Home > Step-by-step guide: Hacking file servers
Step-by-Step Guide:
EMAIL THIS LICENSING & REPRINTS

Step-by-step guide: Hacking file servers

20 Sep 2006 | Kevin Beaver, CISSP

Advice for securing Windows
Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google

File servers "hold the gold" on your network. They house sensitive files, databases, passwords and more. When they go down the network is incapacitated. When they're breached, all hell can break loose. The following are true hacks I've discovered recently. I'll share with you what I came across and how the vulnerability was exploited -- all from a hacker's point of view. This will help put security vulnerabilities you hear about in the news and read in security bulletins into a new context -- one that can help you approach your security testing with a fresh perspective and the realization that not all security exploits are high-tech.

Hacking file servers

 Home: Introduction
 Step 1: Exploiting a missing patch
 Step 2: Sniffing the network for juicy info
 Step 3: Stumbling across sensitive files
 Step 4: Executing related hacks that indirectly affect file servers
ABOUT THE AUTHOR:
Kevin Beaver is an independent information security consultant and expert witness with Atlanta-based Principle Logic, LLC. He has more than 18 years of experience in IT and specializes in performing information security assessments revolving around compliance and IT governance. Kevin has authored/co-authored six books including Hacking For Dummies, Hacking Wireless Networks For Dummies, Securing the Mobile Enterprise For Dummies (all by Wiley), as well as The Practical Guide to HIPAA Privacy and Security Compliance (Auerbach). He can be reached at kbeaver ~at~ principlelogic.com. Copyright 2006 TechTarget


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us    Add to Google


RELATED CONTENT
Hardware
Free security testing tools for Windows handheld devices
Windows mobile security: Get it locked down
Limit network access points to boost endpoint security
Network security assessment for network infrastructure
Managing Windows network access on additional servers
Windows Server 2008: Looking good on the security front
Conquer forgotten Windows passwords with Password Reset Wizard
USB encryption security for Windows: IronKey review
Why you should plan Windows network security tests
What should I be asking a security vendor?
Hardware Research

Microsoft Windows Network Security
Are tougher NACs needed in your shop?
Setting your Windows security assessment expectations, step by step
Restricting user permissions in folders
Windows XP folder permissions management
NTFS permissions control: Who will watch the watcher?
Top Windows server hardening tips of 2006
Safe and secure Windows logging practices
Eliminate zero-day threats with virtual server technology
Permitting Ping: ICMP Exceptions
Stop unauthorized access

Network Infrastructure security
Kerberos authentication for network login on non-Windows networks
Plan for a security breach, step by step
Hunting down a hacker
Contacting the domain controller
Define server roles, counterattack zero-day threats
Unsecured devices worry IT professionals
Step 1: Exploiting a missing patch
Step 2: Sniffing the network for juicy info
Step 3: Stumbling across sensitive files
Step 4: Executing related hacks that indirectly affect file servers

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
Security Descriptor Definition Language  (SearchWindowsSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary


HomeNewsTopicsITKnowledge ExchangeTipsAsk the ExpertsMultimediaWhite PapersIT DownloadsBlogs
About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




All Rights Reserved, Copyright 2004 - 2008, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts