Table Of ContentThis page intentionaly left blank.
The Complete Cyber Security Course
Volume I
HACKERS Exposed
Nathan House BSc.
CISSP. CISM. CISA. SCF. ISO 27001 LA
The Complete Cyber Security Course
Volume I
Hackers Exposed
Copyright © 2016 StationX
https://www.stationx.net
All right reserved.
Permission granted to reproduce for personal educational use only. Commercial
copying, hiring, lending is strictly prohibited.
First edition: January 2017
Published by StationX Ltd.
48 White Lodge Close
Isleworth
London
TW7 6TH
Technical Editor: Tiron Andric
About the Author
Nathan House BSc. CISSP. CISM. CISA. SCF. ISO
27001 LA has over 24 years experience in cyber
security, where he has advised many of the largest
companies in the world, assuring the security on
multi-million and multi-billion pound projects. He is
the CEO and founder of Station X, a cyber security
consultancy. More recently he acted as the lead
security consultant on a number of the UKs mobile
banking and payment solutions, helping secure to date
over £71 billion in transactions.
Over the years he has spoken at a number of conferences, developed free security
tools, and discovered serious security vulnerabilities in leading applications.
The Online Course
If you don't have access to the full online course - Get access here
https://www.stationx.net/courses
Who this book is for
This book is primarily intended for people taking our "The Complete Cyber Security
Course Volume I Hacking Exposed". It was developed based on the transcripts of
course itself and as such serves to help our students through the course and as a
handy reminder for future use.
Conventions
Thorough this book you will find several styles of text that separate different kind
of information presented.
Code and terminal output is presented in Inconsolata font as follows:
nathan@debian ~& ls -lh
New terms and important words are sometimes shown in bold.
Reader feedback
We always welcome feedback from our students. Let us know what you think, did
you find the book usefull and if you liked or not.
To send feedback simply send an email to [email protected].
Errata
While we have taken every care to make sure the text you are reading is accurate
mistakes will and do happen. As the saying goes To err is human. If you do find
mistakes we would welcome if you can report it to us. You will be saving future
reader some frustration and help us improve the book. Please write to
[email protected].
Piracy
Free flow of information on internet has, in addition to many benefits, brought it's
share of problems, one of them is copyright infringement. We are well aware that we
can not fight every unauthorized copy of this book. However if you have come upon a
copy of this book somewhere on the internet we would like to invite you take a look
at our courses.
We are sure once you see the wealth of information and the knowledge you can
gain you will support us by subscribing to a course.
We often provide discount coupons, making our courses very affordable.
This page intentionaly left blank.
Table of Content
Section 1 Introduction
1. Welcome and Introduction to the Instructor!....................................................7
2. Security Quick Win!..........................................................................................8
3. Goals and Learning Objectives - Volume 1........................................................8
4. Target Audience................................................................................................9
5. Study Recommendations.................................................................................. 10
6. The Forum - For Questions, Answers and Other Resources.............................. 12
7. Course Updates.................................................................................................12
Section 2 Know Yourself - The Threat and Vulnerability Landscape
8. Goals and Learning Objectives..........................................................................13
9. Protect What You Value....................................................................................13
10. What is Privacy, Anonymity and Pseudonymity..............................................14
11. Security, Vulnerabilities, Threats and Adversaries..........................................15
12. Threat Modeling and Risk Assessments......................................................... 16
13. Security vs Privacy vs Anonymity - Can we have it all?.................................. 19
14. Defense In Depth............................................................................................20
15. The Zero Trust Model.....................................................................................20
Section 3: Know Your Enemy - The Current Threat and
Vulnerability Landscape
16. Goals and Learning Objectives........................................................................23
17. Why You Need Security – The Value Of A Hack..............................................23
18. The Top 3 Things You Need To Stay Safe Online........................................... 25
19. Security Bugs and Vulnerabilities - The Vulnerability Landscape................... 26
20. Hackers, crackers and cyber criminals............................................................27
21. Malware, viruses, rootkits and RATs...............................................................28
22. Spyware, Adware, Scareware, PUPs & Browser hijacking...............................30
23. What is Phishing, Vishing and SMShing..........................................................31
24. Spamming & Doxing.......................................................................................36
25. Social engineering - Scams, cons, tricks and fraud..........................................37
26. Darknets, Dark Markets and Exploit kits.........................................................38
27. Governments, spies and secret stuff - part I....................................................44
28. Governments, spies and secret stuff - part II...................................................46
29. Regulating encryption, mandating insecurity and legalizing spying............... 54
30. Trust & Backdoors.......................................................................................... 58
31. Censorship......................................................................................................60
32. Security News and Alerts - Stay Informed.......................................................61
Section 4 Encryption Crash Course
33. Goals and Learning ........................................................................................63
34. Symmetric Encryption.....................................................................................63
35. Asymmetric Encryption...................................................................................67
36. Hash Functions...............................................................................................71
37. Digital Signitures........................................................................................... 73
38. Secure Sockets Layer (SSL) and Transport layer security (TLS).....................76
39. SSL Stripping..................................................................................................82
40. HTTPS (HTTP Secure)................................................................................... 86
41. Digital Certificates.......................................................................................... 90
42. Certificate Authorities and HTTPS..................................................................94
43. End-to-End Encryption (E2EE).......................................................................98
44. Steganography................................................................................................99
45. How Security and Encryption is Really Attacked...........................................102
Section 5 Setting up a Testing Environment using Virtual Machines
46. Goals and Learning Objectives......................................................................105
47. Introduction to Setting up a Testing Environment Using Virtual Machines.. 105
48. Vmware........................................................................................................110
49. Virtual box....................................................................................................114
50. Kali Linux 2016............................................................................................ 120
Section 6 Operating System Security & Privacy
(Windows vs Mac OS X vs Linux)
51. Goals and Learning Objectives.......................................................................123
52. Security Features and Functionality.............................................................. 123
53. Security Bugs and Vulnerabilities................................................................. 124
54. Usage Share...................................................................................................126
55. Windows 10 - Privacy & Tracking..................................................................127
56. Windows 10 - Disable tracking automatically................................................129
57. Windows 10 - Tool Disable Windows 10 Tracking........................................131
58. Windows 10 – Cortana.................................................................................. 134
59. Windows 10 - Privacy Settings...................................................................... 136
60. Windows 10 - WiFi Sense..............................................................................138
61. Windows 7, 8 and 8.1 - Privacy & Tracking...................................................140
62. Mac - Privacy & Tracking...............................................................................143
63. Linux and Unix “like” Operating systems.......................................................145
64. Linux – Debian.............................................................................................. 147
65. Linux - Debian 8 Jessie - Virtual box guest additions Issue............................148
66. Linux - OpenBSD and Archlinux....................................................................151
67. Linux – Ubuntu..............................................................................................152
