Metasploitable is a virtual machine with baked-in vulnerabilities, designed to teach Metasploit. This set of articles discusses the RED TEAM's tools and routes of attack.

Metasploitable Databases:

Exploiting MySQL with Metasploit: Metasploitable/MySQL

Exploiting PostgreSQL with Metasploit: Metasploitable/Postgres

Metasploitable Networking:

Exploiting VSFTP Backdoor: Metasploitable/VSFTP

SSH Penetration by Brute Force: Metasploitable/SSH/Brute Force

SSH Penetration with Keys: Metasploitable/SSH/Keys

SSH Penetration with Metasploit: Metasploitable/SSH/Exploits

Brute-Forcing /etc/shadow File: Metasploitable/John Shadow File

Exploiting NFS: Metasploitable/NFS

Exploiting DNS Bind Server: Metasploitable/DNS Bind

Metasploitable Services:

distcc: Metasploitable/distcc

Metasploitable Apache:

Exploiting Apache (with Metasploit): Metasploitable/Apache

Exploiting Apache (with Python): Metasploitable/Apache/Python

Tor's Hammer DoS Attack: Metasploitable/TorsHammer *

Apache DAV: Metasploitable/Apache/DAV *

Apache Tomcat and Coyote: Metasploitable/Apache/Tomcat and Coyote

Metasploitable Memory:

General approach to memory-based attacks: Metasploitable/Memory

Investigating memory data: Metasploitable/Volatile Data Investigation

Dumping Memory from Metasploit: Metasploitable/Dumping Memory

Metasploitable Fuzzing:

(Have not done much work on fuzzing Metasploitable...)

Fuzzing · American Fuzzy Lop

Category:Security · Category:Metasploit · Category:Metasploitable · Category:Kali

Flags · Template:MetasploitableRedTeamFlag · e

Metasploitablue: The Blue Team

Metasploitable is a virtual machine with baked-in vulnerabilities, designed to teach Metasploit. This set of articles discusses the BLUE TEAM's methods for defending Metasploitable: defending against and responding to intrusions.

Hence the name, Metasploita-blue.

Overview: Metasploitable/Defenses

Metasploitable/Defenses/Stopping · Metasploitable/Defenses/Detecting

Metasploitable On-Machine Defenses:

Linux Volatile Data System Investigation: Metasploitable/Volatile Data Investigation

Linux Artifact Investigation: Metasploitable/Artifact Investigation

Linux Iptables Essentials: Metasploitable/Iptables

Firewall Assurance and Testing: Metasploitable/Firewall

Password Assessment: Metasploitable/Password Assessment

Standard Unix Ports: Unix/Ports

Metasploitable Networking Defenses:

Netcat and Cryptcat (Blue Team): Metasploitable/Netcat and Metasploitable/Cryptcat

Nmap (Blue Team): Metasploitable/Nmap

Network Traffic Analysis: Metasploitable/Network Traffic Analysis

Suspicious Traffic Patterns: Metasploitable/Suspicious Traffic Patterns

Snort IDS: Metasploitable/Snort

Category:Security · Category:Metasploit · Category:Metasploitable · Category:Kali

Flags · Template:MetasploitableBlueTeamFlag · e

Metasploitable: The Red Team

Metasploitable is a virtual machine with baked-in vulnerabilities, designed to teach Metasploit. This set of articles discusses the RED TEAM's tools and routes of attack.

Metasploitable Databases:

Exploiting MySQL with Metasploit: Metasploitable/MySQL

Exploiting PostgreSQL with Metasploit: Metasploitable/Postgres

Metasploitable Networking:

Exploiting VSFTP Backdoor: Metasploitable/VSFTP

SSH Penetration by Brute Force: Metasploitable/SSH/Brute Force

SSH Penetration with Keys: Metasploitable/SSH/Keys

SSH Penetration with Metasploit: Metasploitable/SSH/Exploits

Brute-Forcing /etc/shadow File: Metasploitable/John Shadow File

Exploiting NFS: Metasploitable/NFS

Exploiting DNS Bind Server: Metasploitable/DNS Bind

Metasploitable Services:

distcc: Metasploitable/distcc

Metasploitable Apache:

