1. Perform system attack
1.1. Hiding files purpose and the techniques.
1.1.1. Reasons Behind Hiding Data Personal, Private Data. Sensitive Data. Confidential Data, Trade Secrets. To avoid Misuse of Data. Unintentional damage to data, human error, accidental deletion. Monetary, Blackmail Purposes. Hide Traces of a crime.
1.1.1.1. Hiding Techniques to hide files Attrib command
1.1.1.2. NTFS file streaming.
1.2. NTFS countermeasures.
1.3. Steganography technologies.
1.3.1. Steganography is the practice of concealing a file, message, image, or video within another file, message, image, or video
1.4. Buffer overflow attack.
2. PASSWORD CRACKING TECHNIQUE
2.1. Rules of password
2.1.1. Passwords that use only numbers
2.1.2. Passwords that use only letters
2.1.3. Passwords that are all upper- or lowercase
2.1.4. Passwords that use proper names
2.1.5. Passwords that use dictionary words
2.1.6. Short passwords (fewer than eight characters)
2.1.7. Passwords that contain letters, special characters, and numbers: stud@52
2.1.8. Passwords that contain only numbers: 23698217
2.1.9. Passwords that contain only special characters: &*#@!(%)
2.1.10. Passwords that contain letters and numbers: meetl23
2.1.11. Passwords that contain only letters: POTHMYDE
2.1.12. Passwords that contain only letters and special characters: rex@&ba
2.1.13. Passwords that contain only special characters and numbers: 123@$4
2.2. Types of password attacks
2.2.1. a. Passive online attacks
2.2.2. b. Active online attacks
2.2.3. c. Offline attacks
2.3. Manual password cracking
2.3.1. Default passwords
2.3.2. Default passwords
2.3.3. Guessing passwords
2.4. Attacks that can be used to gain password
2.4.1. a. Redirecting SMB Logon to attacker
2.4.2. b. SMB relay MITM
2.4.3. c. NetBIOS DOS attack
2.5. Password cracking attacks using tool such as Hydra
2.5.1. Bruteforcing with Hydra Kali Linux
3. Performs privilege escalation
3.1. Privilege escalation.
3.1.1. horizontal
3.1.1.1. peer users
3.1.2. vertical
3.1.2.1. higher privileges
3.2. Rootkits : A root kit is a collection of computer software, typically malicious, designed to enable access to a computer or areas of its software that is not otherwise allowed and often masks its existence or the existence of other software
3.2.1. Several types of rootkits such as:
3.2.1.1. Bootloader rootkit or bootkit
3.2.1.2. Memory rootkit
3.2.2. Rootkits countermeasures.
3.2.2.1. Never use the Internet as Administrator (or any privileged account), run anti-spyware to block suspicious installation activities, and avoid installing software from unknown sources.
3.2.2.2. Choose a rootkit detector and start scanning with it as part of your regularly scheduled security task list.