Backtrack

If you are beginning to learn, Armitage is not something you would want to start with. It is alright to quickly automate some routine Metasploit tasks using Armitage, but if you’re trying to learn something, Armitage adds a level of abstraction and makes you a perfect script kiddie.

SQL injection has long been an web application security concern and yet there exists a plethora of websites stil vulnerable to SQL injections today. I refrain from any testing on such websites due to lack of explicit permission by owners.

Ophcrack is GUI tool that can be used for the purpose of cracking password hashes. Perhaps the main attraction of using this tool is its ability to deploy rainbow tables while cracking the password.

In my last post, I demonstrated how a vulnerable system can be discovered quickly using the nmap tool. We used the script ‘smb-check-vulns.nse’ belonging to the ‘vuln’ category. We used it in ‘unsafe’ mode which is very likely to crash the victim machine.

Netcat, the swiss army knife, can be used as a backdoor but I would advise against it because it has no authentication. Anyone who finds netcat server on the victim’s computer can control that machine.

I usually scan for vulnerabilities using the Nessus Scanner but its “big and heavy” and takes time to scan hosts for all the vulnerabilities depending on the plugins available. Although, Nessus has the option to scan for a particular vulnerability, here I discuss a better and quicker way to do it.

Macchanger is a tool already available in Kali Linux or Backtrack. It lets you change the hardware address pertaining to a particular interface on your machine. For instance, as eth0 or wlan0 are the interfaces for wired and wireless connection respectively, here’s how you would use it:

Read my Post on Setting up on Nessus, if you haven’t got it set up yet. After logging into Nessus, go to ‘Scans’ -> ‘Create new scan’ Here, give a name to the scan (I usually use current Date).