Đang chuẩn bị liên kết để tải về tài liệu:
hack proofing your network second edition phần 6

Tcpdump có thể được lấy từ www.tcpdump.org. Sửa đổi đã được thực hiện để tcpdump trong những năm gần đây để hỗ trợ thêm cho một phạm vi rộng các giao thức bổ sungdsniff là một bộ công cụ đánh hơi được cung cấp bởi Sông Dug. dsniff có sẵn trên trang | Sniffing Chapter 10 377 SYNGRESS syngress.com TCPDump can be obtained from www.tcpdump.org. Many modifications have been made to TCPDump in recent years to add support for a wide range of additional protocols. dsniff dsniff is a sniffing toolkit provided by Dug Song. dsniff is available on his Web site at www.monkey.org dugsong dsniff or at a number of mirrors sites. dsniff is most famous for its authentication usernames passwords sniffing capabilities. The current version of dsniff will decode authentication information for the following protocols AOL Instant Messenger Citrix Winframe Concurrent Versions System CVS FTP HTTP ICQ IMAP Internet Relay Chat IRC Lightweight Directory Access Protocol LDAP RPC mount requests Napster NNTP Oracle SQL Net Open Shortest Path First OSPF PC Anywhere POP PostgreSQL Routing Information Protocol RIP Remote Login rlogin Windows NT plaintext SMB Network Associates Sniffer Pro remote Simple Network Management Protocol SNMP Socks Telnet X11 and RPC yppasswd. Notes from the Underground. dsniff Used against the Author The following sample output from dsniff was captured by Dug Song who successfully captured my password at the CanSecWest 2001 security conference. It happened because Outlook automatically checks POP3 servers even when you just open it to grab someone s contact information. I quickly changed the password just in time the remainder of dsniff output captures somebody else attempting to log on with that password presumably another person using dsniff who had captured the password. 03 28 01 18 43 24 tcp 192.168.1.201.1035 - 216.136.173.10.110 pop USER robert_david_graham PASS Cerveza2 Continued www.syngress.com 378 Chapter 10 Sniffing 03 29 01 02 07 41 tcp 192.168.1.243.1837 - 216.136.173.10.110 pop USER robert_david_graham PASS Cerveza2 03 29 01 02 07 08 tcp 192.168.1.243.1836 - 64.58.76.98.80 http POST coníig login 84gteu3f1fmvt HTTP 1.0 Host login.yahoo.com Content-type application x-www-form-urlencoded Content-length 147 .