tailieunhanh - hackers beware the ultimate guide to network security phần 2

nhiều chương trình con nhện web để tải về toàn bộ trang web. Điều này sẽ cung cấp cho các kẻ tấn công một danh sách của tất cả các trang trên máy chủ. Điều này thường cung cấp thông tin có giá trị bởi vì các nhà phát triển web tải lên các trang kiểm tra, | many web spider programs to download an entire site. This will give the attacker a list of every page that is on the server. This usually provides valuable information because web developers upload test pages but never remove them and because they are not directly linked to any other page the developer thinks they are safe. I have done this and downloaded sample pages that contained active accounts and other useful information. A company can never remove all open source information however by being aware of it the company can do things to minimize the potential damage. As you will see with whois any company that has a domain name must give away certain information. Whois To gather information we need an address or a starting point. With the Internet the initial address usually takes the form of a domain name. For our examples the attacker is going to use the domain name of although some of the information has been changed to protect the innocent. The first thing an attacker is going to do is run the whois program against this domain name to find out additional information. Most versions of UNIX come with whois built in. So the attacker could just go to a terminal window or the command prompt and type whois . For help the attacker could type whois to get a listing of the various options. The following are some of the options available with whois for Linux Whois Server Version Domain names in the .com .net and .org domains can now be registered with many different competing registrars. Go to http for detailed information. Enter a a domain nameserver or registrar to search for its information. You may also search for nameservers using IP addresses. WHOIS will perform a broad search on your input. Use the following keywords characters to narrow your search or change the behavior of WHOIS. To search for a specific record TYPE domain nameserver registrar Hackers Beware New Riders Publishing 83 Other WHOIS keywords .