Posts

Showing posts from September, 2020

Cyber Security - Protecting networks, computers and data

  Cyber security or information technology security are the techniques of protecting computers, networks, programs and data from unauthorized access or attacks that are aimed for exploitation. Description: Major areas covered in cyber security are: 1) Application Security 2) Information Security 3) Disaster recovery 4) Network Security Application security encompasses measures or counter-measures that are taken during the development life-cycle to protect applications from threats that can come through flaws in the application design, development, deployment, upgrade or maintenance. Some basic techniques used for application security are: a) Input parameter validation, b) User/Role Authentication & Authorization, c) Session management, parameter manipulation & exception management, and d) Auditing and logging. Information security protects information from unauthorized access to avoid identity theft and to protect privacy. Major techniques used to cover this are: a) Identificat

Password cracking and mutation rules

  Sometimes you end up with a great many Windows domain passwords that need cracking – either because you have compromised the domain controller and exported them yourself, or because the client has asked you to perform a password audit and has supplied the database to you themselves. As you know, LM hashes are insecure, and there is a very good way of cracking these (Ophcrack). However, there will also be passwords that cannot be cracked using the standard tables, or maybe the LM hash is not present in the dump at all. In this case, we’ll need to attack the NTLM hash with another tool – in this case a GPU cracker known as Oclhashcat. In this case we have a large (something like 6,000 entry) pwdump format file, with LM and NTLM hashes. Because the LM hashes have various weaknesses in the cryptography, we can crack a lot of passwords using Ophcrack – but in some cases only NTLM hashes are present. In this case we can use a hybrid approach. know more :  lm password cracker

Future of Network Operating Systems

  A network operating system is a software application that provides a platform for both the functionality of an individual computer and for multiple computers within an interconnected network. Basically, a network operating system controls other software and computer hardware to run applications, share resources, protect data and establish communication. Individual computers run client operating systems, while network systems create the software infrastructure for wireless, local and wide area networks to function. Basic Operating Features Network operating systems support the basic underlying operating features of networks. These include support for processors and the various protocols that allow computers to share data. Many network operating systems can detect hardware within the system to allow for asset discovery within the network. Also, network operating systems support the processing of other software applications that run on both individual computers and within the network. S

Windows Passwords Using Rainbow Crac

  Gone are the days when we have to wait for the days together to recover the Windows account password. Thanks to the rainbow crack technology, now we can crack the passwords in few seconds with 100% success rate. This Rainbow cracking technology works on simple concept. Instead of computing the hashes for each password dynamically and comparing with the correct one during cracking, password hashes are computed in advance for all character sets. These hashes are then stored in datasets called rainbow tables. So cracking involves just comparing the current password hash with the pre computed hashes within the rainbow tables and get the associated plain text password. Hence it takes very less time compared to the traditional method of brute force cracking. Setting up the rainbow table for various character sets is just one time activity and may take days or months based on the character set and speed of the machine. Once the rainbow tables are ready, you can feed the password hash to it

Information Security Program Management

  Effective information security program management should achieve the outcomes defined in ISG. The necessary goals must be defined in specific, objective and measurable terms. Appropriate metrics should also be put in place to measure whether or not the goals were achieved. If not, it should be known by how much the objectives were missed, and discussion done to improve on performance. Candidates should focus on the following six outcomes, and they should be considered as the basis for developing the objectives of an effective information security program: Strategic alignment: The emphasis here is on organizational information risk, selection of appropriate control objectives and standards, agreement on acceptable risk and risk tolerance and definitions of financial, operational and other constraints. Risk management: Candidates must show a comprehensive understanding of threats the organization faces, its vulnerabilities and risk profile. Candidates must know how to evaluate the pote

Lanmanworkstation Tuning

  Fileserving in Windows environments is usually of critical importance. After all, if you can't reach your files or have to wait five minutes every time you browse a share, the heat starts to build up in the IT department. File serving is more than just saving a file to your home directory. I wrote a two-part article on MSTerminalServices.org on file serving and Terminal server environments. I suggest you read that article (Part 1 and Part 2 ) first to get a feel for the proper context of this article. One of the main reasons I wrote that article is that fileserving can easily become a bottleneck if not configured properly, especially in Terminal Server environments. To solve these performance problems, you sometimes have to tune the fileserver (lanmanserver) and the “fileserver-client” (lanmanworkstation). However, this isn’t for the faint of heart and can cause huge problems if you do it wrong. Unfortunately, documentation on these tuning parameters is rather scarce. So in this

