Okay.
Welcome back everyone.
In this section we are going to focus on hacking.
So we will learn what is hacking and how it can be used how we perform hacking.
So hacking is a process of getting unauthorized access of control so you are not supposed to have access
to a certain computer or a certain set of it and you somehow get no control over it through any means.
So this process is called hacking so there are legitimate ways of getting control and there are legitimate
ways.
So hacking refers to those buses through which you bypassed the user identification methods for example
when you have to interpose or something like that.
Are you somehow exploited some wooden ability in the system that you use this one an ability to access
the computer into the system.
Then we talk about hacking we are used to offering to some malicious intentions so we get a control
over the system in order to perform tasks or activities that are malicious that are not intended.
So what are the different type of hackers.
So the first time that we are going to study is called a black hat hacker a black hat hacker is a one
that performs the criminal activities.
It is the hacker that we are mostly familiar with for example when we see movies and their effort to
hackers most often and most of the time it's the one that is that performs criminal activities are performed
actions that bypass the security of our system
and a true black hat black hat hackers hides his identity.
So a hacker never reveals his actual identity because if he does he's got and he's performing malicious
activities then he's definitely going to jail.
So he uses different methods for example VPN and using Gordon at tech sector to bypass or to hide his
real identity and a black hat hacker.
The only difference between a black cat hacker and a white hat hacker that was standing next is of inventions
black hat hacker desires bad intentions and his goal is to either destroy the system or somehow to use
this system which he has control over for any evil purposes and then there's the white hat hackers on
the other end of the spectrum.
So white haired packers are mostly they use their knowledge for good purposes so their goal is to defend
the systems from black hat hackers.
They are mostly scared BD such as penetration testers.
They're usually hired by companies and the companies paid them to audit their systems our test their
security so they they are allowed or tries to attack the systems.
And then there are gray haired hackers who lie somewhere in between these two extremes.
So we had hackers they use deep tried to for example attack with machines etc. and gain control and
if they get control they will reveal to the owner or the person.
So they are mostly looking for weaknesses in the system and if they find some weaknesses and there for
example they will try to maybe attack your system.
And if they are successful they somehow are able to do this then they will tell you that they will tell
the person that he has a certain vulnerability security fly in their system which can be improved.
So their goal is use the juice team not to destroy the system to gain an unauthorized access so they
will reveal their secret.
At the end.
So that's why they're called gray haired hackers.
So hacking is not a single step it consists of a lot of features and it requires a lot of patience and
knowledge.
So if you want to successfully attack them compete then you have to perform a lot of steps and it requires
a lot of patience.
So the first step that a hacker performs is called reconnaissance in this step the hackers tries to
get maximum information about its victim.
For example if he wants to attack a company or an organization he were the first to go for example and
google everything their e-mails their websites their phone numbers their address the people who are
involved in their organization.
So he will gather every type of information to because the more information you have you have about
another organization the more easier it is for you to penetrate or to attack these organizations are
people who go where it is.
And there are basically two days of reconnaissance active or passive in passive mode.
You'd simply google about for example let's say there is a company X Y Z and you want to attack it.
So what you will do is that you will go over Google and then you will search about this company and
gather all the information.
So this is called passive reconnaissance.
Then there is another technique called active reconnaissance in this in this technique.
What you do is that you actually interact with people from the organization.
You for example send them an email asking about something and things like that.
And this is called Active reconnaissance so this is a little bit dangerous because you are practically
interacting with the organization and it can be traced back to you.
So the goal and reconnaissance is that you should keep your interaction at minimum.
So don't go and don't interact with things you don't want to.
You don't need to.
So the next step is scanning.
Once you have this basic information you can build on top of it and get more advanced our technical
information about their systems.
For example if you are working if you're attacking an organization you would scan for example out their
e-mail addresses on what are their domain names and then you will also try to find out what their IP
address off their servers are are.
For example if there is an open port on their side of that which you can use for communicating except
right.
So this is more like a more in-depth technical analysis so you also search for operating systems of
different services running on their systems.
So if you have if you get an idea about what operating system they're running and what services they're
running you can use these services to find out vulnerability about these services and then you can attack
these devices using these flaws.
Okay.
So the next step is called exploitation.
This is the actual hacking process where you get the control of their device.
So your goal is to somehow force them or somehow enter into this system.
And once you have entered into their system your goal would be to bypass the ideas are intrusion detection
system.
Got a lot of volumes of intrusion detection systems for example firewalls your antivirus the native
security features that are part of intrusion detection system.
So your goal is to bypass all of these.
And then once you bypass all of these then you exploit these machines for your own malicious intentions
for example you can you get a control of a lot of a huge number of devices at the same time and then
you can use these devices to perform the DOS attacks or denial of service attacks so denial of service
attacks other attacks of each year in which the centralized to take no net earnings set.
Okay.
So the next step is post exploitation.
So once you have turned out penetrated into their system.
Your next goal would be to maintain a long term access so you don't want to for example have just one
time connection and then you are unable to access it again.
So the goal here is to modify registries et cetera so that you can access and control this device whenever
you want.
You will also try to get access to a higher privilege users so by default most of the users on any operating
system are non rude.
So there are certain actions that can only be performed by rude users for example shutting off antivirus
and these type of hair are risky.
Thus they are mostly done by road users.
So your goal would be to escalate and increase you access to the root level.
And then your goal would be to cover your tracks.
This is pretty common because you would not want to get exposed.
So here your goal would be to delete logs and files that indicate your presence on the systems and the
last step is to implement this backdoor in a way that you get a long term access by modifying system
registries.
This is related to the maintaining access that we already studied
okay.
So these are the steps that we can used for hacking purposes but there are other techniques that can
also be exploited or used for hacking purposes.
So one technique is called social engineering.
So in social engineering you do not hack systems but you have people.
And this is relatively easy.
If the person is not very tech savvy.
So what social engineering basically does is that it implies or uses psychological manipulation.
So you for example send a malicious link to someone working in an organization and you ask them to open
this link.
And once he clicks this link he in the background he downloads a malicious code that will execute on
his machine and then it will try to connect with your machine and you will and you will get an access
to this machine.
So this is one of the most easiest ways to perform hacking but it also depends on the technical knowledge
of the person.
So in as I already mentioned that in this technique you treat people instead of systems and it depends
on the person.
If the person is very tech savvy it won't be easy to trick him into running executing malicious code
on his system and social engineering exploits someone test.
So if you send a malicious link to someone you trust then it is highly likely that he will somehow lick
this link and you will get access because humans are the weakest link in the security chain.
So even if the systems are perfect which is not possible but still let us use that even if the systems
are perfect then you can still fool manipulate humans to get access to.
For example if someone gives you a pass or way somehow by mistake or by you just ask him and he gives
you then the system no matter how strong the password is you can easily internet if you know the password
and there is another value in technique called phishing so phishing is basically you send out a fake
link which looks like a real link for example you direct him to a Facebook website which looks like
Facebook but you are actually running it and whenever he introduces someone and does his credentials
into the website instead of going to the Facebook dot com which is the original one you will get all
these credentials and then you can simply use these credentials to log into his website.
So this is basically appending sensitive information by far so you will display for example fake logging
bridges etc and things like that.
So that's it for this lecture.
So I hope you know how a basic knowledge about hacking.
So in the next lecture I will start with practical hacking.