Debian – ÈÐ Wïgê† Ðð† ñåmê

Simple rsnapshot incremental backups to removable disks

§¢rïþ†§, §¥§†êm ÄÐmïñï§†rå†ïðñ, †êå¢hïñg, †µ†ðrïål§, Debian, Diagnostics, Kali, Lïñµx, Monitoring, Rê§êår¢h, ßå¢k†rå¢k No Responses »

May 052018

We have all lost a hard drive at one time or another on a laptop or desktop computer and it always seems like it happens right after several weeks of not performing backups. Last year, I lost about 15 years of research on an external drive that failed. I had this system that has worked as long as I can remember where I simply swapped an external drive every two years with a new one after copying the data. What failed on me though was I became over-confident in this system and wiped out the older drives in order to make room for something else, meanwhile the current drive decided to barf after only about 6 months of usage … literally within a couple weeks of me wiping the previous drives clean. I was pretty pissed to say the least. So, lesson learned, I decided to implement a better backup plan. I wanted a way that would work and be simple. Instead of a file server and transferring data over a wire, I wanted an external drive I could plug-in and leave plugged in while working or at home or in some motel. I wanted full backups and I wanted it to be incremental to save space. This was how I accomplished these tasks …

Adding Java JDK to Kali/Wheezy

§¥§†êm ÄÐmïñï§†rå†ïðñ, Debian, Kali, Lïñµx No Responses »

May 312013

Mostly doing this article as a note for the correct way to install java jdk or runtime for kali or debian wheezy.

Download either the jdk or jre tar.gz package from oracle

Install the java-package from debian

Source code

apt-get install java-package

Creating Password Hashes From Wordlists And Storing Them In a Database

§¢rïþ†§, §¥§†êm ÄÐmïñï§†rå†ïðñ, †êå¢hïñg, †µ†ðrïål§, Debian, Hå¢kïñg, Kali, Lïñµx, Rê§êår¢h, Uncategorized No Responses »

May 182013

A long time ago, I created a database to hold passwords and their respective hashes for some 16 various hash types. It has approximately 310,261,848 passwords for each type and is growing nearly every day as more password lists become available. I found a pretty quick way to generate the hashes for these wordlists and wanted to share how it is done. These hashes only work with unsalted/unpeppered passwords.

First, lets look at my table schema, which is very simple and very effective. It uses an index on the hash + password column so there can not be any two hashes+passwords that are the same. The types table is a simple lookup table that references data.type 1 to a name like DES. The primary key is on the name column. I don’t claim to be a db administrator so if you spot any errors, let me know.

Bash: script to run tcpdump on remote host and pipe it back to local wireshark

§¢rïþ†§, §¥§†êm ÄÐmïñï§†rå†ïðñ, Arch, Backbox, Debian, Diagnostics, Gêñ†ðð, Hå¢kïñg, Lïñµx, Monitoring, Netbook, Rê§êår¢h, Redhat, ßå¢k†rå¢k, Ubuntu No Responses »

Feb 052013

So I wrote this script because I often need to run tcpdump on a remote host and then view it in wireshark. The old method was to run tcpdump on remote host, scp/rsync the file back to my local machine, open it in wireshark, view it. This script saves a lot of time. It assumes you are logging in as root and will need modified if you are running as a normal user (change root to your username and make sure you have sudo privileges for tcpdump)

Source code

#!/bin/bash
 
# By Ed Wiget
# This runs tcpdump on a remote hosts and pipes it back locally to wireshark to view in realtime
 
# 20130205 - original script
 
if [ $1 == "" ]; then
	echo "What is the remote host by fqdn, i.e. server1.domain.com"
	read RHOST
else
	RHOST=$1
fi
 
wireshark -k -i <( ssh -l root ${RHOST} /usr/sbin/tcpdump -i eth0 -w - )
 
