Introduction to Ethical Hacking Review
Questions and Complete Solutions
Hacker Classifications:
White Hats ✅Considered the good guys of hacking. These are the Ethical Hackers.
These people are normally hired by companies to improve security by conducting pen
test. The don't conduct test without getting permission first. Also known as Security
Analysts....
Hacker Classifications:
Black Hats ✅Considered the bad guys, these are the crackers who illegally use their
skill for either personal reasons or malicious intent. They normally seek to steal (copy)
or destroy data and to deny access to resources and systems. Black Hats do not ask for
permission or consent.
Hacker Classifications:
Gray Hats ✅Gray hats are hard to categories because they're neither good or bad.
They're two different subsets for Gray Hats, those who are simply curious about hacking
tools and techniques. Then they're those that feel its their duty with or without the
organizations permission to demonstrate security flaws in the system.
Attack Types:
Operating System Attacks ✅These attacks target the common mistakes many people
make when installing Operating Systems. Most people accept and leave the defaults
settings enabled. Admin accounts with no passwords, all ports left open and guest
accounts.
Attack Types:
Application-Level Attacks ✅These attacks are conducted on the actual programming
code and software logic of an application. Most people secure their OS and network but
forget to secure the applications running on them. Many applications aren't tested for
vulnerabilities during their creation and often have vulnerabilities built into them. Apps
on a network are a gold mine for most hackers.
Attack Types:
Shrink-wrap Code Attacks ✅These attacks take advantage of built-in code and scripts
that most of the shelf applications come with. Instead of spending time writing your own
code to attack something, hackers by codes pieces that are shrink-wrapped. These
scripts and code pieces are designed to make installation and administration easier but
can lead to vulnerabilities if not managed appropriately.
Attack Types:
Questions and Complete Solutions
Hacker Classifications:
White Hats ✅Considered the good guys of hacking. These are the Ethical Hackers.
These people are normally hired by companies to improve security by conducting pen
test. The don't conduct test without getting permission first. Also known as Security
Analysts....
Hacker Classifications:
Black Hats ✅Considered the bad guys, these are the crackers who illegally use their
skill for either personal reasons or malicious intent. They normally seek to steal (copy)
or destroy data and to deny access to resources and systems. Black Hats do not ask for
permission or consent.
Hacker Classifications:
Gray Hats ✅Gray hats are hard to categories because they're neither good or bad.
They're two different subsets for Gray Hats, those who are simply curious about hacking
tools and techniques. Then they're those that feel its their duty with or without the
organizations permission to demonstrate security flaws in the system.
Attack Types:
Operating System Attacks ✅These attacks target the common mistakes many people
make when installing Operating Systems. Most people accept and leave the defaults
settings enabled. Admin accounts with no passwords, all ports left open and guest
accounts.
Attack Types:
Application-Level Attacks ✅These attacks are conducted on the actual programming
code and software logic of an application. Most people secure their OS and network but
forget to secure the applications running on them. Many applications aren't tested for
vulnerabilities during their creation and often have vulnerabilities built into them. Apps
on a network are a gold mine for most hackers.
Attack Types:
Shrink-wrap Code Attacks ✅These attacks take advantage of built-in code and scripts
that most of the shelf applications come with. Instead of spending time writing your own
code to attack something, hackers by codes pieces that are shrink-wrapped. These
scripts and code pieces are designed to make installation and administration easier but
can lead to vulnerabilities if not managed appropriately.
Attack Types:
