Network Security Hacks, 2nd Edition

Credits

About the Author

Andrew Lockhart is originally from South Carolina but currently resides in northern Colorado, where he spends his time trying to learn the black art of auditing disassembled binaries and trying to keep from freezing to death. He holds a BS in computer science from Colorado State University and has done security consulting for small businesses in the area. When he’s not writing books, he’s a senior security analyst with Network Chemistry, a leading provider of wireless security solutions. Andrew is also a member of the Wireless Vulnerabilities and Exploits project’s (http://www.wirelessve.org) editorial board and regularly contributes to their wireless security column at NetworkWorld (http://www.networkworld.com/topics/wireless-security.html). In his free time, he works on Snort-Wireless (http://snort-wireless.org), a project intended to add wireless intrusion detection to the popular open source IDS Snort.

Contributors

The following people contributed hacks, writing, and inspiration to this book:

• Oktay Altunergil is the founder of The Free Linux CD Project (http://www.freelinuxcd.org) and one of the maintainers of Turk-PHP.com (a Turkish PHP portal). He also works full-time as a Unix system administrator and PHP programmer.

• Michael D. (Mick) Bauer (http://mick.wiremonkeys.org) writes Linux Journal’s “Paranoid Penguin” security column. By day, he works to keep strangers out of banks’ computer networks.

• Schuyler Erle (http://nocat.net) is a Free Software developer and activist. His interests include collaborative cartography, wireless networking, software for social and political change, and the Semantic Web. Schuyler is the lead developer of NoCatAuth, the leading open source wireless captive portal.

• Bob Fleck (http://www.securesoftware.com) is Director of Security Services at Secure Software. He consults in the fields of secure development and wireless security and is a coauthor of O’Reilly’s 802.11 Security book. The results of his more recent investigations into Bluetooth security can be found at http://bluetooth.shmoo.com.

• Rob Flickenger (http://nocat.net) is a writer and editor for O’Reilly’s Hacks series. He currently spends his time hacking on various projects and promoting community wireless networking.

• Preston Gralla is the author of more than 30 books about computers and the Internet, which have been translated into 15 languages, including Windows XP Hacks (O’Reilly), Internet Annoyances (O’Reilly), and Windows XP Power Hound (Pogue Press). He has been writing about technology since the dawn of the PC age, and he has been an editor and columnist for many national newspapers, magazines, and web sites. He was the founding editor of PC Week; a founding editor, then editor, then editorial director of PC/Computing; and executive editor for ZDNet/CNet. Preston has written about technology for numerous magazines and newspapers, including PC Magazine, Computerworld, CIO Magazine, Computer Shopper, the Los Angeles Times, USA Today, the Dallas Morning News (where he was a technology columnist), and many others. He has been a columnist for ZDNet/CNet and is currently a columnist for TechTarget.com. His commentaries about technology have been featured on National Public Radio’s “All Things Considered,” and he has won the award for the Best Feature in a Computer Publication from the Computer Press Association. Under his editorship, PC/Computing was a finalist in the category of General Excellence for the National Magazine Awards. Preston is also the editor of O’Reilly’s WindowsDevCenter.com site. He lives in Cambridge, MA, with his wife and two children—although his daughter has recently fled the nest for college. Between writing books, articles, and columns, he swims, plays tennis, goes to the opera, and contemplates the ram’s skull hanging on the wall of his office.

• Michael Lucas (http://www.blackhelicopters.org/~mwlucas/) lives in a haunted house in Detroit, Michigan, with his wife Liz, assorted rodents, and a multitude of fish. He has been a pet wrangler, a librarian, and a security consultant, and he now works as a network engineer and system administrator with the Great Lakes Technologies Group. Michael is the author of Absolute BSD, Absolute OpenBSD, and Cisco Routers for the Desperate (all from No Starch Press), and he is currently preparing a book about NetBSD.

• Matt Messier (http://www.securesoftware.com) is Director of Engineering at Secure Software and a security authority who has been programming for nearly two decades. In addition to coauthoring the O’Reilly books Secure Programming Cookbook for C and C++ and Network Security with OpenSSL, Matt coauthored the Safe C String Library (SafeStr), XXL, RATS, and EGADS.

