How easy is to hack a server? (Part 1 out of 2)

Today we will think about how easy could be to hack a server.

When I say "server", I mean an enterprise server, not your home ftp server to upload two files a week.

If you have minimal knowledge about servers and hacking servers you will know that there are two major paths to hack a server.



Non social hacking and social hacking.

The main difference between them is the path which follows the first connection between the hacker and the objective. The first one, the hacker is trying to access the server; in the second one, the objective opens the communication with the hacker without knowing it.

Today we will talk a little about "traditional" hacking (non-social), this means using scripts: brute forze scripting, dictionary attacks, using critical exploits with security holes...


Any way that lets you a server console without interacting without hacking any person (without "social" hacking and/or social hacking, like pishing)

Nowadays, I think from my point of view that this way is really deprecated because there are faster, more powerful and easier ways.

This is hacking type has the easiest way to protect your systems: try to keep updated your SO, try to use encrypted transmissions like https, to connect by VPNs, to use firewalls, DNSSec and/or IPSec...



From the point of view from the IT personal of a company, it would be so easy to protect systems to this type of hacking.



Keep this in your mind: "If a hacker is trespassing the door is due to you forgot to close it"



Will be easy to protect to the brand new hacking? Will see in the next post.


"We are legion"
Next Post: "How easy is to hack a server part 2"