Exploiting Apache (with Metasploit): Metasploitable/Apache

Exploiting Apache (with Python): Metasploitable/Apache/Python

Tor's Hammer DoS Attack: Metasploitable/TorsHammer *

Apache DAV: Metasploitable/Apache/DAV *

Apache Tomcat and Coyote: Metasploitable/Apache/Tomcat and Coyote

Metasploitable Memory:

General approach to memory-based attacks: Metasploitable/Memory

Investigating memory data: Metasploitable/Volatile Data Investigation

Dumping Memory from Metasploit: Metasploitable/Dumping Memory

Metasploitable Fuzzing:

(Have not done much work on fuzzing Metasploitable...)

Fuzzing · American Fuzzy Lop

Category:Security · Category:Metasploit · Category:Metasploitable · Category:Kali

Flags · Template:MetasploitableRedTeamFlag · e

Metasploitablue: The Blue Team

Hence the name, Metasploita-blue.

Overview: Metasploitable/Defenses

Metasploitable/Defenses/Stopping · Metasploitable/Defenses/Detecting

Metasploitable On-Machine Defenses:

Linux Volatile Data System Investigation: Metasploitable/Volatile Data Investigation

Linux Artifact Investigation: Metasploitable/Artifact Investigation

Linux Iptables Essentials: Metasploitable/Iptables

Firewall Assurance and Testing: Metasploitable/Firewall

Password Assessment: Metasploitable/Password Assessment

Standard Unix Ports: Unix/Ports

Metasploitable Networking Defenses:

Netcat and Cryptcat (Blue Team): Metasploitable/Netcat and Metasploitable/Cryptcat

Nmap (Blue Team): Metasploitable/Nmap

Network Traffic Analysis: Metasploitable/Network Traffic Analysis

Suspicious Traffic Patterns: Metasploitable/Suspicious Traffic Patterns

Snort IDS: Metasploitable/Snort

Category:Security · Category:Metasploit · Category:Metasploitable · Category:Kali

Flags · Template:MetasploitableBlueTeamFlag · e

OpenVPN

OpenVPN

a tool for creating and connecting to virtual private networks.

OpenVPN · Category:OpenVPN

Creating a Static Key VPN: OpenVPN/Static Key

Configuring Your DNS: DNS

Category:VPN · Category:Security · Category:Anonymous Browsing · Category:Networking

Flags · Template:OpenVPNFlag · e

Raspberry Pi

Raspberry Pi

a tiny tool for performing extraordinary acts beyond good and evil - with an ARM processor.

RaspberryPi · Category:Raspberry Pi

RaspberryPi/Installing · RaspberryPi/First Steps · RaspberryPi/Hello World

Basic Pi Information and Operations:

Organization/Layout of SD Card: Kali Raspberry Pi/SD Card ·

Disable IPV6 on the Raspberry Pi: Disable IPv6 Pi

Kali Linux on Raspberry Pi:

Kali Raspberry Pi · Kali Raspberry Pi/Installing · Kali Raspberry Pi/Post-Install

Kali Raspberry Pi/Headless · Kali Raspberry Pi/Headless Walkthrough

Kali Raspberry Pi/Startup Services · Kali Raspberry Pi/SSH · Kali Raspberry Pi/Tcpdump

Debian Raspberry Pi:

RaspberryPi/Headless · RaspberryPi/First Steps

RaspberryPi/SSH Stunnel · RaspberryPi/Reverse SSH · RaspberryPi/Reverse SSH Stunnel

RaspberryPi/Web Server

RaspberryPi3

Raspberry Pi Circuits:

RaspberryPi/Morse Code · RaspberryPi/IoT Morse Code Keyer · RaspberryPi/Blink

RaspberryPi/LCD Display · RaspberryPi/Digital Modes

Raspberry Pi Timelapse Photos:

RaspberryPi/Timelapse · RaspberryPi/Timelapse2 · ~~RaspberryPi/Timelapse3~~

RaspberryPi/Weatherproof Camera Case

RaspberryPi/USB Camera · RaspberryPi/Timelapse4

Category:Raspberry Pi · Category:Networking · Category:Images

Flags · Template:PiFlag · e

Python

Python

a powerful programming language

Python · Category:Python

Scientific Python:

