Syllabus: See here.
Experiments
1. Network Commands
ReferenceSee a good video tutorial from Youtube here.
2. Study of packet sniffer tools like wireshark, ethereal, tcpdump etc.
References:
3. NMAP
4. ARPWATCH
Introduction to ARP, RARP, ARP attacks and arpwatch
ARPWATCH requires email functionality which can be installed as follows:
ARPWATCH requires email functionality which can be installed as follows:
Install apache2 using synaptic package manager (for package dependancy resolution.) You may need to install synaptic package manager first if it is not present.
- If sendmail isn't installed, install it: sudo apt-get install sendmail
- Configure /etc/hosts file: nano /etc/hosts
- Make sure the line looks like this: 127.0.0.1 localhost yourhostname
- Run Sendmail's config and answer 'Y' to everything: sudo sendmailconfig
- Restart apache sudo service apache2 restart
Now, Install arpwatch-
sudo apt-get install arpwatch
Execute ARPWATCH to send email to youraddress@mail.com
sudo apt-get install arpwatch
Execute ARPWATCH to send email to youraddress@mail.com
sudo arpwatch -N -s /usr/sbin/sendmail -m youraddress@mail.com
Check the emails in SPAM!
5. Buffer Overflow Attack
See the code here.Explaination is here.
Detailed resourses: BUFFER OVERFLOW: An Introduction
6. Nessus
- Intro
- How to install and configure Nessus (Windows)
- How to run a system scan
- Using Nessus Attack Scripting Language (NASL)
- Vulnerability scanning in the enterprise
- How to simplify security scans
- How to use Nessus with the SANS Top 20
No comments:
Post a Comment