Showing posts with label Backtrack 5 tuto. Show all posts
Showing posts with label Backtrack 5 tuto. Show all posts

Sunday, 17 February 2013

How To Install Backtrack 5 Dual Boot-Tutorial

 if you want to use other operating system like windows with backtrack so for this purpose you can make virtual machine or you can simply use dual boot technique. In this article I will discuss how to make dual boot to use Linux (backtrack 5) with windows.
The overall method of installation is same as discussed before but the step in which you have to mention the partition is change because of dual boot, for this technique it is assume that you have installed windows on your entire disk and you want to make a partition to install backtrack 5 as well, backtrack 5 is not necessary you can use this technique to install any other version and distro of Linux. Now I am going to show you how to do this, first of all make back up of your windows installer,
After successfully boot 
  • Start backtrack installer
  • Select your language
  • Select your geographical location
  • Choose your keyboard layout, or leave it on a default means USA
  • Now the next window is to make partition select "Install them side by side, choosing between them each startup" than click forward.



  • On the next window confirm the setting for your hard disk.
  • Than check all the install component and click on install.
  • Press the restart button.
  • On the next boot your computer will ask you to choose a operating system
  • Do not forget the default username root and password toor, and do not forget to change them.
  • Now you are able to run backtrack5 with windows XP, windows 7 and Windows Vista.

How To Find Vulnerability on a Computer- CVEchecker

There are different tools are available to find a vulnerability on an operating system and network, nessus and OpenVAS are among them. We have discussed different sort of tutorials for nessus to find a vulnerability as you have seen that the vulnerability number start with CVE-xxxxx so the question is what is CVE? And the other thing is that if we need to find the vulnerability on our own computer so that whether we need to scan our own computer via nessus or there are some other method?


What is CVE ?

The Common Vulnerabilities and Exposures or CVE system provides a reference-method for publicly-known information-security vulnerabilities and exposures. MITRE Corporation maintains the system, with funding from the National Cyber Security Division of the United States Department of Homeland Security.[1] CVE is used by the Security Content Automation Protocol.

What is CVEchecker ?

The goal of cvechecker is to report about possible vulnerabilities on your system, by scanning the installed software and matching the results with the CVE database. Indeed, this is not a bullet-proof method and you will most likely have many false positives (vulnerability is fixed with a revision-release, but the tool isn't able to detect the revision itself), yet it is still better than nothing, especially if you are running a distribution with little security coverage.

CVEchecker Tutorial


root@coresec:~# apt-get install libconfig8-dev libsqlite3-dev libxslt1-dev

root@coresec:~# tar -zxvf cvechecker-3.1.tar.gz
root@coresec:~# cd cvechecker-3.1/
root@coresec:~/cvechecker-3.1# ./configure --enable-sqlite3
root@coresec:~/cvechecker-3.1# make
root@coresec:~/cvechecker-3.1# make install


root@coresec:~/cvechecker-3.1# pullcves pull
Downloading nvdcve-2.0-2002.xml... ok
Converting nvdcve-2.0-2002.xml to CSV... ok
Loading in nvdcve-2.0-2002.csv in cvechecker.
I am missing the index cveidx2. This is to be expected if this is the first run of cvechecker since an upgrade.
I will now create cveidx2 for you, no further actions are needed.
Some updates have occurred which might affect the database initialization.
Please restart the command.

Generate the list

root@coresec:~/cvechecker-3.1# find / -type f -perm -o+x > scanlist.txt
root@coresec:~/cvechecker-3.1# echo "/proc/version" >> scanlist.txt

Get the information of available software's

root@coresec:~/cvechecker-3.1# cvechecker -b scanlist.txt
Searching for known software titles...
- Found match for /lib/libpthread-2.12.1.so: cpe:/a:gnu:glibc:2.12.1:::
- Found match for /sbin/resize2fs: cpe:/a:ext2_filesystems_utilities:e2fsprogs:1.41.12:::
- Found match for /sbin/mkfs.ext4: cpe:/a:ext2_filesystems_utilities:e2fsprogs:1.41.12:::
- Found match for /sbin/iptables-save: cpe:/a:netfilter_core_team:iptables:1.4.4:::
- Found match for /sbin/iptables-save: cpe:/a:netfilter_core_team:iptables:1.4
Matching process

root@coresec:~/cvechecker-3.1# cvechecker -r
Export

root@coresec:~/cvechecker-3.1# cvechecker -r -C