Showing posts with label pentest. Show all posts

Recon and Enumeration

We will first set up our OpenVPN server on a Kali Linux box with an external IP address (a.b.c.d). Once that’s done, we’ll build The Kali Linux ISO of Doom on the same machine and make it available for download through HTTP

echo "1" > /proc/sys/net/ipv4/ip_forward

--[ Links for study ]

1. CEH Tools :

1.1. CEH v7 Instructor Slides

CEH v7 Instructor Slides are 11 PDF Files for you to learn Complete Ethical Hacking or, refer it side by side when learning it from Cybrary. Each file has more than 100 Slides and they also include link to specific tools and softwares for you to use. Size : 170 MB

1.2. CEH v8 Toolkit ( ISO )

This is the Disk version of CEH v8 Toolkit. You can find all the tools here.

2. Pentesting OS :

2.1. Kali Linux

Kali Linux, The most powerfull and advanced Pentesting System. Most of you might be familar with else, just visit the link above

2.2. Parrot Security OS

Parrot Security OS is one of the known Pentesting OS available. Little has been known about this OS ( to me ) so i’d like your review on this

2.3. Cyborg Hawk Linux

Cyborg Hawk Linux runs on Ubuntu ( unlike Kali which run on Debain ) and has more features and tools and a sexy little OS. Give it a try !

	Vulnerable Application	Platform
1	SPI Dynamics (live)	ASP
2	Cenzic (live)	PHP
3	Watchfire (live)	ASPX
4	Acunetix 1 (live)	PHP
5	Acunetix 2 (live)	ASP
6	Acunetix 3 (live)	ASP.Net

NOTE: The information contained in this tutorial is directed toward the Kali Linux distribution, but can also apply to other Linux varieties if the appropriate tools are installed. All tools used in this tutorial are freely available.

For the purposes of this article, all ESSIDs and BSSIDs have been pixelated. When you run actual scans, you will be able to see these values.

--[ Install pentest tools Raspi ]

Add the repo's in sources.list if they are missing
----
/etc/apt/sources.list

add these lines :

deb http://http.kali.org/ /kali main contrib non-free

deb http://http.kali.org/ /wheezy main contrib non-free

deb http://http.kali.org/kali kali-dev main contrib non-free

deb http://http.kali.org/kali kali-dev main/debian-installer

deb-src http://http.kali.org/kali kali-dev main contrib non-free

deb http://http.kali.org/kali kali main contrib non-free

deb http://http.kali.org/kali kali main/debian-installer

deb-src http://http.kali.org/kali kali main contrib non-free

deb http://security.kali.org/kali-security kali/updates main contrib non-free

deb-src http://security.kali.org/kali-security kali/updates main contrib non-free

deb http://repo.kali.org/kali kali-bleeding-edge main

install all Kali pentest packages (need ~ 6 GB on disk):
sudo -s
apt-get update
apt-get install kali-linux -yq

Dltd_ Pastebin

Pages

--[ A huge list of links ]

Pentesting Cheat Sheet

Recon and Enumeration

--[ links ]

--[ KALI 2.0 iso of doom ]

--[ Links for study ]

--[ Vulnerable apps ]

--[ Easily Assessing Wireless Networks with Kali Linux ]--

NOTE: The information contained in this tutorial is directed toward the Kali Linux distribution, but can also apply to other Linux varieties if the appropriate tools are installed. All tools used in this tutorial are freely available.

--[ Install pentest tools Raspi ]