Ssh, linux

Tuesday, 27 September 2011

Graphical grub2 Configuration Manager - Grub Customizer

The goal of Grub Customizer is to create a complete and intuitive graphical grub2/burg configuration interface. The main feature is the boot entry list configuration - but not simply by modified the grub.cfg: to keep the dynamical configuration, this application will only edit the script order and generate proxies (script output filter), if required. To get more information about how it works, look here: https://answers.launchpad.net/grub-customizer/+faq/1355.
Version 2.0 introduces the ability to change the grub2/burg setting like the default entry, timeouts, menu visibility, screen resolution, background image and colors (grub2 only) and much more.

Since version 1.5 you can use it to repair and configure grub2/burg using a live cd (and Grub Customizer, which has to be installed as usual at the live system before using it). All the required partitions will be automatically mounted when choosing the root partition and some sub partitions on the "partition chooser" (a dialog which pops up, when you start Grub Customizer inside a live system).

Tool to Audit Web Application Security - Lilith

21:00 No comments

LiLith is a tool written in Perl to audit web applications. This tool analyses webpages and looks for html <form> tags , which often refer to dynamic pages that might be subject to SQL injection or other flaws.

How the entire "scanning" process works is different from so called "CGI scanners", such as nikto and n-stealth. This program will surf to a website and crawls through all the links, just as a user would to. On any possible input field, such as text boxes, page id's, ... LiLith will attempt to inject any characters that might have a special meaning for any underlying technology, such as SQL.

Any Web applications scanner can never perform a full 100% correct audit. Therefore, a manual re-check is necessary. Hence, be aware that Lilith might come up with several false positives.

Hack Into Wi-Fi (WEP and WPA Encrypted) Networks - Wifite

21:30 No comments

Author is NOT responsible for any damage or illegal actions caused by the use of this program.
Use on your own risk!

Wifite is made to attack multiple WEP and WPA encrypted networks at the same time. this tool is customizable to be automated with only a few arguments. wifite can be trusted to run without supervision.

Wifite features:
* Sorts targets by power (in dB); cracks closest access points first
* Automatically deauths clients of hidden networks to decloak SSIDs
* Numerous filters to specify exactly what to attack (wep/wpa/both, above certain signal strengths, channels, etc)
* Customizable settings (timeouts, packets/sec, channel, change mac address, ignore fake-auth, etc)
* "anonymous" feature; changes MAC to a random address before attacking, then changes back when attacks are complete
* all WPA handshakes are backed up to wifite.py's current directory
* Smart WPA deauthentication -- cycles between all clients and broadcast deauths
* Stop any attack with Ctrl+C -- options: continue, move onto next target, skip to cracking, or exit
* Switching WEP attack methods does not reset IVs
* Intel 4965 chipset fake-authentication support; uses wpa_supplicant workaround
* SKA support (untested)
* Displays session summary at exit; shows any cracked keys
* All passwords saved to log.txt
* built-in updater: ./wifite.py -upgrade

Create and Manage Encrypted Folder (EncFS) in Ubuntu with Cryptkeeper

08:34 No comments

EncFS creates a virtual encrypted filesystem which stores encrypted data in the rootdir directory and makes the unencrypted data visible at the mountPoint directory. The user must supply a password which is used to (indirectly) encrypt both filenames and file contents.

If EncFS is unable to find a supported filesystem at the specified rootdir, then the user will be asked if they wish to create a new encrypted filesystem at the specified location. Options will be presented to the user allowing some control over the algorithms to use. As EncFS matures, there may be an increasing number of choices.

EncFS offers several advantages over other disk encryption software simply because each file is stored individually as an encrypted file somewhere else in the host's directory tree.