View source

From Offensive-security.com

The action you have requested is limited to users in one of the groups Sysops, Bureaucrats, Editors.

You can view and copy the source of this page:

=BackTrack 4 Beta= ==cannot lock media/.hal-mtab" .while try to access the device== an error occurs when you try to access windows shares,optical media or USB devices.the fix is Either make the directory of each the windows shares & USB device(e.g.sdb1)& DVD/CD Drive(sr0)and put the mount entry in /etc/fstab table or mkdir /media<br> touch /media/.hal-mtab<br> =BackTrack 3 Final= *FIX* for "Fatal error occured - BT3 data not found" http://lubi.sourceforge.net/unetbootin.html =BackTrack 3 Beta= BackTrack 3 is in beta stages. Due to the immense variety of tools and configurations, we require your help to identify and fix bugs. These bugfixes will be consolidated into BackTrack 3 Final. Thanks for your support! '''Update: Backtrack 3 has been released! please use the [[http://forums.remote-exploit.org/forumdisplay.php?f=38 forum]] to notify the developers with any bugs.''' == boot problem using USB keyboard == When I start my computer, using an USB keyboard, I can't choose between options because keyboard (I guess) might not be detected/configured yet, however when the system loads, I can use the keyboard properly. Thanks and great work! == boot problem with ASUS F3J Laptop == was stopping during boot process at data directory<br> Pb solved adding "irqpoll" at the end of kernel line in menu.lst = grub<br> docking bt3 on hard disk works fine, looking for a nest http://lab.dyne.org/Nesting == slapt-get is somehow broken [FIXED IN CVS] == slapt-get update always gave me errors when I tried to update my sources: Verifying checksum signature [ftp://ftp.slackware.com/pub/slackware/slackware-12.0/]...Not Verified Thats not a problem with missing keys or something similar. So I downgraded to the slapt-get version slapt-get-0.9.10e manually. (Download tar.gz, make, make install) Now the --update works... And I found out why: Newer slapt-get versions need/use gnupg for verification. But that gnupg package is not installed on bt. So if you upgrade to latest slapt-get then that gnupg package is installed and everything works fine. The fix for this is below -- -[[User:purehate|purehate]] == Multiple characters with one key press [FIXED - muts]== Under certain hardware conditions pressing a single key will produce several keystrokes, this seems to be most prevalent when running BT3 as a virtual machine. The fix for this is an easy one if you have a HDD install or a live install with changes it needs only to be performed once. However if you are booting from the CD/DVD or a live install without changes it will have to be performed at every boot. Open a Konsole and type xset r off Which disables the software key repeat in an X session. -[[User:balding_parrot|balding_parrot]] == Booting with persistent changes fails at mounting aufs, fix known == I set up everything correctly but BackTrack always fails at booting. I found the fix in the forums: http://forums.remote-exploit.org/showpost.php?p=57981&postcount=12 So if you create a folder with the name "changes" in your parition for the changes, it fixes the problem and bt3 boots. == VMWare Server 1.0.4.56528 installation [FIXED - New Version] == Back|Track 3 Alpha boots up just fine under VMWare Server. Running the installation process is also not an issue. However upon rebooting VMWare complains that the MBR of the VM's filesystem has been damaged and that VMWare must therefore immidiately be haltet. I will further investigate it and try to make it work somehow. If anyone else has the same issue and knows of a fix, feel free to jump in. -[[User:Tatsumori|Tatsumori]] Are you using mkfs ext3/ext2 or reiserfs?? -[[User:PrairieFire|PrairieFire]] Created one major partition on /dev/sda and used mkfs.ext3 /des/sda1 to format the partition with ext3 as allways. So to answer your question - no I did not manually destroy the MBR by installing to the device or formarting the entire block-device. I'll continue to try to reproduce and solve this. -[[User:Tatsumori|Tatsumori]] Problems have been resolved in Server 1.0.5.* -[[User:Tatsumori|Tatsumori]] == VirtualBox and Parallels virtualization issues == When using Back|Track 3 in VirtualBox or Parallels for Linux and OSX, booting the iso and selecting the normal boot options or FLUX, the screen loads, appears to start loading X, but appears to then continuously crash and reload X over and over. All I can see is a cursor then a black screen, then a cursor again. The only way to get it to boot is with the 1024x768 VESA menu specified in the initial booting. Additionally, when using VirtualBox or Parallels, the keyboard is all hosed up. I'll type something and randomly it will inject like 10 extra characters. For Example: I am goinggggggggggggggggggggggggggggg tooooooooooooooooooooooo typppppppppppppppppppppppppppe tttttttttttttttttttttttthissssssssssssssssssssssssssssss Its completely random and does not happen all of the time.. -[[User:ReL1K|ReL1K]] Copy the X11 configuration files off the LiveCD and place them on the fresh install. That fixed the issue with X crashing over and over. It might also fix your keyboard problems. Tested on Parallels Build 5582 for OS X. Could you explain step by step how to do it? == Dell Inspiron 6400 == Unable to start X, due to missing monitor geometry. The screen is 1280x800, but is not listed in the screen configurations. Booting in VESA mode enables the GUI -[[User:Pippolini|Pippolini]] You did not provide the drivers and the name of the card. == Asus M6800Ne == Unable to start Kismet, due to bad packet source configuration. The wireless card is the ipw2200 and the error message is the following: ''FATAL: No packetsources were enabled. ...'' Using BT2 all works fine. == Fixing make_iso.bat on BT3== '''bt3b141207\BT3\make_iso.bat''' ''Fix:'' * line 13 current reads: slax\tools\WIN\mkisofs.exe @slax\tools\WIN\config -o "%1" -A "%CDLABEL%" -V "%CDLABEL%" . * line 13 should read: BT3\tools\WIN\mkisofs.exe @BT3\tools\WIN\config -o "%1" -A "%CDLABEL%" -V "%CDLABEL%" . -aliljet Confirmed this fix. -[[User:PrairieFire|PrairieFire]] == Typo - INSTALL.txt == '''root\INSTALL.txt''' ''Fix:'' * line 6 current reads: run ./boostinst.sh * line 6 should read: run ./bootinst.sh -some1 == Flux BT3 installer == '''Installer has incorrect command''' ''Fix:'' *change command from: kmdr-executor /usr/share/slax/slax-installer.kmdr *to: kmdr-executor /usr/share/slax/BT3.kmdr == Compiz Nvidia == '''Title bars are missing by default''' -Confirmed: (Dell D820) ''Fix:'' nvidia-xconfig --add-argb-glx-visuals nvidia-xconfig -d 24 Ctrl + Alt + Backspace -[[User:PrairieFire|PrairieFire]] Confirmed this fix. The two options are in the cubez script, but for some reason the nvidia-xconfig doesnt execute them as they should. I will add them in new cubez script on separate lines. -barabas == Missing menu items == '''Services -> SSH''' -''Perl scripts located in /usr/bin/ needed for:'' * Setup and start SSHD (setup-sshd) * Start SSHD (start-sshd) * Stop SSHD (stop-sshd) == Incorrect menu items == '''Backtrack>Radio Network Analysis>80211>Misc''' ''Fix:'' * Load IPW 3945/4965 Command: modprobe ipwraw && rmmod ipwraw & load && cd /root;sudo -s Workpath: /usr/src/drivers/iwlwifi-1.0.0/ * Load IPWRAW Command: unload && modprobe ipwraw && cd /root;sudo -s Workpath: /usr/src/drivers/iwlwifi-1.0.0/ -pureh@te confirmed -[[User:PrairieFire|PrairieFire]] '''Backtrack>Network Mapping>Service Fingerprinting>Httpprint [FIXED IN CVS]''' * Httprint link in menu is incorrect. ''Fix:'' Run in terminal checkbox needs to be enabled. -[[User:Purehate|purehate]] confirmed -[[User:PrairieFire|PrairieFire]] '''Backtrack>Vulnerability Identification>Database>MSSQL>SQLDict [FIXED IN CVS]''' *SQLDic link in menu is incorrect Command: wine sqldict.exe Workpath: /pentest/windows-binaries/misc/ -[[User:Purehate|purehate]] confirmed -[[User:PrairieFire|PrairieFire]] '''Backtrack>Miscellanous>Hijetter[FIXED IN CVS]''' *hijetter link in menu is incorrect Command: wine hijetter.exe Workpath: /pentest/windows-binaries/misc/ -daspirate confirmed -[[User:Purehate|purehate]] '''Backtrack>Sniffers>Ethereal [I DONT MAINTAIN FLUXBOX MENU - ASK MUTS]''' *Ethereal has been renamed Wireshark - the link and name need to be changed. This is only in Fluxbox; in KDE, Wireshark is listed correctly under Backtrack>Privelege Escalation>Sniffers>Wireshark. == Adjust paths to files == Files in the /usr/local/ directories aren't in the path. Examples are that man's path doesn't include /usr/local/share/man/* ("man kismet" doesn't out of box). And files in /usr/local/bin/ isn't in path(libtool not found in some makefiles out of the box). Other paths might need to be added. == Energy star (DPMS) features missing [NOT RE-PRODUCEABLE FOR ME - MAX]== * Unable to enable them or force lcd screen off using bt~# xset dpms force off X Error of failed request: BadMatch (invalid parameter attributes) Major opcode of failed request: 139(DPMS) Minor opcode of failed request: 6 (DPMSForceLevel) Serial number of failed request: 10 Current serial number in output stream: 12 bt~# == Apps == === Cisco Auditing Tool [FIXED IN CVS]=== '''Backtrack>Vulnerability Identification>Cisco>Cisco Auditing Tool''' * The whole folder seems to be missing ''Fix:'' * Download tool from [http://packetstormsecurity.org/cisco/CiscoAuditingTool-v1.tar.gz here] to /pentest/cisco directory. Command: No change Workpath: /pentest/cisco/CiscoAuditingTool/ -chrisbdaemon confirmed -[[User:Purehate|purehate]] === Airpwn [FIXED IN CVS]=== ''' Missing from /pentest/wireless/airpwn-1.3/ ''' * Missing