Test Blog: Tutorial

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"></span><br />
<div class="separator" style="clear: both; text-align: center;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqtmcr28fgvdyz3o20it0TnXKToAXbG3FlMesPZmGhSrBsXF0NJZbU9uVAHra7Dbaa71-3Rtjl-LqxGLNhb2HscetdVdRbpQJLZGWBQnJpvqv-xRYsUQBx88Tq4vCJgVOjXeq993d2xgSw/s1600/Server-Hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqtmcr28fgvdyz3o20it0TnXKToAXbG3FlMesPZmGhSrBsXF0NJZbU9uVAHra7Dbaa71-3Rtjl-LqxGLNhb2HscetdVdRbpQJLZGWBQnJpvqv-xRYsUQBx88Tq4vCJgVOjXeq993d2xgSw/s640/Server-Hacking.jpg" width="640" /></a></span></div>
<h3 class="post-title entry-title" style="color: #444444; font: bold 22px Arial,Tahoma,Helvetica,FreeSans,sans-serif; margin: 0px; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"> </span></h3>
<h3 class="post-title entry-title" style="color: #444444; font: bold 22px Arial,Tahoma,Helvetica,FreeSans,sans-serif; margin: 0px; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"> </span></h3>
<h3 class="post-title entry-title" style="color: #444444; font: bold 22px Arial,Tahoma,Helvetica,FreeSans,sans-serif; margin: 0px; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;">Popular Web Servers : Hacking Web Servers</span></h3>
<div class="post-header" style="line-height: 1.6; margin: 0px 0px 1em;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" style="line-height: 1.4; position: relative; width: 506px;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880"></span></span><br />
<div>
<div class="first-para">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">The popular web servers are Apache Web Server, Internet Information Server and Sun ONE Web Server.</span></span></div>
<div class="para">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">The Apache Web Server is an open-source web server for modern operating systems including UNIX and Windows NT. The server provides HTTP services in sync with the current HTTP standards in an efficient and extensible environment.</span></span></div>
<div class="para">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">The Java Web Server / Sun ONE Web Server is one of the other highly available Web servers on the market. Microsoft's Internet Information Server is another popular server used by a sizable percentage of websites.</span></span></div>
<table border="0" cellpadding="0" cellspacing="0" class="note"><tbody>
<tr><td class="admon-check" valign="top"></td><td class="admon-title" valign="top" width="56"><br />
Threat</td><td class="admon-body" valign="top"><div class="first-para">
<b class="bold">Common Security Risks</b></div>
<div class="last-para">
Let us take a look at some of the security concerns that arise in the context of web servers. There are inherent security risks that affect web servers, the local area networks that host these web sites, and perhaps even the normal users of web browsers.</div>
</td></tr>
</tbody></table>
</div>
<div>
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880"><br /></span></span></div>
<div>
<div class="section" style="margin: 0px 27px; padding: 0px;">
<h4 class="sect4-title" style="color: #444444; font: bold 22px Arial,Tahoma,Helvetica,FreeSans,sans-serif; margin: 0px; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880"><a href="http://www.blogger.com/post-edit.g?blogID=3385998300716176663&postID=2772518924747621318" name="340"></a><a href="http://www.blogger.com/post-edit.g?blogID=3385998300716176663&postID=2772518924747621318" name="ch11lev3sec1"></a>Webmaster's Concern</span></span></h4>
<div class="first-para">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">From a webmaster's perspective, the biggest security concern is that the web server can expose the local are network or the corporate intranet to the threats posed by the Internet. This may be in the form of virus, Trojans, hackers or compromise of information itself. It is often considered that software bugs present in large complex programs are the source of imminent security lapses. Web servers, being large complex devices do come with these inherent risks. Apart from this, the open architecture of some Web servers allows arbitrary scripts to be executed on the server's side of the connection in response to remote requests. Any CGI script installed at the site may contain bugs that are potential security holes.</span></span></div>
</div>
<div class="section" style="margin: 0px 27px; padding: 0px;">
<h4 class="sect4-title" style="color: #444444; font: bold 22px Arial,Tahoma,Helvetica,FreeSans,sans-serif; margin: 0px; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880"><a href="http://www.blogger.com/post-edit.g?blogID=3385998300716176663&postID=2772518924747621318" name="341"></a><a href="http://www.blogger.com/post-edit.g?blogID=3385998300716176663&postID=2772518924747621318" name="ch11lev3sec2"></a>Network Administrator's Concern</span></span></h4>
<div class="first-para">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">From a network administrator's perspective, a poorly configured web server poses another potential hole in the local network's security. While the objective of a web site is to provide controlled access to the network, too much of control can make a Web site impossible to use. In an intranet environment, the network administrator has to careful about configuring the web server such that legitimate users are recognized and authenticated and various groups of users assigned distinct access privileges.</span></span></div>