Data analysis libraries: Scipy · Numpy · Pandas · Statsmodel

Machine learning libraries: Sklearn

Neural network libraries: Tensorflow · Keras

Plotting/viz: Matplotlib · Seaborn · Jupyter

Solving partial differential equations and bessel functions: Fipy · Bessel Functions

Web and Networking Python:

Web programming: Flask · Webapps · Mechanize · Scrapy · Gunicorn

Wifi: Wireless/Python · Scapy

IPython and Jupyter: Jupyter

Drawing, Geometry, and Shapes:

Shapely (for drawing shapes): Shapely

Geography library: Geos

General Useful Python Utilities:

Python Remote Objects: Pyro

Logging (create multi-channel log messages): Logging

Keyboard (control keyboard from Python): Keyboard

Black Hat Python:

Network scanning: Python/Scanner

Flags · Template:PythonFlag · e

Radio

radio

all things radio.

Radio · Category:Radio

Ham Radio:

Notes on General class license: General · Mnemonics/General Class License

Digital modes: Radio/Digital Modes

Ham Radio Hardware (Radios):

Kenwood TS 440S: Radio/Kenwood/TS440S

Kenwood TS 570S: Radio/Kenwood/TS570S

Yaesu VX-6: Radio/Yaesu/VX-6

Digital Modes on Raspberry Pi: RaspberryPi/Digital Modes

Digital Modes on Arduino: Arduino/Digital Modes

DVB-T USB SDR Dongle: DVB-T USB SDR

Ham Radio Software:

Software defined radio: SDR

Comprehensive list of ham software: Andys Ham Radio Linux

Direwolf (soundcard TNC/APRS modem): Direwolf

Echolink (internet repeater system): Echolink

Qsstv (Slow scan television): Qsstv

Fldigi (fast light digital modes): Fldigi

Xastir (APRS/AX25/TNC): Xastir

RadioHead (packet library for microcontrollers): RadioHead

Category:Radio · Category:Kenwood · Category:Yaesu

Flags · Template:RadioFlag · e

SDR

SDR

software defined radio

SDR

SDR Software:

SDR through the web browser: WebSDR

The "true" software defined radio: Gnuradio

WAV file to Waterfall: Gnuradio/Wav to Waterfall

Gqrx spectrum analyzer: Gqrx

SDR on Operating Systems:

Android + HackRF/SDR: Android/SDR

Kali Linux + Gqrx + HackRF: Kali/HackRF

Kali Linux + Gqrx + RTL-SDR Dongle: Kali/SDR Dongle

SDR Hardware:

HackRF: HackRF · Kali/HackRF

RTL-SDR Dongle: Kali/SDR Dongle

FlightAware: FlightAware

Category:SDR · Category:Radio

Flags · Template:SDRFlag · e

SSH

ssh

secure shell, the most useful tool in unix

SSH · Category:SSH

Tunnels:

Building SSH tunnels: SSH Tunnels

Tunnel SSH through HTTPS: Stunnel

Tunnel SSH through DNS: Iodine

Raspberry Pi and SSH:

RaspberryPi/Headless · RaspberryPi/Reverse SSH

RaspberryPi/SSH Stunnel · RaspberryPi/Reverse SSH Stunnel

Category:SSH · Category:Networking

Linux and SSH:

Linux/SSH

Metasploitable/SSH

Category:SSH · Category:Kali · Category:Networking

Flags · Template:SSHFlag · e

Scapy

scapy

a Python library for interfacing with network devices and analyzing packets from Python.

Scapy · Category:Scapy

Building Wireless Utilities: Scapy/Airodump Clone · Scapy/AP Scanner

Analyzing Conversations: Scapy/Conversations

Database: Scapy/Wifi Database

Category:Scapy · Category:Python · Category:Networking

Flags · Template:ScapyFlag · e

Tcpdump

tcpdump

Utility for dumping network traffic

Tcpdump · Category:Tcpdump

Tcpdump/Wireless · Tcpdump/Wireless/Mac · Tcpdump/Wireless/Linux

Flags · Template:TcpdumpFlag · e

Tunnels

Tunnels

Tunnels for networking.

