Hacking Linux exposed
Subtitle: Linux security secrets & solutions
By: by Brian Hatch, James Lee, George Kurtz.
Contributors: Lee, James, 1962-; Kurtz, George.
Publisher: Osborne/McGraw-Hill
Published: 2001
Place of publication: New York
Language: eng
Format: Paperback
Number of pages: 566
Subjects: Linux.; Linux (Computer file); Computer security.
Notes: Includes index.
Table of contents: label: Part I
title: Locking into Linux; label: Chapter 1
title: Linux Security Overview; title: Why They Want to Root Your Box; title: The Open Source Movement; title: Open Source and Security; title: Linux Users; title: /etc/passwd; title: How to Place Controls on Users; title: Other Security Controls; title: Summary; label: Chapter 2
title: Proactive Measures and Recovering from a Break-In; title: Proactive Measures; title: Insecurity Scanners; title: Scan Detectors; title: Hardening Your System; title: Log File Analysis; title: Filesystem Integrity Checks; title: Recovering from a Hack; title: How to Know When You've Been Hacked; title: What to Do After a Break-In; title: Summary; label: Chapter 3
title: Mapping Your Machine and Network; title: Online Searches; title: Whois Databases; title: Ping Sweeps; title: DNS Issues; title: Example DNS Lookups; title: DNS Query Security Issues; title: DNSSEC; title: Traceroutes; title: Port Scanning; title: OS Detection; title: Active Stack Fingerprinting; title: Passive Stack Fingerprinting; title: Enumerating RPC Services; title: File Sharing with NFS; title: Simple Network Management Protocol (SNMP); title: Network Insecurity Scanners; title: Summary; label: Part II
title: Getting In from the Outside; label: Chapter 4
title: Social Engineering, Trojans, and Other Hacker Trickery; title: Social Engineering; title: Social Engineering Categories; title: What to Do to Avoid Being Socially Engineered; title: Hackers Do Their Homework; title: Trojan Horses; title: Methods of Trojan Delivery; title: Viruses and Worms; title: How Viruses and Worms Spread; title: Viruses and Linux; title: Worms and Linux; title: IRC Backdoors; title: Summary; label: Chapter 5
title: Physical Attacks; title: Attacking the Office; title: Boot Access Is root Access; title: Encrypted Filesystems; title: Summary; label: Chapter 6
title: Attacking Over the Network; title: Using the Network; title: TCP/IP Networks; title: Public Phone Networks; title: Default or Bad Configurations; title: NFS Mounts; title: Netscape Default Configurations; title: Squid; title: X Windows System; title: Default Passwords; title: Sniffing Traffic; title: How Sniffers Work; title: Common Sniffers; title: Guessing Passwords; title: Vulnerabilities; title: Buffer Overflows; title: Vulnerable Services; title: Vulnerable Scripts; title: Unnecessary Services; title: Using Netstat; title: Using Lsof; title: Using Nmap to Identify Services; title: Turning Off Services; title: Summary; label: Chapter 7
title: Abusing the Network Itself; title: DNS Exploits; title: Routing Issues; title: Advanced Sniffing and Session Hijacking; title: Hunt; title: Dsniff; title: Man-in-the-Middle Attacks; title: Denial of Service Attacks; title: Floods; title: TCP/IP Exploits; title: Abusing Trust Relationships; title: Implementing Egress Filtering; title: Summary; label: Part III
title: Local User Attacks; label: Chapter 8
title: Elevating User Privileges; title: Users and Privileges; title: Elevation of Privilege; title: Trusted Paths and Trojan Horses; title: Password Storage and Use; title: Group Membership; title: Special-Purpose Groups and Device Access; title: Sudo; title: Setuserid Programs; title: Hacker Setuserid Programs on Mounted Filesystems; title: Attacks Against Poor Programming; title: Hardlinks and Symlinks; title: Input Validation; title: Summary; label: Chapter 9
title: Password Cracking; title: How Passwords Work in Linux; title: /etc/passwd; title: Linux Encryption Algorithms; title: Password Cracking Programs; title: Other Cracking Programs; title: Availability of Dictionaries; title: Shadow Passwords and /etc/shadow; title: Shadow Passwords Explained; title: Shadow Passwords Command Suite; title: Apache Password Files; title: Pluggable Authentication Modules; title: Password Protection; title: Summary; label: Chapter 10
title: How Hackers Maintain Access; title: Host-Based Authentication and User Access; title: Passwordless Remote Access with the r-Commands; title: Passwordless Logons with Ssh; title: Network Accessible Root Shells; title: Trojaned System Programs; title: Trail Hiding; title: Back Doors; title: Kernel Hacks; title: Rootkits; title: Summary; label: Part IV
title: Server Issues; label: Chapter 11
title: Mail and FTP Security; title: Mail Security; title: Mail Transfer Agents; title: Mail Server Insecurities; title: File Transfer Protocol (FTP); title: The FTP Protocol; title: Sample FTP Session; title: Active Mode FTP; title: Passive Mode FTP; title: Port Scanning Through Third-Party FTP Servers; title: Enabling Third-Party FTP; title: Insecure Stateful FTP Firewall Rules; title: Anonymous FTP Problems; title: Summary; title: Mail Servers; title: FTP; label: Chapter 12
title: Web Servers and Dynamic Content; title: Making an HTTP Request; title: Apache Web Server; title: Apache Configuration; title: Problems with CGI Programs; title: Insecure CGI Programs; title: Other Linux Web Servers; title: Summary; label: Chapter 13
title: Access Control and Firewalls; title: An Overview of inetd and xinetd; title: inetd; title: xinetd; title: Firewalls: Kernel-Level Access Control; title: Types of Firewalls; title: Linux Packet Filtering; title: Blocking Specific Network Access; title: Firewall Strategy; title: Firewall Products; title: Summary; label: Part V
title: Appendixes; label: Appendix A
title: Keeping Your Programs Current; label: Appendix B
title: Turning Off Unneeded Services; label: Appendix C
title: Online Resources; label: Appendix D
title: Case Studies