CEH v9 Question of the Week: CVE-2007-2447

You have found a CVE-2007-2447: Remote Command Injection Vulnerability. This bug was originally reported against the anonymous calls to the SamrChangePassword() MS-RPC function in combination with the “username map script”smb.conf option (which is not enabled by default). The vulnerables version are Samba 3.0.0 – 3.0.25rc3. You want to exploit it and get access to the system. Which exploitation framework will help you with the task?

Read more

CEH v9 Question of the Week: Employee Behavior

The company you work for has a very strict “print only if necessary” policy and mobile phone use is discouraged in the office. Last night you noticed a colleague stayed late at the office printing a lot of proprietary documents. This morning you noticed the same person in a dark corner talking on a mobile phone in a hushed voice. On your lunch break, you see the same person talking to an employee of a competitor company. What do these indications suggest about the person?

Read more

EC-Council’s Updated Certified Ethical Hacker v9 Training Focuses on Latest Cyber Attacks

With enterprise and governments struggling to keep up with the ever-changing cybersecurity landscape, EC-Council has updated its Certified Ethical Hacker (CEH) certification and training to version 9, focusing on the latest cyber attack vectors and addressing new vulnerabilities. With CEH training in preparation for the new CEH exam, students will gain access to thousands of the most commonly used hacking tools to help them look for vulnerabilities in their organization’s network just like a hacker would.

Read more