Anotações

Curso Teste de Invasão em Redes e Sistemas EAD –Aula 03– Novembro de 2013

Protocolo ARP
http://technet.microsoft.com/pt-br/library/cc758357(v=ws.10).aspx
http://www.metropoledigital.ufrn.br/aulas_avancado/web/disciplinas/rede_comp/aula_
04.html

Arp Spoofing
http://www.techopedia.com/definition/25409/address-resolution-protocol-spoofing-
arpspoofing
http://www.brainwork.com.br/blog/2012/05/28/ataque-camada-2-arp-spoofing/

Buffer Overflow
https://under-linux.org/entry.php?b=923
http://www.gris.dcc.ufrj.br/documentos/apresentacoes/buffer-overflow-uma-
introducao-teorica/at_download/file

Buffer Overflow
https://www.owasp.org/index.php/Buffer_Overflow

NOP
http://en.wikipedia.org/wiki/NOP
Metasploit
http://www.metasploit.com/

CVE
http://cve.mitre.org/

Sniffing
http://www.iss.net/security_center/advice/Underground/Hacking/Methods/Technical/Pa
cket_sniffing/default.htm

Man in the middle

http://blog.kaspersky.com.br/what-is-a-man-in-the-middle-attack/

Keyloggers
http://www.tecmundo.com.br/spyware/1016-o-que-e-keylogger-.htm

Webinar #16 Clavis - Ataques de força bruta

http://www.blog.clavis.com.br/webinar-16-ataques-de-forca-bruta-metodo-dicionario-
hibridos-e-rainbow-tables/

John the Ripper

http://www.openwall.com/john/

Cain and Abel

http://www.oxid.it/cain.html

Rainbow tables
http://en.wikipedia.org/wiki/Rainbow_table
Congelamento de memória para conseguir senhas
https://citp.princeton.edu/research/memory/

Apresentação "Entendendo como as mídias sociais revolucionaram os ataques de

força bruta" Clavis - Henrique Soares
http://www.slideshare.net/clavissecurity/entendendo-como-as-mdias-socias-
revolucionaram-os-ataques-de-fora-bruta

Hydra
https://www.thc.org/thc-hydra/

Senhas, hash e salt

http://cocatech.com.br/senhas-hash-e-salt

Modos do John the Ripper

http://www.openwall.com/john/doc/MODES.shtml

ophcrack
http://ophcrack.sourceforge.net/

LM Hash
http://en.wikipedia.org/wiki/LM_hash

Kerberos
http://web.mit.edu/kerberos/

Burp Suite
http://portswigger.net/burp/
Métodos do Intruder do Burp Suite
http://www.danielmiessler.com/blog/burp-intruder-payloads