What is the use of Intent-Based Networking

  If you look under the hood of an intent-based networking system (IBNS), you’d be crazy not to see it as the future. It’s really smart, really safe, and hardware agnostic — basically fixing most of the annoying little problems while satisfying the big requirements for the largest data centers. Luckily, it’s just the future. It’s here now (albeit in a limited capacity). But that’s about to change. Intent-based networking systems (IBNS) will inspire a major shift in how networks are managed. Here are things you should know about intent-based networking. Automating Processes and Keeping Data Secure…Naturally First off, what are we talking about? What exactly is intent-based networking? A common analogy used to explain the technology is a self-driving car. You put in the destination, and instead of manually driving, the car makes all the turns, lane changes, starts at green lights, and stops to avoid collisions for you. All the decisions and granular moment-by-moment adjustments are contr

Authentication for Windows & Linux

  As small businesses and enterprises find their closets and server rooms filling up with Windows and Linux servers, a crucial concern has surfaced: how to handle multiple logon accounts for users. Small businesses or departments that have just a few servers rarely encounter this problem. After all, it takes a systems administrator only a minute or two to reset the passwords on a few accounts spread across two or three servers. As the number of servers increases, however, this chore becomes a growing burden for systems administrators and a hassle for users. When businesses approach vendors for a fix to this problem, vendors typically offer a single sign-on (SSO) solution. (For a detailed explanation of SSO and centralized authentication, see the sidebar "SSO vs. Centralized Authentication.") Unfortunately, implementing SSO can be difficult and expensive. An alternative solution within a heterogeneous network—a solution that works well in many environments—is to centralize use

What for an Onboard LAN?

  A LAN (local area network) interconnects several computers using Ethernet technology. As technology advances, networking capabilities have begun shipping as a standard feature on most motherboards. Onboard LAN is a specialized chipset on the motherboard designed to handle networking responsibilities for the computer, such as home networking and Internet connectivity. Local Area Networking Local area networks connect several computers within a limited physical proximity via Ethernet cables or wireless Ethernet, such as in homes, schools or businesses. In early computers, this capability was not a standard feature and required the installation of a network interface card (NIC). NIC installation was necessary until LANs became more common, requiring more efficient and less expensive networking capabilities. Onboard LAN controllers support numerous built-in hardware and software enhancements for networking, such as power management and input/output (I/O) scalability. Onboard LAN As trans

Challenges of IT Managers

  Managing a corporate network is becoming harder as it becomes larger and more complex. ii. Network management, it includes not only components that transport information in the network, but also systems that generate traffic in the network. iii. The systems could be hosts, database servers, file servers, or mail servers. In the client-server environment, network control is no longer centralized, but distributed. iv. Computer and telecommunication networks are merging fast into converged network with common modes and media of transportation and distribution. As in the case of broadband networks, the IT manager needs to maintain both types of networks. v. Thus, the data communications manager functions and telecommunication manager functions have been merged to that of the IT manager. vi. With the explosion of information storage and transfer in the modern information era, management of information is also the responsibility of the IT manager, with the title of CIO, Chief Information O

what is Lanmanworkstation Tuning

  Fileserving in Windows environments is usually of critical importance. After all, if you can't reach your files or have to wait five minutes every time you browse a share, the heat starts to build up in the IT department. File serving is more than just saving a file to your home directory. I wrote a two-part article on MSTerminalServices.org on file serving and Terminal server environments. I suggest you read that article (Part 1 and Part 2 ) first to get a feel for the proper context of this article. One of the main reasons I wrote that article is that fileserving can easily become a bottleneck if not configured properly, especially in Terminal Server environments. To solve these performance problems, you sometimes have to tune the fileserver (lanmanserver) and the “fileserver-client” (lanmanworkstation). However, this isn’t for the faint of heart and can cause huge problems if you do it wrong. Unfortunately, documentation on these tuning parameters is rather scarce. So in this

Onboard LAN works ?