• Ivan Ristic (http://www.modsecurity.org) is a web security specialist and the author of mod_security, an open source intrusion detection and prevention engine for web applications. He is a member of the OASIS Web Application Security Technical Committee, where he works on the standard for web application protection.

• Hans Schefske is a columnist on myITforum.com (http://www.myitforum.com) and has over eight years experience engineering and designing the architecture and implementation of Microsoft client/server-based network solutions. Consulting and leading projects in the IT industry, he has provided technical expertise in the areas of designing and implementing infrastructures for large enterprise-level companies such as Nabisco, Prudential, AIG, Simpson, Thatcher and Bartlett, Novartis, and Hoffman LaRoche Pharmaceuticals. In 2003, Hans was awarded a Microsoft Most Valuable Professional (MVP) Award for SMS for his outstanding technical skills and willingness to share knowledge with his peers. As a technical author at myITforum.com, he provides technical information, tools, scripts, and utilities for IT professionals and administrators to better assist them in managing their Microsoft-based solutions. Hans is currently a Senior Active Directory and SMS consultant at a large telecommunications company based in Atlanta, GA.

• Rod Trent, manager at myITforum.com (http://www.myitforum.com), is the leading expert on Microsoft Systems Management Server (SMS). He has over 18 years of IT experience, 8 of which have been dedicated to SMS. He is the author of such books as Microsoft SMS Installer, Admin911: SMS, and Windows 2000 IIS 5.0: A Beginner’s Guide (all from McGraw-Hill) and has written thousands of articles on technology topics. myITforum.com is the central location for third-party SMS support and a well-known online gathering place for IT professionals and the IT community. Rod speaks at least three times a year at various conferences and is a principal at NetImpress, Inc. (http://www.netimpress.com).

• Mitch Tulloch (http://www.mtit.com) is President of MTIT Enterprises, an IT content development company based in Winnipeg, Canada. Prior to starting his own company in 1998, Mitch worked as a Microsoft Certified Trainer for Productivity Point International. Mitch is a widely recognized expert on Windows administration, networking, and security and has been awarded Most Valuable Professional (MVP) status by Microsoft for his outstanding contributions in supporting users who deploy Microsoft platforms, products, and solutions. Mitch is also currently a professor at Jones International University (JIU), where he teaches graduate-level courses in Information Security Management that he codeveloped with his wife, Ingrid Tulloch, for JIU’s MBA program. Mitch is the author of 14 books, including Windows Server Hacks (O’Reilly), Windows Server 2003 in a Nutshell (O’Reilly), the Microsoft Encyclopedia of Networking (Microsoft Press), the Microsoft Encyclopedia of Security (Microsoft Press), and IIS 6 Administration (Osborne/McGraw-Hill). Mitch has also written feature articles for industry magazines such as NetworkWorld and Microsoft Certified Professional Magazine, and he contributes articles regularly to O’Reilly’s WindowsDevCenter.com, ITWorld.com, and WindowsNetworking.com. Mitch’s articles have been widely syndicated on other IT sites, such as Computerworld.com, Smallbusiness.com, and even CNN.com.

• John Viega (http://www.securesoftware.com) is Chief Technology Officer and Founder of Secure Software. He is also the coauthor of several books on software security, including Secure Programming Cookbook for C and C++ (O’Reilly) and Building Secure Software (Addison-Wesley). John is responsible for numerous software security tools, and he is the original author of Mailman, the GNU mailing list manager.

Acknowledgments

Once again I have to thank Karen (a.k.a. DJ Jackalope for Defcon attendees) for her constant support and encouragement, and for putting up with the many hours spent in toil.

Also, thanks go out to Brian Sawyer for his patience throughout this whole process, and to all of the other wonderful people at O’Reilly who worked hard to make this book a tangible reality. I’d also like to thank John Hoopes for providing the technical review for this edition. John’s advice was instrumental in making this a better book.

Finally, I’d like to thank my parents for their continued encouragement.