ‬ ‫ﺟﻬﺎز‬ 192.168.0.0/16

10. ‫اﻟﻔﺤﺺ‬
Ping ‫أداة‬
ICMP (Echo Request)
ICMP (Echo Reply)

11. ‫اﻟﻔﺤﺺ‬
nmap ‫أداة‬nmap -sn <ip>
nmap -Pn -O <ip>

12. Port Scanning - ‫اﻟﻤﻨﺎﻓﺬ‬ ‫ﻓﺤﺺ‬
(Ports) ‫اﻟﻤﻨﺎﻓﺬ؟‬ ‫ﻣﺎﻫﻲ‬
(tcp/udp) ‫ﺑﺮوﺗﻮﻛﻮل‬ ‫ﻋﲆ‬ ‫ﺗﺸﺘﻐﻞ‬ ‫اﻟﻤﻨﺎﻓﺬ‬ ‫ﻣﻦ‬ ‫ﻋﺪد‬ ‫ﻟﺪﻳﻪ‬ ‫ﺟﻬﺎز‬ ‫ﻛﻞ‬
‫ﻣﻌﻴﻦ‬ ‫رﻗﻢ‬ ‫وﻟﻬﺎ‬
‫اﻟﻤﻮاﻗﻊ‬ ‫ﺧﺎدم‬ :‫ﻣﺜﺎل‬
(cports) ‫وﻳﻨﺪوز‬ ‫ﻓﻲ‬ ‫اﻻﻓﻨﺮاﺿﻴﺔ‬ ‫اﻟﻤﻨﺎﻓﺬ‬
tcp port 80
tcp port 443

13. Port Scanning - ‫اﻟﻤﻨﺎﻓﺬ‬ ‫ﻓﺤﺺ‬
‫واﻟﺒﺮوﺗﻮﻛﻮل؟‬ ‫اﻟﺨﺪﻣﺔ‬ ‫ﺑﻴﻦ‬ ‫اﻟﻔﺮق‬ ‫ﻣﺎﻫﻮ‬
‫ﻣﻨﻔﺬ‬ ‫رﻗﻢ‬ ‫ﻟﻪ‬ ,‫اﻵﺧﺮ‬ ‫اﻟﻄﺮف‬ ‫ﻣﻊ‬ ‫اﻟﺘﻮاﺻﻞ‬ ‫ﻣﺎﻫﻴﺔ‬ ‫ﻳﺤﺪد‬ :‫اﻟﺒﺮوﺗﻮﻛﻮل‬
‫ﻣﺤﺪد‬
‫ﻛﻤﺸﺎرﻛﺔ‬ ,‫ﻣﻌﻴﻨﺔ‬ ‫ﺧﺪﻣﺔ‬ ‫وﺗﻘﺪم‬ ,‫اﻟﻤﻨﻔﺬ‬ ‫اﱃ‬ ‫ﺗﺴﺘﻤﻊ‬ :‫اﻟﺨﺪﻣﺔ‬
...‫وﻏﻴﺮه‬ ‫اﻟﻮﻳﺐ‬ ,‫اﻻﻳﻤﻴﻞ‬ ‫ﺧﺪﻣﺔ‬ ,‫اﻟﻤﻠﻔﺎت‬

14. Port Scanning - ‫اﻟﻤﻨﺎﻓﺬ‬ ‫ﻓﺤﺺ‬
Three-way handshake

15. Port Scanning - ‫اﻟﻤﻨﺎﻓﺬ‬ ‫ﻓﺤﺺ‬
TCP connect Scan
https://resources.infosecinstitute.com/port-scanning-using-scapy/
nmap -sT <ip>

16. Port Scanning - ‫اﻟﻤﻨﺎﻓﺬ‬ ‫ﻓﺤﺺ‬
TCP connect Scan
https://resources.infosecinstitute.com/port-scanning-using-scapy/

17. Port Scanning - ‫اﻟﻤﻨﺎﻓﺬ‬ ‫ﻓﺤﺺ‬
TCP SYN Scan
https://resources.infosecinstitute.com/port-scanning-using-scapy/
nmap -sS <ip>

18. Port Scanning - ‫اﻟﻤﻨﺎﻓﺬ‬ ‫ﻓﺤﺺ‬
TCP SYN Scan
https://resources.infosecinstitute.com/port-scanning-using-scapy/

19. ‫اﻻﺧﺘﺮاق‬
‫اﻟﻤﻮاﻗﻊ‬ ‫ﻣﺴﺘﻮى‬ ‫ﻋﲆ‬ ‫اﺧﺘﺮاق‬
‫اﻟﺸﺒﻜﺎت‬ ‫ﻣﺴﺘﻮى‬ ‫ﻋﲆ‬ ‫اﺧﺘﺮاق‬
‫اﻷﻧﻈﻤﺔ‬ ‫ﻣﺴﺘﻮى‬ ‫ﻋﲆ‬ ‫اﺧﺘﺮاق‬

20. ‫اﻟﻤﻮاﻗﻊ‬ ‫ﻣﺴﺘﻮى‬ ‫ﻋﲆ‬ ‫اﻻﺧﺘﺮاق‬
(nc) ‫اﻟﻤﻮﻗﻊ‬ ‫ﻋﻦ‬ ‫ﻣﻌﻠﻮﻣﺎت‬ ‫ﺟﻤﻊ‬
subdomains ‫ﻋﻦ‬ ‫ﻣﻌﻠﻮﻣﺎت‬ ‫ﺟﻤﻊ‬

21. ‫اﻟﻌﻠﻢ‬ ‫اﻟﺘﻘﺎط‬

22. ‫ﻟﻠﺘﻮاﺻﻞ‬
@OxDipsy
https://medium.
com/@0xdipsy

23. ‫اﻷﺳﺌﻠﺔ‬
‫واﻻﺳﺘﻔﺴﺎرات‬