HOWTO theharvester on Ubuntu Desktop 12 04 LTS

The objective of theharvester is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.



This tool is intended to help Penetration testers in the early stages of the penetration test in order to understand the customer footprint on the Internet. It is also useful for anyone that wants to know what an attacker can see about their organization.



Step 1 :



sudo apt-get install subversion



sudo -sH

cd /opt

svn checkout http://theharvester.googlecode.com/svn/trunk/ theharvester

cd /opt/theharvester



Step 2 :



To run it.



sudo -sH

cd /opt/theharvester

python theharvester.py -d microsoft.com -l 500 -b google



Thats all! See you.

Read More..

HOWTO Back Track 5 on Lenovo ThinkPad X100e

Lenovo ThinkPad X100e (Type 3508-65B) is equipped with AMD Athlon Neo MV-40 CPU and Radeon Display card. It does not work properly on Back|Track 5.



This tutorial is going to show you how to install Back|Track 5 on the captioned hardware.



Step 1 :



Boot up the Live CD or Live USB. Select the first item. Press "Tab" key to add the following line to the end of the line displayed on the screen.



radeon.modset=0



Step 2 :



After the Live CD or Live USB is booting up, open terminal and then issue the following command.



nano /etc/default/grub



Locate :



GRUB_CMDLINE_LINUX_DEFAULT="text splash nomodeset vga=791"



Make it read as :



GRUB_CMDLINE_LINUX_DEFAULT="text splash nomodeset vga=791 radeon.modset=0"



Save and exit.



Step 3 :



update-grub

fix-splash



Step 4 :



Configure the wireless card.



HOWTO : RTL8191SE wireless card on Back|Track 4 R2



Step 5 :



Install of AMD Catalyst 11.6 Proprietary driver.



Go to AMD official site and download AMD Catalyst 11.6 Proprietary Linux x86 Display Driver which is released on June 15, 2011.



wget http://www2.ati.com/drivers/linux/ati-driver-installer-11-6-x86.x86_64.run

chmod +x ati-driver-installer-11-6-x86.x86_64.run

./ati-driver-installer-11-6-x86.x86_64.run



** My Back|Track 5 is 64-bit so I download the 64-bit version of the driver.



Follow the instruction on the screen to install the driver. After the installation, you should reboot your system.



Before reboot your system, issue the following command :



fix-splash



Step 6 :



Install Pointing Device Settings for the TrackPoint system.



apt-get install gpointing-device-settings



Go to "System" -- "Preferences" -- "Pointing Devices".



Select "TPPS/2 IBM TrackPoint". Choose "Use middle button emulation" and "Use wheel emulation". Select "2" for the button.



Thats all! See you.

Read More..

HOWTO nVidia CUDA 4 0 RC on Ubuntu 11 04 Server

If you have nVidia display card that have several CUDAs on it, you will interested in this tutorial. This time, I would like to show you how to install CUDA 4.0 RC on Ubuntu 11.04 Server.



You will experience a faster server after the installation of CUDA 4.0.



This HOWTO does not require to install X.



Step 1 :



Add the CUDA 4.0 PPA.

sudo add-apt-repository ppa:aaron-haviland/cuda-4.0



Step 2 :



sudo apt-get update

sudo apt-get upgrade



64-bit :

sudo apt-get install nvidia-cuda-gdb nvidia-cuda-toolkit nvidia-compute-profiler libnpp4 nvidia-cuda-doc libcudart4 libcublas4 libcufft4 libcusparse4 libcurand4 nvidia-current nvidia-opencl-dev nvidia-current-dev nvidia-cuda-dev opencl-headers



32-bit :

sudo apt-get install nvidia-cuda-gdb nvidia-cuda-toolkit nvidia-compute-profiler lib32npp4 nvidia-cuda-doc lib32cudart4 lib32cublas4 lib32cufft4 lib32cusparse4 lib32curand4 nvidia-current nvidia-opencl-dev nvidia-current-dev nvidia-cuda-dev opencl-headers



Step 3 :



sudo nano /etc/init.d/nvidia_cuda



Append the following lines.



