Learning objectives By the end of this unit you should: Explain Computer Science – Term 2 Learning objectives By the end of this unit you should: Explain Explain the concept of footprinting. Identify Identify the process of footprinting. List List the different types of footprinting. Identify the tools of footprinting. Understand Understand the footprinting search engine method. 11/28/2018

Key Terms Footprinting DNS Host Command prompt Social engineering Computer Science – Term 2 Key Terms Footprinting DNS Host Command prompt Social engineering 11/28/2018

Computer Science – Term 2 Footprinting: Is uncovering and collecting as much information as possible regarding a target network. The first key Term 11/28/2018

Computer Science – Term 2 What is footprinting? Footprinting (also known as Reconnaissance) is the first and most convenient critical component of penetration testing. An ethical hacker uses this to gather information about: a computer system. a company. an organization or government network system. The purpose of footprinting is to learn as much as you can about the target system, its remote access capabilities, ports and services. 11/28/2018

What is footprinting? Footprinting can be both active or passive. Computer Science – Term 2 What is footprinting? Footprinting can be both active or passive. Active footprinting is creating devices, endpoints or systems and services within the target environment directly which can be logged. Passive footprinting is using publicly available information on the internet which often doesn’t even come close to the target environment. Active footprinting Passive footprinting 11/28/2018

Why is footprinting necessary? Computer Science – Term 2 Computer Science – Term 2 Why is footprinting necessary? Footprinting is performed in the pre-attack phase and is necessary to: systematically and methodically ensure that all pieces of information related to the technologies are identified. build a database of information about the target. help in the reporting phase at the end of the penetration test. show how much information is publicly available. 11/28/2018

Why do businesses need to do footprinting? Computer Science – Term 2 Computer Science – Term 2 Why do businesses need to do footprinting? Businesses must use this technique to see what their vulnerabilities are and where they are located. A question form the book : They can address them and make changes in the business policy and To protect their business. 11/28/2018

Computer Science – Term 2 The UAE Cyber Security The UAE Cyber Security Law enforces strict punishments for: the violation of ethics. gaining unauthorized access to any computer system, network or organisation. related illegal activities. 11/28/2018

Objectives of footprinting Computer Science – Term 2 Computer Science – Term 2 Objectives of footprinting What information does the ethical hacker try to gather in footprinting? A question form the book 11/28/2018

Objectives of footprinting Network DNS IP Networks Accesable System Website Access Control VPN End Point Firewall Vendors IDS Systems Routing /Routed Protocols Phone System (Analog, VoIP) Host Listening Services Operating System Versions Internet Reachability Enumerated Information SNMP Users/Groups Mobile devices Organisation Organisation Structure Websites Phone Numbers Directory Information Office Location Company History Business Associations Financial Information Computer Science – Term 2 Objectives of footprinting The main objective of footprinting is to get a complete view and as much information as possible about the specific target to set up the path that will be taken to execute the attack in the later phase. The information that the ethical hacker is trying to collect is: network information. information about the host (System Information). Information about the organization. 11/28/2018

Host: A computer or other device connected to a computer network. Computer Science – Term 2 Computer Science – Term 2 Host: A computer or other device connected to a computer network. Second Key Term 11/28/2018

Exercise 2.1: The objectives of footprinting. Computer Science – Term 2 Computer Science – Term 2 Exercise 2.1: The objectives of footprinting. Check the appropriate field next to each Collected information to indicate the type of Footprinting it describes. Collected information Network Information Host information Organisation Information Domain name   User and group names ACLs SNMP information Company directory News articles/press releases Passwords System names Location details Address and phone numbers TCP and UDP services running Routing tables 11/28/2018

Process of footprinting Computer Science – Term 2 Computer Science – Term 2 Process of footprinting Find vulnerabilities and exploits for launching attacks. Perform techniques such as Whois, DNS, network and organizational queries. Determine the operating system used, platforms running, web servers version, etc. Collect basic information about the target and its network. During footprinting, an ethical hacker essentially attempts to gather as much information about a target system as possible, using the following steps: 11/28/2018

Computer Science – Term 2 DNS (domain name system): Is hierarchical naming system built on a distributed database. Transforms domain names to IP addresses and makes it possible to assign domain names to groups of internet resources and users, regardless of the entity’s physical location. Third Key Term 11/28/2018

