1. Network Security
NCTU CSCC xatier
2012.12.24

2. Security?

4. 先不管這個了，你聽過聖誕夜嗎

6. Security?

7. Security?

8. True Story

9. http://i.imgur.com/k1qoD.jpg

10. evil input

11. SQL injection

12. pangolin
http://nosec.org/en

13. Havij

14. XSS

15. XSS
http://thehackernews.com/2012/11/xss-
vulnerability-in-apple-website.html#

16. XSRF

17. Burp Suite
打嗝套房
http://www.portswigger.net/burp/

18. social engineering

19. social engineering
駭客大騙局
欺騙的藝術：人心控制的安全要素
The Art of Deception: Controlling the Human
Element of Security

20. social engineering
SET!
http://www.social-engineer.org/

21. social engineering
cosmo the God
http://wired.tw/2012/10/03/cosmo-the-god-who-
fell-to-earth-1/index.html

22. air crack!
空氣爆破術

23. air crack!
空氣爆破術

24. air crack!
空氣爆破術
http://www.aircrack-ng.org/

25. air crack!
空氣爆破術
http://www.aircrack-ng.org/
feedingbottle 奶瓶
beini Linux
http://beini.en.softonic.com/

26. phishing

27. phishing

28. phishing

29. exploit vulnerability
John von Neumann 對於圖靈機實作的天然缺陷
data / program 傻傻分不清楚
圖靈機能夠複製自己！
我的 data 你的 code >/////<

30. metasploit
http://www.metasploit.com/
open source!
plugins and scripts (Ruby)

31. ms08067

32. ms08067
Allow Remote Code Execution ！

33. Programming Language
Vulnerable design in the programming
language.
http://www.nruns.
com/_downloads/advisory2
8122011.pdf

34. surf the net secretly

35. ssh tunneling
ssh -NfD [localport] you@bsd1
proxy: localhost:[localport]
proxychains!

36. VPN
virtual
private
network

37. PPTP
The Point-to-Point Tunneling
Protocol (PPTP) is a method for
implementing virtual private networks.
PPTP uses a control channel over TCP
and a GRE tunnel operating to
encapsulate PPP packets.

38. the Tor project
https://www.torproject.org/

39. News
thehackernews.com
www.hack-stuff.com
coolshell.cn
security-sh3ll.blogspot.tw

40. wargames
http://hitcon.org/2012/wargame.
html
最簡單的第零題：http://hitcon.org!

41. happy hacking
:-)