============= Copy from here ================

#!/bin/bash



PATH=/sbin:/bin:/usr/bin:$PATH



/sbin/modprobe nvidia



if [ "$?" -eq 0 ]; then



   # Count the number of NVIDIA controllers found.

   N3D=`/usr/bin/lspci | grep -i NVIDIA | grep "3D controller" | wc -l`

   NVGA=`/usr/bin/lspci | grep -i NVIDIA | grep "VGA compatible controller" | wc -l`



   N=`expr $N3D + $NVGA - 1`

   for i in `seq 0 $N`; do

      /bin/mknod -m 666 /dev/nvidia$i c 195 $i;

   done



   /bin/mknod -m 666 /dev/nvidiactl c 195 255



else

   exit 1

fi



=========== Copy to here =================



Step 4 :



sudo chmod +x /etc/init.d/nvidia_cuda

sudo update-rc.d nvidia_cuda defaults



Step 5 :



Reboot your system.



Remarks



I do not have nVidia display cards server in hand at the moment, I am not sure the captioned startup script working properly or not.



Thats all! See you.

Read More..

HOWTO Logwatch for Hiawatha on Ubuntu 9 04 Server

Logwatch reads your log files and alert you about the unusual log entries. It is working perfect for Apache. However, the log directory of Hiawatha is different from Apache. You should do something else on logwatch in order to make it to read Hiawatha log files.



Step 0 :



Install logwatch.



sudo apt-get update

sudo apt-get upgrade

sudo apt-get install logwatch



Step 1 :



Make changes to the logwatch configure file in order to tell her to send you a email report.



sudo nano /usr/share/logwatch/default.conf/logwatch.conf



Change the settings of the following lines.



Output = mail

Format = html

MailTo = samiux@gmail.com



Step 2 :



You should also change the setting at the daily cron job.



sudo nano /etc/cron.daily/00logwatch



Make the entry like this.



/usr/sbin/logwatch --mailto samiux@gmail.com



Step 3 :



Make logwatch to read Hiawatha log files.



sudo nano /usr/share/logwatch/default.conf/logfiles/http.conf



Add the following lines on the appropriate sections.



LogFile = hiawatha/*access.log

LogFile = hiawatha/*access.log.1

LogFile = hiawatha/*error.log

LogFile = hiawatha/*error.log.1

LogFile = hiawatha/*system.log

LogFile = hiawatha/*system.log.1

LogFile = hiawatha/*garbage.log

LogFile = hiawatha/*garbage.log.1

LogFile = hiawatha/*php-fcgi.log

LogFile = hiawatha/*php-fcgi.log.1



Archive = hiawatha/*access.log.*.gz

Archive = hiawatha/*error.log.*.gz

Archive = hiawatha/*system.log.*.gz

Archive = hiawatha/*garbage.log.*.gz

Archive = hiawatha/*php-fcgi.log.*.gz



See also (Hiawatha 6.17.1 installation) :

Samiuxs Blog

or

Almost Secure and Perfect Ubuntu Server



Thats all. See you!

Read More..

HOWTO Sqlmap on Ubuntu Desktop 12 04 LTS

Sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.



Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB database management systems.



Full support for six SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query, stacked queries and out-of-band.



Step 1 :



sudo -sH

cd /opt



apt-get install git

git clone git://github.com/sqlmapproject/sqlmap.git



Step 2 :



To run it.



sudo -sH

cd /opt

python sqlmap.py



Thats all! See you.

Read More..

HOWTO The Onion Router Tor on Back Track 5

PART I : Browser



Step 1 :



nano /etc/apt/sources.list



Append the following line to the file.



deb http://deb.torproject.org/torproject.org lucid main



Step 2 :



gpg --keyserver keys.gnupg.net --recv 886DDD89

gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -



apt-get update

apt-get install tor tor-geoipdb

apt-get install privoxy



Step 3 :



nano /etc/privoxy/config



Append the following line :



forward-socks4a / 127.0.0.1:9050 .