files from non existent "conf" directory. * Fix compile problems on reinstall: nano /usr/include/linux/wireless.h #append to match file: #ifndef _LINUX_WIRELESS_H #define _LINUX_WIRELESS_H #'''include <linux/if.h>''' * Upon attempting to reinstall lorcon/airpwn - Output of konsole error on line 622: [http://pastebin.com/f55928206 here] * airpwn with Lorcon trunk 131 fails to compile bt airpwn-1.3 # make make all-am make[1]: Entering directory `/root/airpwn-1.3' if gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -MT airpwn.o -MD -MP -MF ".deps/airpwn.Tpo" -c -o airpwn.o airpwn.c; \ then mv -f ".deps/airpwn.Tpo" ".deps/airpwn.Po"; else rm -f ".deps/airpwn.Tpo"; exit 1; fi In file included from airpwn.c:35: /usr/include/linux/wireless.h:891: error: 'IFNAMSIZ' undeclared here (not in a function) make[1]: *** [airpwn.o] Error 1 make[1]: Leaving directory `/root/airpwn-1.3' make: *** [all] Error 2 bt airpwn-1.3 # -[[User:PrairieFire|PrairieFire]] === Asleap-2.1 [FIXED in CVS] === * Not included (yet) * Refer above to Airpwn instructions for appending wireless.h before compiling [http://www.willhackforsushi.com/code/asleap/2.1/asleap-2.1.tgz Source] * Sorry, I suck. I've fixed this problem in Asleap 2.2, available at http://www.willhackforsushi.com/Asleap.html. --jwright -[[User:PrairieFire|PrairieFire]] === EtherApe [FIXED - muts]=== '''Menu item fails to launch: ''' * Output of error Dialog box: The application EtherApe has crashed. Please install bug-buddy, the crash report tool, which enables you to send the developers detailed information about the error. * Ran from Konsole: - Output of konsole error: [http://pastebin.com/f3d99c773 here] '''Etherape FIX''' Right now the file is being hosted here http://nazircon.googlepages.com/libglade.rar Unpack the rar and copy the libglade folder to your /usr/lib directory If the file is not available copy the /usr/lib/libglade folder from eg. foresight-2.20.1 distro (probably Ubuntu as well...) to BT3's usr/lib/ folder Credit for the fix goes to NaZirCon Posted by [[User:purehate|purehate]] === FastTrack (FIXED IN CVS)? === * Notice for Version 1.0 (Included in beta) * Ensure you have a working Internet connection before attempting to update, failure to will result in the script being deleted. === Init Pgsql Autopwn === Init PgSql (Autopwn) is missing. === Karma monitor-mode.sh [FIXED IN CVS]=== '''monitor-mode.sh is incorrect''' * Other errors still present [What errors?] -dakuhna - Posted by -[[User:Purehate|purehate]] === Metasploit 3 and Firefox 2.0.0.11 interaction === I believe that I have found a bug in the interaction of Metasploit 3 and Firefox 2.0.0.11. All actions taken from the MSFWEB in Firefox are extremely slow (over one minute to scroll down the list of exploits using the scroll bar, longer with the mouse scroll wheel). This occurs whether you change the options or scroll the list of exploits. I looked at the script files, but Ruby is not my forte'. This does not occur in a Windows XP, RedHat, Cent OS, OpenSuse, nor Debian install of MetaSploit 3. I do not know if it is by design that Metasploit does not start FF. Will continue to look for problem. Systems used to test: HP DV9225US and E Machines W4620, both systems 2 gigs ram (pc5300 for the HP, pc3200 for the W4620), stock video configuration for both (Nvidia GeForce Go 7600 for DV9225US, ATI X-300 for W4620). WIFI disabled, ethernet only. CPU's: DV9225US - AMD tl-60, W4620 - AMD mt-32. Install methodology: Local install (real) from USB stick. BT3 installed in ReiserFS file system. Local network: file server disconnected (physical removal of network node) Trace to Inet: 110.0.255.100 (local router node), 110.0.255.1, 192.168.0.1 (dsl router). Console output: [http://pastebin.com/f642aa041 here] === Unicorn-scan [FIXED - muts]=== '''When ran from Menu item and Konsole:''' Main [Error parse.l:158] error opening file `/usr/local/etc/unicornscan/unicorn.conf' : No such file or directory Main exiting unable to get configuration: system error No such file or directory. : ''Fix:'' -shamen virtuel cp -a /etc/unicornscan /usr/local/etc/ cp /usr/local/etc/unicornscan/unicorn.conf /usr/local/etc/unicornscan/unicornscan.conf -[[User:Purehate|purehate]] === slapt-get [FIXED - muts]=== The default install of slapt-get seems to not work with most download mirrors, upgrade will solve all your problems. [http://jaos.org/source/slapt-get/slapt-get-0.9.10e.tar.gz Slapt-Get-0.9.10e] tar zxpf slapt-get-0.9.10e.tar.gz cd slapt-get-0.9.10e make && make install -pjottrr confirmed -[[User:Purehate|purehate]] === TCP suite of tools [FIXED - muts & max]=== We had this problem in the last version of BT. For some reason the newer betas of tcpreplay do not work well so with this suite of tools. You have to downgrade to the latest stable version 2.3.5. Credit for this goes to xploitz who discovered it long ago and I decided to try his idea before anything else. Cheers [http://sourceforge.net/project/downloading.php?groupname=tcpreplay&filename=tcpreplay-2.3.5.tar.gz&use_mirror=easynews download here] tar zxvf tcpreplay-2.3.5.tar.gz cd tcpreplay-2.3.5 ./configure make make install === Sipvicious (FIXED IN CVS) === The svmap.py is flawed in some way. rm it and get the newest update -fix by BadKarmaPR & posted by pureh@te cd /pentest/voip/sipvicious rm svmap.py svn update == Wireless Card Compatibility == ====Senao NL-2511CD PLUS EXT2==== * Driver : HostAP * Chipset : prism 2.5 * Firmware : 1.74 (is suggested) * Notice: will error if inserted before removing orinoco,hermes drivers and loading hostap. Error output [http://pastebin.com/f4bd93300 1] & [http://pastebin.com/f6ac312fc 2] * Note: system will lock up, fail to shutdown, lockout keyboard. SSH still allows keyboard access. * Fails Injection test, Monitor mode not effected. '''Possible reasons: [http://trac.aircrack-ng.org/ticket/288 here]'''-[[User:PrairieFire|PrairieFire]] ==== Intel IPW3945 [UPDATED - Hope it fixes the problem - muts]==== * Driver : Iwlwifi-1.0.0 * Fails to connect to WPA/2 Access Point in any variation of algorithms. '''Output: [http://pastebin.ca/835494 here]''' Starting at line 40. * ipw3945/ABG sometimes connects to WPA2 Access Point using wireless assistant after a random number of tries. Once connected disconnects at seemingly random times. ==== Intel IPW3945 airmon-ng conflict ==== * Driver: iwl3945 * PC: Lenovo Z61m * Fails to go into monitor mode with airmon-ng * Message: /usr/local/sbin/airmon-ng: line 338: /sys/class/ieee80211/phy0/add_iface: Permission denied mon0: ERROR while getting interface flags: No such device ==== ZyDAS ZD1211 [FIXED - muts]==== * 802.11b/g USB card * Sold as '''Sitecom WL-113''' in The Netherlands * Driver : zd1211rw * Error: '''usb 1-1: Coul not load firmware file zd1211/zd1211_ub. Error number -2''' However, freely available (and confirmed working) firmware is available at http://sourceforge.net/project/showfiles.php?group_id=129083 * Packet injection is not working; confirmed using Aireplay-ng and file2air. Problem is due to only partial patch applied to drivers, kernel module ieee80211_tx.c is not patched to check for monitor-mode before transmitting frame. The following patch needs to be applied to ieee80211_tx.c around line 294: + if(ieee->iw_mode == IW_MODE_MONITOR) + { + txb = ieee80211_alloc_txb(1, skb->len, + ieee->tx_headroom, GFP_ATOMIC); + if (unlikely(!txb)) { + printk(KERN_WARNING "%s: Could not allocate TXB\n", + ieee->dev->name); + goto failed; + } + + txb->encrypted = 0; + txb->payload_size = skb->len; + memcpy(skb_put(txb->fragments[0],skb->len), skb->data, skb->len); + + goto success; + } + + ether_type = ntohs(((struct ethhdr *)skb->data)->h_proto); Full patch available at http://802.11ninja.net/lorcon/browser/trunk/patch/zd1211rw_inject-2.6.20-gentoo-r4.patch. --jwright === BT3 ddrescue missing [FIXED IN CVS] === * Just removed from wishlist and added to cvs === BT3 gpsd missing [FIXED IN CVS] === * Just removed from wishlist and added to cvs === BT3 rsh stuff missing [FIXED IN CVS] === * Just added rusers and rsh stuff to cvs === BT3 nfs - showmount stuff missing [FIXED IN CVS] === * Just added to cvs === BT3 whishlist synaptic touchpad driver missing [FIXED IN CVS] === * Just added to cvs - will not configure or do anything with it but its a package in there === BT3 PXE Server / JTR MPI Bug === * BT3 USB edition booted from ISO into PXE Server mode. DHCP/Terminal Service starts up fine. * When another BT3 terminal client instance boots up thru PXE/DHCP, it crashes with the following sequence: * Copying content of rootcopy directory * creating /etc/fstab linuxrc: linuxrc: 188: cannot create union/etc/fstab: Directory nonexistent GFS2: path_lookup on /mnt/boot returned error GFS2: gfs2 mount does not exist * changing root directory... Fatal error occured - Can't find executable chroot * Something went wrong and we can't continue. This should never happen. * Please reboot your computer with Ctrl+Alt+Delete ... /union # ---- = Wishes/Requests for BT3 final = * I know it's too late but I'd love to find [http://sid.rstack.org/arp-sk/files/arp-sk-0.0.16.tgz arp-sk 0.0.16] (http://sid.rstack.org/arp-sk/) that is just a bit more flexible to me than nemesis (wonderful tool btw) for ARP cache poisoning * Update onesixtyone SNMP tool to [http://www.portcullis-security.com/tools/free/onesixtyone-0.6.tar.gz onesixtyone-0.6] * I'm making this request but I don't want anybody to get mad, because I think you are all doing a great work. Would it be possible that you could move the system of reporting bugs to a platform specifically desgined for that ? I think it would be great if you could move this whole thing to launchpad (or something similar), because