Showing posts with label configuration. Show all posts

We will first set up our OpenVPN server on a Kali Linux box with an external IP address (a.b.c.d). Once that’s done, we’ll build The Kali Linux ISO of Doom on the same machine and make it available for download through HTTP

echo "1" > /proc/sys/net/ipv4/ip_forward

--[ WiFi Pumpkin ]

WiFi-Pumpkin
Framework for Rogue Wi-Fi Access Point Attack

Description
WiFi-Pumpkin is a security tool that provides the Rogue access point to Man-In-The-Middle and network attacks.

Installation
Kali 2.0/WifiSlax 4.11.1/Parrot 2.0.5

Python 2.7

# git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git
# cd WiFi-Pumpkin
# chmod +x installer.sh
# ./installer.sh --install

refer to the wiki for Installation

https://github.com/P0cL4bs/WiFi-Pumpkin

--[ Kali Sana Virtualbox & MSF pro ]

To install vbox you need to install the following :
apt-get install linux-headers-amd64
apt-get install build-essential dkms && apt-get remove --purge virtualbox-dkms

->reboot

--[ Links for study ]

1. CEH Tools :

1.1. CEH v7 Instructor Slides

CEH v7 Instructor Slides are 11 PDF Files for you to learn Complete Ethical Hacking or, refer it side by side when learning it from Cybrary. Each file has more than 100 Slides and they also include link to specific tools and softwares for you to use. Size : 170 MB

1.2. CEH v8 Toolkit ( ISO )

This is the Disk version of CEH v8 Toolkit. You can find all the tools here.

2. Pentesting OS :

2.1. Kali Linux

Kali Linux, The most powerfull and advanced Pentesting System. Most of you might be familar with else, just visit the link above

2.2. Parrot Security OS

Parrot Security OS is one of the known Pentesting OS available. Little has been known about this OS ( to me ) so i’d like your review on this

2.3. Cyborg Hawk Linux

Cyborg Hawk Linux runs on Ubuntu ( unlike Kali which run on Debain ) and has more features and tools and a sexy little OS. Give it a try !

--[ Compile OBS on Debian ]

Manually compiling on Debian-based distros

Set up a build environment:

sudo apt-get install build-essential pkg-config cmake git checkinstall

Get the required packages:

sudo apt-get install libx11-dev libgl1-mesa-dev libpulse-dev libxcomposite-dev \ libxinerama-dev libv4l-dev libudev-dev libfreetype6-dev \ libfontconfig-dev qtbase5-dev libqt5x11extras5-dev libx264-dev \ libxcb-xinerama0-dev libxcb-shm0-dev libjack-jackd2-dev libcurl4-openssl-dev

FFmpeg is required, and not commonly available on debian-based distros. If you want a custom compilation with FDK AAC encoder and such, see: https://trac.ffmpeg.org/wiki/CompilationGuide

Otherwise, I will only give easy and brief instructions for a very minimal FFmpeg installation (note that it does not require the inclusion of packages such as x264/etc, but you can include them if you wish):

sudo apt-get install zlib1g-dev yasm git clone --depth 1 git://source.ffmpeg.org/ffmpeg.git cd ffmpeg ./configure --enable-shared --prefix=/usr make -j4 sudo checkinstall --pkgname=FFmpeg --fstrans=no --backup=no \ --pkgversion="$(date +%Y%m%d)-git" --deldoc=yes

Alternatively, Debian Jessie non-free, and Ubuntu 14.04 LTS multiverse have packages for FDK AAC. >> Add non-free (Debian) or multiverse (Ubuntu) to your /etc/apt/sources.list.
Tested on Debian Stretch:

sudo apt-get install libavcodec-dev libavfilter-dev libavdevice-dev libfdk-aac-dev

Building and installing OBS:

git clone https://github.com/jp9000/obs-studio.git cd obs-studio mkdir build && cd build cmake -DUNIX_STRUCTURE=1 -DCMAKE_INSTALL_PREFIX=/usr .. make -j4 sudo checkinstall --pkgname=obs-studio --fstrans=no --backup=no \ --pkgversion="$(date +%Y%m%d)-git" --deldoc=yes

--[ Installing Grub Customizer ]

Grub Customizer Installation

To install Grub Customizer 4.0.6 on Debian 7&8
su -
# apt-get install build-essential cmake libgtkmm-3.0-dev libssl-dev gettext libarchive-dev
# wget https://goo.gl/qQnUhK -O grub-customizer_4.0.6.tar.gz
# tar xfv grub-customizer_4.0.6.tar.gz
# cd grub-customizer_4.0.6.tar.gz
# cmake . && make -j3
# make install

Start Grub Customizer with :
# grub-customizer

Grub Customizer Removal (Optional)

To uninstall
# su -
# wget https://goo.gl/qQnUhK -O grub-customizer_4.0.6.tar.gz
# tar xfv grub-customizer_4.0.6.tar.gz
# cd grub-customizer_4.0.6.tar.gz
# make uninstall

--[ GNU GRUB Manual 2.00 ]

GNU GRUB manual
1 Introduction to GRUB
  1.1 Overview
  1.2 History of GRUB
  1.3 Differences from previous versions
  1.4 GRUB features
  1.5 The role of a boot loader
2 Naming convention
3 Installation

--[ Archlinux on RPI2 ]

SD Card Creation
Replace sdX in the following instructions with the device name for the SD card as it appears on your computer.