</div>
<div class="section" style="margin: 0px 27px; padding: 0px;">
<h4 class="sect4-title" style="color: #444444; font: bold 22px Arial,Tahoma,Helvetica,FreeSans,sans-serif; margin: 0px; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880"><a href="http://www.blogger.com/post-edit.g?blogID=3385998300716176663&postID=2772518924747621318" name="342"></a><a href="http://www.blogger.com/post-edit.g?blogID=3385998300716176663&postID=2772518924747621318" name="ch11lev3sec3"></a>End User's Concern</span></span></h4>
<div class="first-para">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">Usually the end user does not perceive any immediate threat, as surfing the web appears both safe and anonymous. However, active content, such as ActiveX controls and Java applets, makes it possible for harmful applications such as viruses to invade the user's system. Besides, active content from a web browser can be a conduit for malicious software to bypass the firewall system and permeate the local area network.</span></span></div>
<div class="last-para">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">The threat for the end user stems from the fact that the TCP/IP protocol was not designed with security as its foremost priority. Therefore, data can be compromised in terms of confidentiality, authentication, and integrity as it is transmitted across the Web. In essence the aspects of confidentiality, authentication, and integrity need to be guarded both on the client side and server side to the extent possible.</span></span></div>
</div>
<div class="section" style="margin: 0px 27px; padding: 0px;">
<h4 class="sect4-title" style="color: #444444; font: bold 22px Arial,Tahoma,Helvetica,FreeSans,sans-serif; margin: 0px; position: relative;">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880"><a href="http://www.blogger.com/post-edit.g?blogID=3385998300716176663&postID=2772518924747621318" name="343"></a><a href="http://www.blogger.com/post-edit.g?blogID=3385998300716176663&postID=2772518924747621318" name="ch11lev3sec4"></a>Risks</span></span></h4>
<div class="first-para">
<span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">There are basically three overlapping types of risk:</span></span></div>
<ol class="orderedlist">
<li class="first-listitem" style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">  <div class="first-para">
Bugs /misconfiguration problems in the Web server that allow unauthorized remote users to:</div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Steal classified information.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Execute commands on the server host machine and modifying the system.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Retrieve host based information to assist them in compromising the system.</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Launch denial-of-service attacks, rendering the machine temporarily unusable.</div>
</li>
</ul>
</span></span></li>
<li class="listitem" style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">  <div class="first-para">
Browser-side risks</div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
Active content that crashes the browser, damages the user's system, breaches the user's privacy, or merely creates a disturbance.</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
The misuse of personal information provided by the end-user.</div>
</li>
</ul>
</span></span></li>
<li class="listitem" style="margin: 0px 0px 0.25em; padding: 0px; text-indent: 0px;"><span class="Apple-style-span" style="background-color: white; color: #444444; font-family: "arial" , "tahoma" , "helvetica" , "freesans" , sans-serif; font-size: 13px; line-height: 18px;"><span id="8872831903640422880">  <div class="first-para">
Interception of network data sent from browser to server or vice versa via network eavesdropping. Eavesdroppers can operate from any point on the pathway between browser and server including:</div>
<ul class="itemizedlist" style="line-height: 1.4; list-style-type: disc; margin: 0.5em 0px; padding: 0px 2.5em;">
<li class="first-listitem" style="border-bottom: 1px none transparent; border-style: none; color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
The network on the browser's side of the connection.</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
The network on the server's side of the connection (including intranets).</div>
</li>
<li class="listitem" style="border-bottom: 1px none transparent; border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
The end-user's Internet service provider (ISP).</div>
</li>
<li class="listitem" style="border-style: none; border-top: 1px none rgb(238, 238, 238); color: #444444; margin: 0px 0px 0.25em; padding: 0.25em 0px; text-indent: 0px;">  <div class="first-para">
The server's ISP or regional access provider.</div>
</li>
</ul>
</span></span></li>
</ol>
</div>
</div>
</div>
<br />
<br />
<div>
<br /></div>
<br /></div>

Popular Web Servers : Hacking Web Servers The popular web servers are Apache Web Server, Internet Information Server a...

