Skip to main content

Posts

Showing posts with the label Penetration

Sample Penetration Test Report

Thanks to offensive-security.com they have provided a penetration test report. In this report it contains the tools they used such as nmap, the white hats(Known as hackers), social engineering, and etc. Also, They include the current network configuration, the network drawing, and afterwords the reports discuss what steps were taken to improve the network infrastructure. File Name: offsec-sample-report.pdf Date Created: 05/04/2010 File Size: 1.36 MB Download Now

Kismet

As you setup your wireless access point you need to make sure it has encryption either it's WEP or WPA. My recommendation is WPA2 if you have that choice. More likely wireless network don't have a password on it - over 80% of them don’t. Using kismet the hacker watchs you check your email. Kismet records every packet you send on the network. Kismet records the email server you connected to, and the login name and password you used to get your email. The hacker lets Kismet collect wifi packets for several hours, usually during the peak times this wifi network is in use. If this is a nearby hotel the hacker collects packets through the evening, if it’s a cafe or sandwich shop the hacker collects packets during lunch. The hacker goes back home and runs dsniff on the capture files that kismet created. Dsniff dumps out all the servers and name/password combinations that kismet collected that day. The hacker gets your server and login name/password and sets up his email clien...

Nessus 4.2.1 New Version

I sure everyone in the IT industry had to use nessus at some point. It didn't have the greatest interface, but it did its job. The new version they redid everything, but before it was GUI application. The only problems that I ever had where that it took long time to login to the application other than that it work pretty well. Now with 4.2.1 they changed it to be a web application. Actually it loads really quick, but before it can load you need to start the service. maddog@DTS-Enterprise:~/Desktop$ sudo /etc/init.d/nessusd start -- This is to start the service [sudo] password for maddog: $Starting Nessus : .   maddog@DTS-Enterprise:~/Desktop$ sudo /etc/init.d/nessusd stop -- This is to stop the service $Shutting down Nessus : .  When starting the nessus services it requires root privileges. By default the nessus service loads when the computer starts. To stop nessus from loading when the computer starts type this command sudo update-rc.d -f nessusd...