Windows Server 2003 (Hacking Exposed)
"The end-all of hacking.... A must-read if you want to secure your networks." --W2KnewsPlug the holes in your Windows infrastructure by seeing it through the eyes of the attackerProtect your Windows Server 2003 systems from the latest widespread and devastating attacks the tried-and-trueHacking Exposedway. You'll learn, step-by-step, how intruders locate targets, gain super-user access, and ransack compromised networks. Fully updated chapters detail all-new Windows Server 2003 footprinting and scanning methods, IIS6 security flaws, buffer overflow exploits, Terminal Services hacks, and DoS/DDoS vulnerabilities. Real-world cases and code examples demonstrate the most current dangers and spell out countermeasures to stonewall malicious intruderseverytime.New and Updated Material:All-new Windows footprinting and scanning tools and techniquesNetBIOS, MSRPC, SMB, DNS, SNMP, and Active Directory enumeration protectionUpdated exploits of Windows-specific services, including the MSRPC interface vulnerability that led to the Blaster worm, SQL Slammer, and eavesdropping attacks on KerberosDetails on the new IIS6 security architecture, URLScan, Microsoft Web services source code disclosure exploits, and HTR chunked encoding exploitsAll-new Terminal Services information including new password guessing, privilege escalation, and eavesdropping countermeasuresNew client-side exploits using popular multimedia file formats, and strong new countermeasures using Internet Explorer Enhanced Security ConfigurationThe latest countermeasures for Denial of Service (DoS) attacks including bogon filtering and sink holesNew security features such as Internet Connection Firewall, software restriction policies, and updates to IPSecAbout the Authors:Joel Scambray is Senior Director of Security for Microsoft's MSN and Stuart McClure is President/CTO of Foundstone, Inc., an enterprise security products company. They are co-authors of four editions ofHacking Exposedas well asHacking Exposed Windows 2000.