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div class="gmail_quote">
<div style="text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD-PsvnTVKdwvVr1xKFRMufrlD3IMN46fcGY61fqbboD9wyTzpOADFZ_6VMQ4LLrExU-4fn0IGSlwnHDXGUHs9tL0BIQUhMCy3vjtXrLmaNd1ISFzlkdPfUVPcwIA92WBwJB2Fk3tEGEcr/s1600/IMG_7595-768608.jpg"><img alt="" border="0" id="BLOGGER_PHOTO_ID_5681247311530902882" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhD-PsvnTVKdwvVr1xKFRMufrlD3IMN46fcGY61fqbboD9wyTzpOADFZ_6VMQ4LLrExU-4fn0IGSlwnHDXGUHs9tL0BIQUhMCy3vjtXrLmaNd1ISFzlkdPfUVPcwIA92WBwJB2Fk3tEGEcr/s320/IMG_7595-768608.jpg" /></a></div>
<div dir="ltr">
<br />
<br />
First thing after I get Samsung Galaxy Tab 10.1 is how can I change or  add some feature about penetration testing to my Tab. So after I read  "How to install Backtrack5 on Motorola Xoom by Pualdotcom, I think I can  install Backtrack 5 in my Tab too. That's it. I create this tutorial  after I'm successful to installing Backtrack 5 on my Tab. But please do  all the steps with you risk!!!!.<br />
<br />
1. Download rooting file and transfer it to the tab<br />
    - <a href="http://forum.xda-developers.com/attachment.php?attachmentid=593613&d=1305168395" target="_blank">http://forum.xda-developers.com/attachment.php?attachmentid=593613&d=1305168395</a><br />
<br />
<br />
<br />
2.  Go into the recovery mode with hold "Power Button and Low Volumn  Button" for rebooting and when you see the 2 icon press "Low Volumn" and  press "High Volumn" or "Power Button" for go to recovery mode.<br />
<br />
3. Choose "apply the update from sdcard" and choose "rooting file"<br />
<br />
<br />
After this step, you're tab was rooted now.<br />
<br />
4. Download requirement files<br />
   -  P7500DXKH4_P7500OLBKH1_P7500XWKG1_HOME.tar.MD5  <a href="http://www.megaupload.com/?d=S6HSZL8H" target="_blank">http://www.megaupload.com/?d=S6HSZL8H</a><br />
   -  001001-P7500_KI1_Restock.zip  <a href="http://www.multiupload.com/5RMKLEFCTA" target="_blank">http://www.multiupload.com/5RMKLEFCTA</a><br />
   -  001003-Overcome_10.1_Series_v1.1.0_P7500_Full.zip  <a href="http://www.multiupload.com/CRBRV18830" target="_blank">http://www.multiupload.com/CRBRV18830</a><br />
   -  002001-Overcome_CWM_Recovery_v4.1.1.5.tar  <a href="http://www.multiupload.com/REAMDK5J7U" target="_blank">http://www.multiupload.com/REAMDK5J7U</a><br />
   -   Overclock Kernel <a href="http://droidbasement.com/galaxy/kernels/2636/20/p4-ux/boot-cm_2636.4_p4_ux-oc-xtra-vfpv3-d16_fp-091311.zip" target="_blank">http://droidbasement.com/galaxy/kernels/2636/20/p4-ux/boot-cm_2636.4_p4_ux-oc-xtra-vfpv3-d16_fp-091311.zip</a><br />
<br />
*** you can change Overcome_10.1_Series_v1.1.0_P7500_Full.zip to another Custom ROM just like Starburt or something like that.<br />
<br />
5. Extract 001001-P7500_KI1_Restock.zip<br />
<br />
6.  Go into the recovery mode with hold "Power Button and Low Volumn  Button" for rebooting and when you see the 2 icon press "High Volumn" or  "Power Button" for go to download mode.<br />
<br />
7. Open Odin3_v1.85 and click PDA -> P7500OXAKI1_P7500XXKI1_P7500XXKI1_HOME.tar.MD5 -> start<br />
<br />
The tab will restart after this step is done.<br />
<br />
8. Copy file Overcome_10.1_Series_v1.1.0_P7500_Full.zip and boot-cm_2636.4_p4_ux-oc-xtra-vfpv3-d16_fp-091311.zip to the tab<br />
<br />
9. Go to the download mode again.<br />
<br />
10. In the Odin, click PDA -> Overcome_CWM_Recovery_v4.1.1.5.tar -> start<br />
