Maltego 2 tutorial

Dobar tutorial za Maltego v2

http://www.ethicalhacker.net/content/view/202/24/

Backtrack 3 irc release

Backtrack 3 je u svojoj završnoj fazi, irc release je izdat za testiranje korisnicima koji posećuju #remote-exploit irc kanal. Kako sam i ja jedan od ovih ljudi uradio sam mali review za sve one koji nisu skinuli ovaj irc release.

Lilo bootloader daje nekoliko novih opcija, posebno mi je bila zanimljiva opcija ,,BT3 Graphic Mode with Persistent Changes,, ona sepojavljuje i u BT3 beta verziji a korisna je ako backtrack podižete sa USB flash drajva. Dakle podignete sistem sa flash drajva, uradite update alata i imate up-to-date live hakersku distribuciju :)

Učitavanje backtack-a izgleda sexy

Backtrack početna strana, tu je i novi wallpaper ali ono što više zanima korisnike ove distribucije sledi u nastavku.

Kernel je 2.6.21.5 kako objašnjava muts na svom blogu ovaj kernel je zadržan zato što sva podešavanja za wireless nisu testirana na novim kernelima tako da noviji kernel možemo da očekujemo tek u narednoj veryiji backtrack-a.

Nessus nije želeo da distribuira svoj alat sa backtack-om tako da ovaj alat morate instalirati sami. 

Ali ima i dobrih vesti, a dobra vest je da će SAINT biti u finalnoj verziji.

Tu je fasttrack alat koji olaksava upotrebu hakerskih alata, program je razvijen zahvaljujući korisnicima remote-exploit foruma.

Maltego je isto izašao u susret korisnicima backtracka tako što je njegov razvojni tim napravio posebnu verziju svog programa samo za backtrack.

A tu je i nezaobilazni metasploit framework, ovoga puta GUI verzija radi out of box, što će početnicima olakšati korišćenje.

Ovo je bilo sve za sad čekamo finalnu verziju u nadi da će izaći uskoro.

Stigao je Maltego 2

Version 2 of Maltego has been completely rewritten - it’s a complete new code base.
The following has been added from the KZ3 release:

* Load/Save of entire graphs means you can always go back to your investigation.
* Printing of graphs (over multiple pages) for discussions.
* Export of entities (CSV format) makes it easy to import Maltego data into other databases.
* Commercial grade layout library:
o The layout and navigation have been optimized for speed and usability.
o Four layout types to rearrange data the way YOU want it.
o Two view types for finding relevant info on large graphs.
* More entities and 20 brand new transforms for even deeper searches and more information.
* Search/Find (on entity value, detailed info and additional fields) helps you to get to key nodes quicker.
* Multiple open graphs on different tabs for easy switching between graphs.
* Dedicated clear-all, zoom buttons for notebook users.
* Hollywood quality look & feel will impress your friends and your boss.
* Integrated help on transforms and entities to increase your learning curve.
* Complete user guide ensures you are never lost.
* Prepopulated and preconfigured transforms and transform sets saves you time.
* Population of API key integrated with license key so it’s never lost.
* Platform independent installer means you can install it anywhere.

ASUS Eee PC hacked out of the box

Ovaj jeftin laptop je pogodan za naše tržište ali ima jednu veliku manu ranjljiv je po default-u. Naime verzija sambe koju koristi ovaj laptop ima rupu ali ona je poznata od ranije pa je čudno što to nije ispravljeno. Detaljnije možete videti na:
http://www.risesecurity.org/blog/entry/6/

METASPLOIT UNLEASHES VERSION 3.1

Najveći pomak ove verzije je GUI za windows, kao što je kaže HD Moore ono što je konzloa za unix-ovce to je GUI za windows-ovce.

One feature that metasploit should have

I'm fun of metasploit and I use it very often, metasploit is great. I prefer to use metasploit console interface I think that is more powerful then other interfaces such as web or gui, but there is one thing that missing in console, a “exploit search“. Let me be more specific, in other interfaces such is web you can search exploit by name, class, application, os and architecture but in console all you can do is to type “show exploits” and get full list of exploits then you must scroll to find exploit you want to use, this was ok when metasploit have a smaller number of exploits but now it becoming more difficult to find an exploit. I think that would be great to have command like grep to find your exploit by name. In my vision it should look something like this:

msf > show exploits |grep -i iphone

osx/armle/safari_libtiff iPhone MobileSafari LibTIFF Buffer Overflow
osx/browser/safari_libtiff iPhone MobileSafari LibTIFF Buffer Overflow
osx/email/mobilemail_libtiff iPhone MobileMail LibTIFF Buffer Overflow

msf >

Moj prvi susret sa iPhone

Danas sam uživao igrajući se sa iPhone, imao sam ga kod sebe tek toliko da malo surfujem internetom preko wifi-a, slušam muziku i da pogledam koji video clip ali i to je bilo dovoljno da me očara. iphone poseduje odličan displej a za extra doživljaj pobrinuo se touch screen. Šteta što nisam imao dovoljno vremena da isprobam koji exploit za njega i da testiram sigurnost iphone-a. Evo nekoliko slika iz prve ruke.