Start fdisk to partition the SD card:
fdisk /dev/sdX

At the fdisk prompt, delete old partitions and create a new one:
-Type o. This will clear out any partitions on the drive.
-Type p to list partitions. There should be no partitions left.
-Type n, then p for primary, 1 for the first partition on the drive, press ENTER to accept the default first sector, then type +100M for the last sector.
-Type t, then c to set the first partition to type W95 FAT32 (LBA).
-Type n, then p for primary, 2 for the second partition on the drive, and then press ENTER twice to accept the default first and last sector.
-Write the partition table and exit by typing w.

Create and mount the FAT filesystem:
mkfs.vfat /dev/sdX1
mkdir boot
mount /dev/sdX1 boot

Create and mount the ext4 filesystem:
mkfs.ext4 /dev/sdX2
mkdir root
mount /dev/sdX2 root

Download and extract the root filesystem (as root, not via sudo):
wget http://archlinuxarm.org/os/ArchLinuxARM-rpi-2-latest.tar.gz
bsdtar -xpf ArchLinuxARM-rpi-2-latest.tar.gz -C root
sync

Move boot files to the first partition:
mv root/boot/* boot

Unmount the two partitions:
umount boot root

Insert the SD card into the Raspberry Pi, connect ethernet, and apply 5V power.

Use the serial console or SSH to the IP address given to the board by your router.

Login as the default user alarm with the password alarm.
The default root password is root.

--[ Installing Chrome on Kali ]

Download .deb :
https://www.google.com/chrome/browser/desktop/index.html

In a terminal:

#cd ~/Downloads
#dpkg -i google-chrome-stable_current_amd64.deb

errors are fine, continue with :
apt-get install libappindicator1
and
apt-get -f install
to install dependencies.

--[ Virtualbox Headless VM server ]

A tutorial how to install virtualbox for VM's on a headless server, combined with a webif to manage it all.

--[ Add sudo user to Kali ]

Open a terminal and issue the following command.

    #useradd -m

    -m creates a home directory for the user.
    Now we have to set a password for the user.

    #passwd

    It will ask you to create a new password.
    At this point, we have a new user account. But we might want to add our new user to the “sudoers” group, so that we can use “sudo” to do administrative actions.

    #usermod -a -G sudo

    The option -a means to add and ‘-G sudo’ means to add the user to the sudo group. If you want to know more about the usermod command, issue #man usermod command to know more about usermod
    Now we have to specify the shell for our new user.

    #chsh -s /bin/bash

    chsh command is used to change the login shell for a user.
    All done.! you are all set. You could logout and login to your new account.

--[ Boot RPI with NFS storage ]--

Booting XBMC OpenELEC with NFS storage

I have had a raspberry pi type B for a few weeks now and one problem that I have is on the SD card which can get stressed and corrupt XBMC data. I was looking for a solution tonight and eventually stepped on it reading a few pages from the wiki. Since I still want to use the SD card, I just changed/flash/cmdline.cfg to contain this:

ip=dhcp boot=/dev/mmcblk0p1 disk=NFS=192.168.0.66:/media/xbmc

Of course, you will need to change the NFS server and mount point as they are likely to be different. Worth noting that I rsync’d the content of /dev/mmcblk0p2 (/storage in OpenELEC) so I would not have to scan my whole collection again.

There is also a full procedure to netboot your Raspberry Pi but this did not appeal to me, details there.

--[ ufw ]

It should be installed by default in Ubuntu, but if for some reason it’s not, you can install the package using aptitude or apt-get using the following commands:
sudo apt-get install ufw

Check the Status

--[ Ubuntu 14.04 hardening ]

Assume that all these operations need to be performed as root, which you can either do with sudo or by logging in as root first. (I've noticed that Ubuntu users seem particularly averse to logging in as root, apparently preferring instead to issue an endless series of commands starting with sudo, but I'm afraid that kind of extra hassle is not for me, so I just log in as root first.)

Harden SSH

--[ Set session type to text or graphical ]

Get the current session type, text-mode or lightdm+xfce:

Code:

systemctl get-default

Set the current session type to text-mode by disabling lightdm autostart:

Code:

systemctl set-default multi-user.target

Enable lightdm autostart:

Code:

systemctl set-default graphical.target

Use the same sessions
Share hosts, captured data, and downloaded files
Communicate through a shared event log
Run bots to automate red team tasks

Dltd_ Pastebin

Pages

--[ A huge list of links ]

--[ KALI 2.0 iso of doom ]

--[ WiFi Pumpkin ]

--[ Kali Sana Virtualbox & MSF pro ]

--[ Links for study ]

--[ Compile OBS on Debian ]

--[ Installing Grub Customizer ]

--[ GNU GRUB Manual 2.00 ]

--[ Archlinux on RPI2 ]

--[ Installing Chrome on Kali ]

--[ Virtualbox Headless VM server ]

--[ Add sudo user to Kali ]

--[ Boot RPI with NFS storage ]--

Booting XBMC OpenELEC with NFS storage

--[ ufw ]

--[ Ubuntu 14.04 hardening ]

Harden SSH

--[ Set session type to text or graphical ]

--[ Setup SSH private key ]

--[ Install on Debian ]

--[ IP at logonprompt ]

--[ Armitage ]