Menambahkan Repo Blackarch di manjaro dan keluarga Arch linux

linux pentest

Menambahkan Repo Blackarch di manjaro dan keluarga Arch linux

Unknown 5/19/2016 3 Komentar

BlackArch adalah salah satu distro pentest yang dikembangkan dari distro Arch linux. BlackArch dapat diinstal di atas distro Arch Linux yang ada. Paket dapat dipasang secara individu atau berdasarkan kategori. Repositori terus berkembang saat ini blackarch berisi 1.402 tools pentest.

untuk mendownload Black arch bisa melalui link ini :
BlackArch Linux 64 bit Live ISO torrent
BlackArch Linux 32 bit Live ISO torrent
setelah mendownload blackarch, kita dapat membuat live usbnya menggunakan win32diskimager atau menggunakan dd pada linux
membuat usb instalasi menggunakan linux menggunakan sintax berikut ini :
sudo dd bs=512M if=file.iso of=/dev/sdX
*/sdX = merupakan posisi usb/flashdisk
untuk menginstall blackarch pada distro arch linux, dapat mengunakan cara berikut ini :
# jalankan https://blackarch.org/strap.sh sebagai user root dan ikuti perintahnya.
$ curl -O https://blackarch.org/strap.sh
# Pastikan SHA1sum sesuai
$ sha1sum strap.sh
# seting script agar dapat di eksekusi
$ chmod +x strap.sh
# jalankan strap.sh
$ sudo ./strap.sh
*/Apabila pada saat selesai eksekusi script berikut terjadi error, kita dapat melakukan langkah berikut ini
$ pacman -Syu haveged
$ systemctl start haveged
$ systemctl enable haveged
$ rm -fr /etc/pacman.d/gnupg
$ pacman-key --init
$ pacman-key --populate archlinux
$ pacman-key --populate manjaro
$ pacman-key --populate blackarch
$ pacman -Syu

Anda sekarang dapat menginstal tools dari repositori blackarch
# Untuk melihat semua daftar tools pentest yang ada, jalankan
$ sudo pacman -Sgg | grep blackarch | cut -d' ' -f2 | sort -u
# Untuk menginstall semua tools, jalankan
$ sudo pacman -S blackarch
# Untuk Melihat katagori tools , jalankan
$ sudo pacman -Sg | grep blackarch
# Untuk menginstall per katagori tools, jalankan
$ sudo pacman -S blackarch-<category>

untuk menginstall Blackarch menggunakan live cd/usb dapat menggunakan cara berikut
# Install blackarch-install-scripts package
$ sudo pacman -S blackarch-install-scripts
# kemudian jalankan dan ikuti perintahnya
$ sudo blackarch-install

Default Login blackarch
user : root
Passwrd : blackarch

Baca selengkapnya

Tsunami

Hack kali kali linux pentest tools hacking

Tsunami

Unknown 7/31/2014 Komentar

Tsunami is a DNS Amplification Attack Tool which is collected from the internet and modified by Samiux. It is designed for testing your server and/or network under the DNS Amplification Attack. Perform this test on any server and/or network without authorization is a crime and you will be put into a jail.
The number of open recursive DNS servers and the bandwidth of the attacker as well as duration may affect the traffic volume size of the attack.

Usage

To perform DNS Amplification attack :

python amplfiy.py -t 1.2.3.4 -s open_dns.txt -a domain_name.txt -c -1 --verify -v --threads=1000

*where 1.2.3.4 is the victim's IP address

To scan for the open recursive DNS server :

perl find_open_resolvers.pl '1.0.0.0 - 1.84.255.255' -q 1000

Remarks : this script just can check if the DNS server has the RA flag or not only. You need to double check with the following command to confirm the scanned DNS server is a true open recursive DNS server.

dig ANY isc.org @samsung.idv.tw

*where samsung.idv.tw is the open recursive DNS server
where isc.org is the domain to lookup

Tsunami comes with the following files :

amplfiy.py - the attack script
find_open_resolvers.pl - the scanner script
gov-uk_domain.txt - domain names of UK Government
open_dns_1.0.0.0-1.84.255.255.txt - open recursive DNS list within 1.0.0.0 and 1.84.255.255 IP range

Baca selengkapnya

menambahkan repo backtrack 5 di ubuntu 12.04

backtrack backtrack 5 hacking pentest

menambahkan repo backtrack 5 di ubuntu 12.04

Unknown 2/09/2014 Komentar

untuk menambahkan repo backtrack di ubuntu 12.04 kita hanya perlu beberapa tahapan, berikut langkah2nya :

tambahkan sources.list berikut pada /etc/apt/sources.list

deb http://all.repository.backtrack-linux.org revolution main microverse non-free testing
deb http://32.repository.backtrack-linux.org revolution main microverse non-free testing
deb http://source.repository.backtrack-linux.org revolution main microverse non-free testing

kemudian download gpg keynya

sudo wget http://all.repository.backtrack-linux.org/backtrack.gpg && sudo apt-key add backtrack.gpg

lalu update 
 sudo apt-get update

kalo sudah berhasil silahkan install aplikasi yang anda perlukan

Baca selengkapnya

Social Engineering Toolkit Attack (SET) Tutorial

backtrack Hack hacking kali linux pentest SET

Social Engineering Toolkit Attack (SET) Tutorial

Unknown 2/08/2014 Komentar

Social Engineering Toolkit Attack (SET)


"Browser Autopwn Attack:"

"Bypassing Anti-virus using Multi Pyinjector Shell Code Injection:""Create a Payload and Listener Attack:"

"Infectious Media Generator Attack:"

"Powershell Attack Vector Method:"