there are thousands of people who could help you to find bugs, repair them, and translate BT. Or if you could just move this to another system, I think it would be great an easier to do all that stuff. Thanks anyway, and please don't get me wrong, I'm just saying this sincerely. (and I'm not an expert in this, so I could be wrong). * FreeRadius2.0.2-server with freeradius-wpe patch [http://www.willhackforsushi.com/code/freeradius-wpe/freeradius-wpe-2.0.2.patch Source patch] (Added) * The ability to read info files via info or info2man ect... * Please bring back gspdrive * partial missing: kismet - missing gpsmap and its deps * Battery monitor to display the correct amount of time/charge left on Eeepc * [http://www.wireshark.org/download/src/wireshark-1.0.0.tar.bz2 wireshark-1.0.0] (Added) * [http://www.pettingers.org/code/airraid.html] Airraid - similar to fakeap but for atheros chipsets. * Firefox-2.0.0.14 (Added) * Aircrack-ng 1 beta 2 (Added) * Firefox with add-ons such as User Agent Switcher, TamperData, ShowIP and Shazou etc. (To make Firefox a semi pen testing suite too) - Already includes enough * [http://wicd.sourceforge.net/ WICD] - An open source wired and wireless network manager for Linux which aims to provide a simple interface to connect to networks with a wide variety of settings. * Support for the new WG111v3 netgear wireless card =BackTrack 2= == Configuration file == * '''/pentest/wireless/karma-20060124/bin/monitor-mode.sh''' have an error in line 16. For fix that you need to take off this " /usr ". * '''Menu Bug''' Documents / BackTrack / wiki.remote-exploit.org should be backtrack.offensive-security.com -[[User:ziplock|ziplock]] [http://www.securitydistro.com/index.php?option=com_content&task=view&id=204&Itemid=2 Menu Fix LZM] [MAX: Wrong, its correct like this - FIXED] * '''Menu Bug''' In Fluxbox, the command associated with Kismet is "start-kismet" when it should be "start-kismet-ng". * '''Aircrack-ng 0.7''' Buffer overflow http://milw0rm.com/exploits/3724 * '''Airoscript''' DOES work, however tries save to /home/root which does NOT exist by default. Just create directory before you start airoscript. [http://forums.remote-exploit.org/showthread.php?t=5808 Link2] * '''/usr/bin/assistant symlink to ../lib/qt-3.3/bin/assistant''' is a dead link.It should be ../lib/qt-3.3.6/bin/assistant -[[User:netguy|netguy]] == Driver == * '''rtl8187 driver''' behaves weird when its used in mode managed, what happens is that when one issues a "iwconfig wlan0 essid nameofap" the last letter of the essid is cut off,thus iwconfig will say "wlan0 802.11b/g ESSID: "nameofa" and therefore not associate. Re-injection works flawless. * '''rtl8187 driver''' fails to set the WEP key, "Error for wireless request "Set Encode" (8B2A) **Speaking of weird rtl8187 behavior, did anyone bother to read the comments for the driver patch: "Driver currently does not support Wired [sic] Extensions versions greater then [sic] 20." [http://www.aircrack-ng.org/doku.php?id=compatibility_drivers#drivers aircrack-ng] According to cat /proc/net/wireless, BT2 shipped with Wireless Extensions v21. Whoops. * '''ifconfig''' command for changing mac-address doesn't work with rtl8187 and IPW2200, workaround is the included "macchanger". * '''VMWare''': Rubbish.. read the last few lines under http://wiki.remote-exploit.org/index.php/HCL:Wireless#Wireless_Cards_And_Drivers. only USB are supported, and this is not because of backtrack or any other OS. It is only VMWare. * '''PostGres''': When starting Postgres "cannot access 'var/postgres/' No such file or directory. "Cannot access the server conf. file "var/postgres/postgresql.conf. * '''Apache''': Can't connect to local MySQL server through socket '/tmp/mysql.sock' (2) in /usr/local/apache/adodb/drivers/adodb-mysql.inc.php on line 376 == Hardware == * '''LiveCD boot on MacBook''' (not Macbook Pro) Fix Bug double keystrokes, making login impossible no problem. -[[User:NIbirus|NIbirus]] **Cheat code: 'bt noacpi irqpool acpi=force' **no quotes. This will fix the double keystrokes, problem and will boot fine still testing so feel free to change boot codes some divers need fix."still working on it" * '''System locks up''' under following conditions ** Hardware: Dell Inspiron 3500 (but the pre-release beta works ok) ** Hardware: Dell Latitude C610 (but the pre-release beta works ok) ** Hardware: IBM ThinkPad T42,PROXIM ORiNOCO 802.11b/g Gold (Model: 8470-WD) **Booting Backtrack with 8470-WD Inserted **Setting up a VAP as and AP **Setting up a second for monitoring **Bridging the AP to the Wired LAN **Running Kismet **After a while the whole system locks up, although sometimes it runs for a few hours **Basic Command log [[http://www.forumite.com/BT2.txt]] *'''Lucent Orinoco Silver PCMCIA''' don't works with kismet. **kismet shows: Source 0 (HermesI): Enabling