It's a presentation on how sniffing works in hacking a system

1. Ethical Hacking:
Hacking GMail

2. 2
What do Hackers Do?
 Get into computer systems without valid
accounts and passwords
 Take over Web servers
 Collect passwords from Internet traffic
 Take over computers with remote access
trojans
 And much, much more

3. 3
Ethical Hackers
 Ethical Hackers do the same thing criminal
hackers do, with one difference
 Ethical Hackers have permission from the
owner of the machines to hack in
 These "Penetration Tests" reveal security
problems so they can be fixed

4. 4
Student Agreement
 Required for every student in CNIT 123:
Ethical Hacking and Network Defense or
CNIT 124: Advanced Ethical Hacking

5. Sniffing Plaintext
Passwords

6. 6
Eavesdropping
Router
Target
Using
Web
Attacker
Sniffing
Traffic
To
Internet

7. 7
Insecure Login Pages
 HTTP does not
encrypt data
 Always look for
HTTPS on login
pages

8. 8
Tool: Cain
 Click NIC icon to start sniffer
 Click Sniffer tab, Password tab on bottom
 From http://www.oxid.it/cain.html

9. 9
Three Hands-On Activities
 Monterey Room, Second Floor
 All Day Weds. & Thurs. till noon
 Sniffing plaintext passwords with Cain
 Hijacking Gmail sessions with Ferret &
Hamster
 Revealing Windows XP Login passwords
with OphCrack

10. 10
Contact
 Sam Bowne
 Computer Networking and Information
Technology
 City College San Francisco
 Email: sbowne@ccsf.edu
 Web: samsclass.info
 Last modified 12-2-08