<br />
11. Go to the recovery mode<br />
<br />
12.  Go to install menu -> choose zip from internal storage with data  wipe -> Overcome_10.1_Series_v1.1.0_P7500_Full.zip -> install menu  -> choose zip from internal storage ->  boot-cm_2636.4_p4_ux-oc-xtra-vfpv3-d16_fp-091311.zip<br />
<br />
<br />
13. Now you're root and get the new custom ROM. So install Android SDK and download Backtrack5 ARM version.<br />
   - Android SDK <a href="http://developer.android.com/sdk/index.html#top" target="_blank">http://developer.android.com/sdk/index.html#top</a><br />
   - Backtrack 5 ARM <a href="http://www.backtrack-linux.org/downloads/" target="_blank">http://www.backtrack-linux.org/downloads/</a><br />
<br />
<br />
14. Copy Backtrack into your tab or use the adb for install busybox and upload Backtrack into the tab.<br />
   - Go to C:\Program Files\Android\android-sdk\platform-tools<br />
   - adb.exe shell<br />
   - mkdir /sdcard/BT5<br />
   - exit<br />
   - adb.exe push busybox /sdcard/<br />
   - adb.exe push installbusybox.sh /sdcard<br />
   - adb.exe push fsrw /sdcard/BT5/<br />
   - adb.exe push mountonly /sdcard/BT5/<br />
   - adb.exe push bootbt /sdcard/BT5/<br />
   - adb.exe push bt5.img.gz /sdcard/BT5/<br />
   - adb.exe push unionfs /sdcard/BT5/<br />
<br />
***If you use SSHDroid to enable SSHD in your tab.[Default SSH User: root and Password: admin]<br />
<br />
<br />
<br />
<br />
15.  Go to the terminal of Tab with ConnectBot and choose local to connect  in your Tab. I don't know you can use sshd to complete this step or not  but you can try it for easy typing.<br />
<br />
<br />
16. Remove the Tab from PC.<br />
<br />
<br />
17. Go to /sdcard/BT5 and unzip bt5.img.gz<br />
   - cd /sdcard/BT5<br />
   - gunzip bt5.img.gz<br />
<br />
<br />
18. Start BT5<br />
   - sh bootbt<br />
<br />
<br />
19. So now you're in the chroot of Backtrack5<br />
<br />
net.ipv4.ip_forward = 1<br />
root@localhost:/# ls /pentest/<br />
backdoors  database     exploits   passwords  scanners  stressing  voip<br />
cisco      enumeration  forensics  python     sniffers  tunneling  web<br />
<br />
<br />
<br />
<br />
19. Run the startvnc<br />
  - startvnc<br />
<br />
<br />
*** You can change resolution of vnc with nano /usr/bin/startvnc<br />
<br />
<br />
<br />
<br />
20. Now vnc is running, you can check what is the port number that was use by vnc with<br />
  - netstat -napt<br />
<br />
<br />
<br />
<br />
21. Now you can connect vnc server with androidVNC or whatever that you can find in the Android Market.<br />
<br />
<br />
<br />
*** Default password of vnc server is "toortoor"<br />
22. Finally you can do anything that you can do in Backtrack5 on your Tab, have a nice hack <img alt="Smiley" border="0" src="https://www.ethicalhacker.net/forum/Smileys/default/smiley.gif"><br />
<br />
<br />
<br />
Further reading :<br />
<a href="http://blog.l-lacker.com/security-backtrack-5-on-a-galaxy-s-phone/" target="_blank">http://blog.l-lacker.com/security-backtrack-5-on-a-galaxy-s-phone/</a><span class="HOEnZb"><span style="color: #888888;"><br /></span></span></div>
</div>
<br /></div>

Tutorial Install Backtrack 5 On Samsung Galaxy Tab

First thing after I get Samsung Galaxy Tab 10.1 is how can I change or add some feature about penetration testing to my Tab. So aft...

Popular Web Servers : Hacking Web Servers

Install Backtrack 5 On Samsung Galaxy Tab

Popular

Comments

Archive