Showing posts with label BackTrack 5. Show all posts
Showing posts with label BackTrack 5. Show all posts
Sunday, June 10, 2012
Checking out BackTrack Linux 5r2-PenTesting Edition Lab!
Labels:
BackTrack 5,
DMZ network,
hosts,
network infrastructure,
PenTest Laboratory,
pentesting edition,
pre-configured firewall,
tools,
virtual penetration testing lab
What's a BackTrack Linux 5r2-PenTesting Edition Lab? What's with the edition thingy? Isn't BackTrack 5 a pentesting distro already? Why make a pentesting edition?
Maybe these are some of the questions you have in your mind after reading the title and because of that, I would like to give some few points about this edition.
BackTrack Linux 5r2-PenTesting Edition Lab is still the same BackTrack 5 r2 with the same pentesting tools pre-installed in the distribution and has KDE as its Desktop Environment although in backtrack-linux.org you can also choose if you want Gnome or KDE. The only difference is that it includes all of the hosts, network infrastructure, tools, and targets necessary to practice penetration testing for the CPLT or Certified PenTest Laboratory course which is brought to you by PenTest Laboratory and the guys behind PenTest Magazine.
This edition is a modified version of NETinVM which has a predefined User-mode Linux (UML) based penetration testing targets. When started, this builds an entire network of machines within the VMware virtual machine. The BackTrack Linux distribution is used to provide the tools necessary for completing the lab scenarios. Thus, It is an an all-in-one penetration testing lab environment that pre-configured with:
- A master (base) host utilizing BackTrack Linux 5r2
- A DMZ network with two hosts (targets)
- An “internal” network with one host (target)
- A pre-configured firewall
This pentesting lab is available for free to non-CPLT course students which can be downloaded here.
Here are some of targets you can attack or play with:
- 10.5.0.1
- 10.5.0.254
- 10.5.1.10
- 10.5.1.10
- 10.5.1.254
About the Contributor:
Shipcode is a prolific blogger of ROOTCON and at the same time an InfoSec enthusiast from Cebu. He was inspired to join ROOTCON as part of the core team to share his knowledge in information security. He encourages other like minded individuals to come forward and share their knowledge through blogging right here at ROOTCON Blog section.
ROOTCON is managed by like minded InfoSec professionals across the Philippines. All rights reserved. Designated trademarks, brands and articles are the property of their respective owners.
Friday, December 30, 2011
WiFi Protected Setup (WPS) Is Vulnerable, 2 Bruteforce Tools Unleashed
Labels:
BackTrack 5,
Crack WPA in 10 hours,
fix wps,
Linux,
open source,
PoC Bruteforce Tool,
Reaver Setup,
routers,
Tactical Network,
wifi cracking,
WiFi Protected Setup Attack Tool,
WPA/WPA2 retriever,
WPS pins
Two computer security
experts and network ninjas discovered that
WiFi Protected Setup is vulnerable because it can be brute-forced using WPS pins which allow attackers to retrieve the WPA/WPA2 in less
than 10 hours.
Aside from that,
two penetration testing tools that cracks routers that have WPS on it
have been released, made open source and available for download. These
two tools are Reaver and Stefan Viehböck’s PoC Bruteforce Tool. Reaver
was released by Tactical Network Solutions and the
PoC Bruteforce Tool was obviously developed by
Stefan Viehböck. Stefan said that his tool is a bit faster than Reaver
but it does not support all Wi-Fi adapters. I haven’t tried Stefan’s
tool yet but I was able to play and set Reaver tool in
my Backtrack 5 Linux Operating System.
Reaver version 1.1
has been released last night while I was writing a tutorial on how to set it up. You can download or wget Reaver version 1.1 or 1.0 on this link. And if you want to try
Stefan Viehböck’s PoC Bruteforce Tool, you can download it here.
There is no patch yet for this vulnerability so it would be advisable to disable WPS in order to keep it away from your neighbors who are crackers.
About the Contributor:
Shipcode
is a prolific blogger of ROOTCON and at the same time an InfoSec
enthusiast from Cebu. He was inspired to join ROOTCON as part of the
core team to share his knowledge in information security. He encourages
other like minded individuals to come forward and share their knowledge
through blogging right here at ROOTCON Blog section.
ROOTCON is managed by like minded InfoSec professionals across the Philippines. All rights reserved. Designated trademarks, brands and articles are the property of their respective owners.
Subscribe to:
Posts (Atom)
