Results 1 to 7 of 7

Thread: Linux hacking

Hybrid View

  1. #1
    Senior Member SephStorm's Avatar
    Join Date
    Aug 2008
    Posts
    166

    Default Linux hacking

    Hi all.

    While I have in the past been focused on Windows exploitation (and a beginner with that) I find myself having to expand my horizons. In keeping in line with my training, I need to enumerate information on the machine (vm) that I want to attack. Unfortunately I have little ideas where to start. The book I have access to at the moment seems fixed on Windows enumeration, and google has not been much better. I see results on Linux NIC enumeration.

    Steps taken so far:
    Scanned my network and found a "victim".
    Scanned the host and performed port, OS and version detection.
    "banner grabbing", connecting to the services with netcat.

    at this point there is a gap in my knowledge. I know that eventually I will need to crack passwords and eventually gain access to the system, but I do know that if I want to gain access through one of the open services, I will need to enumerate the users and possibly other information on the machine. Can anyone point me in the right direction, or point me to some resources?
    "You're only smoke and mirrors..."

  2. #2
    Senior Member cgelici's Avatar
    Join Date
    Feb 2010
    Location
    /root
    Posts
    121

    Default Re: Linux hacking

    Why don't you try a vulnerable linux machine to exploit, you can find some here: g0tmi1k: [Site News] Vulnerable by Design (Part 2)

    Also if you want to research linux exploitation, sickn3ss has some paper's about that which you can find here: http://sickness.tor.hu/

    Hope this can get you started.

  3. #3
    Junior Member
    Join Date
    Oct 2010
    Posts
    45

    Default Re: Linux hacking

    www.exploitdb.com also has a variety of papers and exploit code written for Linux systems. Use the search (for platform) page.

  4. #4
    Member shadowzero's Avatar
    Join Date
    Jun 2011
    Location
    ${HOME}
    Posts
    94

    Default Re: Linux hacking

    Quote Originally Posted by Sys7emR00t View Post
    www.exploitdb.com also has a variety of papers and exploit code written for Linux systems. Use the search (for platform) page.
    Just a tiny correction, I think you mean http://www.exploit-db.com

  5. #5
    Just burned his ISO
    Join Date
    Jul 2011
    Location
    WASHITON DC
    Posts
    3

    Default Respuesta: Linux hacking

    dont say victim

  6. #6
    Just burned his ISO
    Join Date
    May 2011
    Posts
    1

    Default Re: Linux hacking

    make your own hacking lab. you can create a small computer network using some computer or create virtual machine using vmware/virtualbox. Try to attack your own system to keep your nose safely.

  7. #7
    Senior Member SephStorm's Avatar
    Join Date
    Aug 2008
    Posts
    166

    Default Re: Linux hacking

    Thank you all.

    This is being done on a lab at home, on vm's, but they are pre-built, I have to learn how to exploit them. My initial issue was gaining access, none of the services were remotely exploitable, I had to run Hydra against the ftp service to gain user level access. (I was able to do this and gain all the non root account info, but I swear, I was lucky to happen to get those words in my lists. I looked at so many lists and was not able to find 1 with all three passwords, or the usernames. In this case, 1 username was in a dictionary included in the distro for another tool and I got the first PW. Then I cat'ed /etc/passwd to get the other user accounts. The second PW was in another dictionary, and I had to find a related dictionary to find the third. If anyone has a large dictionary of english words, please share.)

    My current issue rates its own thread, i'll have that one shortly, thank you again.
    "You're only smoke and mirrors..."

Similar Threads

  1. All Linux users contribute to make Linux better
    By Virchanza in forum OLD General IT Discussion
    Replies: 0
    Last Post: 07-13-2009, 12:54 PM
  2. Hacking Linux with Keyloggers
    By chuksjonia in forum OLD General IT Discussion
    Replies: 3
    Last Post: 08-11-2008, 03:18 PM
  3. Fiewire XP Hacking with Linux
    By razas in forum OLD Pentesting
    Replies: 11
    Last Post: 03-24-2008, 02:55 PM
  4. Vista, Leopard and Linux Square Off in Hacking Contest
    By s1lang in forum OLD General IT Discussion
    Replies: 3
    Last Post: 02-09-2008, 02:18 AM
  5. Hacking Linux Exposed
    By phoenix910 in forum OLD Pentesting
    Replies: 7
    Last Post: 11-25-2007, 07:59 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •