Linux Concepts/Offensive/Defensive Security Implementation T

[Nguyen Trung Hoa]

Linux Concepts/Offensive/Defensive Security Implementation Techniques - Disc (1O)

Secure Shell (SSH) Concepts & Implementation
SSH client concepts - replacement for clear-text-based Telnet, RCP, FTP protocols.
Identification of required OpenSSH/OpenSSL compnts
Demonstrate SSH connectivity & public key registration
Implement globally-shared public keys
Generate RSA & DSA public key/private key pairs
Configure SSH client and SSHD to authenticate via public/private key pairs
Authenticate to remote hosts using public/private key pairs
Use Secure Copy (SCP) to move files
Port Forwarding implementation
Port Forwarding integration with Linux & Windows 2Server
X11 Forwarding demonstration
Use Secure File Transfer Protocol (SFTP) to move files

Linux Defensive Security Implementation Techniques

Implement NMAP port scanner and demostrate usage to ascertain open doors
Discuss & demonstrate operating system fingerprinting techniques with NMAP
Demonstrate IP-spoofing & packet forging with NMAP
Discuss the benefits of the NESSUS Security & vulnerability scanner
Implement Nessus client/server Security vulnerability scanner
Demonstrate parallel security scanning of local & remote subnets
Explore Nessus's reporting capabilities (NBE/XML/HTML/etc.)
Demonstrate Nessus class-based access for corporate usage
Implement Ethereal nerk sniffer
Demonstrate telnet clear-text password theft with Ethereal
Demonstrate alternative SSH encrypted sessions with Ethereal
Demonstrate FTP clear-text password theft with Ethereal
Demonstrate alternative SFTP encrypted sessions with Ethereal
Implement HPING highly customizable packet forging tool
Compare & contrast PING with HPING
Demonstrate IP packet spoofing with HPING & Cisco PIX firewall integration
Demonstrate HPING's ability to communicate with ICMP-filtered Internet servers
Demonstrate using HPING to setup a trojan horse backdoor for executing arbritary code
Implement John the Ripper password cracking tool
Discuss file and directory security
Implement chmod,chown,umask,SUID,SGID,etc.

Linux Defensive Security Implementation Techniques
Implement Multi-Router Traffic Grapher (MRTG) to establish nerk performance baseline
Configure Cisco PIX firewall for MRTG support via Simple Nerk Management Protocol (SNMP)
Configure MRTG to generate perfomance & badwidth-related graphs for Cisco PIX firewall
Implement IP Tables Host-based firewall support
Configure IP Tables to restrict access to necessary services
Introduce, discuss & plan the implementation of SnortIntrustion Detection System (IDS)
Discuss Snort intrustion detection concepts related to hubs & switches
Install SnortNerk-based Intrusion Detection System
Implement Snortnerk sniffing functionality
Implement Snortsniffing & packet-logging functionality
Demonstrate Snort's ability to monitor traffic between designated hosts
Demonstrate password theft using Snort & FTP connections
Demonstrate password theft using Snort & Apache HTTP basic authentication connections
Implement SnortNerk-based Intrusion Detection System
Implement SnortSnarf for web-based reporting of Snortlogs
Examine SnortSnarf reports via ~ Phisher ~enabled web session
Demonstrate how to implement port mirroring on Cisco Catalyst switches
Implement Nerk Address Translation (NAT)
Discuss & Implement Port Address Translation (PAT)
Implement TCP Wrappers
Configure Xinetd to suppress access to the system from port-scanners
Discuss & Disable Portmap services

Code:



http://hotfile.com/list/589318/15f03b2