# after you kill wireshark, the tcpdump still runs on remove host...we need to kill it
PIDOF=`ssh root@${RHOST} "ps aux | grep [t]cpdump" | awk -F" " '{print$2}'`
 
echo "killing pid ${PIDOF} on ${RHOST}...please wait...."
ssh root@${RHOST} "pkill tcpdump"
 
# now we make sure it is killed
PIDOF2=`ssh root@${RHOST} "ps aux | grep [t]cpdump" | awk -F" " '{print$2}'`
if [ ${PIDOF2} == "" ]; then
	echo "pid check returns ${PIDOF2}"
else
	echo "pid check returns ${PIDOF2}"
fi

A Quick Script to Update NMAP on Debian’like Systems

§¢rïþ†§, §¥§†êm ÄÐmïñï§†rå†ïðñ, Debian, Lïñµx, ßå¢k†rå¢k, Ubuntu No Responses »

Oct 312012

Source code

#!/bin/bash
 
# By Ed Wiget
# This script grabs the latest nmap, zenmap, ncat, nping in rpm format and converts them to deb
 
# 20121031 - original script
 
# the version we are grabbing
VER=6.01-1
 
# the architecture we are using
ARCH=x86_64
 
# our working dir
TEMP_DIR=~/nmap-files
 
# check if it exists and if not, create it
if [ ! -d ${TEMP_DIR} ]; then
	mkdir -p ${TEMP_DIR}
fi
 
# check to make sure alien is installed and if not, install it
if [ ! -f /usr/bin/alien ]; then
	sudo apt-get install alien
fi
 
# cd to the working dir
cd ${TEMP_DIR}
 
# 386 files
# http://nmap.org/dist/nmap-6.01-1.i386.rpm
# http://nmap.org/dist/zenmap-6.01-1.noarch.rpm
# http://nmap.org/dist/ncat-6.01-1.i386.rpm
# http://nmap.org/dist/nping-0.6.01-1.i386.rpm
 
# x86_64 files
# http://nmap.org/dist/nmap-6.01-1.x86_64.rpm
# http://nmap.org/dist/ncat-6.01-1.x86_64.rpm
# http://nmap.org/dist/nping-0.6.01-1.x86_64.rpm
 
# no arch
# http://nmap.org/dist/zenmap-6.01-1.noarch.rpm
 
# grab the files
wget -O ${TEMP_DIR}/nmap-${VER}.${ARCH}.rpm http://nmap.org/dist/nmap-${VER}.${ARCH}.rpm
wget -O ${TEMP_DIR}/ncat-${VER}.${ARCH}.rpm http://nmap.org/dist/ncat-${VER}.${ARCH}.rpm
wget -O ${TEMP_DIR}/nping-0.${VER}.${ARCH}.rpm http://nmap.org/dist/nping-0.${VER}.${ARCH}.rpm
wget -O ${TEMP_DIR}/zenmap-${VER}.noarch.rpm http://nmap.org/dist/zenmap-${VER}.noarch.rpm
 
# remove any deb files currently in this dir
rm -f *.deb
 
# convert the downloaded files to deb
sudo alien nmap-${VER}.${ARCH}.rpm
sudo alien ncat-${VER}.${ARCH}.rpm
sudo alien nping-0.${VER}.${ARCH}.rpm
sudo alien zenmap-${VER}.noarch.rpm
 
# install the packages
sudo dpkg --install *.deb

Glastopf Web Application Honeypot

§¢rïþ†§, §¥§†êm ÄÐmïñï§†rå†ïðñ, †êå¢hïñg, †µ†ðrïål§, Debian, Ðïgï†ål £ðrêñ§ï¢§, Hå¢kïñg, Lïñµx, Rê§êår¢h, Web Application Honeypot No Responses »

Jul 272012

Glastopf is a web application honeypot which emulates thousands of vulnerabilities to gather data from attacks targeting web applications. The principle behind it is very simple: Reply the correct response to the attacker exploiting the web application.

This article is mostly to cover the installation, setup, usage, etc

Installation