Explain Intrusion detection system (IDS)?? Types OF IDS...

An intrusion detection system (IDS) is a device or software application that monitors network or system activities for malicious activities or policy violations and produces reports to a Management Station. Some systems may attempt to stop an intrusion attempt but this is neither required nor expected of a monitoring system. Intrusion detection and prevention systems (IDPS) are primarily focused on identifying possible incidents, logging information about them, and reporting attempts. In addition, organizations use IDPSes for other purposes, such as identifying problems with security policies, documenting existing threats and deterring individuals from violating security policies. IDPSes have become a necessary addition to the security infrastructure of nearly every organization.

IDPSes typically record information related to observed events, notify security administrators of important observed events, and produce reports. Many IDPSes can also respond to a detected threat by attempting to prevent it from succeeding. They use several response techniques, which involve the IDPS stopping the attack itself, changing the security environment (e.g. reconfiguring a firewall), or changing the attack's content.

Syness-The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments | For ISO 27001(BS7979), PCI-DSS, HIPPA, FISCAM, COBIT

The IT Regulatory and Standards Compliance Handbook: How to Survive Information Systems Audit and Assessments

Publisher: Syngress 2008 | 750 Pages | ISBN: 1597492663 | PDF | 11 MB

This book provides comprehensive methodology, enabling the staff charged with an IT security audit to create a sound framework, allowing them to meet the challenges of compliance in a way that aligns with both business and technical needs. This “roadmap” provides a way of interpreting complex, often confusing, compliance requirements within the larger scope of an organization’s overall needs.

Design Of A Default Redhat Server 6.2 As Honeypot | HoneyPot Methods

Introduction

The following paper is a description of how I have designed and implemented a honeypot system. The paper describes how the honeypot is used to capture data in layers using different techniques. The aim of the honeypot is to discover the techniques and tactics used by blackhats (hackers) to compromise computer systems. The methods used are similar to the methods used by the Honeynet Project.

What Are Honeypots / Honeynets ? – Fully Explained

What Are Honetpots ?

Just as honey attracts bears, a honeypot is designed to attract hackers. Honeypots have no production value. They are set up specifically for the following purposes:

• Providing advance warning of a real attack.
• Tracking the activity and keystrokes of an attacker.
• Increasing knowledge of how hackers attack systems.
• Luring the attacker away from the real network.

It is a trap as bears are attracted to honey in the same way a honeypot is designed to attract hackers and black hat people.They are used specifically for the following purposes:

1.Warn about a future attack.
2.Monitoring the activity of an attacker
3.Inorder to know the way of attack used by the attacker.
4.Creating a virtual environment to mislead the attack.
5.It is also very useful in malware analysis.

Free EBook - XSS Attacks : Cross Site Scripting Exploits & Defence (Mediafire Link)

XSS Attacks: Cross Site Scripting Exploits and Defense By Seth Fogie, Jeremiah Grossman
Publisher: Syngress 2007 | 480 Pages | ISBN: 1597491543 | PDF | 5 MB

Cross Site Scripting Attacks starts by defining the terms and laying out the ground work. It assumes that the reader is familiar with basic web programming (HTML) and JavaScript. First it discusses the concepts, methodology, and technology that makes XSS a valid concern. It then moves into the various types of XSS attacks, how they are implemented, used, and abused. After XSS is thoroughly explored, the next part provides examples of XSS malware and demonstrates real cases where XSS is a dangerous risk that exposes internet users to remote access, sensitive data theft, and monetary losses. Finally, the book closes by examining the ways developers can avoid XSS vulnerabilities in their web applications, and how users can avoid becoming a victim. The audience is web developers, security practitioners, and managers. 

RFI (Remote File Inclusion) Tutorial For Website Hacking.

What is Remote File Inclusion ?

First of all what is Remote File Inclusion? Commonly referred as RFI, this is an uncommon form of web attack where the attacker can inject their own scripts and execute it on the web server. I like to call RFI the execution of unpredictable and uncontrollable code.

I'm sure many of you who are reading this have attempted RFI and probably are saying that its a simple method of attack. But ill bet that not many know what occurs behind the scene, how it works, and why it works. Today ill clarify that.

How To Install Backtrack 5 Dual Boot-Tutorial | Install Backtrack with Windows 7

In this article I will discuss how to make dual boot to use Linux (Backtrack 5) with Windows 7.The overall method of installation is same as discussed before but the step in which you have to mention the partition is change because of dual boot, for this technique it is assume that you have installed windows on your entire disk and you want to make a partition to install backtrack 5 as well, backtrack 5 is not necessary you can use this technique to install any other version and distro of Linux.

Now I am going to show you how to do this, first of all make back up of your windows installer, if you are using USB to boot backtrack than first learn how to make USB click here.

Network Security Scanner - GFI LANguard

GFI LANguard Network Security Scanner (N.S.S.) is a complete network vulnerability management solution that allows you to scan, detect, assess and remediate any security vulnerabilities on your network. This award-winning solution scans the entire network, performs over 15,000 vulnerability assessments and identifies all possible security threats. The complete and thorough vulnerability assessment database includes standards such as OVAL (2,000+ checks) and SANS Top 20.

List of Best Ethical Hacking / Penetration Testing Tools

Here is list of useful and Best Software tools that helpful in Ethical Hacking and Penetration Testing, Forensics ...

MetaSploit

Metsploit is a very Powerful PenTesting Tool . Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. The Metasploit Project is also well known for anti-forensic and evasion tools, some of which are built into the Metasploit Framework. Very useful tool for Information Gathering, Vulnerability Scanning, Exploit Development, Client side exploits,...