Activity 2.1: The first step for an ethical hacker. Computer Science – Term 2 Computer Science – Term 2 Activity 2.1: The first step for an ethical hacker. Imagine that you started your job as an ethical hacker in a company. Imagine your manager asks you to do a penetration test to for a target. Specify the information you would gather first. Answer: Checking if the company has a firewall, intrusion detection system or any sort of preventive mechanisms, that will prevent the attack. 11/28/2018

Computer Science – Term 2 Internet Intranet Extranet Remote access Footprinting types domain names, network blocks, IP addresses of reachable systems, the TCP and UDP services running, system architecture, the ACL, IDS running, and system enumeration. networking protocols, internal domain names, network blocks, IP addresses of reachable systems, TCP and UDP services running, system architecture, the ACL, IDS running, and system enumeration. connection origination and destination, the type of connection, and access control mechanisms. analog/digital telephone numbers, the remote system type and authentication mechanisms. 11/28/2018

Computer Science – Term 2 There are two ways of collecting information from a network, organisation or host. Footprinting types: 11/28/2018

Exercise 2.2: Footprinting types. Computer Science – Term 2 Computer Science – Term 2 Exercise 2.2: Footprinting types. For each kind of information collected, check the appropriate box to indicate the area from where the ethical hacker gathered it. Collected information Internet Intranet Extranet Remote access Networking protocols   Analog/Digital telephone numbers The type of connection User and group names Internal domain names Access control mechanisms Authentication mechanisms Routing tables System banners 11/28/2018

Footprinting techniques/tools Computer Science – Term 2 Computer Science – Term 2 Footprinting techniques/tools There are different tools\techniques for identifying IP addresses, sub-domains, devices and technologies. WHOIS Lookup Technique Search Engine technique Netcraft technique DNS Footprinting – MX Entry Technique Network Technique Social Engineering Technique 11/28/2018

WHOIS Lookup Technique Computer Science – Term 2 Computer Science – Term 2 WHOIS Lookup Technique Whois lookup is a technique for gathering information in the footprinting phase. Whois information is based upon a tree hierarchy. There are many Whois lookup tools available on the net in the form of websites but some operating systems like Windows and Linux, have them in the form of a command line program. Whois can reveal information about servers, which website is hosted and its location, and also display the name, address and contact numbers of technical staff, the domain owner and the domain registrar. 11/28/2018

Computer Science – Term 2 Whois lookup tool For lookup in www.whois.com/whois/ or http://www.whois.domaintools.com/ You can type in the domain name or IP address. To search for a domain name registration record, enter the URL in the search field and click on search. When you perform a domain lookup, you get information regarding that domain. It will show you the domain, organisation, domain name server details, phone numbers, fax and other details. Sometimes it will show the administrator details which can be very useful if you want to perform social engineering activities. 11/28/2018

Computer Science – Term 2 UAE Law Article (5) Whoever gains access to a website without authorization intending to change its designs, or delete, destroy or modify it, or occupy its address shall be punished by imprisonment and by a fine not less than one hundred thousand dirhams and not in excess of three hundred thousand dirhams or either of these two penalties. 11/28/2018

Computer Science – Term 2 whois Command The domain information will show up as below: For lookup in an operating system type the following command: Syntax: whois [URL] 11/28/2018

Search engine technique Computer Science – Term 2 Computer Science – Term 2 Search engine technique Use a search engine to gather information about the target, such as technology platforms, employee details, login pages, intranet portals, and more. Any search engine has its own syntax. To search and collect information, you can use some of the search operators\commands as follows. This can reveal a great amount of information, and help the ethical hacker to locate detailed information such as employee details, company policies and online hidden webpages. 11/28/2018

Example 2.1: List the available domains Computer Science – Term 2 Computer Science – Term 2 Example 2.1: List the available domains To list the available domains under the smartcarsuae website go to a search engine and write ‘smartcaruae’ in the search field. Then, press enter. The website information will show up like this. 11/28/2018

Computer Science – Term 2 Ethilab Activity : Search engine Imagine you are an ethical hacker hired by the Futuresmarteducation.com company in the UAE to assure the security of the company information system. Today you are going to perform footprinting using search engine commands, and your target is to collect the information below. Futuresmarteducation.com is the company’s website. The website The list of website directories The list of the configuration files The list of the database files The list of the log files The list of the backup and old files The list of the login pages The list of the document files 11/28/2018

