Linux Hacking Tools

Arch · Post by **Arch** » Tue Mar 23, 2004 8:37 pm

I need the help of all you hacking types. I have a class wherein I'm going to need to do some "recon" on the System Security class' computers. Unfortunately I know nothing of Linux and the assorted hacking tools. What I need are some suggestions from you fellas that will help me figure out such things as OS version, open ports, running services, etc...etc.

DCrazy · Post by **DCrazy** » Tue Mar 23, 2004 9:41 pm

Well you're gonna need a port scanner for one. If the computer's running a web server, that opens up a whole list of possibilities, from SQL Injections to Buffer Overflows.

Check here: http://www.astalavista.net

Jeff250 · Post by **Jeff250** » Tue Mar 23, 2004 11:41 pm

http://packetstormsecurity.org/

Arch · Post by **Arch** » Thu Mar 25, 2004 9:20 am

Thanks for the suggestions, I'll check out the sites in a little more detail when I get a chance. Does anyone else have any suggestions?

MD-2389 · Post by **MD-2389** » Thu Mar 25, 2004 3:08 pm

Yeah, download Phlack.

Tricord · Post by **Tricord** » Fri Mar 26, 2004 4:11 pm

Ethereal for packet sniffing.
Definitely must-have.

If someone else is using the server you just might sniff their password.

Arch · Post by **Arch** » Fri Apr 02, 2004 12:54 pm

Well, the games have begun and people have started poking and proding the machines since monday. Unfortunately the machines are on a different subnet so I can't do any kinda of packet capturing.

Several of the machines have already been completely owned. All of them were Windows machines too, shocking isn't it. So far the Linux machines seem relatively untouched. All I've done thus far is poke at them with nmap to see whats running.

Cuda68-2 · Post by **Cuda68-2** » Sat Apr 03, 2004 10:28 am

http://www.winhackingexposed.com/

Tricord · Post by **Tricord** » Sat Apr 03, 2004 11:27 am

Arch, maybe you can get another machine in that subnet to sniff traffic for you.

That's what we did at univ... Installed a sniffer on one of the computers in the PC room and then ARP-spoof the target machine (they were using switches) to sniff whatever traffic to it.

I also sniff my brothers MSN conversations, but that's another matter

R e v · Post by **R e v** » Sat Apr 03, 2004 11:28 pm

Tricord wrote:I also sniff my brothers MSN conversations, but that's another matter

www.vericept.com

Fun stuff...