"PyInjector Shellcode Injection Attack:"

"RATTE (Remote Administration Tool) Attack Method:"

"Tab Napping Attack Method:"

"Web Jacking Method:"

sumber

Baca selengkapnya

Plugin firefox for pentest

firefox hacking linux pentest

Plugin firefox for pentest

Unknown 2/04/2014 Komentar

Firefox Addons For Penetration Testing

1>Firebug—
(useful for the debugging tools that can help you tracking rogue javascript code on servers)—
https://addons.mozilla.org/en-US/firefox/addon/firebug/

2>User Agent Switcher—
(You can use this extension to change the user agent of your browser)
https://addons.mozilla.org/en-US/firefox/addon/user-agent-switcher/

3>HackBar—
(Useful for SQL injection and XSS attacks)
https://addons.mozilla.org/en-US/firefox/addon/hackbar/

4>HttpFox—
(Monitor and analyze all the incoming and outgoing HTTP traffic between your browser and the web server.)
https://addons.mozilla.org/en-US/firefox/addon/httpfox/

5>Live HTTP Headers—
(View the HTTP headers of a website instantly)
https://addons.mozilla.org/en-US/firefox/addon/live-http-headers/

6>Tamper Data—
(View and modify HTTP/HTTPS headers and post parameters.)
https://addons.mozilla.org/en-US/firefox/addon/tamper-data/

7>ShowIP—
(Shows the IP of the current page)
https://addons.mozilla.org/en-US/firefox/addon/showip/

8>OSVDB—
(Open Source Vulnerability Database Search)
https://addons.mozilla.org/en-us/firefox/addon/osvdb/

9>Packet Storm search plugin—
(Search the packet storm database for exploits)
https://addons.mozilla.org/en-us/firefox/addon/packet-storm-search-plugin/

10>Offsec Exploit-db Search—
(Search the Exploit-db archive)
https://addons.mozilla.org/en-us/firefox/addon/offsec-exploit-db-search/

11>Security Focus Vulnerabilities Search Plugin—-
(Search for vulnerabilities in the Security Focus)
https://addons.mozilla.org/en-us/firefox/addon/securityfocus-vulnerabilities-/

12>Cookie Watcher—
(Watch the selected cookie in the status bar)
https://addons.mozilla.org/en-us/firefox/addon/cookie-watcher/

13>Header Spy—
(Shows HTTP Headers on status bar)
https://addons.mozilla.org/en-us/firefox/addon/header-spy/

14>Groundspeed—
(Manipulate the application user interface)
https://addons.mozilla.org/en-us/firefox/addon/groundspeed/

15>CipherFox—
(Displays the current SSL/TLS cipher and certificate on the status bar)
https://addons.mozilla.org/en-us/firefox/addon/cipherfox/

16>XSS Me—
(Tool for testing reflected XSS vulnerabilities)
https://addons.mozilla.org/en-us/firefox/addon/xss-me/

17>SQL Inject Me—
(Extension to test SQL Injection vulnerabilities)
https://addons.mozilla.org/en-us/firefox/addon/sql-inject-me/

18>Wappalyzer—
(Discover technologies and applications that are used on websites)
https://addons.mozilla.org/en-us/firefox/addon/wappalyzer/

19>Poster—
(Make HTTP requests,interact with web services and watch the output)
https://addons.mozilla.org/en-us/firefox/addon/poster/

20>Javascript Deobfuscator—
(Show the JavaScript code that are running on web pages)
https://addons.mozilla.org/en-us/firefox/addon/javascript-deobfuscator/

21>Modify Headers—
(Modify HTTP request headers)
https://addons.mozilla.org/en-us/firefox/addon/modify-headers/

22>FoxyProxy—
(Advanced proxy management tool)
https://addons.mozilla.org/en-us/firefox/addon/foxyproxy-standard/

23>FlagFox—
(Displays a country flag for the location of the web server)
https://addons.mozilla.org/en-us/firefox/addon/flagfox/

24>Greasemonkey—
(Customize the way a webpage behaves by using small bits of JavaScript)
https://addons.mozilla.org/en-us/firefox/addon/greasemonkey/

25>Domain Details—
(Displays Server Type, Headers, IP Address, Location Flag, and links to Whois Reports)
https://addons.mozilla.org/en-us/firefox/addon/domain-details/

26>Websecurify—
(Useful for security assessments in web applications)
https://addons.mozilla.org/en-us/firefox/addon/websecurify/

27>XSSed Search—
(Search the cross-site scripting database at XSSed.Com)
https://addons.mozilla.org/en-us/firefox/addon/xssed-search/

28>ViewStatePeeker—
(ASP.NET viewstate viewer)
https://addons.mozilla.org/en-us/firefox/addon/viewstatepeeker/

29>CryptoFox—
(CryptoFox is an encryption/decryption tool for cracking MD5 passwords)
https://addons.mozilla.org/en-US/firefox/addon/cryptofox/

30>WorldIP—
(Location of the web server,IP,Datacenter,Ping,Traceroute,RDNS,AS etc)
https://addons.mozilla.org/en-US/firefox/addon/worldip-flag-and-datacenter-pi/

31>Server Spy—
(Unveils the technology of the web server (Apache, IIS etc.)
https://addons.mozilla.org/en-US/firefox/addon/server-spy/

32>Default Passwords—
(Search CIRT.net default password database)
https://addons.mozilla.org/en-US/firefox/addon/default-passwords-cirtne-58786/

33>Snort IDS Rule Search—
(Search for Snort IDS Rules)
https://addons.mozilla.org/en-US/firefox/addon/snort-ids-rule-search/

sumber

Baca selengkapnya