Showing posts with label Ubuntu. Show all posts
Showing posts with label Ubuntu. Show all posts
on Friday, 18 October 2013
Working remotely is not a new thing for Linux Administrators. Especially when he/she is not in front of the server. Generally, the GUI is not installed by default on Linux servers. But there may some Linux Administrators who choose to install GUI on Linux servers.
Install NoMachine In Linux
When your server has a GUI, you may want to remote the server with full desktop experience. To do that you may install VNC Server on that server. In this article, we will cover aboutNoMachine as an alternate Remote Desktop Tool.
Problem
Just finished upgrading from Ubuntu 13.04 to 13.10. Everything works fine. After the installations, I restart to finish the installations. In the log in screen, I put my password and then it goes back to the log in screen.
Solution
This issue occurs if you have installed cinnamon desktop environment and related to this bug .You have to uninstall all cinnamon desktop related packages.If you have SSH installed you can do this easily using the following commands
sudo apt-get purge cinnamon*
sudo apt-get autoremove
After running above commands i have to reboot my PC to work as normal.
Now stable for developers and industry, Ubuntu Touch can be installed on the Nexus line of Android devices by anyone with an Ubuntu PC, a USB cable and some CLI skills.IMG_2566
But where the end userTM  – possibly including you reading this – are concerned, the term “stable” should not translate as “Ding! Ready to use on my main phone.”
Pinguy OS 13.10 alpha, an Ubuntu remaster that ships with many popular applications and tweaks, is available for testing.

Pinguy OS 13.10 screenshots


Pinguy OS 13.10 alpha ships with GNOME 3.10

tim-display
Ever wonder who is forking your code? [Jack] did, so he built a real time GitHub activity display for his company’s repositories. The display is based a Wyolum The Intelligent Matrix (TiM) board.
on Thursday, 17 October 2013
The long wait for the latest stable version of Ubuntu is finally over. Now you can download your favorite UI version of Ubuntu 13.10, try out the Phone Edition, and grab a copy of the official manual using the compiled set of download links we have put together for your convenience.
Ubuntu 13.10 was released today and for those of you who plan on doing a clean install, here are 8 useful things to do after the installation.

Ubuntu 13.10 Saucy Salamander


1. Install some extra AppIndicators (applets)


Ubuntu 13.10 Apps
It’s release day for Ubuntu 13.10. After 6 long months in development the ‘Saucy Salamander’ is finally available to download.
on Wednesday, 17 July 2013
WPScan is a black box WordPress vulnerability scanner.

alt text

Step 1 :

To install wpscan and her related packages.

sudo apt-get install git libcurl4-gnutls-dev libruby libxml2 libxml2-dev libxslt1-dev ruby1.9.1-dev

sudo -sH
cd /opt
git clone https://github.com/wpscanteam/wpscan.git

Wireshark is the world's foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto (and often de jure) standard across many industries and educational institutions.



Step 1 :

sudo apt-get update
sudo apt-get install wireshark

sudo dpkg-reconfigure wireshark-common


Answer "Yes" to the pop-up which allow non-root users to capture the packets. You can consider to enable it but it is danger.


Weevely is a stealth PHP web shell that simulate an SSH-like connection. It is an essential tool for web application post exploitation, and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones.

W3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web application vulnerabilities.



Step 1 :

Make sure you follow the steps below one by one.

sudo -sH
cd /opt

apt-get update
apt-get install git build-essential



(A) Tor

Step 1 :

sudo nano /etc/apt/sources.list.d/tor.list

Append the following :

deb http://deb.torproject.org/torproject.org precise main

Save and exit.

sudo -sH
The objective of theharvester is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.



This tool is intended to help Penetration testers in the early stages of the penetration test in order to understand the customer footprint on the Internet. It is also useful for anyone that wants to know what an attacker can see about their organization.

Sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.



Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB database management systems.

SlowHTTPTest is a highly configurable tool that simulates some Application Layer Denial of Service attacks. It works on majority of Linux platforms, OSX and Cygwin - a Unix-like environment and command-line interface for Microsoft Windows.



It implements most common low-bandwidth Application Layer DoS attacks, such as slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer exploit) by draining concurrent connections pool, as well as Apache Range Header attack by causing very significant memory and CPU usage on the server.

The Social-Engineer Toolkit (SET) was created and written by the founder of TrustedSec. It is an open-source Python-driven tool aimed at penetration testing around Social-Engineering.




Step 1 :

sudo apt-get install git
Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases.



Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations.

On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.

The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.



It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.

ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.

OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.



Step 1 :

At the time of this writing, the "stable" is version 5 while the "nightly builds" is version 6.

sudo add-apt-repository ppa:openvas/stable

Hey Guys I am making a Penetration Testing Linux Distro & I need a name for it could u plzz suggest me one ... so far following are the suggestions I got