Tunnels · Category:Tunnels

HTTP and HTTPS · SSH Tunnels

Tunneling SSH over SSL: Stunnel

Raspberry Pi Tunnels: RaspberryPi/SSH Stunnel · RaspberryPi/Reverse SSH · RaspberryPi/Reverse SSH Stunnel

Flags · Template:TunnelsFlag · e

Twilio

twilio

apps for text messaging, phone calls, and other communication media.

Twilio

Twilio Menus:

Text Menus: Twilio/Text Menus

Phone Menus: Twilio/Phone Menus

Twilio Twimlets:

Voicemail: Twilio/Twimlet for Voicemail

Category:Twilio · Category:Python

Flags · Template:TwilioFlag · e

Unix

GNU/Linux/Unix

the concrete that makes the foundations of the internet.

Category:Unix

Compiling Software

Compiling Software · Upgrading Software

Category:Build Tools · Make · Cmake · Gdb

Bash

Bash · Bash/Quick (Quick Reference) · Bash Math

Text Editors

Vim · Emacs

Text Manipulation

Sed · Awk · Perl

Command Line Utilities

Aptitude · Diff · Make · Patch · Subversion · Xargs

Security

SSH (Secure Shell) · Gpg (Gnu Privacy Guard) · Category:Security

Networking

Linux/SSH · Linux/Networking · Linux/File Server

Web Servers

Apache · Nginx

Category:Unix · Category:Programming · Category:Networking

Flags · Template:UnixFlag · e

Widy

Widy

running OpenWRT on a router to make it into a wearable wireless ear

Widy · Category:Widy

The Widy Device:

Widy installation: Widy/Installing · Widy/Redux

Widy Wireless Internet Gateway: Widy/Wireless Gateway

Widy Ethernet Internet Gateway: Widy/Ethernet Gateway

Widy post-installation: Widy/Post-Install

Widy configuration: Widy/Configuration

Widy Toolbox:

Using tools on the Widy: Widy/Toolbox

Using tcpdump on Widy: Widy/Tcpdump

Using aircrack on Widy: Widy/Aircrack

Python/Scapy on Widy: Widy/Scapy

Widy Tricks:

Scripting the slider button on the Widy: Widy/Configuration#Slider Button Configuration

Using widy as a wireless access point: Widy/Access_Point

Debugging some SSH problems: Widy/Access_Point/SSH

Bridging widy wireless and ethernet connections: Widy/Bridging

Widy startup services: Widy/Startup Services

Create a hard-wired serial/TTL connection: Widy/Serial

Category:Widy · Category:Networking

Flags · Template:WidyFlag · e

Wireless

Wireless

all things wireless.

Wireless · Category:Wireless

Software:

Scapy

Flags · Template:WirelessFlag · e

Worksheet

Link to all worksheets idea list: Worksheets

Calc II:

Archimedes: Don't Disturb my Circles Worksheets/Archimdes_Dont_Disturb_My_Circles

Simpson's Rule: Worksheets/Simpsons_Rule

Civil Engineering Road Planning: Worksheets/Civil_Engineering_Road_Planning

Euler's Method and Circuits: Worksheets/Eulers_Method_Circuits

Calc III:

Infinite Series: Worksheets/Infinite_Series_Convergence

Partial derivatives: Worksheets/Van Der Waal Equation Critical Point

Wireless

Wireless

all things wireless.

Wireless · Category:Wireless

Software:

Scapy

Flags · Template:WirelessFlag · e

Wireshark

Wireshark

a Swiss-army knife for analyzing networks, network traffic, and pcap files.

