Hacking

•Reporter
01 Understanding Hacking

02 Hacking Techniques

03 Types of Hackers

CONTENT
04 Prevention Strategies

05 The Future of Hacking

0 【
Understanding Hacking

1
【
【
Definition of Hacking

Hacking is the art of making something do what it was never

originally designed to do—pushing the limits, bending the rules,
and finding creative loopholes to unlock new possibilities.
Definition of Hacking

01 02 03
What is hacking? Different types of hacking Hacking vs. Programming
Hacking refers to the Hacking can be categorized While programming involves
manipulation of systems and into several types, including writing code to create software
networks with the intent to white-hat hacking (ethical and systems, hacking focuses
gain unauthorized access or hacking), black-hat hacking on understanding and
control over devices, data, or (malicious attacks), and gray- potentially exploiting existing
networks. Hacking can be hat hacking (a blend of both). code and applications. It
ethical or unethical depending Each type serves different requires deep knowledge of
on the intent behind the purposes, from improving programming principles, but it
actions, and it often utilizes security to engaging in primarily emphasizes problem-
various technical skills and criminal activities, highlighting solving and security concerns
tools to exploit vulnerabilities. the complexity and spectrum rather than software
of hacking behaviors. development.
History of Hacking

01 Origins of hacking

The roots of hacking can be 02 Key milestones in hacking

traced back to the early days of
computing, where hobbyists
explored systems to Significant milestones in
03 Evolution over decades
understand their working. This hacking history include the

subculture emerged in the development of the first

1960s, with individuals seeking computer viruses in the 1980s, Hacking has evolved
to push boundaries in computer the emergence of Internet- considerably over the decades,
systems and networks. based attacks in the 1990s, transitioning from playful
and the establishment of activities among programmers
hacker groups that began to to sophisticated criminal
influence public perception and enterprises. Today, hackers can
policy regarding cybersecurity. leverage artificial intelligence
and global networks, making
cyber attacks more complex
and damaging than ever
0 【
Hacking Techniques

2
Common Hacking Methods

01 02 03
Phishing Malware Social engineering

Phishing is a prevalent Malware encompasses various Social engineering exploits

technique used to trick malicious software designed to human psychology rather than
individuals into divulging harm devices or networks. technical vulnerabilities.
sensitive information by Common types include viruses, Attackers use tactics such as
masquerading as a trustworthy worms, and ransomware, which impersonation or manipulation
entity. Attackers often employ can cause data loss, to gain trust and access,
email, SMS, or social media to unauthorized access, or demonstrating the importance
lure victims into revealing extortion of victims for of awareness in cybersecurity
passwords or financial details. payment. practices.
Network Exploitation

01 02 03

Man-in-the-middle attacks Denial-of-service attacks Wireless network

vulnerabilities
In man-in-the-middle (MitM) Denial-of-service (DoS) attacks Wireless networks are susceptible
attacks, an attacker intercepts overwhelm a server by flooding it to numerous vulnerabilities,
communications between two with traffic, rendering it including unsecured Wi-Fi signals
parties to eavesdrop or alter unavailable to legitimate users. and poor encryption. Attackers
messages. This technique poses These attacks can disrupt may exploit these weaknesses to
significant risks, particularly in business operations and lead to gain unauthorized access to
unsecured networks, financial losses for affected sensitive data transmitted over
compromising confidentiality and organizations. the network.
Application Attacks

SQL injection
Cross-site scripting Remote file inclusion
SQL injection attacks occur when an
Cross-site scripting (XSS) allows Remote file inclusion (RFI) occurs
attacker inserts malicious SQL code into
attackers to inject malicious scripts when an attacker exploits
a query to manipulate databases. These
into web applications viewed by vulnerabilities in web applications
attacks can lead to unauthorized
other users. This vulnerability can to include files from a remote
access, data corruption, or even
lead to session hijacking or server. This technique enables
complete data breach for web
redirecting users to harmful sites, attackers to execute harmful
applications.
compromising user trust and scripts or gain access to sensitive
0 【
Types of Hackers
• White Hat Hackers
• Gray Hat Hackers

3
• Black Hat Hackers
White Hat Hackers
Definition and role
01 A white hat hacker which can be known as ethical hacker, is an individual
who uses hacking skills to identify security vulnerabilities in hardware,
software or networks. White hat Hacker respect the rule of the law and
unlike other hackers they are legally permitted to seek vulnerabilities or
exploits. Ethical hacking practices
02
Ethical hacking practices include penetration testing, security audits, and
vulnerability assessments without stealing any data. These practices are
performed with permission and aim to strengthen defenses against
malicious attacks, ultimately enhancing overall cybersecurity.
Certification and training
03 In Kathmandu, we can pursue a Certified Ethical Hacker (CEH) which is
offered by EC-Council. Training programs emphasize both technical skills
and ethical considerations, covering each ethical hacking domain and
methodology.
Grey Hat Hackers
Characteristics and motivations

Grey hat hacking is somewhere between the white and black hat hackers who
often looks for vulnerabilities in a system without the owners permission or
knowledge. If issues are found, they report them to the owner, requesting a
small fee to fix the problem.
Way they Work

