tailieunhanh - Ethical hacking and countermeasures - phần 22

Tham khảo tài liệu 'ethical hacking and countermeasures - phần 22', công nghệ thông tin, an ninh - bảo mật phục vụ nhu cầu học tập, nghiên cứu và làm việc hiệu quả | Ethical Hacking and Countermeasures Version 6 Module XXII Linux Hacking TM c EH Scenario Certified Ethical Hacker Bryan was a network administrator with a small online shopping portal. He was an expert on Windows Platform but lacked in other OS. Due to strategy changes the portal was shifting from Windows to Linux systems and because of time and human resource constraints Bryan was entrusted with the responsibility of installing Linux in their systems. While installing Linux Bryan selected default options as he was not familiar with the kernel components of Linux. Within a week the portal was hacked and their systems were taken off the Internet. What went wrong EC-Council Copyright by Ec-Council All Rights Reserved. Reproduction is Strictly Prohibited IM c E H News Certified Ethical Hacker PC World Business Center Operating Systems Linux f Unix News Attack Against Linux Apache Servers Intensifying Ellen Messmer Network World 20 recommend Tuesday January 22 2008 4 00 PM PST A mass attack ongoing for the past month against Linux Apache Web servers has become increasingly successful because its break-in method makes use of an automated password and installation process according to a security researcher monitoring its progress. Don Jackson senior security sesearcher at SecureWorks says the attack which was first thought to have compromised several hundred Web sites has hit at least 10 000. He says the attack relies on making use of stolen passwords to Linux Apache servers by automating the installation process to force it to serve up attacks against vulnerabilities on Windows clients. The Web server ends up serving up vulnerabilities from 2006 related to Windows malware Jackson says. The whole attack is very mysterious. It s based on a botnet but it doesn t match the Russian and Chinese groups and may be Western Europe or North American. The attack which makes use of the well-known Rbot and Sdbot malware targets at least nine software vulnerabilities .