Wireshark · Category:Wireshark

Packet Analysis · Wireshark/Advanced

Wireshark/HTTPS · Wireshark/Traffic Analysis · Wireshark/Conversation Analysis · Wireshark/Protocol Analysis

Working with SSL/TLS/HTTPS:

MITM Labs/Decrypting HTTPS Traffic by Obtaining Browser SSL Session Info · MITM Labs/Decrypting HTTPS Traffic with Private Key File

Flags · Template:WiresharkFlag · e

Worksheet

Link to all worksheets idea list: Worksheets

Calc II:

Archimedes: Don't Disturb my Circles Worksheets/Archimdes_Dont_Disturb_My_Circles

Simpson's Rule: Worksheets/Simpsons_Rule

Civil Engineering Road Planning: Worksheets/Civil_Engineering_Road_Planning

Euler's Method and Circuits: Worksheets/Eulers_Method_Circuits

Calc III:

Infinite Series: Worksheets/Infinite_Series_Convergence

Partial derivatives: Worksheets/Van Der Waal Equation Critical Point

Yargwid

Template:YargwidFlag

@@ Line 1: / Line 1: @@
-=Raspberry Pi=
+Also see: http://charlesreid1.com/w/index.php?title=Special%3AAllPages&from=&to=&namespace=10
-{{PiFlag}}
 =Anonymous Browsing=
@@ Line 7: / Line 5: @@
 {{AnonymousBrowsingFlag}}
-=Unix=
+=Aircrack=
+{{AircrackFlag}}
+=CTF=
+{{CTFFlag}}
+=CW=
+{{CWFlag}}
+=Crypto=
-{{UnixFlag}}
+{{CryptoFlag}}
-=Python=
+=Evil Twin=
-{{PythonFlag}}
+{{EvilTwinFlag}}
-=Networking=
+=General Class=
-{{NetworkingFlag}}
+{{GeneralFlag}}
-=Tunnels=
+=Gnuradio=
-{{TunnelsFlag}}
+{{GnuradioFlag}}
-=SSH=
+=John=
-{{SSHFlag}}
+{{JohnFlag}}
 =Kali=
@@ Line 31: / Line 41: @@
 {{KaliFlag}}
-=Man in the Middle=
+=LinuxNetworking=
+{{LinuxNetworkingFlag}}
+=Metasploitable=
-{{MITMFlag}}
+{{MetasploitableFlag}}
+{{MetasploitableRedTeamFlag}}
+{{MetasploitableBlueTeamFlag}}
 =OpenVPN=
@@ Line 39: / Line 57: @@
 {{OpenVPNFlag}}
-=John the Ripper=
+=Raspberry Pi=
-{{JohnFlag}}
+{{PiFlag}}
+=Python=
+{{PythonFlag}}
+=Radio=
+{{RadioFlag}}
-=Aircrack=
+=SDR=
-{{AircrackFlag}}
+{{SDRFlag}}
-=Wireshark=
+=SSH=
-{{WiresharkFlag}}
+{{SSHFlag}}
 =Scapy=
 {{ScapyFlag}}
+=Tcpdump=
+{{TcpdumpFlag}}
+=Tunnels=
+{{TunnelsFlag}}
+=Twilio=
+{{TwilioFlag}}
+=Unix=
+{{UnixFlag}}
 =Widy=
@@ Line 59: / Line 101: @@
 {{WidyFlag}}
-=Linux Networking=
+=Wireless=
-{{LinuxNetworkingFlag}}
+{{WirelessFlag}}
+=Worksheet=
+{{WorksheetFlag}}
-=Metasploit=
+=Wireless=
-{{MSFlag}}
+{{WirelessFlag}}
-=Web Hacking=
+=Wireshark=
-{{WebHackingFlag}}
+{{WiresharkFlag}}
-=Crypto(graphy)=
+=Worksheet=
-{{CryptoFlag}}
+{{WorksheetFlag}}
+=Yargwid=
+{{YargwidFlag}}

Flags: Difference between revisions

From charlesreid1

Revision as of 03:44, 28 May 2016

Contents

Anonymous Browsing

Aircrack

CTF

CW

Crypto

Evil Twin

General Class

Gnuradio

John

Kali

LinuxNetworking

Metasploitable

OpenVPN

Raspberry Pi

Python

Radio

SDR

SSH

Scapy

Tcpdump

Tunnels

Twilio

Unix

Widy

Wireless

Worksheet

Wireless

Wireshark

Worksheet

Yargwid