Kali Linux Summer Update Release (v1.0.4)

Uber lee7s at offensive Security have released an update Of kali linux just before the Famous Defcon and Black Hat.

You do not need to re-download Kali Linux 1.0.4 if you already have it installed. A regular “apt-get update && apt-get dist-upgrade” will do the job of getting you to the latest and greatest!

A great news is that Armitage is back in Kali Linux. woo7s !!!!

According to them,

“ we are pleased to announce the availability of Kali Linux 1.0.4. The last few months since the initial release of Kali have seen a large number of changes, upgrades, and improvements in the distribution, all of which are included in version 1.0.4.”

On remote webservers Tunna Framework Tool designed to bypass firewall restrictions

Tunna is a tool designed to bypass firewall restrictions on remote webservers. It consists of a local application and a web application.

Open Source Backdoor – Copyrighted Under GNU GPL

Malware code can be very small, and the impact can be very severe! In our daily tasks we find a lot of web-based malware that varies in size and impact. Some of the malware is well known and very easy to detect, others not so much, but this one is very interesting.

Here’s the backdoor, can you see what it’s doing?

MSSQL Injection Cheat Sheet

Some of the queries in the table below can only be run by an admin. These are marked with “– priv” at the end of the query.

Misc Tips

In no particular order, here are some suggestions from pentestmonkey readers.

From Dan Crowley:

A way to extract data via SQLi with a MySQL backend

From Jeremy Bae:

Tip about sp_helpdb – included in table above.

From Trip:

List DBAs (included in table above now):

select name from master..syslogins where sysadmin = ’1′

From Daniele Costa:

Tips on using fn_my_permissions in 2005, 2008 – included in table above.

Also:

To check permissions on multiple database you will have to use the following pattern.

USE [DBNAME]; select permission_name FROM fn_my_permissions (NULL, ‘DATABASE’)

Note also that in case of using this data with a UNION query a collation error could occur.

In this case a simple trick is to use the following syntax:

select permission_name collate database_default FROM fn_my_permissions (NULL, ‘DATABASE’)

HOWTO : WPScan on Ubuntu Desktop 12.04 LTS

WPScan is a black box WordPress vulnerability scanner.



Step 1 :

To install wpscan and her related packages.

sudo apt-get install git libcurl4-gnutls-dev libruby libxml2 libxml2-dev libxslt1-dev ruby1.9.1-dev

sudo -sH
cd /opt
git clone https://github.com/wpscanteam/wpscan.git

HOWTO : Wireshark on Ubuntu Desktop 12.04 LTS

Wireshark is the world's foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto (and often de jure) standard across many industries and educational institutions.



Step 1 :

sudo apt-get update
sudo apt-get install wireshark

sudo dpkg-reconfigure wireshark-common

Answer "Yes" to the pop-up which allow non-root users to capture the packets. You can consider to enable it but it is danger.

HOWTO : Weevely on Ubuntu Desktop 12.04 LTS

Weevely is a stealth PHP web shell that simulate an SSH-like connection. It is an essential tool for web application post exploitation, and can be used as stealth backdoor or as a web shell to manage legit web accounts, even free hosted ones.