Showing posts with label bt5. Show all posts
Showing posts with label bt5. Show all posts

Aug 16, 2012

Upgrading BackTrack 5 R2 to BackTrack 5 R3 now

BackTrack 5 R3 released on Aug 13, 2012. I'm upgrading my laptop from BackTrack 5 R2 to BackTrack 5 R3 now. Here's how I do it:
  1. apt-get update && apt-get dist-upgrade
  2. apt-get install libcrafter blueranger dbd inundator intersect mercury cutycapt trixd00r artemisa rifiuti2 netgear-telnetenable jboss-autopwn deblaze sakis3g voiphoney apache-users phrasendrescher kautilya manglefizz rainbowcrack rainbowcrack-mt lynis-audit spooftooph wifihoney twofi truecrack uberharvest acccheck statsprocessor iphoneanalyzer jad javasnoop mitmproxy ewizard multimac netsniff-ng smbexec websploit dnmap johnny unix-privesc-check sslcaudit dhcpig intercepter-ng u3-pwn binwalk laudanum wifite tnscmd10g bluepot dotdotpwn subterfuge jigsaw urlcrazy creddump android-sdk apktool ded dex2jar droidbox smali termineter bbqsql htexploit smartphone-pentest-framework fern-wifi-cracker powersploit webhandler

Nov 15, 2011

THC-SSL-DoS on BackTrack5

One Oct 24, 2011, The Hacker Choice (THC) released a DoS tool that targeting vulnerable SSL/https servers. Here's how I compile it on BT5 together with a modified version.

First, I download the modified version of thc-ssl-dos.c from http://pastebin.com/bKLue33X. Instead of conducting a real DoS attack, the modified version will merely check if the target server vulnerable or not.

Secondly, I have to install the libssl-dev. I download the latest copy of OpenSSL and point the configure script to the libraries.


# tar zxvf openssl-1.0.0e.tar.gz
# cd openssl-1.0.0e
# make
# cd ../thc-ssl-dos-1.4
# ./configure --prefix=/opt/thc-ssl-dos --with-includes=/opt/openssl-1.0.0e/include/ --with-libs=/opt/openssl-1.0.0e/
# make
# cd /opt/thc-ssl-dos/src

# ./thc-ssl-dos 
     ______________ ___  _________
     \__    ___/   |   \ \_   ___ \
       |    | /    ~    \/    \  \/
       |    | \    Y    /\     \____
       |____|  \___|_  /  \______  /
                     \/          \/
            http://www.thc.org


          Twitter @hackerschoice


Greetingz: the french underground


./thc-ssl-dos [options] 
  -h      help
  -l   Limit parallel connections [default: 400] 



# mv /opt/thc-ssl-dos /opt/thc-ssl-dos-attack
# cd ..

# tar zxvf thc-ssl-dos-1.4.tag.gz

# cd ../thc-ssl-dos-1.4/src
# cp /opt/SSL_Renegotiation_Check_-_thc-ssl-dos.c_modification.txt thc-ssl-dos.c
# ..
# ./configure --prefix=/opt/thc-ssl-dos --with-includes=/opt/openssl-1.0.0e/include/ --with-libs=/opt/openssl-1.0.0e/
# make
# cd ..
# mv /opt/thc-ssl-dos /opt/thc-ssl-dos-check

Install Chromium in Backtrack 5

I installed BackTrack 5 recently. I follow the instruction from http://koko-newbie.blogspot.com/2011/09/install-google-chrome-in-backtrack-5_03.html. 


Here's how I install the Chromium browser into my Backtrack:
  1. apt-get install chromium-browser
  2. cd /usr/lib/chromium-browser
  3. hexedit chromium-browser

  • [Tab] to mode string
  • [ctrl-s], type geteuid
  • Replace geteuid as getppid
  • [ctrl-x] to save-and exit.

The reason to modify the geteuid with hexedit is to bypass the restriction on running Google Chrome browser as root.