Network security has been, and will continue to be, a hot topic among information technology professionals.  As a systems or network administrator, you should not only be aware of the need to keep a close eye on security, you should be actively engaged in it every day.  In addition to the tools listed below, you should also be looking at specialized training like Cisco CCNA Security training, Windows or Linux/Unix Security Training.

New vulnerabilities are discovered every day that could allow an attacker to penetrate your infrastructure.  Company data, company secrets, account information, financial data and more is at risk if your network is compromised. 

Here are 10 hacking tools that you should be aware of and use on a regular basis to help you see what the hackers see, and to keep your networks more secure.

Packet Sniffers

1. WireShark (http://www.wireshark.org)

Wireshark is perhaps one of the most widely used (and free) network monitoring / packet sniffing tools out there.  When you download and install, it will also install the WinPcap application.  Once your familiar with WireShark, you’ll be able to sniff your corporate network, trace conversations, identify insecure passwords, etc (especially using additional software like Cain & Abel).

This tools runs on Windows, Linux and Mac systems

2. Kismet (http://www.kismetwireless.net)

Kismet is a very powerful wireless sniffer, often used for “wardriving” (driving or walking around, searching for wireless networks to connect to).  A lot of features in this application including the ability to identity non-beaconing networks (networks that aren’t broadcasting their SSID).  Always a good idea to see how secure (or insecure) your wireless networks are if you have them within your company.  Wireless networks are one of the larger security holes in many networks (and home networks).

This tools runs on Windows, Linux and Mac systems

3. Cain & Abel (http://www.oxid.it/cain.html)

One of the most popular “password recovery” tools for Windows operating systems is definitely one you should be familiar with.  Insecure (i.e. weak) passwords offer little to no defense against a fairly knowledgeable hacker.  If they can can physical access to your network (including attaching to wireless networks) chances are they can sniff the network traffic and crack insecure passwords in a matter of seconds to minutes.  Routinely check your network for the existence of weak passwords using a tool like Cain & Abel to identify user’s who need to strengthen their passwords.

This tools runs on Windows, Linux and Mac systems

4. Metasploit (http://www.metasploit.com)

This tool is geared more toward people who do penetration testing (pen testing), patch installation verification, regression testing, etc.  It’s a framework that allows you to develop tools to test and launch exploits against your system to verify patches, defenses, etc., are working correctly.  A little more learning curve here, but if you really want to take your skills to the next level, this is one tool you should add to your skillset.

This tools runs on Windows, Linux and Mac systems

5. Hping2 (http://www.hping.org)

TCP/IP packet injection and manipulation is again a skill that is a little higher on the food chain, but something you should become familiar with.  Using this tool you can send partial ping packets, IP fragmentation, etc., to test firewalls, discover firewall rulesets, remote OS fingerprinting and more.

This tools runs on Windows, Linux and Mac systems

6. Nikto (http://www.cirt.net/nikto2)

If your organization maintains web servers, or you have a hosted solution that you want to ensure is up to snuff, a tool like Nikto might very well fit the bill.  It is a web scanner that can scan for thousands of potential vulnerabilities, and best of all it’s free and open source.

From the cirt.net website: Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3500 potentially dangerous files/CGIs, versions on over 900 servers, and version specific problems on over 250 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired).

This tools runs on Windows, Linux and Mac systems

7. Nmap (http://nmap.org)

Nmap is a network mapping tool that can be used by security administrators to scan and test their networks for unidentified servers, hosts with vulnerabilities and/or unnecessarily open ports, etc.  Nmap is a popular tool among security administrators and hackers alike, and has been featured in such Hollywood movies as the Matrix: Reloaded and Die Hard 4: Live free or Die Hard.

This tools runs on Windows, Linux and Mac systems

8. Nessus (http://www.nessus.org)

Nessus is one of the most powerful network scanners available, and most serious security administrators tool of choice.  They have moved from offering a free version to a commercial version, which is potential cost prohibitive to some administrators.  However when you factor in the cost of remediating a hack to your network or infrastructure, potential loss of data, critical systems, and/or reputation it’s a small price to pay.

This tools runs on Windows, Linux and Mac systems

9. Snort (http://www.snort.org)

Snort is an Intrusion Detection System / Intrusion Prevention System (IDS/IPS) that is widely used by security administrators to detect intrusions into their networks. It combines the benefits of signature, protocol and anomaly based inspection and is one the most widely deployed IDS/IPS technology worldwide.  There are a few pre-requisites for installing and running Snort, including Libpcap, PCRE, Libnet and Barnyard.

This tools runs on Windows, Linux and Mac systems

10. Retina (http://www.eeye.com/html/Products/Retina/index.html)

A commercially available network and security scanner from the folks at eEye Digital Security, Retina is a full-featured network monitoring application.  While not free nor open-source, it’s a popular tool used by many corporate and government security administrators.  Retina can also report on compliance with many corporate policies including SOX, HIPAA, GLBA, PCI and others.

Cisco CCNA Security 640-553 Secure Network Management

This video is from our Cisco CCNA Security Series – Implementing Cisco IOS Network Security (IINS) for exam 640-553.

The full series contains 20 videos and is over 11 hours of world class training you can watch anytime, anywhere. Our training comes in High Resolution AVI, iPod and mp3 formats to give you a number of choices in how you want to study and train.

Our training also comes with MeasureUp exam prep software, to fully prepare for the exam and the real world.

Palaestra Training creates IT Certification Training videos for Information Technology professionals looking to achieve Microsoft, Cisco or CompTIA certifications as well as people looking to learn new skills. 

We’re pleased to announce that we now offer the award-winning MeasureUp exam simulation software with most of our training titles.

We include a full copy of MeasureUp’s award-winning exam prep software with most of our training titles.  This allows us to provide students with the best possible training experience.