/etc/init.d/privoxy start

/etc/init.d/tor start



Step 3a (Optional) :



If you are behind firewall or NAT as well as router, you should append the following line at the configure file.



forward 192.168.*.*/ .



Step 4 :



Go to the Tor official site to download and install Tor button for Firefox.



Tor Button Plugin for Firefox



Step 5 :



Open Firefox. Go to "Tools" -- "Add-ons" -- "Extensions". Select "Torbuttons Preferences".



(a) At "Proxy Settings", unclick "Use Polipo".

(b) At "Security Settings", On browser startup, set Tor state to:" select "Tor".

(c) At "Display Settings", select "Icon".



** Now, your Firefox will enable Tor on every launch unless you disabled the "Tor Button" on the Firefox.



Step 6 (Optional) :



To check if it works or not. Go to the following sites to check your Ip address.



http://cmyip.com



or



http://whatismyip.com



or



http://check.torproject.org



PART II : Console



Step a :



apt-get install proxychains elinks



Step b :



nano /etc/proxychains.conf



Append the following line :



socks4 127.0.0.1 9050



** It should be there.



Step c :



Usage :



proxychains nmap google.com

proxychains elinks http://cmyip.com

proxychains elinks http://www.whatismyip.com



To see your real IP address :



elinks cmyip.com



Thats all! See you.

Read More..

NAS Server shipment based on FreeNAS

We have just shipped our first own built NAS server.
For those who are not technical NAS stands for Networked Attached Storage which is simply a way of getting large amounts of dedicated storage space in business network environments.
We have used FreeNAS as the operating system and configured the server with 4 x 1000GB hard disks arranged in two RAID mirrored pairs of disks, with 4GB RAM, Athlon 6000+ processor, shipped in a tower case.
This provides just short of 1700GB on line storage for archiving data in a data rich environment. At just under £800 delivered and installed the price compares favourably to the rack mounted NAS servers that are available and still gives room for future expansion if required.
If you have a file server that is getting clogged up with data then this might be an option for you. Moving data to a dedicated storage server could give your domain server a new lease of life.
Our website gives contact details.

Read More..

The security database on the server does not have a computer account for this workstation trust relationship

We recently has this error message appear when trying to log on Windows 7 workstations to our Windows 2003 domain server.
"The security database on the server does not have a computer account for this workstation trust relationship."
We trawled through the Google searches for this message and there are pages of reports of this error.
Let me give you the circumstances.
Our domain server failed. We could not get it to get through POST and BIOS to try to find and operating system. That was the first big Ouch.
So we rebuilt the server on to new hardware and configured it, as we thought, the same. We initially had some issues with DNS and NICs not doing as they should but the upshot was that our 2 Windows 7 workstations could not connect to the domain. Please note this did not affect our remaining XP workstation which logged just fine.
After looking at the Goggle responses we noticed that we had rebuilt the domain but missed off the .local on the domain name.
So we rebuilt being more careful next time. Even so we got a capital letter in the wrong place in the domain name. So we rebuilt a third time. This time we are sure we got everything right. It made not a jot of difference.
Other websites had suggested we disconnect from the domain and reconnect to the new domain. Not an iota of difference.
Finally we had to reinstall the operating system on both our Windows 7 machines.
One side effect of this, despite having installed onto completely new hard disks to preserve the data on the old disk, is that on one of the machines we have lost ALL out Outlook pst files. Some emails going back 6 years with important information.
Couple this with the total data loss of all information on the server did not make us very happy.
I will finish with this comment. Why, oh why, Microsoft is it so hard to get your systems to talk to each other. This is hardly a ringing endorsement for the improvements in Windows 7 when XP performs better in what was already a very fraught situation. Please try to do better next time.

Read More..