Hacking Techniques and Intrusion Detection
Hacking Techniques & Intrusion Detection
Winter Semester 2012/2013
Dr. Ali Al-Shemery aka: B!n@ry
/etc/resolv.conf
Dr. Ali Al-Shemery (aka: B!n@ry)
9
Configuring Basic Network Services
• Sometimes you need to test stuff locally, or import data to a database, or even copy files. That’s why Backtrack comes with a different set of services we can use for such scenarios: • SSH (OpenSSH)
• FTP (vsftpd) • Web (Apache) • Database (MySQL, Postgress) • TFTP
Dr. Ali Al-Shemery (aka: B!n@ry) 10
Exploring the Pentest Directory
• Going to battles without knowing what arsenal you’re carrying can lead to failure ! • Lets take a walk through the BackTrack penetration testing tools directory.
# cd /pentest
Dr. Ali Al-Shemery (aka: B!n@ry)
11
Keeping Your Arsenal up2date
• It is very important to keep your tools up to date, • New features and enhancement are added, • Bugs are fixed, • New tools maybe added! # apt-get update # apt-get upgrade OR # apt-get dist-upgrade
Dr. Ali Al-Shemery (aka: B!n@ry) 12
Knowing Your Toolbox
• You want to know nearly all your toolbox?
# dpkg --list
• You want to know if a specific tool is installed?
# dpkg --list | grep
Dr. Ali Al-Shemery (aka: B!n@ry)
13
Backtrack 5 R3 Toolbox
Backtrack’s main toolbox categories: • Information Gathering Analysis • Vulnerability Assessment • Exploitation Tools • Privilege Escalation • Maintaining Access • Reverse Engineering Doesn’t end • RFID Tools here !!! • Stress Testing • Forensics • Reporting Tools
Dr. Ali Al-Shemery (aka: B!n@ry) 14
Other Useful CLI’s
• Getting Help
– – – – man info --help GNOME Help
•
Searching
– find – locate – GNOME Search
•
Creating and Editing Files
– GNOME gedit – vim – nano
0.1% of what’s out there !!!
•
Fetching File From Internet
– wget -c
• Installing new software/packages
– apt-cache – apt-get install
Dr. Ali Al-Shemery (aka: B!n@ry) 15
Taken from: Linux Arab
Winter Semester 2012/2013
Dr. Ali Al-Shemery aka: B!n@ry
/etc/resolv.conf
Dr. Ali Al-Shemery (aka: B!n@ry)
9
Configuring Basic Network Services
• Sometimes you need to test stuff locally, or import data to a database, or even copy files. That’s why Backtrack comes with a different set of services we can use for such scenarios: • SSH (OpenSSH)
• FTP (vsftpd) • Web (Apache) • Database (MySQL, Postgress) • TFTP
Dr. Ali Al-Shemery (aka: B!n@ry) 10
Exploring the Pentest Directory
• Going to battles without knowing what arsenal you’re carrying can lead to failure ! • Lets take a walk through the BackTrack penetration testing tools directory.
# cd /pentest
Dr. Ali Al-Shemery (aka: B!n@ry)
11
Keeping Your Arsenal up2date
• It is very important to keep your tools up to date, • New features and enhancement are added, • Bugs are fixed, • New tools maybe added! # apt-get update # apt-get upgrade OR # apt-get dist-upgrade
Dr. Ali Al-Shemery (aka: B!n@ry) 12
Knowing Your Toolbox
• You want to know nearly all your toolbox?
# dpkg --list
• You want to know if a specific tool is installed?
# dpkg --list | grep
Dr. Ali Al-Shemery (aka: B!n@ry)
13
Backtrack 5 R3 Toolbox
Backtrack’s main toolbox categories: • Information Gathering Analysis • Vulnerability Assessment • Exploitation Tools • Privilege Escalation • Maintaining Access • Reverse Engineering Doesn’t end • RFID Tools here !!! • Stress Testing • Forensics • Reporting Tools
Dr. Ali Al-Shemery (aka: B!n@ry) 14
Other Useful CLI’s
• Getting Help
– – – – man info --help GNOME Help
•
Searching
– find – locate – GNOME Search
•
Creating and Editing Files
– GNOME gedit – vim – nano
0.1% of what’s out there !!!
•
Fetching File From Internet
– wget -c
• Installing new software/packages
– apt-cache – apt-get install
Dr. Ali Al-Shemery (aka: B!n@ry) 15
Taken from: Linux Arab
References: [-] Backtrack Linux Distro., http://www.backtrack-linux.org/ [-] Slackware Exploitation VM, http://opensecuritytraining.info/slack12.zip [-] OWASP Broken Web Applications VM, http://downloads.sourceforge.net/project/owaspbwa/1.0/OWASP_Broken_Web_Apps_VM_1.0.7z Dr. Ali Al-Shemery (aka: B!n@ry) 19