Fast-track (scan, setup, sessions) Not MSFConsole

[micole]

Running:

Make sure you are in the fasttrack directory (/pentest/exploits/fasttrack/), and run fasttrack:

$ python fast-track.py  -i

This makes the python interperator run the program. Someone quoted me "on that" So here is what the options do:

Interactive Menu Driven Mode: -i
Command Line Mode: -c
Web GUI Mode -g

Examples: ./fast-track.py -i
./fast-track.py -c
./fast-track.py -g
./fast-track.py -g <portnum>

Usage: ./fast-track.py <mode>

Thanks MF... I forgot to add that the first time around posting.

Update fast-track using the option number 1. Then use the option number 1 again to only update the fast track software, or if you so desire update everything, but with the internet speed at the school it will take over an hour to do it.

Now get to the main menu and run the autopwn automation.

When it asks for the IP addresses, you can enter a specific address, or you can enter a range. (if you only do it to one, then it will be much quicker).

I would recommend using a Bind attack, but if you fail with a bind, you might want to try a Reverse attack, just to see if there is a different outcome.


Running with a GUI:

If you run with a GUI it is usually not as updated as the command line version. Feel free to try it, but I�m happy with my command line for this tool.

$ cd /pentest/exploits/fasttrack/
 $ ./ftgui

After the scan:

After your scan is completed you can use the command:

$ sessions �l

(lowercase L just wanted to make the distinction)

And this command lists all of the exploits that where successful. Use the command:

$ sessions   -i  #

(# is equal to the number of the ID that you want to use.)

If you wish to see what exploits where used use the �sessions �v� to view all the exploits.


What Fast-track Autopwn is doing:

The Fast-Track's Autopwn script helps automate the scanning and attacking phases of trying to gain control of a computer using MSF (Metasploit Framework). Unleashed talks a lot about using metasploit, so I don't think its necessary to reiterate that.

What it actually does is allow you to create a database of attacks and run it against a computer(s).

Its first step (if you don't edit any defaults) is to scan a selected set of ip ranges using nmap to find open ports. It then proceeds to find all of the exploits from the database that are compatible with the open ports on the system.

After it selects all the exploits/backdoors/loopholes that it is able to use on a system it then starts trying to gain access to the system. After the exploits are all done running you then get your MSF Console that would allow you to try to connect to the system. (See Unleashed for information)



NOTE: only run on a system you own. Don't scan systems that has files that you would hate to loose.

I am only doing this because I am trying to get into the computer security side of networking. I love computers and want to share my knowledge. But, if you use this for malicious purposes I will not feel sympathy for you when you get caught. (not IF, but When, It will happen, so don't do it)

If you have anything you want me to try and cover, let me know, and I'll see if I can accommodate.

Edit: Removed "Install" from the list, It was not needed, seeing as how this is a BT4 forum, and BT4 has it already installed.
Edit: Changed the "-i don't know what it means" to what all the option markers do. (Thanks again MF)

[lupin]

You only need to install on older systems, BT4 has the pentest already in it.

Given that this is a forum for BackTrack 4 its a little bit iffy to post a HowTo on a subject that doesnt actually apply to BackTrack 4, but I'll allow it because some people may find it useful.

[mfBaranian]

Honestly I don’t know what the I is at the end, but every time I read on it online they all use that command. I’m sure it means “interactive” but don’t quote me on that.

I just had to

Modes:

Interactive Menu Driven Mode: -i
Command Line Mode: -c
Web GUI Mode -g

Examples: ./fast-track.py -i
./fast-track.py -c
./fast-track.py -g
./fast-track.py -g <portnum>

Usage: ./fast-track.py <mode>

[Archangel-Amael]

Actually OP can you please explain to me why you are installing a program that is already (by default) installed on BT?
And why are you telling us the exact same thing that can be found in the documentation? I mean I appreciate your effort, and I don't want to discourage you from posting tutorials and guides but I also don't see the reasoning behind it.

[micole]

mfBaranian: Yeah, I forgot to delete that part about the -i. I'll go in and change it now

Archangel: I honestly forgot why I put the install into the tutorial, but seeing as how this is a BT4 forum it would make sense for me to delete that bit.

The reason that I was posting a fast-track tutorial is because on the old forums I saw a few people asking how to start and run it, so I thought it could be a good idea to just state how to do it right away that way when people search they would (hopefully) find this post and not post a new thread on how to run fast-track. If it is just superfluous information then should I just remove the post?

I'm new to posting information online to help people, but I have had a lot of experience helping people in person, and coming up with documentation on how to do certain things, so that's why I'm kinda nervous about putting up good information that people can use.

So what should I do? Delete the post (if possible) or just edit it so its more BT4 oriented?

[Archangel-Amael]

I would take out the installation part since that will confuse people (to do this use the edit button. If you cant then just send me a pm about it.
I would also add more info on "what one can do with fasttrack" I mean what is the tool and what is it's purpose and what can it do for me or a penetration tester. Pictures and or diagrams help. That would be the sort of information that would be useful.

[micole]

I already edited out the "install" part of the Howto .

Thanks Archangel, I'll work on that today and hopefully change my post tonight. (the "that" being more detailed about what Fast-Track can do and how it can be useful).

Thanks guys for the help, I hope I can help the forum as much as it helped me .