ETHICAL HACKING NET-185-001N Week 12
This week I learned about a tool called Cain and Abel, or Cain for short, after the biblical characters.
The tool is designed to allow a user to man-in-the-middle traffic, crack or recover passwords for Windows, WEP, and more. There are problems with getting it working on Windows 10, though.
I recently read the article 'A security researcher with a grudge is dropping Web 0days on innocent users' on Ars Technica. It is about how someone in the field of security research is releasing zero-day exploits for two Wordpress plugins publicly after their forum posts and original forum account were deleted by moderators on the Wordpress forums. Only after the vulnerabilities were published and rapidly abused by nefarious individuals did workers at Wordpress actually notice and do something about it.
Another report I recently read was on government-sponsored cybercrime from the People's Republic of China. In the report, government officials discussed how many USA-based businesses have had their networks penetrated by Chinese military hackers, and large amounts of data taken lock, stock and barrel, to be used later. Few businesses are willing to publicly speak out about this, though, because they earn large amounts of money from business in China, and fear being excluded, (much like the way most businesses are unable to sell directly to Cuba due to the embargo by the USA). Google cited this cyber-warfare as a major factor in dropping search service in China in 2010. (https://www.npr.org/2019/04/12/711779130/as-china-hacked-u-s-businesses-turned-a-blind-eye?t=1555309270788)
Encryption in general, and VPNs in particular, are the main ways to guard against man-in-the-middle attacks.
http://Greatfire.org is a website that helps internet users both inside and outside China find information and tools that are useful in the face of Chinese censorship.
The tool is designed to allow a user to man-in-the-middle traffic, crack or recover passwords for Windows, WEP, and more. There are problems with getting it working on Windows 10, though.
I recently read the article 'A security researcher with a grudge is dropping Web 0days on innocent users' on Ars Technica. It is about how someone in the field of security research is releasing zero-day exploits for two Wordpress plugins publicly after their forum posts and original forum account were deleted by moderators on the Wordpress forums. Only after the vulnerabilities were published and rapidly abused by nefarious individuals did workers at Wordpress actually notice and do something about it.
Another report I recently read was on government-sponsored cybercrime from the People's Republic of China. In the report, government officials discussed how many USA-based businesses have had their networks penetrated by Chinese military hackers, and large amounts of data taken lock, stock and barrel, to be used later. Few businesses are willing to publicly speak out about this, though, because they earn large amounts of money from business in China, and fear being excluded, (much like the way most businesses are unable to sell directly to Cuba due to the embargo by the USA). Google cited this cyber-warfare as a major factor in dropping search service in China in 2010. (https://www.npr.org/2019/04/12/711779130/as-china-hacked-u-s-businesses-turned-a-blind-eye?t=1555309270788)
Encryption in general, and VPNs in particular, are the main ways to guard against man-in-the-middle attacks.
http://Greatfire.org is a website that helps internet users both inside and outside China find information and tools that are useful in the face of Chinese censorship.
Comments
Post a Comment