Hakin9 - Hard Core IT Security Magazine

quick buy | add to cart | subscription Detection of sniffing in switched networks
No 11/2005 (6) VPN Discovery 6/2005
Daniel Kaczorowski, Maciej Szmit
Sniffing in switched networks is typically conducted using one of two methods: MAC flooding or ARP spoofing. However, unlike sniffing in traditional, hub-based networks, both these methods are active and so can be detected – though sometimes this is not easy.

[ level: type: ]

quick buy | add to cart | subscription Writing advanced Linux backdoors – packet sniffing
No 01/2006 (7) Haking Wi-Fi 1/2006
Brandon Edwards
People create new defences for backdoors and intruders are forced to innovate new techniques to keep pace with the rapidly progressing security industry e.g. packet sniffing backdoors. Brandon describes how they work by writing our own proof-of-concept tool.

[ level: type: ]

quick buy | add to cart | subscription Security tool - SwitchSniffer
No 03/2006 (8) Hacking IBM AS/400
Pawe� Charnas
We present how simple is SwitchSniffer for monitoring local area networks, and describe more its features like basic administration and abuse detection.

[ level: type: ]

quick buy | add to cart | subscription Building an IPS using Snort
No 03/2006 (8) Hacking IBM AS/400
Micha� Piotrowski
Computer systems are usually protected by firewalls, with any attacks that do get through being monitored by intrusion detection systems. However, nowadays it is not enough to detect an intruder - what use is detection if we cannot prevent the attack? Intrusion prevention systems (IPS's) provide the answer, and in this article we will go through building an IPS and maintaining it.

[ level: type: ]

quick buy | add to cart | subscription Analysis of Network Traffic
No 06/2006 (10) HTTP Authentication Vulnerability
Bartosz Przybylski
If you administer a network of any kind you can be certain that sooner or later it will become a target of an attack. However, you are capable of eliminating, or at least significantly reducing any chances of its success. Bartosz will show you how to analyse the network traffic.

[ level: type: ]

quick buy | add to cart | subscription Penetration testing in practice
No 06/2006 (10) HTTP Authentication Vulnerability
Miroslav Ludvik
Penetration testing often takes place in situation where the management doesn't fully trust the IT department. It is sometimes ordered by the IT department itself to show its excellent work. However, this is not the case covered by this case study. Leran more about penetration test from Miroslav's article.

[ level: type: ]

quick buy | add to cart | subscription IPsec VPN discovery and fingerprinting
No 11/2005 (6) VPN Discovery 6/2005
Roy Hills
Many people believe that IPsec VPN systems are invisible and inherently secure. However, in reality most implementations can be easily detected and fingerprinted. Once this step is achieved, a successful attack is only a matter of time.

[ level: type: ]

quick buy | add to cart | subscription Port knocking from the inside out
No 11/2005 (6) VPN Discovery 6/2005
Martin Krzywinski
Leaving a port open to the public is like an invitation for an intruder. Unfortunately, most services such as HTTP or SMTP need to be open for everyone to see. However, some of the more critical services may be accessible only when required. Here's where port knocking comes in.

[ level: type: ]