HOWTO W3af on Ubuntu Desktop 12 04 LTS

W3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web application vulnerabilities.



Step 1 :



Make sure you follow the steps below one by one.



sudo -sH

cd /opt



apt-get update

apt-get install git build-essential



git clone https://github.com/andresriancho/w3af.git



apt-get install python2.7-dev python-setuptools python-pip



pip install PyGithub GitPython pybloomfiltermmap esmre nltk pdfminer futures scapy-real guess-language cluster msgpack-python python-ntlm



pip install -e git+git://github.com/ramen/phply.git#egg=phply



apt-get install graphviz python-gtksourceview2



pip install xdot



Step 2 :



To run it.



sudo -sH

cd /opt/w3af



./w3af_gui



or



./w3af_console



Step 3 :



Make sure you change the path of the Metasploit at "Configuration" -- "Miscellaneous" -- "Metasploit".



e.g. /opt/metasploit/app/

e.g. /opt/metasploit/apps/pro/msf3/



Remarks :







Automated Audit using W3AF



Thats all! See you.

Read More..

HOWTO Nessus on Ubuntu Desktop 12 04 LTS

Step 1 :



Go to the following link to download you copy of Nessus.



http://www.tenable.com/products/nessus/select-your-operating-system



For 32-bit :

wget "http://downloads.nessus.org/nessus3dl.php?file=Nessus-5.2.1-ubuntu1110_i386.deb&licence_accept=yes&t=8bd3179e2669137382555cb07611a795&__utma=96148739.876193166.1369081770.1369081770.1369084100.2&__utmb=96148739.3.10.1369084100&__utmc=96148739&__utmx=-&__utmz=96148739.1369084100.2.2.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided)&__utmv=-&__utmk=236900745" -O Nessus-5.2.1-ubuntu1110_i386.deb



For 64-bit :

wget "http://downloads.nessus.org/nessus3dl.php?file=Nessus-5.2.1-ubuntu1110_amd64.deb&licence_accept=yes&t=8bd3179e2669137382555cb07611a795&__utma=96148739.876193166.1369081770.1369081770.1369084100.2&__utmb=96148739.3.10.1369084100&__utmc=96148739&__utmx=-&__utmz=96148739.1369084100.2.2.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided)&__utmv=-&__utmk=236900745" -O Nessus-5.2.1-ubuntu1110_amd64.deb



Step 2 :



sudo dpkg -i Nessus-5.2.1-ubuntu1110_i386.deb



or



sudo dpkg -i Nessus-5.2.1-ubuntu1110_adm64.deb



Go to the following link to register your Nessus Plugin feed :



http://www.tenable.com/products/nessus/nessus-homefeed



sudo /etc/init.d/nessusd start



Point your Firefox to :



https://localhost:8834/



Follow the instructions on the browser.



Activate your Nessus plugin feed via the received email.



After that, you should disable the nessusd from being loaded automatically when bootup.



sudo update-rc.d nessusd disable



Step 3 :



To run it.



sudo /etc/init.d/nessusd start



Point your Firefox to :



https://localhost:8834/



Thats all! See you.

Read More..

HOWTO Back Track 5 on VirtualBox 4 0 8

(A) Install Back|Track 5 on VirtualBox



Install VirtualBox 4.0.8 on the host computer, such as Ubuntu 11.04 as usual. Then install Back|Track 5 on the VirtualBox. Next is to install Oracle VM VirtualBox Extension Pack and Guest Additons.



Oracle VM VirtualBox Extension Pack is installed on the host computer, such as Ubuntu 11.04. You can find it on the Download page.



To install Guest Additons, just click "Devices" -- "Install Guest Additions" on the menu.



Do the following on the guest computer (Back|Track 5) :



cd /media/VBOXADDITONS_4.0.8_71778

./VBoxLinuxAddtions.run



To fix the boot up screen.



fix-splash



Do the following on the host computer (Ubuntu 11.04) :



Add you (username) to the group of vboxusers, e.g. samiux as username.



useradd -G vboxusers samiux



Go to "Users and Groups", "Advanced Settings" -- "Users Rights" select "Use VirtualBox solution".



Then, reboot your host to make it effective.



Remember not to enable USB 2.0 on the VirtualBox as some USB dongles do not work properly when it is enabled.



Finally, the following wireless USB dongles have been tested and they are all working perfectly out of the box. They are all support injection too.



TP-Link TL-WN321G 54Mbps Wireless G USB Adapter

TP-Link TL-WN821N 300Mbps Wireless N USB Adapter

TP-Link TL-WN822N 300Mbps High Gain Wireless N USB Adapter



*** This tutorial is also applied to VirtualBox 4.1.2.



Remarks :



When the kernel of Back|Track 5 is upgraded, the Guest Additions will be damaged. You need to do the following on Back|Track 5 and then reinstall the Guest Additions :



prepare-kernel-sources

cd /usr/src/linux

cp -rf include/generated/* include/linux/



(B) Create Metasploitable virtual machine (Optional)



Go to the following link to download the "Metasploitable" which is an Ubuntu 8.04 server with some flaws.



http://blog.metasploit.com/2010/05/introducing-metasploitable.html



Set the downloaded Metasploitable as virtual hard drive at VirtualBox. The network adapter is set to "Host-Only". The virtual hard disk space is at least 8GB and 512MB RAM for the Metasploitable.



