Operating Systems Used by Crackers

written by: Craig Nelson; article published: year 2007, month 08;



In: Categories » Internet » Spam and Scam » Operating Systems Used by Crackers

Everyone that uses computers will most likely develop a preference for a particular operating system. In my opinion, you should use what works best for you. There are arguments good and bad for any system you might be interested in using. Here, I will explain why crackers choose to use a particular operating system.

Windows Operating Systems

Windows is arguably the most popular operating system available these days. It is easy to use, and is installed on the majority of systems shipped in the world. Windows has been translated to multiple languages and is run by users all over the world. It certainly doesn't appeal to most users as a cracker OS, but it does get used in this arena. In most cases, script kiddie crackers used the Windows operating system. There are many cracking utilities and such written for the Windows environment. These prepackaged apps generally are not powerful enough to penetrate most systems. Most of these utilities are for mail bombing, denial of service, port scanning, and IRC (Internet Relay Chat) user attacks. Windows is of limited use to intelligent attackers, and, therefore, I only reference it briefly.

Linux/NetBSD/FreeBSD

The open source software movement has given the Internet community and computer users everywhere a plethora of robust and reliable operating systems. The most common ones you will hear of or use are Linux, FreeBSD, or NetBSD, which are popular with both the cracking underground and security professionals alike.

Open source operating systems are very popular simply because they are open source. This means that the end user has full access to the source code of the entire operating system. This allows the user to learn and understand how the system works, how to make it secure, and how to exploit its weaknesses on other computers. Another benefit of it being open source is the speed of patch releases. In most cases, the moment a security issue is released relating to an open source operating system, it will typically be fixed and patched within an hour or less of the initial announcement. This allows the end user to maintain every aspect of system security, including the ability to patch the operating system when necessary. Most crackers using open source operating systems, such as Linux, learned security exploitation techniques while securing and maintaining their own systems.

Another benefit of an open source OS is that the cracker has full access to the network protocol stacks and can manipulate packets easily and efficiently when required. This allows the user to craft very specific exploits that rely on very specific weaknesses in other systems. Most open source operating systems come with a free compiler such as gcc, which allows users to write their own code, compile it, and distribute it all over the Internet. gcc is one of the most powerful C/C++ compilers out there, and it is completely free and has been ported to several platforms.

Many of the best utilities exist and are available free for open source operating systems. Tools for scanning, packet capture and analysis, security auditing, and other related programs have been written directly for these operating systems and are not available in most cases for Windows- or Macintosh-based operating systems.

Another attraction in using open source operating systems is attitude and the perception of others. People who have never become familiar with a POSIX-compliant operating system, such as Linux or FreeBSD, are often intimidated by their complexity. Computer users taking the initiative to learn a powerful operating system such as Linux are usually looked on with respect by those afraid to venture into this territory.

OpenBSD

OpenBSD is billed as the most secure operating system freely available to anyone outside of government agencies. OpenBSD is a BSD–based (Berkeley Software Design), free, and secure version of the UNIX operating system. As I mentioned earlier, this OS has had a long history of excellent security, and, because of this, it makes an ideal operating system for a cracker. Any cracker worth his salt in the cracking community also needs to maintain his own high system security. What better operating system to use than the one with best record of security? Also, OpenBSD is completely open source, giving the same benefits I listed for Linux, NetBSD, and FreeBSD. The same utilities for those operating systems compile and run just fine in OpenBSD. OpenBSD will also run Linux, FreeBSD, and NetBSD software, if the need arises. If you want to be as secure as possible, out-of-the-box OpenBSD wins hands down.

legal disclaimer

1) Our website is not responsible for the information contained by this article as well for any and all copyright infringements by authors and writers. E-articles is a free information resource. If you suspect this article for any copyright infringements, please read the Terms of service and contact us to investigate the problem.
2) The E-articles directory team is not responsible for inaccuracies, falsehoods, or any other types of misinformation this tutorial may contain and will not be liable for any loss or damage suffered by a user through the user's reliance on the information gained here. Please read the Terms of service

Useful tools and features

Translate this article to...    Send this article to you or to a friend

Link to this article from your page   
If you like this article (tutorial), please link to it from your web page using the information above. Linking to this page, this is the only way to help us improve our service, the same time providing your visitors with a way to improve their online experience.

related articles

1. THE AREA CODE SCAM
Area code scams play off people's ignorance of the growing proliferation of different telephone area codes. The con artist starts by contacting you, either by leaving a message on your answering machine, by sending you email, or by paging you. The goal of the message is to get you to call a telephone number in another area code by claiming that you won a fabulous prize in a contest, that your credit card was wrongly charged so you need to call and correct the matter, or that one of your relatives has died, been arrested, or fal...

2. WORK AT HOME BUSINESSES SCAM
Besides pyramid schemes, many people receive messages offering them fabulous moneymaking opportunities that can be done at home. Here are some typical scams. Stuffing envelopes The most common work-at-home business scam claims that you can earn hundreds of dollars stuffing envelopes in your spare time. First of all, who in their right mind would want to spend their life stuffing envelopes for a living? If this logic still escapes you, and you actually send money for information on how you can e...

3. HOW TO PROTECT YOURSELF AGAINST SCAM
To protect yourself, watch out for the following signs of a scam: Promises of receiving large quantities of money with little or no work. Requirements of large payments in advance, before you have a chance to examine a product or business. Guarantees that you can never lose your money. Assurances that "This is not a scam!" along with specific laws cited to prove the legality of an offer. When was the last time you walked into K-M...

4. PYRAMID SCHEMES
The idea behind a pyramid scheme is to get two or more people to give you money. In exchange, you give them nothing but the hope that they can get rich too—as long as they can convince two or more people to give them money. The most common incarnation of a pyramid scheme is a chain letter. A typical chain letter lists five addresses and urges you to send money ($1 or more) to each of the addresses. You then copy the chain letter, remove the top name from the list of addresses, and put your own name and ...

5. CREDIT CARD FRAUD
While many people worry about typing and sending credit card numbers over the Internet, the reality is that few credit card numbers are stolen off the Net. Not only would a potential thief need to tap into your Internet account at the exact moment you're sending your credit card number to a website, but he or she would have to break the encryption scheme that many websites use to protect your credit card numbers online. If someone's going to steal your credit card number, they're more likely to get it by breaking into t...

6. Phishing Statistics
During the last three months of 2004, phishing in general took on a more organized direction. Phishers have refined their attacks, both in e-mail and malware, and have begun to target specific secondary and tertiary targets. We highlight them here from the perspective of statistics and the evolutionary development of phishing: ■ Phishers are refining their e-mail techniques.Their e-mails are much more effective than regular spam. A single mass mailing of 100,000 emails may have a receive rate as high as 10 percent and c...

7. Spam Classification
Through the use of classification techniques and forensic data gathering, we can identify specific spam groups. In some cases the identification can include a specific individual; in other cases, groups of e-mails can be positively linked to the same unspecified group. Forensic tools and techniques can allow the identification of group attributes, such as nationality, left- or right-handedness, operating system preferences, and operational habits. Spam Organization There are two key items for identifying individua...