In Linux, what is the smallest possible shellcode?

Reveal Solution Hide Solution

James is testing the ability of his routers to withstand DoS attacks. James sends ICMP ECHO requests to the broadcast address of his network.

What type of DoS attack is James testing against his network?

Reveal Solution Hide Solution

What term is used to describe a cryptographic technique for embedding information into something else for the sole purpose of hiding that information from the casual observer?

Reveal Solution Hide Solution

What does ICMP Type 3/Code 13 mean?

Reveal Solution Hide Solution

Why are Linux/Unix based computers better to use than Windows computers for idle scanning?

Reveal Solution Hide Solution

What TCP/UDP port does the toolkit program netstat use?

Reveal Solution Hide Solution

You are working for a large clothing manufacturer as a computer forensics investigator and are called in to investigate an unusual case of an employee possibly stealing clothing designs from the company and selling them under a different brand name for a different company.

What you discover during the course of the investigation is that the clothing designs are actually original products of the employee and the company has no policy against an employee selling his own designs on his own time. The only thing that you can find that the employee is doing wrong is that his clothing design incorporates the same graphic symbol as that of the company with only the wording in the graphic being different.

What area of the law is the employee violating?

Reveal Solution Hide Solution

Frank is working on a vulnerability assessment for a company on the West coast. The company hired Frank to assess its network security through scanning, pen tests, and vulnerability assessments. After discovering numerous known vulnerabilities detected by a temporary IDS he set up, he notices a number of items that show up as unknown but Questionable in the logs. He looks up the behavior on the Internet, but cannot find anything related.

What organization should Frank submit the log to find out if it is a new vulnerability or not?

Reveal Solution Hide Solution

Hackers can gain access to Windows Registry and manipulate user passwords, DNS settings, access rights or others features that they may need in order to accomplish their objectives.

One simple method for loading an application at startup is to add an entry (Key) to the following Registry Hive:

Reveal Solution Hide Solution

You have been asked to investigate the possibility of computer fraud in the finance department of a company. It is suspected that a staff member has been committing finance fraud by printing cheques that have not been authorized. You have exhaustively searched all data files on a bitmap image of the target computer, but have found no evidence. You suspect the files may not have been saved.

What should you examine next in this case?

Reveal Solution Hide Solution