0:03
We will talk now about
0:06
the essential terminology
0:08
that we have in the field of
0:12
The most important one is "hack value".
0:14
What is the value that a hacker will gain
0:16
when attacking a certain system?
0:18
If there is no valuable reward
0:20
that deserves the time and effort
0:22
spent on such attacks,
0:24
he should find other solutions.
0:26
We also have "vulnerability".
0:28
The vulnerability is a weakness point.
0:30
This weakness point can be found in
0:32
a system, an application, even
0:34
a design physical vulnerability, and so on.
0:38
A hacker can exploit this vulnerability
0:42
to the environment, the infrastructure
0:44
or the system he wants to attack.
0:48
it has 2 definitions that are close to each other
0:50
as a verb and as a noun.
0:52
As a verb it means "penetrate"
0:54
in the security context. As a noun,
0:56
it is the script, the tool,
0:58
the solution that a hacker exploits
1:08
the exploit code that attacker uses
1:10
to acknowledge the exploit which
1:14
on the target machine. So, the exploit
1:16
is responsible for allowing me
1:18
to gain access to the machine.
1:20
After gaining access to the machine,
1:22
what I'm supposed to do next?
1:24
Payload is responsible to
1:26
answer this question.
1:26
What is the meaning of "zero day attack"?
1:28
"Zero day" means that no one knows
1:32
any information about this attack.
1:34
The only one knows this information
1:38
Therefore, it keeps as a Zero day
1:40
zero day, zero day...
1:42
till the vendor announces
1:44
that there was a vulnerability, on which
1:46
it was attacked. Then it changes to be
1:50
starting from the announcement day.
1:52
This is an advance to a great number of attacks.
1:54
Let's agree that every time
1:56
there must be a zero day
1:58
that hackers knows about it,
2:00
while vendors still don't know anything about it.
2:02
"Daisy Chaining" which means
2:04
pivoting or even bridging.
2:06
i.e. to gain access to
2:10
or even a network device, in order to
2:12
allow you exploiting it to access
2:14
so many different devices
2:18
So you exploit one device to access
2:20
other devices that are already on
2:22
the network. For Doxing,
2:26
private information about an individual
2:28
from the social media,
2:30
or the database available online.
2:34
share their own personal data.
2:36
So Doxing helps me in collecting
2:38
such personal data to exploit it
2:40
in different attacks.
2:42
"Bot". Bot is a software application
2:48
The hacker here has "Command & Control"
2:50
center, so he controls the different
2:52
remote spots, that he
2:54
started to inject on
2:56
the systems he has hacked before.
2:58
Therefore, he can order them to do
3:00
whatever action needed.
3:02
Now, we've learned the basic terminology
3:04
in the field of Hacking.