monitor mode for orinoco source interface eth1 channel 6... FATAL: Could not find 'monitor' private ioctl or use the newer style 'mode monitor' command. This typically means that the drivers have not been patched or the correct drivers are being loaded. See the troubleshooting section of the README for more information. ** This is because of the firmware issue. Only specific and older versions of the firmware supports it as far as I know. *'''Broadcom BCM4306 802.11b/g (rev 3)''' is find by the BT2-final, but dont work (ADDRCONF(NETDEV_UP): eth0: link is not ready). *'''Cardbus (32-bit pcmcia)''' use "bt irqpoll" if shows no PCI interrupts & disabling cardbus in dmesg (e.g. using ubiquiti SRC card) == Software == * '''Airoscript:''' Does not work with new madwifi drivers and ubiquiti SRC, changing MAC, setting to monitor mode, fragmentation attack freezes system. * '''Airpwn:''' Does not properly work unless reconfigured. * '''Ark:''' Always crashes. How can I open .tgz files with another tool? - $tar -zxvf filename.tgz - Ark can be fixed by upgrading it (reference?) Also, consider installing [http://forums.remote-exploit.org/showthread.php?t=6845 Xarchiver]. *'''Autopsy/Sleuthkit:''' Autopsy thinks the directory /root/for_bt/sleuthkit-2.06 should exist. Causes: file type sorting, and viewing files causes missing libmagic.so error.[http://homepages.xnet.co.nz/~zangel/sleuthfix.lzm Fix(lzm)] * '''Autoscan:''' If you want to open port 80 with firefox: Can't find the '/usr/bin/mozilla-firefox' program! should be /usr/bin/firefox (K-G) *'''bootinst.bat:''' in the "boot" dir needed the additional parameter "-f" for the command "syslinux.exe" to work for my USB harddisk (not USB stick) * '''dhcpcd:''' does not work with Atheros wireless cards when the macchanger tool has been used on either ath0 or wifi0. This seems to help some users in this exact situation: [http://madwifi.org/wiki/UserDocs/ChangeMacAddress MadWireless]. Make sure to follow changes at the bottom of the page. This page solves this problem completely [http://forums.remote-exploit.org/showthread.php?t=7117 Xploitz Solution] * '''Dns Predict:''' Dns predict missing the t at the end of predict giving incorrect syntax error. *'''Firefox:''' java plugin cannot be configured to work with Firefox 2.0.0.2. Fix [http://forums.remote-exploit.org/showpost.php?p=26694&postcount=5 here]. I dispute this being a "bug" as many people have reported the installation procedure in the referenced thread does work. -[[User:theprez98|theprez98]] *'''kismet:''' gpsmap throws segmentation fault when including legend. With ImageMagick-6.3.2 fonts are not accessed, so gpsmap complains about "courier" not found. *'''start-kismet-ng from cli or menu shortcut results in crash when initiating kbuildsycoca.:''' kdeui:warning: [virtual bool KSharedPixmap::x11event(XEvent*)] illegal selection notify event. kedui:warning: [krootpixmap.cpp:293] loading of desktop background failed. * ''''Leo''' [http://webpages.charter.net/edreamleo/front.html here] text editor has wrong file permissions and thus cannot be started by typing "leo" on the command line. Use "chmod +x /opt/leo/src/leo.py" to correct this. * '''Nikto''' Doesn't work with https webserver' Nikto, has no usage command specified. *'''Scapy:''' scapy throws segmentation fault when depressing the delete key. Scapy authors noted problem is in mixes of libraries on backtrack distribution. See Bug: [http://trac.secdev.org/scapy/ticket/34 Scapy Trak Bug Repository] * '''SmbClient''' missing usage syntax. * '''SQL Injection:''' file '/pentest/database/mysql/bsqlbf.pl': No such file or directory. * '''Transfering files via USB:''' If you do not manually umount the drive, transfered files will not store on USB flash drive after removal. * '''update-aircrack.sh:''' when run, there are errors about airoscript at the end. -I have never had any problems running the update-aircrack script. -[[user:theprez98|theprez98]] * '''wlassistant: new version needed for WPA == Feature requests == * Ability to have a "Save Changes" when using usb boot. - You already can, there are at least two methods for doing this * Add a better integration of Dual Monitors --> Accelerated-X. * Add desktop 3d support, ex.: Beryl or other. * Fix/Add installer for HardDrive Installation * Manually update modules. You already can * Need driver to detect SATA HD on MS-RS480M2 motherboard. * Option to disable USB support. * Please add a boot menu with parameters (noacpi, irqpoll,etc..) You already can, just press TAB on the selection you want to add them to and edit the command line. '''Apps''' * [http://usuarios.lycos.es/reinob/lcrack/lcrack-20040914.tar.gz 1crack] * [http://packetstorm.linuxsecurity.com/groups/teso/3wahas.tar.gz 3wahas] * [http://www.intrusense.com/software/forgate/4g8-1.0.tgz 4g8 1.0] * [http://packetstormsecurity.nl/groups/s0ftpj/aasniff.tar.gz