After successfully gaining illegal access to a system, they suggest the system
administrator that they can fix the problem for a fee. But this is not always the
case, getting company permission is the only way to guarantee that a hacker
will be within the law.
Real-world examples

A well-known example of a grey hat hacker is the case of Kevin Mitnick, who
initially engaged in unauthorized access but later became a consultant and
speaker on cybersecurity. His transformation illustrates the potential for
positive contributions from those with hacking backgrounds.
Black Hat Hackers
03
Notable black hat cases
Notable black hat hacking

02 cases include the infamous

Equifax data breach, where
01 Legal implications hackers compromised
Engaging in black hat sensitive personal
Definition and intentions
hacking results in severe information of millions. Such
Black hat hackers also known legal consequences, incidents exemplify the
as crackers who break into including criminal charges, potential impact of malicious
computer system without fines, and imprisonment. hacking on individuals and
permission for malicious intent. Laws such as the Computer organizations alike.
They may also release Fraud and Abuse Act in
malware that destroys files, Nepal are fined upto 200k or
hold computer hostages or more with 3 year
steal password, credit card imprisonment as per the
numbers and personal (2063) ETA section 44.
0 【
Prevention Strategies

4
Security Measures

Firewalls Antivirus software Strong passwords

and authentication
Firewalls act as a barrier Antivirus software Implementing strong
between trusted internal detects and removes passwords and multi-
networks and untrusted malware, providing factor authentication
external networks, crucial protection (MFA) significantly
monitoring and against known threats. reduces the risk of
controlling incoming and Regular updates and unauthorized access.
outgoing traffic. They scans help to safeguard Strong passwords should
are essential for systems against include a mix of
protecting systems from evolving tactics characters and be
unauthorized access and employed by changed regularly to
preventing potential cybercriminals.
enhance security
attacks.
measures.
Awareness and Training

Regular updates and

Employee awareness vigilance

Importance of programs
cybersecurity training Employee awareness Keeping software and
Cybersecurity training is vital programs focus on educating security systems updated is
for employees to recognize staff about common attack crucial in combating new
and properly respond to vectors, such as phishing threats. Regular updates help
threats. Regular training and social engineering. patch vulnerabilities, while
sessions can help create a These programs enhance ongoing vigilance ensures
security-aware culture within the organization’s overall that organizations can
an organization, minimizing security posture by quickly identify and respond
the chances of successful promoting vigilance and to potential incidents.
attacks. proactive measures.
Incident Response
03
Recovery processes
Implementing robust

02 recovery processes is crucial

for restoring systems post-
Importance of data backup incident. These processes
Regular data backups are include identifying and
essential for recovery in mitigating vulnerabilities,
01 restoring data from backups,
case of data loss due to
Creating an incident and assessing damage to
cyber attacks or system
response plan
failures. Having secure, up- inform future preventive
An effective incident
to-date backups minimizes measures.
response plan outlines the
the impact of incidents and
steps to be taken when a
ensures business continuity.
security breach occurs. This
plan should detail roles,
responsibilities, and
0 【
The Future of Hacking

5
Emerging Trends

01 02 03

AI and machine learning in Evolving threats in Quantitative methods in

hacking cybersecurity hacking
The integration of artificial Emerging threats, such as IoT The use of quantitative methods
intelligence and machine learning exploitation and advanced in hacking, including data
in hacking is revolutionizing persistent threats (APTs), pose analysis and statistical modeling,
attack methodologies. Attackers new challenges to cybersecurity. is becoming more prevalent.
can automate complex attacks Organizations must continually These methodologies help
and adapt to defenses faster than evolve their defenses to hackers identify patterns and
ever, raising concerns about the counteract these sophisticated vulnerabilities, facilitating more
future of cybersecurity. and targeted attacks. strategic and impactful attacks.
Implications for Society

Privacy concerns Impact on businesses Government policies and actions

As hacking techniques become The rising frequency and sophistication Governments are responding to
more advanced, concerns about of cyber attacks significantly impact the rise of hacking through
personal privacy escalate. Data businesses, leading to financial losses, enhanced regulations and
breaches can result in reputational damage, and regulatory initiatives aimed at bolstering
unauthorized disclosures of repercussions. Organizations must cybersecurity. Collaborative efforts
sensitive information, prompting invest in comprehensive security between public and private sectors
increased scrutiny of data measures to mitigate these risks. are crucial in developing strategies
to combat cyber threats effectively.
Preparing for Future Challenges

01 Enhancing cybersecurity measures

02 Importance of collaborative efforts

Continuous improvement
Collaborative efforts
of cybersecurity measures
between various 03 Future skills needed in
is essential to address the cybersecurity
stakeholders, including
evolving threat landscape.
governments, businesses, As the cybersecurity
Organizations should
and cybersecurity domain evolves, there will
adopt a proactive
professionals, are vital to be an increasing demand
approach, integrating
enhancing collective for professionals with
cutting-edge technologies
defenses against cyber specialized skills, such as
and strategies into their
threats. Sharing threat hunting, incident
security frameworks.
intelligence and resources response, and risk
can significantly improve management. Education
resilience. and training in these areas
Thank you
•Reporter