关闭

关闭

封号提示

内容

首页 Ghost In The Wires.pdf

Ghost In The Wires.pdf

Ghost In The Wires.pdf

上传者: 1184297031 2012-05-30 评分 3 0 36 5 163 暂无简介 简介 举报

简介:本文档为《Ghost In The Wirespdf》,可适用于人文社科领域,主题内容包含LITTLE,BROWNANDCOMPANYNewYorkBostonLondonFormymotherandgrandmotherKDMForAr符等。

LITTLE,BROWNANDCOMPANYNewYorkBostonLondonFormymotherandgrandmotherKDMForArynne,Victoria,andDavid,Sheldon,Vincent,andElenaRoseandespeciallyforCharlotteWLSFOREWORDImetKevinMitnickforthefirsttimein,duringthefilmingofaDiscoveryChanneldocumentarycalledTheHistoryofHacking,andwecontinuedthecontactTwoyearslater,IflewtoPittsburghtointroducehimforatalkhewasgivingatCarnegieMellonUniversity,whereIwasdumbfoundedtohearhishackinghistoryHebrokeintocorporatecomputersbutdidn’tdestroyfiles,andhedidn’tuseorsellcreditcardnumbershehadaccesstoHetooksoftwarebutneversoldanyofitHewashackingjustforthefunofit,justforthechallengeInhisspeech,KevinspelledoutindetailtheincrediblestoryofhowhehadcrackedthecaseoftheFBIoperationagainsthimKevinpenetratedthewholeoperation,discoveringthatanewhacker“friend”wasreallyanFBIsnitch,learningthenamesandhomeaddressesoftheentireFBIteamworkinghiscase,evenlisteninginonthephonecallsandvoicemailsofpeopletryingtogatherevidenceagainsthimAnalarmsystemhehadsetupalertedhimwhentheFBIwaspreparingtoraidhimWhentheproducersoftheTVshowScreenSaversinvitedKevinandmetohostanepisode,theyaskedmetodemonstrateanewelectronicdevicethatwasjustthencomingontotheconsumermarket:theGPSIwassupposedtodrivearoundwhiletheytrackedmycarOntheair,theydisplayedamapoftheseeminglyrandomrouteIhaddrivenItspelledoutamessage:FREEKEVINWesharedthemicrophonesagainin,whenKevinwasthestandinhostofArtBell’stalkshowCoasttoCoastAMandinvitedmetojoinhimashisonairguestBythenIhadheardalotofhisstorythatnightheinterviewedmeaboutmineandwesharedmanylaughs,asweusuallydowhenwe’retogetherMylifehasbeenchangedbyKevinOnedayIrealizedthatIwasgettinghisphonecallsfromfarawayplaces:hewasinRussiatogiveaspeech,inSpaintohelpacompanywithsecurityissues,inChiletoadviseabankthathadhadacomputerbreakinItsoundedprettycoolIhadn’tusedmypassportinabouttenyearsuntilthosephonecallsgavemeanitchKevinputmeintouchwiththeagentwhobookshisspeechesShetoldme,“Icangetspeakingengagementsforyou,too”SothankstoKevin,I’vebecomeaninternationaltravelerlikehimKevinhasbecomeoneofmybestfriendsIlovebeingaroundhim,hearingthestoriesabouthisexploitsandadventuresHehaslivedalifeasexcitingandgrippingasthebestcapermoviesNowyou’llbeabletoshareallthesestoriesthatIhaveheardonebyone,nowandthenthroughtheyearsInaway,Ienvytheexperienceofthejourneyyou’reabouttostart,asyouabsorbtheincredible,almostunbelievabletaleofKevinMitnick’slifeandexploitsSteveWozniak,cofounder,Apple,IncPROLOGUEPhysicalentry”:slippingintoabuildingofyourtargetcompanyIt’ssomethingIneverliketodoWaytooriskyJustwritingaboutitmakesmepracticallybreakoutinacoldsweatButthereIwas,lurkinginthedarkparkinglotofabilliondollarcompanyonawarmeveninginspring,watchingformyopportunityAweekearlierIhadpaidavisittothisbuildinginbroaddaylight,onthepretextofdroppingoffalettertoanemployeeTherealreasonwassoIcouldgetagoodlookattheirIDcardsThiscompanyputtheemployee’sheadshotupperleft,namejustbelowthat,lastnamefirst,inblocklettersThenameofthecompanywasatthebottomofthecard,inred,alsoinblocklettersIhadgonetoKinko’sandlookedupthecompany’swebsite,soIcoulddownloadandcopyanimageofthecompanylogoWiththatandascannedcopyofmyownphoto,ittookmeabouttwentyminutesworkinginPhotoshoptomakeupandprintoutareasonablefacsimileofacompanyIDcard,whichIsealedintoadimestoreplasticholderIcraftedanotherphonyIDforafriendwhohadagreedtogoalongwithmeincaseIneededhimHere’sanewsflash:itdoesn’tevenhavetobeallthatauthenticlookingNinetyninepercentofthetime,itwon’tgetmorethanaglanceAslongastheessentialelementsareintherightplaceandlookmoreorlessthewaytheyaresupposedto,youcangetbywithit…unless,ofcourse,someoverzealousguardoranemployeewholikestoplaytheroleofsecuritywatchdoginsistsontakingacloselookIt’sadangeryourunwhenyoulivealifelikemineIntheparkinglot,Istayoutofsight,watchingtheglowofcigarettesfromthestreamofpeoplesteppingoutforasmokebreakFinallyIspotalittlepackoffiveorsixpeoplestartingbackintothebuildingtogetherTherearentrancedoorisoneofthosethatunlockwhenanemployeeholdshisorheraccesscarduptothecardreaderAsthegroupsinglefilesthroughthedoor,IfallinatthebackofthelineTheguyaheadofmereachesthedoor,noticesthere’ssomeonebehindhim,takesaquickglancetomakesureI’mwearingacompanybadge,andholdsthedooropenformeInodathanksThistechniqueiscalled“tailgating”Inside,thefirstthingthatcatchesmyeyeisasignpostedsoyouseeitimmediatelyasyouwalkinthedoorIt’sasecurityposter,warningnottoholdthedoorforanyotherpersonbuttorequirethateachpersongainentrancebyholdinguphiscardtothereaderButcommoncourtesy,everydaypolitenesstoa“fellowemployee,”meansthatthewarningonthesecurityposterisroutinelyignoredInsidethebuilding,IbeginwalkingcorridorswiththestrideofsomeoneenroutetoanimportanttaskInfactI’monavoyageofexploration,lookingfortheofficesoftheInformationTechnology(IT)Department,whichafterabouttenminutesIfindinanareaonthewesternsideofthebuildingI’vedonemyhomeworkinadvanceandhavethenameofoneofthecompany’snetworkengineersIfigurehe’slikelytohavefulladministratorrightstothecompany’snetworkDamn!WhenIfindhisworkspace,it’snotaneasilyaccessiblecubiclebutaseparateoffice…behindalockeddoorButIseeasolutionTheceilingismadeupofthosewhitesoundproofingsquares,thekindoftenusedtocreateadroppedceilingwithacrawlspaceaboveforpiping,electricallines,airvents,andsoonIcellphonetomybuddythatIneedhim,andmakemywaybacktotherearentrancetolethiminLankyandthin,hewill,Ihope,beabletodowhatIcan’tBackinIT,heclambersontoadeskIgrabhimaroundthelegsandboosthimuphighenoughthathe’sabletoraiseoneofthetilesandslideitoutofthewayAsIstraintoraisehimhigher,hemanagestogetagriponapipeandpullhimselfupWithinaminute,IhearhimdropdowninsidethelockedofficeThedoorknobturnsandhestandsthere,coveredindustbutgrinningbrightlyIenterandquietlyclosethedoorWe’resafernow,muchlesslikelytobenoticedTheofficeisdarkTurningonalightwouldbedangerousbutitisn’tnecessarytheglowfromtheengineer’scomputerisenoughformetoseeeverythingIneed,reducingtheriskItakeaquickscanofhisdeskandcheckthetopdrawerandunderthekeyboardtoseeifhehaslefthimselfanotewithhiscomputerpasswordNoluckButnotaproblemFrommyfannypack,IpulloutaCDwithabootableversionoftheLinuxoperatingsystemthatcontainsahackertoolkitandpopitintohisCDdrive,thenrestartthecomputerOneofthetoolsallowsmetochangethelocaladministrator’spasswordonhiscomputerIchangeittosomethingIknow,soIcanloginIthenremovemyCDandagainrestartthecomputer,