Aasniff] * Acerhk Module * [http://packetstorm.digital-network.net/groups/ADM/ADMsnmp.0.1.tgz ADMsnmp 1.0] * [ftp://adm.freelsd.net/pub/ADM/ADMsmb-v0.2.tgz ADMsmb 0.2] * [http://aircrack-ng.org Aircrack-ng 1 beta 2] * [http://downloads.sourceforge.net/airjack/airjack-v0.6.6b-alpha.tar.bz2 AirJack-0.6.6b] * [http://www.zone-h.org/component/option,com_remository/Itemid,47/func,download/id,6962/chk,bcfaf09ebaf346b022ac993b5dd7522c/ Anger] * [http://www.signal42.com/mirrors/apache/httpd/httpd-2.2.4.tar.gz Apache 2.2.4] * [http://www.binarii.com/files/security/apsr-0.17.tar.gz Apsr 0.17] * [http://packetstormsecurity.nl/UNIX/misc/ARP0c2.c ARP0c2] * [http://www.geocities.com/rozmanov/ntlm/aps098.tar.gz Authorization Proxy Server] * [http://packetstormsecurity.nl/UNIX/penetration/rootkits/BBD-0.4.tgz BBD 0.4] * [http://bindshell.net/tools/beef beEF-v0.3.2] * [http://fgouget.free.fr/bing/bing_src-1.0.4.tar.gz Bing 1.0.4] * [http://downloads.sourceforge.net/bridge/bridge-utils-1.2.tar.gz Bridge Utils 1.2] * [http://portswigger.net/suite/burpsuite_v1.01.tar.gz BurpSuite V1.0.1] * [http://downloads.sourceforge.net/wellenreiter/cdpsniffer-v1.0.tar.gz?modtime=1031788800&big_mirror=0 CdpSniffer v1.0] * [http://downloads.sourceforge.net/cryptcat/cryptcat-unix-1.2.1.tar CryptCat-1.2.1] * [http://ftp.isc.org/isc/dhcp/dhcp-3.0.6.tar.gz Dhcp-3.0.6] * [http://nyi.linux.tucows.com/files/console/servers/dlint1.4.0.tar.gz Dlint 1.4.0] * [http://freshmeat.net/redir/dnshijacker/16515/url_tgz/download.php DnsHijack 1-.3] * [http://freshmeat.net/redir/dnstracer/21264/url_tgz/dnstracer-1.8.tar.gz Dnstracer 1.8] * [http://www.domtools.com/pub/domtools1.6.0.tar.gz Domtools 1.6.0] * Dumpsec * [ftp://ftp.gnu.org/gnu/emacs/emacs-22.1.tar.gz Emacs-22.1] * [http://www.thc.org/releases/ffp-0.0.8.tar.gz Ffp-0.0.8] * FileZilla "FTP & SFTP" [http://sourceforge.net/projects/filezilla/ Source] * Firefox-2.0.0.12 * [http://fpdownload.macromedia.com/get/flashplayer/current/install_flash_player_9_linux.tar.gz Flash Player 9] * [http://www.zone-h.org/component/option,com_remository/Itemid,47/func,startdown/id,4252/ Frag Router 1.6] * [http://freshmeat.net/redir/ftester/16419/url_tgz/ftester-1.0.tar.gz Ftester 1.0] * Gaim-encryption plugin for secure IM's * [http://gcc.gnu.org/gcc-4.2/ GCC-4.2.1] * [http://ftp.gnu.org/gnu/gdb/gdb-6.6.tar.gz GDB-6.6] * Getif * GFI LANguard Network Security Scanner 8 * [http://prdownloads.sourceforge.net/gkismet/gkismet-0.0.10.tar.gz?download gkismet 0.10] * [http://packetstormsecurity.nl/UNIX/penetration/Gobbler-2.0.1-Alpha1.tar.gz Gobbler 2.0.1] * [http://sourceforge.net/project/platformdownload.php?group_id=128740 Google Hack HoneyPot] * GPSMap v2007.01.R1 (Included in current Kismet) * [http://sourceforge.net/project/platformdownload.php?group_id=3805 GQ LDAP Client] * [http://sourceforge.net/projects/hihat/ HiHat] * [http://ujeni.murkyroc.com/hmap/code/current/hmap.tar.gz Hmap 0.1] * [http://www.citi.umich.edu/u/provos/honeyd/honeyd-1.5c.tar.gz Honeyd 1.5] * [http://www.hping.org/hping3-20051105.tar.gz Hping3] * [http://packetstormsecurity.nl/sniffers/hunt/hunt-1.5.tgz Hunt 1.5] * [http://dir.filewatcher.com/d/Debian/Other/icmpush_2.2.orig.tar.gz.41283.html icmpush 2.2] * [http://dir.filewatcher.com/d/Slackware/Other/icmpinfo-1.11.tar.gz.11873.html incmpInfo] * [http://gray-world.net/tools/icmptunnel.tar.gz IcmpTunnel] * [http://prdownloads.sourceforge.net/ipaudit/ipaudit-1.0BETA2.tar.gz?download IpAudit 1.0] * [http://prdownloads.sourceforge.net/ojnk/iplog-2.2.3.tar.gz Iplog 2.2.3] * [http://nyi.linux.tucows.com/files/gnome/network/ipsc-0.4.2-src.tar.gz ipsc 0.4.2] * [http://download.sourceforge.net/ipgrab/ipgrab-0.9.8.tar.gz ipgrab 0.9.8] * [http://fresh.t-systems-sfr.com/unix/src/privat2/gtk-iptables-0.4.21.tar.gz Iptables] * [ftp://iptraf.seul.org/pub/iptraf/iptraf-3.0.0.tar.gz Iptraf 3.0.0] * IPWRAW driver for injection with IPW3945 (or mac80211 and iwlwifi) * [http://timtux.net/files/jkain-0.8.4-proper.zip jkain 0.8.4] * [http://www.kismetwireless.net/code/kismet-2007-01-R1b.tar.gz Kismet V2007.01.R1B] * [http://packetstormsecurity.nl/UNIX/penetration/leatherman-1.0.tar.gz LeatherMan 1.0] * [http://packetstormsecurity.nl/UNIX/penetration/log-wipers/loggy-r26-0.1.4.tgz Loggy 0.1.4] * [http://downloads.sourceforge.net/lufs/lufs-0.9.7.tar.gz?modtime=1067472000&big_mirror=0 lufs 0.9.7] * [http://www.indianz.ch/tools/attack/lyceum.tar.gz Lyceum] * Macof * [http://homepages.tu-darmstadt.de/~p_larbig/wlan/mdk3-v2.tar.bz2 MDK3-v2] * [http://downloads.sourceforge.net/msnshadow/msnshadow-0.2-beta.tar.bz2 Msnshadow-0.2] * [http://download.berlios.de/nast/nast-0.2.0.tar.gz Nast 0.2.0] * [http://prdownloads.sourceforge.net/ncovert/ncovert2-1.1.1.tgz?download Ncovert2 1.1.1] * [http://prdownloads.sourceforge.net/ncrypt/ncrypt-0.6.11.tgz?download Ncrpt 