Bluesnarfing

Explanation:
Bluesnarfing is the unauthorized access of information from a wireless device through
a Bluetooth connection, often between phones, desktops, laptops, and PDAs (personal
digital assistant).

Use Marie's public key to encrypt the message.

Explanation: When a user encrypts plaintext with PGP, PGP first compresses the
plaintext. The session key works with a very secure, fast conventional encryption algorithm
to encrypt the plaintext; the result is ciphertext. Once the data is encrypted, the session key
is then encrypted to the recipient's public key
https://en.wikipedia.org/wiki/Pretty_Good_Privacy
Pretty Good Privacy (PGP) is an encryption program that provides cryptographic privacy
and authentication for data communication. PGP is used for signing, encrypting, and
decrypting texts, e-mails, files, directories, and whole disk partitions and to increase the
security of e-mail communications.
PGP encryption uses a serial combination of hashing, data compression, symmetric-key
cryptography, and finally public-key cryptography; each step uses one of several supported
algorithms. Each public key is bound to a username or an e-mail address.
https://en.wikipedia.org/wiki/Public-key_cryptography
Public key encryption uses two different keys. One key is used to encrypt the information
and the other is used to decrypt the information. Sometimes this is referred to as
asymmetric encryption because two keys are required to make the system and/or process work securely. One key is known as the public key and should be shared by the owner with
anyone who will be securely communicating with the key owner. However, the owner’s
secret key is not to be shared and considered a private key. If the private key is shared with
unauthorized recipients, the encryption mechanisms protecting the information must be
considered compromised.

Create rules in IDS to alert on strange Unicode requests

Idle scanning

Explanation: The idle scan could be a communications protocol port scan technique that
consists of causing spoofed packets to a pc to seek out out what services square measure
obtainable. this can be accomplished by impersonating another pc whose network traffic is
extremely slow or nonexistent (that is, not transmission or receiving information). this might
be associate idle pc, known as a “zombie”.
This action are often done through common code network utilities like nmap and hping. The
attack involves causing solid packets to a particular machine target in an attempt to seek
out distinct characteristics of another zombie machine. The attack is refined as a result of
there’s no interaction between the offender pc and also the target: the offender interacts
solely with the “zombie” pc.
This exploit functions with 2 functions, as a port scanner and a clerk of sure informatics
relationships between machines. The target system interacts with the “zombie” pc and
distinction in behavior are often discovered mistreatment totally different|completely
different “zombies” with proof of various privileges granted by the target to different
computers.
The overall intention behind the idle scan is to “check the port standing whereas remaining
utterly invisible to the targeted host.”
The first step in execution associate idle scan is to seek out associate applicable zombie. It
must assign informatics ID packets incrementally on a worldwide (rather than per-host it
communicates with) basis. It ought to be idle (hence the scan name), as extraneous traffic
can raise its informatics ID sequence, confusing the scan logic. The lower the latency
between the offender and also the zombie, and between the zombie and also the target,
the quicker the scan can proceed.
Note that once a port is open, IPIDs increment by a pair of. Following is that the sequence:
offender to focus on -> SYN, target to zombie ->SYN/ACK, Zombie to focus on ->
RST (IPID increment by 1)
currently offender tries to probe zombie for result. offender to Zombie ->SYN/ACK,
Zombie to offender -> RST (IPID increment by 1)
So, during this method IPID increments by a pair of finally.
When associate idle scan is tried, tools (for example nmap) tests the projected zombie and
reports any issues with it. If one does not work, attempt another. Enough net hosts square
measure vulnerable that zombie candidates are not exhausting to seek out. a standard
approach is to easily execute a ping sweep of some network. selecting a network close to
your supply address, or close to the target, produces higher results. you’ll be able to
attempt associate idle scan mistreatment every obtainable host from the ping sweep results
till you discover one that works. As usual, it’s best to raise permission before mistreatment
someone’s machines for surprising functions like idle scanning.
Simple network devices typically create nice zombies as a result of {they square
measure|they’re} normally each underused (idle) and designed with straightforward
network stacks that are susceptible to informatics ID traffic detection.
While distinguishing an acceptable zombie takes some initial work, you’ll be able to keep
re-using the nice ones. as an alternative, there are some analysis on utilizing unplanned
public internet services as zombie hosts to perform similar idle scans. leverage the
approach a number of these services perform departing connections upon user submissions will function some quite poor’s man idle scanning.

Integrity and computational in-feasibility

Untrained staff or ignorant computer users who inadvertently become the weakest link in
your security chain

ARP Poisoning

Wireless network assessment

Explanation:
Expanding your network capabilities are often done well using wireless networks, but it also
can be a source of harm to your data system . Deficiencies in its implementations or
configurations can allow tip to be accessed in an unauthorized manner.This makes it
imperative to closely monitor your wireless network while also conducting periodic Wireless
Network assessment.It identifies flaws and provides an unadulterated view of exactly how
vulnerable your systems are to malicious and unauthorized accesses.Identifying
misconfigurations and inconsistencies in wireless implementations and rogue access points
can improve your security posture and achieve compliance with regulatory frameworks

grabs the /etc/passwd file when connected to UDP port 55555

Fred can send an IP packet to the switch with the ACK bit and the source address of his
machine.