thistimeloggingintothelocaladministratoraccountWorkingasfastasIcan,Iinstalla“remoteaccessTrojan,”atypeofmalicioussoftwarethatgivesmefullaccesstothesystem,soIcanlogkeystrokes,grabpasswordhashes,andeveninstructthewebcamtotakepicturesofthepersonusingthecomputerTheparticularTrojanI’veinstalledwillinitiateanInternetconnectiontoanothersystemundermycontroleveryfewminutes,enablingmetogainfullcontrolofthevictim’ssystemAlmostfinished,asalaststepIgointotheregistryofhiscomputerandset“lastloggedinuser”totheengineer’susernamesotherewon’tbeanyevidenceofmyentryintothelocaladministratoraccountInthemorning,theengineermaynoticethathe’sloggedoutNoproblem:assoonashelogsbackin,everythingwilllookjustasitshouldI’mreadytoleaveBynowmybuddyhasreplacedtheoverheadtilesOnthewayout,IresetthelockThenextmorning,theengineerturnsonhiscomputeratabout:am,anditestablishesaconnectiontomylaptopBecausetheTrojanisrunningunderhisaccount,Ihavefulldomainadministratorprivileges,andittakesmeonlyafewsecondstoidentifythedomaincontrollerthatcontainsalltheaccountpasswordsfortheentirecompanyAhackertoolcalled“fgdump”allowsmetodumpthehashed(meaningscrambled)passwordsforeveryuserWithinafewhours,Ihaverunthelistofhashesthrough“rainbowtables”ahugedatabaseofprecomputedpasswordhashesrecoveringthepasswordsofmostofthecompany’semployeesIeventuallyfindoneofthebackendcomputerserversthatprocesscustomertransactionsbutdiscoverthecreditcardnumbersareencryptedNotaproblem:Ifindthekeyusedtoencryptthecardnumbersisconvenientlyhiddeninastoredprocedurewithinthedatabaseonacomputerknownasthe“SQLserver,”accessibletoanydatabaseadministratorMillionsandmillionsofcreditcardnumbersIcanmakepurchasesalldaylongusingadifferentcreditcardeachtime,andneverrunoutofnumbersButImadenopurchasesThistruestoryisnotanewreplayofthehackingthatlandedmeinalotofhotwaterInsteaditwassomethingIwashiredtodoIt’swhatwecalla“pentest,”shortfor“penetrationtest,”andit’salargepartofwhatmylifeconsistsofthesedaysIhavehackedintosomeofthelargestcompaniesontheplanetandpenetratedthemostresilientcomputersystemseverdevelopedhiredbythecompaniesthemselves,tohelpthemclosethegapsandimprovetheirsecuritysotheydon’tbecomethenexthackingvictimI’mlargelyselftaughtandhavespentyearsstudyingmethods,tactics,andstrategiesusedtocircumventcomputersecurity,andtolearnmoreabouthowcomputersystemsandtelecommunicationsystemsworkMypassionfortechnologyandfascinationwithithavetakenmedownabumpyroadMyhackingescapadesendedupcostingmeoverfiveyearsofmylifeinprisonandcausingmylovedonestremendousheartacheHereismystory,everydetailasaccurateasIcanmakeitfrommemory,personalnotes,publiccourtrecords,documentsobtainedthroughtheFreedomofInformationAct,FBIwiretapandbodywirerecordings,manyhoursofinterviews,anddiscussionswithtwogovernmentinformantsThisisthestoryofhowIbecametheworld’smostwantedcomputerhackerPARTONETheMakingofaHackerRoughStartYjcvkuvjgpcogqhvjguauvgowugfdajcoqrgtcvqtuvqocmghtggrjqpgecnnuMyinstinctforfindingawayaroundbarriersandsafeguardsbeganveryearlyAtaboutageoneandahalf,Ifoundawaytoclimboutofmycrib,crawltothechildgateatthedoor,andfigureouthowtoopenitFormymom,itwasthefirstwakeupcallforallthatwastofollowIgrewupasanonlychildAftermydadleftwhenIwasthree,mymother,Shelly,andIlivedinnice,mediumpricedapartmentsinsafeareasoftheSanFernandoValley,justoverthehillfromthecityofLosAngelesMymomsupporteduswithwaitressingjobsinoneoranotherofthemanydelisstrungoutalongVenturaBoulevard,whichrunseast–westforthelengthofthevalleyMyfatherlivedoutofstateand,thoughhecaredaboutme,wasforthemostpartonlyoccasionallyinvolvedinmylifegrowingupuntilhemovedtoLosAngeleswhenIwasthirteenyearsoldMomandImovedsooftenIdidn’thavethesamechancetomakefriendsasotherkidsdidIspentmychildhoodlargelyinvolvedinsolitary,mostlysedentarypursuitsWhenIwasatschool,theteacherstoldmymomthatIwasinthetoppercentileinmathematicsandspelling,yearsaheadofmygradeButbecauseIwashyperactiveasachild,itwashardformetositstillMomhadthreehusbandsandseveralboyfriendswhenIwasgrowingupOneabusedme,anotherwhoworkedinlawenforcementmolestedmeUnlikesomeothermomsI’vereadabout,sheneverturnedablindeyeFromthemomentshefoundoutIwasbeingmistreatedorevenspokentoinaroughwaytheguywasoutthedoorforgoodNotthatI’mlookingforexcuses,butIwonderifthoseabusivemenhadanythingtodowithmygrowinguptoalifeofdefyingauthorityfiguresSummerswerethebest,especiallyifmymomwasworkingasplitshiftandhadtimeoffinthemiddleofthedayIloveditwhenshe’dtakemeswimmingattheamazingSantaMonicaBeachShe’dlieonthesand,sunningandrelaxing,watchingmesplashinginthewaves,gettingknockeddownandcominguplaughing,practicingtheswimmingIhadlearnedataYMCAcampthatIwenttoforseveralsummers(andalwayshatedexceptwhentheytookusalltothebeach)Iwasgoodatsportsasakid,happyplayingLittleLeague,seriousenoughtoenjoyspendingsparetimeatthebattingcageButthepassionthatsetmeonalifecoursebeganwhenIwastenAneighborwholivedintheapartmentacrossfromushadadaughteraboutmyagewhomIguessIdevelopedacrushon,whichshereciprocatedbyactuallydancingnakedinfrontofmeAtthatage,Iwasmoreinterestedinwhatherfatherbroughtintomylife:magicHewasanaccomplishedmagicianwhosecardtricks,cointricks,andlargereffectsfascinatedmeButtherewassomethingelse,somethingmoreimportant:Isawhowhisaudiencesofone,three,oraroomfulfounddelightinbeingdeceivedThoughthiswasneveraconsciousthought,thenotionthatpeopleenjoyedbeingtakeninwasastunningrevelationthatinfluencedthecourseofmylifeAmagicstorejustashortbikerideawaybecamemysparetimehangoutMagicwasmyoriginaldoorwayintotheartofdeceivingpeopleSometimesinsteadofridingmybikeI’dhoponthebusOnedayacoupleofyearslaterabusdrivernamedBobArkownoticedIwaswearingaTshirtthatsaid,“CBersDoItontheAir”Hetoldmehe’djustfoundaMotorolahandheldthatwasapoliceradioIthoughtmaybehecouldlisteninonthepolicefrequencies,whichwouldbeverycoolItturnedouthewaspullingmylegaboutthat,butBobwasanavidhamradiooperator,andhisenthusiasmforthehobbysparkedmyinterestHeshowedmeawaytomakefreetelephonecallsovertheradio,throughaservicecalledan“autopatch”providedbysomeofthehamsFreephonecalls!ThatimpressedmenoendIwashookedAfterseveralweeksofsittinginanighttimeclassroom,Ihadlearnedenoughaboutradiocircuitsandhamradioregulationstopassthewrittenexam,andmasteredenoughMorsecodetomeetthatqualificationaswellSoonthemailmanbroughtanenvelopefromtheFederalCommunicationsCommissionwithmyhamradiolicense,somethingnotmanykidsintheirearlyteenshaveeverhadIfeltahugesenseofaccomplishmentFoolingpeoplewithmagicwascoolButlearninghowthephonesystemworkedwasfascinatingIwantedtolearneverythingabouthowthephonecompanyworkedIwantedtomasteritsinnerworkingsIhadbeengettingverygoodgradesallthewaythroughelementaryschoolandinjuniorhigh,butaroundeighthorninthgradeIstartedcuttingclassestohangoutatHenryRadio,ahamradiostoreinWestLosAngeles,readingbooksforhoursonradiotheoryTome,itwasasgoodasavisittoDisneylandHamradioalsoofferedsomeopportunitiesforhelpingoutinthecommunityForatimeIworkedasavolunteeronoccasionalweekendstoprovidecommunicationssupportforthelocalRedCrosschapterOnesummerIspentaweekdoingthesamefortheSpecialOlympicsRidingthebuseswasformeabitlikebeingonholidaytakinginthesightsofthecity,evenwhentheywerefamiliaronesThiswasSouthernCalifornia,sotheweatherwasalmostalwaysnearperfect,exceptwhenthesmogsettledinmuchworseinthosetimesthantodayThebuscosttwentyfivecents,plustencentsforatransferOnsummervacationwhenmymomwasatwork,I’dsometimesridethebusalldayBythetimeIwastwelve,mymindwasalreadyrunningindeviouschannelsOnedayitoccurredtome,IfIcouldpunchmyowntransfers,thebusrideswouldn’tcostanythingMyfatherandmyuncleswereallsalesmenwiththegiftofgabIguessIsharethegenethatgavememyabilityfromveryearlyontotalkpeopleintodoingthingsformeIwalkedtothefrontofthebusandsatdownintheclosestseattothedriverWhenhestoppedatalight,Isaid,“I’mworkingonaschoolprojectandIneedtopunchinterestingshapesonpiecesofcardboardThepunchyouuseonthetransferswouldbegreatformeIstheresomeplaceIcanbuyone”Ididn’tthinkhe’dbelieveitbecauseitsoundedsostupidIguesstheideanevercrossedhismindthatakidmyagemightbemanipulatinghimHetoldmethenameofthestore,andIcalledandfoundouttheysoldthepunchesfor$Whenyouweretwelve,couldyoucomeupwithareasonableexcuseyoumighthavegivenyourmotheraboutwhyyouneeded$IhadnotroubleTheverynextdayIwasinthestorebuyingapunchButthatwasonlyStepOneHowwasIgoingtogetbooksofblanktransfersWell,wheredidthebusesgetwashedIwalkedovertothenearbybusdepot,spottedabigDumpsterintheareawherethebuseswerecleaned,pulledmyselfup,andlookedinJackpot!Istuffedmypocketswithpartiallyusedbooksoftransfersmyfirstofwhatwouldbemany,manyactsofwhatcametobecalled“Dumpsterdiving”MymemoryhasalwaysbeenwaybetterthanaverageandImanagedtomemorizethebusschedulesformostoftheSanFernandoValleyIstartedtoroambybuseverywherethebussystemcoveredLosAngelesCounty,RiversideCounty,SanBernardinoCountyIenjoyedseeingallthosedifferentplaces,takingintheworldaroundmeInmytravels,ImadefriendswithakidnamedRichardWilliams,whowasdoingthesamething,butwithtwoprettymajordifferencesForonething,hisfreeroamingtravelswerelegalbecause,asthesonofabusdriver,RichardrodeforfreeThesecondaspectthatseparatedus(initially,anyway)wasourdifferenceinweight:RichardwasobeseandwantedtostopatJackintheBoxforaSuperTacofiveorsixtimesadayAlmostatonceIadoptedhiseatinghabitsandbegangrowingaroundthemiddleItwasn’tlongbeforeapigtailedblondgirlontheschoolbustoldme,“You’rekindacute,butyou’refatYououghtalosesomeweight”DidItakehersharpbutunquestionablyconstructiveadvicetoheartNopeDidIgetintotroubleforDumpsterdivingforthosebustransfersandridingforfreeAgain,noMymomthoughtitwasclever,mydadthoughtitshowedinitiative,andbusdriverswhoknewIwaspunchingmyowntransfersthoughtitwasabiglaughItwasasthougheveryonewhoknewwhatIwasuptowasgivingmeattaboysInfact,Ididn’tneedotherpeople’spraiseformymisdeedstoleadmeintomoretroubleWhowouldhavethoughtthatalittleshoppingtripcouldprovidealessonthatwouldsetmylifeonanew

职业精品

精彩专题

上传我的资料

热门资料

资料评价:

/ 211
所需积分:5 立即下载

意见
反馈

返回
顶部

Q