rules of ethical hacking

TEN RULES OF ETHICAL HACKING YOU MUST KNOW –

You shall set the goals. – you must set your goals before you start the ethical hacking process .

You shall plan the work, lest thou go off course. – step by step plan must be made  
You shall obtain permission. – you must obtain permission from the person or the organization you are doing the hacking 
You shall work ethically. – you must work ethically
You shall work diligently.
You shall respect the privacy of others.
You shall do no harm.
You shall use a scientific process.
You shall not covet the neighbor’s tools.
You shall report all the finding


Standards for ethical hacking –

 ISO 17799
 COBIT
 SSE-CMM
 ISSAF
 OSSTMM


Implementing testing methodology –

Obtaining the public information – Gathering public information such as domain names and IP addresses that can serve as a good starting point
 Network mapping – Mapping your network to get a general idea of the layout
 Scanning the system – Scanning your systems to see which devices are active and communicating
 Running services – Determining what services are running
 Vulnerabilities scan – Looking for specific vulnerabilities
 System penetration – Penetrating the system to finish things off


STEP 1 – Obtaining public information –

Searching Wi-Fi databases –
 Go to www.wigel.com
Find out what amount of information is available for public in the connection

This will help to check the vulnerabilities in the network



STEP 2 –  Network mapping –
You can use different software for this purpose

Here is the list of software for that –

Network stumbler
AiroPeek
Cheops-ng
QualysGuard
Nmap
Fping

Time for ENUMERATION –– Enumeration is when you examine a system and
make an actual list of all the details you can discover about what it does and
how

The detail usage of these software will explain the later parts –