(C) The VirtualBox intranet



Now, the IP address of eth0 of Metasploitable is similar to 192.168.56.101. The IP address of eth0 and eth1 of Back|Track are similar to 10.0.2.15 and 192.168.56.102 respectively.



You may require to execute the following command at Back|Track in order to see the two network interfaces and their IPs.



/etc/init.d/networking restart



Back|Track can access (or ping) Metasploitable via IP address. Back|Track can surf the internet but Metasploitable cannot.



At last, your penetration environment is set up.



(D) Free Tutorials



(1) Metaploit Unleashed

(2) Fast-Track

(3) Social-Engineer Tootkit

(4) Got Milk?

(5) How to Metasploit Beginner to Advanced (Video)

(6) SecurityTube.net (Video)

(7) BackTrack WiKi



(E) Non-free Training



Offensive Security



(F) Resources



(1) Exploits Database

(2) Metaploit Blog

(3) Offensive security Blog

(4) Yet another Back|Track in Gnome

(5) Metasploit

(6) Google Hacking-Database

(7) BackBox Linux



You may find the following links useful :



HOWTO : Bug fix for Back|Track 5



HOWTO : WEP cracking with Back|Track 5



HOWTO : WPA/WPA2 cracking with Back|Track 5



HOWTO : No skill hacking with Armitage on Back|Track 4 R2



HOWTO : Sniffing SSL with ettercap on Back|Track 5



HOWTO : The Onion Router (Tor) on Back|Track 5



HOWTO : FeedingBottle 3.2 on Back|Track 5



HOWTO : Update script for Back|Track 5



HOWTO : Yet Another Update script for Back|Track 5



HOWTO : Yet Another Back|Track 5 on Dell Streak 5



HOWTO : RTL8191SE wireless card on Back|Track 4 R2



HOWTO : Adobe Flash 10.3 on Back|Track 5



HOWTO : Back|Track 5 on Lenovo ThinkPad X100e



Does Snort really protect your network?



HOWTO : Solves the Wireshark not loading on Back|Track 5



HOWTO : Register to OSVDB and Nessus on Back|Track 5



HOWTO : Anonymous in chat.freenode.net with XChat



HOWTO : Pure-ftpd and atftpd on Back|Track 5



HOWTO : SSH Tunneling - Remote Port Forwarding



HOWTO : Penetration Testing in the Real World



g0tmi1ks Video Series



Thats all! See you.

Read More..

HOWTO Tor and Proxychains on Ubuntu Desktop 12 04 LTS

(A) Tor



Step 1 :



sudo nano /etc/apt/sources.list.d/tor.list



Append the following :



deb http://deb.torproject.org/torproject.org precise main



Save and exit.



sudo -sH



gpg --keyserver keys.gnupg.net --recv 886DDD89

gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -



apt-get update

apt-get install deb.torproject.org-keyring

apt-get install tor tor-geoipdb vidalia privoxy



Step 2 :



sudo nano /etc/privoxy/config



Append the following line :



forward-socks5 / 127.0.0.1:9050 .



If you are behind NAT or router, you should append the following line :



forward 192.168.*.*/ .



Step 3 :



sudo update-rc.d privoxy disable

sudo update-rc.d tor disable



sudo /etc/init.d/privoxy start

sudo /etc/init.d/tor start



(B) Proxychains



Step 4 :



sudo apt-get install proxychains



sudo nano /etc/proxychains.conf



Change the following line :



socks4 127.0.0.1 9050



To :



socks5 127.0.0.1 9050



Thats all! See you.

Read More..

HOWTO Netcat on Ubuntu Desktop 12 04 LTS

Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol.



It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.



Step 1 :



sudo -sH

cd /opt



wget http://garr.dl.sourceforge.net/sourceforge/netcat/netcat-0.7.1.tar.gz



tar -xvzf netcat-0.7.1.tar.gz

rm netcat-0.7.1.tar.gz



cd /opt/netcat-0.7.1

./configure

make



cd /opt

mkdir /opt/netcat

cp /opt/netcat-0.7.1/src/netcat /opt/netcat/

rm -R netcat-0.7.1/



Step 2 :



To run it.



sudo -sH

cd /opt/netcat

./netcat -h



Remarks :



Please do not delete the built-in netcat-openbsd as it will also delete the ubuntu-mininal package at the same time. Your compiled netcat is different to the built-in one.



Thats all! See you.

Read More..