SecurityTeam Group - Powered by SecurityTeam

BackTrack 3 Final - Release Information

It's finally happening....BackTrack 3 Final is being released....Finally!
Max, Martin and I have slaved for weeks and months, together with the help of many remote-exploit'ers to bring you this fine release. As usual, this version overshadows the previous ones with extra cool things.

Saint
SAINT has provided BackTrack users with a functional version of SAINT, pending a free request for an IP range license through the SAINT website, valid for 1 year.

Maltego
The guys over at Paterva have created a special version of Maltego v2.0 with a community license especially for BackTrack users. We would like to thank Paterva for co-operating with us and allowing us to feature this amazing tool in BackTrack.

Nessus
Tenable would not allow for redistribution of Nessus.

Kernel
2.6.21.5. Yes, yes, stop whining....We had serious deliberations concerning the BT3 kernel. We decided not to upgrade to a newer kernel as wireless injection patches were not fully tested and verified. We did not want to jeopardize the awesome wireless capabilities of BT3 for the sake of sexiness or slightly increased hardware compatibilities. All relevant security patches have been applied.

Tools
As usual, updated, sharpened, SVN'ed and armed to the teeth. This release we have some special features such as spoonwep, fastrack and other cool additions.

Availability
We will be releasing an internal "IRC pre release" version of BT3F for final testing and identification of possible blunders...and shortly after that we will have a full blown release.

Final Requests
We request the community to not mirror or torrent this release, or otherwise distribute it online without our knowledge. We are trying to gather statistics about bt3 downloads. If you would like to mirror BT3 then please:
1) Think again! Traffic generated by BT3 downloads is CRAZY.
2) Please contact us before doing so.
3) Send us monthly statistics of downloads for the iso.

If you would like to add a link to BackTrack downloads to your website, please use:

http://www.remote-exploit.org/backtrack_download.html as the download link.

Rants
Problems, fixes, bugs, opinions - should all end up in our Remote Exploit community forums, and our wiki:

http://forums.remote-exploit.org
http://wiki.remote-exploit.org

Over and out,

Muts, Max, MjM

Howto: Install w3af on Windows (svn style)

Requirements:
Python 2.5.1 (install first):
http://www.python.org/download/
A windows Subversion client like TortoiseSVN:
http://tortoisesvn.net/downloads/
uTidylib:
http://developer.berlios.de/project/showfiles.php?group_id=1810
pyOpenSSL:
http://webcleaner.sourceforge.net/pyOpenSSL-0.6.win32-py2.5.exe
Win32 OpenSSL:
http://www.shininglightpro.com/products/Win32OpenSSL.html

Create a folder somewhere named w3af
Right click on it and hit SVN Checkout…
URL:
https://w3af.svn.sourceforge.net/svnroot/w3af/
Leave other options at defaults
Hit Ok to checkout

It is currently just under 25MB so be patient.

Ensure that the Python install folder is in your path
Open a command prompt (WinKey-R, cmd, ok)
cd to you w3af folder ie: cd Desktop\w3af if you created the folder on your desktop

cd extlib
cd fpconst-0.7.2
python setup.py install
cd ..
cd pygoogle
python setup.py install
cd ..
cd pywordnet
python setup.py install
cd ..
cd SOAPpy
python setup.py install
cd ..
cd pyPdf
python setup.py install
cd ..
cd ..
python w3af

All done!

Writing Metasploit Plugins

Techworld Video

Learn from the expert: DNS architecture
In this final part of his three-part presentation, DNS expert Cricket Liu completes his explanation of how to optimise DNS architecture within an enterprise, answers questions from the audience and offers a website to help with DNS problem solving.

To watch the previous part of the presentation - click here.

I Can Hear You Now", Eavesdropping on Bluetooth Headsets

WVE editor Joshua Wright has posted a video on YouTube, describing an attack against a Bluetooth headset. Using a standard Linux workstation, he shows how headset devices can be exploited as audio bugs from significant distances, recording and inject arbitrary audio through the headset device. You can check out the clip at youtube

Tuesday, December 4, 2007

De-ICE pentest disc 1.100 & 1.110

I have decided to put here this videos of the first disc in the de-ice series of pentest challenges. If you do not want to see the solutions DO NOT watch these videos. Special thanks to grendal at http://de-ice.net for providing a safe way to pentest. To complete the challenges you will also need the Backtrack live cd from http://www.remote-exploit.org. All the instructions for setting up the challenge can be found on the De-Ice site. Special thanks to PrarieFire who provided the transcript of the video and had the original idea to document them in a video series.

Transcript of challege

DISC 1.100 part 1 -net discover & nmap

DISC 1.100 part 2-hydra & ssh

DISC 1.100 part 3-hydra & john

DISC 1.100 part4-ssh & ssl

DISC 1.100 part5-ftp

I am now posting the video solutions of the second disc here. As always thanks to Grendal at the de-ice site for providing this excellent way to learn and sharpen our skills. Special thanks to all the remote exploit crew for providing the sexiest sleekest attack machine ever to exist. Well maybe thats pushing it but it is the best security distro ever.

Transcript of video (comming soon)

DISC 1.110 part1-nmap & firefox

DISC 1.110 part2-ftp

DISC 1.110 part3-strings

DISC 1.110 part4-john the ripper

DISC 1.110 part5-ssh & openssl

Monday, December 3, 2007

BackTrack 3 beta release date

Muts released a date for the beta release of Backtrack 3 today. December 14 2007

Sunday, December 2, 2007

Christmas is right around the corner and I hope every one is feeling the holiday cheer.

Welcome to SecurityTeam

I have created this page to organize some of the tutorials and video's and new projects that I feel are important to the Remote-Exploit community. I hope that people can find some useful links here.

Backtrack 3 beta is on the way HERE is a preview of the sexiest security distro.

Download:
BackTrack 3 Beta ISO version (Stripped Down - 700 mb)
torrent
Ftp
md5sum : 04ed8742fc8facd1ecc8c9f6f567c116
shasum : 70c33e0aa75a978b8a87a207bf488ecec8d10a87

BackTrack 3 Beta USB version (946 mb)
Torrent
Ftp
md5sum : bd0d8f507502787184b187f5a39288df
shasum : 853b80a77e3881e8084c797ba55077ead15f84ae