Original subtitles

1

Hello everybody and welcome to this tutorial.

2

Today I will be talking about some of the basic terms

3

which you will need order to follow this course through.

4

So first off, you have three main categories of people.

5

There are White Hat Hackers, Grey Hat Hackers and Black Hat Hackers.

6

Everything that we will be doing falls into this category here

7

So, White Hats --

8

Those are people whose activities are within the confines of the law.

9

There are people such pen testers, ethical hackers, people like you and me

10

and so on.

11

Then you have Grey Hat Hackers

12

whose activities are bordering between legal and illegal.

13

It's a bit of a shady area there.

14

In addition to that, you have the most known category

15

which is Black Hat Hackers.

16

and usually, and unfortunately, every time someone hears the term hacking

17

it is associated with people from Black Hat world.

18

There are people who conduct all sorts of illegal activities

19

or conduct activities without any regard for the law

20

and, I don't know, extract new information from certain servers

21

credentials, your card information, take services down

22

usually to extract some sort of financial gain.

23

In any case, down below you have footprinting.

24

Now the act of footprinting is basically information gathering.

25

You are conducting some sort of

reconnaissance work

26

You are figuring out the IP of the server

27

Figuring out which ports are open

28

and with that, you can conclude which services are running there

29

but it doesn't necessarily need to be confined to the digital world.

30

The act of footprinting can also be when you go to the company itself.

31

You just walk in.

32

It doesn't necessarily need to be a company.

33

It can be pretty much any building with servers in it

34

and you have a look around.

35

You try to gather some information there

on-site

36

where you go and you through their trash cans.

37

You go behind the building, jump into those

trash containers

38

and get some information from there.

39

Also, people have been known to go into parking lots

40

to see who the employees are

41

and who works there.

42

All sorts of things.

43

So this is just general information gathering, in regards to your chosen target.

44

It doesn't need to be confined to the digital world.

45

Anyway, down below

46

you certain types of attacks --

47

You have DoS and DDoS.

48

Very simple. Basically the same thing implemented in a different way.

49

DoS stands for "Denial of Service"

50

Usually called "Childish Attacks" because they're relatively easy to implement

51

and they still are, provided of course if you have enough machines

52

but that's the domain of DDoS.

53

In general, what happens here is that you perform a certain amount of requests

54

more requests than a server can handle

55

and then the server begins dropping connections.

56

For example, Apache web server -- I believe

by default

57

it can handle up to 10,000 connections or so

58

and if you can make more than 10,000

requests

59

basically everybody else making any sort

of requests

60

will not be able to access the website

61

because their connections will be dropped

62

simply because Apache will say

63

"Okay, I have too many users. I have more users than I can handle"

64

all the other collections will be dropped by default.

65

Thereby making the site inaccessible, even though you haven't really broken any codes.

66

You haven't really broken through any firewalls or stole any passwords

67

or anything of a kind

68

but when you're DoS in something, it's just

you.

69

All the connections, all the requests

70

everything is coming just from your own computer

71

and that it is not always the most efficient way

72

In fact, it generally it can only work if there is a flaw

73

in the way which requests are processed.

74

However, that is why you have DDoS attacks

75

when you have multiple computers, multiple connections

76

and they are all making simultaneous requests to a certain server

77

and this is really difficult fight off

78

I mean, you really need to have a clever configuration of your firewall

79

and need to have quite a good firewall as well.

80

Usually you would need a physical one to prevent these sort of DDoS attacks

81

and by physical, I mean a router firewall or

something a kind.

82

This is quite difficult to

83

it's not difficult to actually do the attack itself

84

as it is difficult to make the necessary

preparations.

85

First of all, you need to go about infecting other devices, which you will use

86

which you will enslave and use in order to

perform this sort of attack

87

This is the hard part.

88

The DDoS part is quite easy compared to that.

89

For that, in order for you infect other computers, you need two things --

90

You need RATS (Remote administration

tools)

91

and you need to make them FUD.

92

You need to make them fully undetectable.

93

That is what the term FUD stands for.

94

So it just means that they cannot be detected by antiviruses

95

or they are, more precise term would be

96

that they are not labeled as something malicious by antivirus programs.

97

By the way, sometimes actually most the times

98

you don't actually need to make your own applications fully undetectable.

