General Security
How-to Display a Warning Banner Before the Login Prompt

It is best to have a warning banner displayed before a user is logged in. Below is how you will implement this task.

Read more
How-to
Ubuntu Firewall: Basic Introduction

This is a basic introduction to Ubuntu firewall using the terminal commands. This tutorial requires you have administrative access to your Ubuntu system. If you installed Ubuntu the first account created by default has administrative access via sudo. You will need to type sudo for each command illustrated below.

Read more
How-to
Installing ClamAV on CentOS 7

Referenced from Linux-Audit: To get ClamAV on CentOS installed, we have to use the EPEL repository (Extra Packages for Enterprise Linux). Fortunately, the Fedora project provides this with an easy installation. Unfortunately the default configuration is not properly working. In this post we collect some of the issues and required changes. Let’s start with installing […]

Read more
How-to
Burp to Brute Force a Login Page

Using Burp to Brute Force a Login Page Authentication lies at the heart of an application’s protection against unauthorized access. If an attacker is able to break an application's authentication function then they may be able to own the entire application. The following tutorial demonstrates a technique to bypass authentication using a simulated login page […]

Read more
How-to
Accessing and Installing GSM Community Edition - OpenVAS

Version: 4.2.17 (includes OpenVAS-9) Download: https://dl.greenbone.net/download/VM/gsm_ce_4.2.17.iso (350 MByte) sha256sum: a4490e1c1d5b93c52b67eb533da8aa0ebe435551f89c8cea1619e6a772733a97 Compatibility: VirtualBox, ESXi, Hyper-V Minimum requirements: 2 CPU Cores, 2 GByte RAM The GSM Community Edition is a derivate of the GSM ONE and allows a quick and easy option on Windows, Linux or Mac to give the solution a trial. No particular know-how is […]

Read more
How-to
Reset the admin password in OpenVAS

Try this: openvasmd --user=admin --new-password=new_password Or you can create a new administrative account with : openvasad -c add_user -u your_new_login_here -r Admin Then use this account to change the default admin’s password.

Read more
How-to
Using Metasploit to Conduct NMAP Scans

Using Metasploit and nmap together as been a useful technique for me during some of my engagements.  Below are the steps I take to implement that task. Start metasploit by issuing the following command: msfconsole Verify the status of the database by issuing the following command: db_status Run NMAP from inside msfconsole and save the […]

Read more
How-to
Linux Commands - Run .bin file in Linux / UNIX

Run .bin file in Linux / UNIX Change the permission of the file you downloaded to be executable by typing the following command: $ chmod +x file.bin Start the installation process or run .bin file by typing the following command: $ sudo ./file.bin For example if .bin file name is program.bin. Then type the following […]

Read more
How-to
Openvas 9 on Ubuntu Setup

Sysadmin Ramblings Basic Installation  Install Ubuntu 16.04LTS Make sure you update your newly installed system with the latest patches - security updates. sudo apt-get update sudo apt-get upgrade sudo apt-get dist-upgrade Openvas9 is available as a package for Ubuntu 14.04 and Ubuntu 16.04. sudo add-apt-repository ppa:mrazavi/openvas sudo apt-get update sudo apt-get install openvas9 Follow the prompts and […]

Read more
General Security
Update OpenVAS Plugins (NVT, Cert Data & SCAP Data) Automatically

Once you have install OpenVAS it is a good idea to ensure it is kept up to date and running the latest security scripts to find the latest vulnerabilities as well as sync to the most updated nvt, scap and cert data.  The best way to do this is to create a script that sync's […]

Read more