Anatomy of a Network Hack: Anatomy of a Network Hack: How To Get Your How To Get Your Network Hacked in Network Hacked in Ten Easy Steps! Ten Easy Steps! Jesper M. Johansson Jesper M. Johansson Senior Security Strategist Senior Security Strategist Microsoft Corporation Microsoft Corporation [email protected][email protected]http://blogs.technet.com/jesper_johansson http://blogs.technet.com/jesper_johansson
17
Embed
Anatomy of a Network Hack: How To Get Your Network Hacked in Ten Easy Steps!
Anatomy of a Network Hack: How To Get Your Network Hacked in Ten Easy Steps!. Jesper M. Johansson Senior Security Strategist Microsoft Corporation [email protected] http://blogs.technet.com/jesper_johansson. This Presentation… … is about operational security. - PowerPoint PPT Presentation
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Anatomy of a Network Hack:Anatomy of a Network Hack:
How To Get Your How To Get Your Network Hacked in Ten Network Hacked in Ten Easy Steps!Easy Steps!
Jesper M. JohanssonJesper M. JohanssonSenior Security StrategistSenior Security StrategistMicrosoft CorporationMicrosoft Corporation
This Presentation…This Presentation… … is about operational security… is about operational security
The easy way is not always the secure wayThe easy way is not always the secure way
Networks are usually designed in particular Networks are usually designed in particular waysways
In many cases, these practices simplify attacksIn many cases, these practices simplify attacks
In some cases these practices enable attacksIn some cases these practices enable attacks
You need to know the methods of your You need to know the methods of your adversary to stop themadversary to stop them
This Presentation is This Presentation is Not…Not…
……a hacking tutoriala hacking tutorialHacking networks you own can be enlighteningHacking networks you own can be enlightening
Hacking networks you do not own is illegal!Hacking networks you do not own is illegal!
……a demonstration of Windows vulnerabilities a demonstration of Windows vulnerabilities Everything we show stems from operational Everything we show stems from operational security or custom applicationssecurity or custom applications
Knowing how the platform operates is criticalKnowing how the platform operates is critical
All platforms can get hackedAll platforms can get hacked
……for the faint of heartfor the faint of heart
The ToolsThe Tools
Four categories of tools usedFour categories of tools used““Co-opted” ordinary componentsCo-opted” ordinary components
Windows Resource Kit toolsWindows Resource Kit tools
Commonly available Commonly available hacking/administration toolshacking/administration tools
Custom-written toolsCustom-written tools
The difference between hackers and The difference between hackers and script kiddies is that hackers writescript kiddies is that hackers writetheir own toolstheir own tools
By the Way…By the Way…
I will not give you my tools. It does I will not give you my tools. It does not matter what you do for a living or not matter what you do for a living or who you work forwho you work for
If you do not ask, I don’t have to say If you do not ask, I don’t have to say nono
The TargetThe Target
RRAS BasicFirewall
Internet
FilteringRouter
Web Server
Data Center DC
SQL Server
Bad Guy
192.168.2.30
172.17.0.1
172.17.0.3
Corp DC10.1.2.17
10.1.2.16
172.17.0.2
BLAINE
B;laine: BIG GRAPHIC IS ADDITIONALGRAPHICS CAN BE UNGROUPED, FIXED IN SOME MANNER, REVIEW SHOW DVD FOR NEWER/CLEANER VERSIONS OF HARDWARE.
Knocking Down The Side Knocking Down The Side DoorDoor//Three mistakes in this statement alone:SqlConnection conn = new SqlConnection();conn.ConnectionString =
Initial entry is everythingInitial entry is everything
Most networks are designed like egg Most networks are designed like egg shellsshells
Hard and crunchy on the outsideHard and crunchy on the outside
Soft and chewy on the insideSoft and chewy on the inside
Once an attacker is inside the Once an attacker is inside the network, you can…network, you can…
……update resumeupdate resume
……hope he does a good job running ithope he does a good job running it
……drain itdrain it
How To Get Your Network How To Get Your Network Hacked in 10 Easy StepsHacked in 10 Easy Steps1.1. Don’t patch anythingDon’t patch anything2.2. Run unhardened applicationsRun unhardened applications3.3. Use one admin account, everywhereUse one admin account, everywhere4.4. Open lots of holes in the firewallOpen lots of holes in the firewall5.5. Allow unrestricted internal trafficAllow unrestricted internal traffic6.6. Allow all outbound trafficAllow all outbound traffic7.7. Don’t harden serversDon’t harden servers8.8. Reuse your passwordsReuse your passwords9.9. Use high-level service accounts, in multiple Use high-level service accounts, in multiple
placesplaces10.10.Assume everything is OKAssume everything is OK
10 Things Attackers Don’t Want 10 Things Attackers Don’t Want You To DoYou To Do1.1. Ensure everything is fully patchedEnsure everything is fully patched2.2. Use properly hardened applicationsUse properly hardened applications3.3. Use least privilegeUse least privilege4.4. Open only necessary holes in Open only necessary holes in
firewallsfirewalls5.5. Restrict internal trafficRestrict internal traffic6.6. Restrict outbound trafficRestrict outbound traffic7.7. Harden serversHarden servers8.8. Use unique pass phrases or smart Use unique pass phrases or smart
cardscards9.9. Micro-manage service accountsMicro-manage service accounts10.10.Maintain a healthy level of paranoiaMaintain a healthy level of paranoia
For more informationFor more information
Jesper and Steve finally Jesper and Steve finally wrote a book!wrote a book!
Order online:Order online:http://protectyourwindowsnetwohttp://protectyourwindowsnetwork.comrk.com