99

There are plenty of pen testing companies

out there

100

and not just pen testing companies, but other companies as well

101

will pay very good sums of money

102

if you can make their programs fully

undetectable by antivirus programs

103

Down below, the RATS (Remote Administration Tools)

104

Now, they themselves are not some sort of hacks or anything of a kind.

105

They just basically put them on a USB stick or something of a kind.

106

Send them in the mail

107

Shared them in a zip file

108

and in such a way

109

that's just one of the ways to infect other computers

110

other devices

111

enslave them

112

convert them into your sleeves

113

into the slaves of the main server

114

where every death might be wherever you

might set it up

115

and then you can use all of those computers

116

to conduct all sorts of activities.

117

This is very good because it anonymizes you to a very large extent.

118

It's very difficult to track somebody

down, whoever is doing this

119

primarily because the users, who are infected

120

they have no idea that somebody else is controlling their devices

121

because nothing is really happening on your desktop you can't really see.

122

All the processes running are being run in

the background

123

and your processor is executing them

124

using up

125

the only way to see it would be basically to start up a task manager

126

or something of a kind.

127

and then see the running processes

128

and perhaps you could spot it there

129

but not even there if somebody has implemented a rootkit.

130

So a rootkit is a tool basically

131

which you install onto an operating system

132

and it is able to hide running processes from the system itself

133

So when you, for example, start a task

manager in windows

134

or something of a kind

135

the purpose of a rootkit would be hide the processes from the task manager.

136

Basically how it works is the task manager from the system

137

from the kernel

138

and then the kernel of the system responds

139

which is the core of the system

140

where all the drivers and the key functionalities are.

141

The kernel of the system then responds

142

"Hey, I have this this this and this process running. Here you go"

143

What rootkit would do is redirect those requests from task manager to itself

144

and would basically say "I don't have such processes running"

145

So very very dangerous and potent combinations here

146

that we will use later on as we progress through this tutorial

147

but for the time being I just wanted to give a bit of an introduction to it

148

and give you an idea of what we shall be doing

149

through some these basic terms and concepts.

150

Next up, we have phishing attacks.

151

Now phishing attacks are basically when you apply some sort of bait

152

somebody bites it, then you pull on it.

153

Simple as that, right?

154

The same way you would do fishing.

155

Well not quite

156

Phishing attacks would be when you get, I don't know, an email from someone

157

and there's a link it

158

you click on it

159

and it throws you somewhere, I don't know, on some website

160

Perhaps it looks like something legit.

161

Perhaps it looks like a website that you are using or something of a kind

162

but it is not and you pass on your credentials

163

and that can be a problem

164

but this is generally avoided today.

165

This is not something that happens in such a way.

166

Rather instead what happens these days is the that DNS servers gets changed

167

on your routers

168

and once that happens

169

older requests that you made on your web browser gets redirected.

170

So for example, if you type in facebook.com

171

you're gonna get a domain with facebook.com

172

from some private DNS server

173

god knows where

174

who's MX records are altered and they have been configured.

175

For example, to make redirections to interpret Facebook.com

176

sorry, not redirections but rather instead to interpret Facebook.com

177

to certain IP address that does not belong

Facebook or anything like that.

178

So you open up your Facebook

179

it looks exactly the same

180

There is no way to tell because in the upper left corner of the screen

181

you have the domain name written --

182

It's www.facebook.com

183

and basically provided login credentials

184

once you do that, they're gone.

185

Somebody has them.

186

One of the ways to detect this

187

even though it's very, I mean it's not

hard

188

but nobody really pays any attention to

it.

189

In the upper left corner you might check

with the protocol is HTTPS

190

instead of HTTP

191

because usually if these kind of attacks are conducted

192

it's not gonna be HTTPS

193

a status a lot harder to implement

194

but if it is HTTPS, there really won't be any

legit way of figuring it out

195

other then actually checking the keys

196

checking the certificates and

197

and nobody actually does that.

198

Well maybe not nobody

199

but ninety-nine percent of users out there

are not going to bother

200

to go about conducting such checks.

201

Anyway, I know it sounds a bit complex

202

but believe me, I will explain this in great details.

203

I will give you several demonstrations

204

and by the end of this course

205

you will understand and know how to do this with great ease.

206

It will not present a significant obstacle in your line of work.

207

Excellent. Now that we have approximately

half these terms out of our way

208

I will continue to deal with them in the follow up tutorial

209

and I sincerely hope to see you all there