Official site: Click Here

CISA Certified Information Systems Auditor Study Guide 3rd Edition - 2011

CISA Certified Information Systems Auditor Study Guide, 3rd Edition 


David L. Cannon|ISBN: 978-0-470-61010-7|Paperback|696 pages|March 2011 

More than 27,000 IT professionals take the Certified Information Systems Auditor exam each year. SC Magazine lists the CISA as the top certification for security professionals. Compliances, regulations, and best practices for IS auditing are updated twice a year, and this is the most up-to-date book available to prepare aspiring CISAs for the next exam. 

Fast Track Hacking-Backtrack5 Tutorial

Backtrack 5 contains different tools for exploitation, as discussed before about metasploit and armitage for this article i will discuss about fast track, however I have received different request to write more tutorial for armitage, i will write for armitage too later. Fast Track is a compilation of custom developed tools that allow penetration testers the ease of advanced penetration techniques in a relatively easy manner.

Some of these tools utilize the Metasploit framework in order to successfully create payloads, exploit systems, or interface within compromised systems.

If you are beginner and dont have any idea about vulnerability, payload and shell code than first read the article " Introduction to metasploit".

How TO Install Backtrack5 in USB Pen Drive | Installation Of BackTrack5 in USB Disk

We must publish this article before but it never too late, how to Install Backtrack5, in my views installation backtrack any version is same but you need to learn it, if you want to do a smart penetration testing so Backtrack5 is a good choice because it contains a necessary tools to do a penetration testing and hacking.

First of all you need to download backtrack5 from it official website click here, backtrack5 is available in different flavours so check your compatibility and download it. For this tutorial we are using a USB device to install backtrack5.

Acunetix Web Vulnerability Scanner Ver 7-20110406 Enterprise Edition - Full Cracked

                                              Acunetix 20110406 Full


Audit your website security with Acunetix Web Vulnerability Scanner

As many as 70% of web sites have vulnerabilities that could lead to the theft of sensitive corporate data such as credit card information and customer lists.

Hackers are concentrating their efforts on web-based applications - shopping carts, forms, login pages, dynamic content, etc. Accessible 24/7 from anywhere in the world, insecure web applications provide easy access to backend corporate databases.

Port Scanning-Nmap Tutorial

This is the second episode of a series article about second step of ethical hacking/penetration testing, as we have deeply talked about the importance of port scanning and on the previous article we have discussed some about Nmap.

This article will talk about the practical aspect of Nmap, how to perform a quick scan to know about the open ports and services?

Nmap was originally command line tool that has been developed for only Unix/Linux based operating system but now its windows version is also available and ease to use.You can download the Nmap installer for windows and for Linux open terminal and type 

How TO Install Backtrack5 into Hard Disk

We must publish this article before but it never too late, how to install backtrack5, in my views installation backtrack any version is same but you need to learn it, if you want to do a smart penetration testing so backtrack5 is a good choice because it contains a necessary tools to do a penetration testing and hacking.

First of all you need to download backtrack5 from it official website click here, backtrack5 is available in different flavours so check your compatibility and download it. For this tutorial we are using a USB device to install backtrack5.

Requirement

• USB (Flash Drive) (Minimum USB Drive capacity 4 GB)
  
• Backtrack 5 ISO file, md5sum verified.
  
• UNetbootin

XSS – Cross Site Scripting Attack & Prevention (Basics)

Cross-site scripting is a security vulnerability associated with web applications, where an attacker injects client-side scripting (malicious) code  into server pages which is then served to another users of the web application.  XSS attack is typically focused on

• cookie hijacking/poisoning.
• user session hijacking.
• user identity theft.
• gaining free access to paid contents.
• redirecting users to another websites.
• false advertisements or defamation.

Burp Suite- A Web Application Scanner(P.T.)

There are so many tools available for web application testing, and every tools has its own importance either it is commercial tool or it is open source tool. The main agenda of the scanning is to find out the possible vulnerabilities and fix them before a hacker find it and exploit it.

Every pen-tester has their own list of toolkit, and i am sure burp suite is the most common one, burp suite is a most favourite tool for web application testing.


It is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security vulnerabilities.

Paros Proxy-Web Application Security Assessment

Paros proxy is a web application security assessment tool used to measure the security of a web application. It allows you to see what data exactly do you submit with your HTML form with Post method?

Just like other web application security tools paros can be used to find out the SQL-injection and XSS (Cross site scripting) vulnerability on a web application.

Paros is a Java based HTTP/HTTPS proxy for assessing web application vulnerability. It supports editing/viewing HTTP messages on-the-fly. Other featuers include spiders, client certificate, proxy-chaining, intelligent scanning for XSS and SQL injections etc.

McGraw Hill-Hacking Exposed: Malware and Rootkits | Latest Edition of Hacking Exposed Malware and Rootkits (2009)

Hacking Exposed Malware and Rootkits

Mg-H | 2009 | ISBN: 0071591184 | 400 pages | PDF | 10 MB

Book Description

Don't let another machine become a zombie in the malware army

Defend against the ongoing wave of malware and rootkit assaults the failsafe Hacking Exposed way. Real-world case studies and examples reveal how today's hackers use readily available tools to infiltrate and hijack systems. Step-by-step countermeasures provide proven prevention techniques. Find out how to detect and eliminate malicious embedded code, block pop-ups and websites, prevent keylogging, and terminate rootkits. The latest intrusion detection, firewall, honeynet, antivirus, anti-rootkit, and anti-spyware technologies are covered in detail.