  A LAN (local area network) interconnects several computers using Ethernet technology. As technology advances, networking capabilities have begun shipping as a standard feature on most motherboards. Onboard LAN is a specialized chipset on the motherboard designed to handle networking responsibilities for the computer, such as home networking and Internet connectivity. Local Area Networking Local area networks connect several computers within a limited physical proximity via Ethernet cables or wireless Ethernet, such as in homes, schools or businesses. In early computers, this capability was not a standard feature and required the installation of a network interface card (NIC). NIC installation was necessary until LANs became more common, requiring more efficient and less expensive networking capabilities. Onboard LAN controllers support numerous built-in hardware and software enhancements for networking, such as power management and input/output (I/O) scalability. Onboard LAN As trans

What are the problems of IT Managers

Managing a corporate network is becoming harder as it becomes larger and more complex. ii. Network management, it includes not only components that transport information in the network, but also systems that generate traffic in the network. iii. The systems could be hosts, database servers, file servers, or mail servers. In the client-server environment, network control is no longer centralized, but distributed. iv. Computer and telecommunication networks are merging fast into converged network with common modes and media of transportation and distribution. As in the case of broadband networks, the IT manager needs to maintain both types of networks. v. Thus, the data communications manager functions and telecommunication manager functions have been merged to that of the IT manager. vi. With the explosion of information storage and transfer in the modern information era, management of information is also the responsibility of the IT manager, with the title of

What is the importance of Intent-Based Networking

If you look under the hood of an intent-based networking system (IBNS), you’d be crazy not to see it as the future. It’s really smart, really safe, and hardware agnostic — basically fixing most of the annoying little problems while satisfying the big requirements for the largest data centers. Luckily, it’s just the future. It’s here now (albeit in a limited capacity). But that’s about to change. Intent-based networking systems (IBNS) will inspire a major shift in how networks are managed. Here are things you should know about intent-based networking. Automating Processes and Keeping Data Secure…Naturally First off, what are we talking about? What exactly is intent-based networking? A common analogy used to explain the technology is a self-driving car. You put in the destination, and instead of manually driving, the car makes all the turns, lane changes, starts at green lights, and stops to avoid collisions for you. All the decisions and granular moment-by-moment adjustm

what is the use of cyber security ?

Cyber security or information technology security are the techniques of protecting computers, networks, programs and data from unauthorized access or attacks that are aimed for exploitation. Description: Major areas covered in cyber security are: 1) Application Security 2) Information Security 3) Disaster recovery 4) Network Security Application security encompasses measures or counter-measures that are taken during the development life-cycle to protect applications from threats that can come through flaws in the application design, development, deployment, upgrade or maintenance. Some basic techniques used for application security are: a) Input parameter validation, b) User/Role Authentication & Authorization, c) Session management, parameter manipulation & exception management, and d) Auditing and logging. Information security protects information from unauthorized access to avoid identity theft and to protect privacy. Major techniques used to co

Setup Wireless Security

When it comes to having a wireless network at your home or business, having wireless security is essential. Having good wireless security can make your wireless network less susceptible to hackers and can make connecting to the network difficult for those who you do not want to have access. Regardless of your wireless router, configuring wireless security on your router merely requires going to the correct section of the administration control panel. Step 1 Type your router's administration control panel address into Internet Explorer. For Linksys/Cisco routers, the address is 192.168.1.1. For D-Link and Netgear routers, the address is either 192.168.0.1 or 192.168.1.1. For other routers the address may be 192.168.1.1, 192.168.0.1 or 192.168.2.1. If none of these work for you, consult your router's user manual. Step 2 Type in your user name and password for the administration control panel of your router, and click "OK." For Linksys/Cisco routers, the d

What is LAN With Ping

To remotely boot a computer on a network, you'll need a "Wake-On-LAN" supported network adapter. Once the adapter is installed, the computer can be "pinged" from another computer on the network to initiate the boot sequence. A ping is a signal sent from one computer to another and can be sent directly from the Command Prompt in Windows. Step 1 Open the "Start" menu on the computer that will be pinged, then type "CMD" into the Search box and press "Enter." Step 2 Type "ipconfig/all" then press "Enter." Make note of the following items: Physical address, IP address and subnet mask. Step 3 Open the Command Prompt on the computer from which you will be sending the wake-on-LAN command. Type "ping" followed by the computer that you will be sending the wake-on-LAN command's IP address. For example, if the IP address is "192.168.1.1," type "ping 192.168.1.1" and pres

How Onboard LAN works?

A LAN (local area network) interconnects several computers using Ethernet technology. As technology advances, networking capabilities have begun shipping as a standard feature on most motherboards. Onboard LAN is a specialized chipset on the motherboard designed to handle networking responsibilities for the computer, such as home networking and Internet connectivity. Local Area Networking Local area networks connect several computers within a limited physical proximity via Ethernet cables or wireless Ethernet, such as in homes, schools or businesses. In early computers, this capability was not a standard feature and required the installation of a network interface card (NIC). NIC installation was necessary until LANs became more common, requiring more efficient and less expensive networking capabilities. Onboard LAN controllers support numerous built-in hardware and software enhancements for networking, such as power management and input/output (I/O) scalability. Onboard L