MeasureUp has been a long time favorite among IT professionals and was awarded Redmond Magazine’s Preferred Product award as well as being a CertCities Reader’s Choice Awards finalist. 

Palaestra Training President, Christopher Rees states,  “MeasureUp’s exam preparation software is a great addition to our product offerings, and a perfect compliment to our already solid training.  Students are assured of getting the best training at a great price, now with the addition of exam prep tools to make sure they’re able to apply what they’re learning.”

Even in today’s economy, IT professionals continue to be in high demand and this trend is likely to continue for the next decade.  Our Computer Training Videos allow you to learn anytime, anywhere at your own pace.  Now is the time to invest in yourself and learn the skills that will make the difference in your career.

For more information, visit us online at www.PalaestraTraining.com

Palaestra Training is pleased to announce that we have a new trainer joining the company.  Koren Archibald, a Cisco Certified Instructor and Cisco Security expert will be bringing her vast knowledge and expert training skills to our Cisco CCNA: Security video training series scheduled for release in mid-May 2009.

Koren has been training and consulting in the most dynamic environments for over 10 years. She has worked and trained people across a wide spectrum of industries including government, commercial, secure, and extremely large network infrastructures. Koren is also a Microsoft Certified Trainer and consultant with a remarkable ability to convey information clearly and creatively in a technical environment.

She is the president of Wise Technical Innovations in Norfolk, Virginia and her company specializes in the following:

• Creating Cisco secure environments
• System Center Configuration Manager 2007
• SMS
• Project Server 2007 deployments in multi-site environments.

She is well-known for providing tailored solutions that are a perfect blend of training and consulting and Palaestra Training is excited to be able to provide that perfect blend of technical expertise and engaging presentation skills to our students and customers.

Other certifications Koren holds:

• Cisco Certified Systems Instructor #30837
• Cisco CCNA
• Cisco CCNP
• Microsoft MCSE on 2003, 2000 and NT 4.0
• Microsoft Certified Trainer (MCT)
• MCTS Windows Server 2008 Active Directory & Applications Infrastructure
• MCTS Windows Server 2008 Network Infrastructure & Windows Vista
• MCTS Microsoft Office Project 2007
• IT Project+
• Network +

Cisco CCNA Videos – Inter-VLAN Routing

One of our most popular Cisco CCNA Training videos, and one of the most viewed Cisco CCNA training videos on YouTube!

Thanks to everyone on YouTube, for making our Cisco CCNA Training videos the most watched IT Certification training videos on YouTube! 

Our Cisco videos have received over 180,000 views, and all of our IT Certification and Training videos on our YouTube channel have received over 250,000 views, with thousands of new viewers each week!

Our expert Cisco CCNA trainer, Jason Emerson, makes getting Cisco CCNA certified fun and engaging, and will quickly get you the skills you need to succeed.  Our CompTIA expert trainer, Christopher Rees, has created CompTIA A+ training that has helped thousands of people around the world get CompTIA A+ certified.

The YouTube community quickly lets you know if you have a video, product or service worth watching and we’ve gotten a tremendous response from the moment we post each video.

Our videos are extremely affordably priced, and make world-class training available to everyone.  Quickly get the skills necessary to compete in today’s ever-shrinking job market, and have fun in the process!

Check out our YouTube channel today, and find out for yourself what over a quarter-million others already know… Our IT Certification Training Videos rock!

December 1st, 2008 – Today through Wednesday, December 3rd, all of our Video Training series and Training Bundles are 30% off!

If you’re looking for great savings on Cisco Certification Training Videos, Microsoft Certification Training Videos or CompTIA Certification Training Videos, now is your opportunity to save big!  When checking out, use the promo code CYBER08 to have 30% instantly taken off your order.

This promotion only lasts until Wednesday, December 3rd.

Palaestra Training creates high quality IT Certification training for Microsoft, Cisco and CompTIA certifications and is the best, and most cost-effective way to quickly get up to speed, learn a new skill, or get the new job or promotion.

For more information about our training, or to view full-length free demos of our most popular training titles, visit us online at www.PalaestraTraining.com

Now that we’ve gotten the holiday behind us, it’s time to get back to work and to focus on those IT Certification and Training goals.  For one week only, we’re giving everyone 25% off all of our IT Certification Training Titles.

If you’ve been waiting for the best time to get your hands on the hottest IT Certification available, now is your your time!  World-class instruction in an easy to follow format that gives you classroom style learning that you can take with you and watch anytime, anywhere.

Learn from the best instructors in the industry as you prepare for your certification or to give you edge over your competition.

Take advantage now and get 25% off all our certification and training titles, including:

• Cisco CCNA Certification Training
• CompTIA A+ Certification Training
• Microsoft MCDST Certification Training
• Microsoft Outlook Training

Use the promo code PMD2008 during checkout to have 25% taken of your order instantly!

Be sure to act now, because this sale ends Tuesday, June 3rd.

Palaestra Training’s CCNA Certification Training video on Frame Relay has gotten over 45,000 85,000 views on YouTube in just over 9 months time.

Our IT Certification Training Videos are the most watch IT Certification videos on YouTube and just goes to show we’re not the only ones who think our training is simply the best!

Jason Emerson, Palaestra Training’s Cisco CCNA instructor has a great conversational style, and makes learning technically advanced concepts fun.  The recently updated series covers the material on the new Cisco 640-802 exam and fully prepares students to take the exam and do the job.

That’s an amazing amount of interest for a technical training video, and a testament to the quality of our training.  We create technically-accurate training that is both educational and highly-entertaining.

In addition to IT certification training for Microsoft, Cisco and CompTIA, Palaestra Training also created an Internet Safety training series designed for parents to help keep their children safe while online.