Deep Knowledge on Network Hacking Philosopy

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

DEEP KNOWLEDGE ON
NETWORK HACKING PHILOSOPY

ATIK PILIHANTO
MAKASAR, DEC 2010
http://ipsecs.com

PHILOSOPY

Pengetahuan secara general dan fundamental mengenai
g g g
obje...

OSI MODEL
OSI MODEL

OSI model 7 layer : physical, data link, network, transport,
y p y ...

RELASI HACKING DAN OSI

OSI mendeskripsikan secara general
dan fundamental bagaimana komun...

OSI : Layer #1 ‐
OSI : Layer #1
OSI : Layer #1 ‐ Physical

Contoh Teknologi; IEEE 802.3, IEEE 802.11, IEEE 802.16;
SO...

OSI : Layer #2 –
OSI : Layer #2 Data Link
OSI : Layer #2 – Data Link

Contoh T k l i L
C t h Teknologi; Layer 2 switc...

OSI : Layer #3 –
OSI : Layer #3
OSI : Layer #3 – Network

Contoh Teknologi; IP ICMP IPSEC d R i protocol.
C h T k ...

OSI : Layer #4 –
OSI : Layer #4
OSI : Layer #4 – Transport

Contoh Teknologi; UDP TCP, SCTP
C h T k l i UDP, TCP
...

OSI : Layer #5 –
OSI : Layer #5 Session
OSI : Layer #5 – Session

Contoh Teknologi; N BIOS L TP PPTP
C h T k l i ...

OSI : Layer #6 –
OSI : Layer #6
OSI : Layer #6 – Presentation

Contoh Teknologi; SSL, TLS
C h T k l i SSL
Attack...

OSI : Layer #7 –
OSI : Layer #7
OSI : Layer #7 – Application

Contoh Teknologi; HTTP SMTP, DNS, SSH, FTP
C h T k l...

KNOWING YOURSELF
KNOWING YOURSELF

In which layer you have access? On layer 1, 2, 3, 4, 5, 6, 7
or all?
The more you ...

KNOWING YOUR ENEMY
KNOWING YOUR ENEMY

Reconaisance to gain as much as possible information
about the enemy
Scanning t...

IF YOU KNOW BOTH YOURSELF AND YOUR ENEMY – YOU
IF YOU KNOW BOTH YOURSELF AND YOUR ENEMY –
WILL WIN IN MANY WARS ‐
WILL WI...

THINGS TO REMEMBER
THINGS TO REMEMBER

Transport set vulnerability:
p y
Easy to prevent (...

THINGS TO REMEMBER
THINGS TO REMEMBER

Keep anonymous and stealth, don’t be so rough!
Man in the middle example on Laye...

AN EXAMPLE

Router A, B, C, D mengaktifkan layanan BGP dan SSH dan bisa diakses dari
laptop attacker dan admin
Attacker...

KNOWING YOUR ENEMY

Attacker (you) want to compromise VPN MPLS network
He can’t directly attack administrator computer
...

KNOWING YOURSELF
KNOWING YOURSELF

Do you have access to layer #1? No
y y
Do you have access to l...

LAYER #3 ATTACK

Border Gateway Attack?
BGP Man In The Middle
BGP NLRI injection to reroute traffic
BGP MD5 ...

LAYER #4 ATTACK
LAYER #4 ATTACK

TCP?
SYN Flooding to SSH and BGP port causing denial of service
TCP FIN/RST to ...

LAYER #7 ATTACK
LAYER #7 ATTACK

Exploiting routers vulnerability to gain access
p g y g
...

QUESTION AND ANSWER

THANK YOU

Share SlideShare

Facebook
Twitter
LinkedIn

Embed

Size (px)

Show related SlideShares at end

WordPress Shortcode

Link

LinkedIn
Facebook
Twitter
Email

Replay

Top clipped slide

1 of 24 Ad

1 of 24 Ad