backtrack

20
Presentation By: Wasim Halani & Vinesh Redkar Network Intelligence India Pvt. Ltd.

Upload: nu-the-open-security-community

Post on 18-Nov-2014

2.869 views

Category:

Education


8 download

DESCRIPTION

Mumbai null May 2012 Meet

TRANSCRIPT

Page 1: Backtrack

Presentation By: Wasim Halani & Vinesh RedkarNetwork Intelligence India Pvt. Ltd.

Page 2: Backtrack

“The quieter you are, the more you

can here”Source: Online

Page 3: Backtrack

Agenda Introduction to Backtrack Why we need Backtrack Difference between GNOME and KDE. File Permission $PATH Variable Starting up with Backtrack. Major tool in Backtrack. Configuring the Network Connect Backtrack With putty. Installation of Program and Update Backtrack Useful Command

Page 4: Backtrack

Introduction to Backtrack A Linux distribution designed for

penetration testing and information security auditing distribution.

Backtrack is based on Ubuntu/Debian

Backtrack has many security tools compiled and preinstalled.

Download http://www.backtrack-linux.org/

downloads/

Page 5: Backtrack

Why we like BT?

Open Source Platform. Linux platform

More number of tools available Easier to script and perform operations

Has better compatibility with tools (nmap)

Compiled toolkit Lesser dependency at client side

Easy to use – Ubuntu + GUI

Page 6: Backtrack

Gnome Vs KDE

Does it really matter ??!

Personal preference

Page 7: Backtrack

File Permissions Each file and directory has three user based permission groups:

Owner(u) Group(g) Others(o)

Permission Types Read(r)-4 Write(w)-2 Execute(x)-1

Viewing the permission of file Ls –l <file name>

Assigning Permission to file Chmod +x <file name>(Note: x is for execute)

Page 8: Backtrack

$PATH Variable

$PATH is Environment Variable This Variable allows programs

residing in the different working directory to be executed directly.

Viewing the $PATH variable Echo $PATH

Setting up $PATH variable export PATH=$PATH:”directory”

Page 9: Backtrack

Starting With Backtrack

• You need to log in first– User name: root– Password:toor

• The graphical desktop does not start by default#> startx

Page 10: Backtrack

Segregation of Utilities

Information Gathering Vulnerability Assessment Exploitation tool Maintaining Access Reverse Engineering Forensics Reporting Tool Services

Page 11: Backtrack

Imp. tools

Information Gathering and Enumeration Tool Nmap-Utility for network exploration and

security auditing. Wireshark-Network Protocol analyzer. Hping-TCP/IP packet assembler/analyzer. Maltego- Information Gathering tool.

Page 12: Backtrack

Imp. Tools Cont.. Vulnerability Assessment Tool

Nikto Nessus W3af BurpSuite

Exploitation tools Metasploit Exploitdb Sqlmap Aircrack-ng Beef SET (Social Engineering Toolkit)

Page 13: Backtrack

Imp. Tools Cont..

Maintaining Access Webshells Metasploit

Reverse Engineering Ollydbg

Forensics Autospy Wireshark Pdfid Voltality

Page 14: Backtrack

Imp. Tools Cont..

Reporting Tool Dradis Magictree

Page 15: Backtrack

Directory Structure

Page 16: Backtrack

Configuring the Network

Manually Setting IP address ifconfig eth0 up ifconfig eth0 [youripaddress] netmask [your

netmask] route add default gw [your gateway] eth0 echo nameserver [yourDNS]> /etc/resolv.conf etc/init.d/networking restart

Dynamically Setting IP address dhclient

Page 17: Backtrack

Connect Backtrack With putty

Putty Download: http://www.putty.org/

Connecting Backtrack using putty over SSH sshd-generate /etc/init.d/ssh start

Page 18: Backtrack

Installation of Program and Update Backtrack

Software Installation Extracting tar file▪ tar xvf filename.tar.gz▪ tar xvjf filename.tar.bz2

apt-get install <software_name> apt-cache search <software_name>

Fetching File From Internet wget <link>

Update Backtrack apt-get update apt-get dist-upgrade apt-get install beef reboot

Page 19: Backtrack

Useful Command

Show Information Man-man option <keyword> Info-info <keyword> Help-<Program name> -help

Finding file Locate-locate <filename> Search-search <keyword> Find

Create and edit a file Nano

Page 20: Backtrack

Thanks for listening!

Contact Us:@washalsec –

[email protected]@gmail.com