Computer Science – Term 2 Netcraft Technique Netcraft tool This technique provides data about nearly every website and can be extremely useful for penetration testers. On the right side of the website, there is a prompt which asks: What is the site running? This is the Netcraft site’s report toolbar in which you can type the domain or site and it will return information about it. If you type in the domain, it will present the websites that are related to that specified domain. You can click on those websites to open a site report about them. 11/28/2018

DNS footprinting – MX entry technique Computer Science – Term 2 Computer Science – Term 2 DNS footprinting – MX entry technique Domain Name System (DNS) can reveal information about MX (host/domain) mail exchanges which indicates what email application services are being used. This information can be used later to exploit mail services and email accounts. An example of a DNS lookup website is www.dnswatch.info which is used to search for a domain name and IP address. 11/28/2018

Computer Science – Term 2 Network technique This command is used to extract the IP address and identify if the target site is online. Login into the operating system commands prompt screen, and write Ping then the URL. Syntax: Ping [URL] Ping Command 11/28/2018

Example 2.2: Gather the IP address Computer Science – Term 2 Computer Science – Term 2 Example 2.2: Gather the IP address To gather the IP address of the URL smartcarsuae.com. Write ‘ping Smartcarsuae.com’ in the windows command screen. 11/28/2018

Computer Science – Term 2 Network technique This command is us to find DNS details, including: the IP addresses of a particular computer. the MX records for a domain. the NS servers of a domain. The name nslookup means: ‘name server lookup’. Login into the operating system command prompt screen and type : server and the IP address. Syntax: Server [IP address] NSLOOKUP Command 11/28/2018

Computer Science – Term 2 NSLOOKUP Command For example, to collect the server information using the IP address 184.186.221.37 from the smarcarsuae.com company’s website, type: Server 184.186.221.37 Set q=mx Command This technique is used to retrieve mail server information, you can use the following commands to get the mail server name. Syntax: Set q=mx 11/28/2018

Example 2.3: retrieve the mail server information Computer Science – Term 2 Computer Science – Term 2 Example 2.3: retrieve the mail server information To retrieve the mail server information for smarcarsuae.com company website type: set q=mx 11/28/2018

Computer Science – Term 2 Ethilab Activity After collecting the company URL using the search engine command, you now need to collect the following information about Futuresmarteducation.com to ensure the security of the information on the company network. 1. The IP address of the site 2. Identify the hosting site and domain name servers that the Futuresmarteducation.com site is linked to. 3. The IP address of the domain name server 4. Connect to the target’s domain name server 11/28/2018

Computer Science – Term 2 Network technique This command is used to show : the IP address. the Name. the time it takes to reach each host and return a response. This gives a clear picture of the path to connect to the remote host and the time it took. Traceroute Command 11/28/2018

Social engineering technique Computer Science – Term 2 Computer Science – Term 2 Social engineering technique Social engineering is a non-technical attack, but it involves tactics for trapping a victim. This is a technique used to gain important information about an organization such as: the departments the employees belong to and their extension numbers. email addresses. and their job titles. This is the art of manipulating people to reveal confidential information and involves gaining their trust. 11/28/2018

Computer Science – Term 2 Social engineering: An attack vector that relies on human interaction, breaking normal security procedures to obtain confidential information. 4th Key Term 11/28/2018

Computer Science – Term 2 Reflection Student reflection List three things you have learned about, and two things you have enjoyed doing. Key skills reflection State what ethical hacking is and identify some advantage for it. Key Terms Integrity: guarding against improper information modification or destruction Confidentiality: preserving authorized restrictions on access and disclosure Availability: ensuring timely and reliable access to and use of information Exploit: defined way to breach the security of an IT system through vulnerability Vulnerability: existence of a weakness, design or implementations error that can lead to an unexpected and undesirable event Attack: any action that violates security 11/28/2018

End-of-unit assessment Computer Science – Term 2 Computer Science – Term 2 End-of-unit assessment 1. Define information security. 11/28/2018

End-of-unit assessment Computer Science – Term 2 Computer Science – Term 2 End-of-unit assessment 2. List the categories of threat. 11/28/2018

End-of-unit assessment Computer Science – Term 2 Computer Science – Term 2 End-of-unit assessment 3. Define attack vector. 11/28/2018

End-of-unit assessment Computer Science – Term 2 Computer Science – Term 2 End-of-unit assessment 4. Define ethical hacking. 11/28/2018

End-of-unit assessment Computer Science – Term 2 Computer Science – Term 2 End-of-unit assessment 5. Draw the process of ethical hacking/penetration testing. 11/28/2018