0.6.11] * [http://downloads.sourceforge.net/net-snmp/net-snmp-5.4.1.tar.gz net-snmp-5.4.1] * [http://www.nessus.org/download/ Nessus] * [http://www.laurentconstantin.com/common/netw/netwib/download/v5/netwib-5.35.0-src.tgz Netwib 5.35.0] * Network Users * [http://prdownloads.sourceforge.net/nload/nload-0.6.0.tar.gz Nload 0.6.0] * [http://fresh.t-systems-sfr.com/unix/src/privat2/nsat-1.5.tgz Nsat 1.5] * [http://www.openssl.org/source/openssl-0.9.8e.tar.gz OpenSSL 0.9.8e 23 Feb 2007] * [http://openvpn.net/release/openvpn-2.0.9.tar.gz OpenVpn 2.0.9] * [http://www.cqure.net/tools/oscanner_src_1_0_6.zip Oscanner] * [http://downloads.sourceforge.net/owasp/webscarab-src-20070504-1631.zip OWASP] * [http://downloads.sourceforge.net/packit/packit-0.6.0.tgz?modtime=1054512000&big_mirror=0 Packit 0.6.0] * [http://packetstormsecurity.nl/UNIX/security/paketto-1.0.tar.gz Paratrace] * [http://downloads.sourceforge.net/paros/paros-3.2.13-unix.zip ParosProxy 3.2.13] * [http://www.kitchenlab.org/www/bmah/Software/pchar/pchar-1.5.tar.gz Pchar 1.5] * [http://sourceforge.net/projects/phpterm/ PHP Shell Terminal] * [http://gray-world.net/tools/PingTunnel-0.61.tar.gz PingTunnel 0.61] * [http://downloads.sourceforge.net/proxychains/proxychains-3.1.tar.gz?modtime=1142439733&big_mirror=0 ProxyChains 3.1] * [http://the.earth.li/~sgtatham/putty/latest/putty-0.60.tar.gz Putty-0.60] * QualysGuard * [http://www.baxware.com/download.php?f=rda-0.2.1c.tgz RDA 0.2.1c] * [http://homepages.tu-darmstadt.de/~p_larbig/wlan RT73] - update driver to support fragmentation attack * [http://gray-world.net/tools/rwwwshell-2.0.tar.gz rwwwshell 2.0] * [http://asturio.gmxhome.de/sambascan2-0.4.0.tar.gz SambaScan2 0.4.0] * [http://www-arc.com/sara/downloads/sara-7.4.1b.tgz Sara 7.4.1] * Sebek * [http://www.monkey.org/~provos/scanssh-2.1.tar.gz ScanSSH-2.1] * [http://freshmeat.net/redir/sendip/9402/url_tgz/sendip-2.5.tar.gz SendIp 2.5] * [http://software.jaos.org/source/slapt-get/slapt-get-0.9.12.tar.gz Slapt-Get-0.9.12] * [http://securitydot.net/exploits/index.php?dir=tools/brute-forcing/smbbf/&file=smbbf-0.9.1.tar.gz smmbf 0.9.1] * [http://www.cqure.net/tools/smbproxy-src-1.0.0.tgz SmbProxy 1.0.0] * [http://www.greyhats.org/outils/smtpscan/smtpscan-0.5.tar.gz SmtpScan 0.5] * [ftp://ftp.surfnet.nl/vol/5/netbsd/packages/distfiles/sniffit.0.3.5.tar.gz SniffIt 0.3.5] * [http://www.cqure.net/tools/sqlat-src-1.1.0.tar.gz SQLAT] * [http://www.sqlite.org/sqlite-3.4.1.tar.gz Sqlite-3.4.1] for future use with Aircrack-ng 1.0 * [http://cedri.cc/tools/SQLiX_v1.0.tar.gz SQLiX] * [http://www.bastard.net/~kos/wifi/ssidsniff-0.53.tar.gz SsiDsniff 0.53] * [http://fresh.t-systems-sfr.com/unix/src/privat2/ssldump-0.9b3.tar.gz SSLDump 0.9b3] * sslMitim * [http://www.obdev.at/ftp/pub/Products/sslproxy/sslproxy.2000_Jan_29.tar.gz SSLProxy] * [http://www.synacklabs.net/projects/stegtunnel/stegtunnel-0.4.tar.gz StegTunnel 0.4] * Sunbelt Network Security Inspector * [http://www.balabit.com/downloads/files/syslog-ng/sources/2.0/src-snapshot/syslog-ng-2.0.5+20070810.tar.gz syslog-ng 2.0.5] * [http://fresh.t-systems-sfr.com/unix/src/privat2/tcpflow-0.21.tar.gz TcpFlow 0.21] * [http://www.cisco.com/public/support/tcphijack-1.1.tar.gz TcpHijack 1.1] * [http://prdownloads.sourceforge.net/tcpreplay/tcpreplay-3.1.1.tar.gz?download TcpReplay 3.1.1] * [http://www.mirrors.wiretapped.net/security/network-monitoring/tcpspy/tcpspy-1.7.tar.gz TcpSpy 1.7] * [http://www.cgsecurity.org/testdisk-6.7.linuxstatic.tar.bz2 TestDisk - PhotoRec 6.7] * [http://packetstorm.linuxsecurity.com/groups/thc/thcrut-1.2.5.tar.gz Thcrut 1.2.5] * [http://www.thc.org/download.php?t=r&f=THC-Scan-2.01.zip THC-Scan 2.01] * [http://www.mirrorservice.org/sites/ftp.wiretapped.net/pub/security/packet-capture/ttt/ttt-1.5.tar.gz ttt 1.5] * [http://gray-world.net/tools/tunnelshell_2.3.tgz TunnelShell 2.3] * Vision [Mapping Application to TCP/IPports] * [http://www.bindview.com/Resources/RAZOR/Files/vlad-0.9.2.tar.gz VLAD-0.9.2] * [http://www.vmware.com/download/ws/ VMware Station 6] * Void11 & Void11 Hopper * [http://www.enderunix.org/voipong/voipong-2.0.tar.gz Voipong 2.0] * [http://prdownloads.sourceforge.net/vtun/vtun-3.0.0.tar.gz Vtun 3.0.0] * [http://www.ussrback.com/UNIX/scanners/warscan-0.7.2.tar.gz Warscan 0.7.2] * [http://downloads.sourceforge.net/wepwedgie/wepwedgie-alpha-0.1.0.tar.gz?modtime=1060128000&big_mirror=0 WepWedgie 0.1.0] * [http://midnightresearch.com/local/packages/wicrawl/wicrawl-0.4a.tgz Wicrawl-0.4a] * [http://www.wireshark.org/download/src/wireshark-0.99.6.tar.gz Wireshark-0.99.6] * [http://downloads.sourceforge.net/xss-proxy/XSS-Proxy-shmoo_0_0_11.tar.gz?modtime=1107792701&big_mirror=0 XSS-Proxy] * [http://www.kde-apps.org/content/download.php?content=29153&id=1&tan=70006289 Yakuake-2.8] * [http://www.yersinia.net/download/yersinia-0.7.tar.gz Yersinia 0.7]

Return to Main Page.