Scanning and sniffer attack
To initiate an intrusion attack, the hacker needs to be well prepared to search for information through operations such as sniffing and scanning to identify the target computer for an accurate attack. Sniffer and scan operations can be implemented using professional software tools such as X-scan, Snifferpro, etc. To the user, not only need to understand the hacker scanning and sniffing principle and operation, but also to understand the prevention of scanning and sniffer operation methods.
--------------------------------------------------------------------------------------------------------------- ------------------------------------------------------
Searching for target host information is a necessary preparation before a hacker invades, and the preparation takes a lot of time. The search target host information includes obtaining the target host's IP address, viewing the target host's geographic location and other information, in addition, the hacker can also understand the website's record information to conduct the intrusion site preparation work.
First, get the IP address of the target host
There are three IP addresses for the destination host:
- Get the IP address of other computers in the LAN
- Get the IP addresses of other computers in the Internet
- Gets the IP address of the specified Web site
The IP address of the destination computer where the LAN is obtained can be obtained using the "ping+ computer name" command . The following two methods are described below.
1. Get the IP addresses of other computers in the Internet
To obtain the IP addresses of other computers on the Internet, first establish communication with the target computer, and then use the Netstat-n command to view the IP address of the destination computer . Take QQ As an example, describes how to get the IP address of other computers in the Internet.
1) Login QQ
2) Select a Friend, open the dialog box, and send a message ( the friend must be loggedon to QQ on the computer)
3) Open the Command Execution window (WIN+R)
4) View each other's IP address
enter Netstat-n to see the external IP address for the established status . The address is the IP address of the destination host.
Note: Use port to view IP address of target host
When you have multiple connections in the established state on your computer, you need to learn to use ports to view the IP addresses of the target hosts . Because QQ communication usually uses 80 or 8080 ports, when the "External address" column displays 80 or 8080 words, then the address is the destination IP address to find.
2. Get the IP address of the specified website
This method is simpler, just use the "ping+ website url" command. However, before you use this command, you must make sure that the computer is connected to the Internet. Take the Python website as an example to get the Web site IP address method.
1) Open the command line;
2) View the IP address of the specified Web site
Enter Ping www.python.org to see the Web site IP address: 151.101.16.223
Second, according to the IP address to view the location
The IP addresses of all computers in the Internet are uniformly distributed globally, so you can view their geographic locations through the extranet IP addresses of some of these computers . Many Web servers in the Internet have collected IP address databases that make it easy to query the geographic location of the specified IP address.
Hacker----Collect important information about the target computer