This page is mainly a checklist for myself to know how I have to customize a freshly downloaded version of Backtrack 4.

Change keyboard layout

Use the following command to change the keyboard layout:

dpkg-reconfigure console-setup

Accept all default, except changing the origin to Belgium (if you want to use be-latin1).

Update all packages

apt-get update apt-get upgrade

Configure SSH

You still have to generate your SSH keys

sshd-generate

Read More

This how-to explains you how to use SkipFish through a proxy. It will show you how you have to configure Burp Suite and which parameters you need to supply to SkipFish so that all SkipFish’s traffic will flow nicely through Burp Suite. Introduction What is SkipFish? Skipfish is an active web application security …

Read More

The purpose of this small message is to show how you can configure a static IP address in Debian Linux. I know that other sites have more detailed explanations on this (and the man page too), but I put it here mostly as a reminder to myself. Add the following content in /etc/networking/interfaces to configure a static …

Read More

In some companies, you can find that access to the C-drive of a Windows computer has been blocked. How do they do this? You can easily do this by creating an entry in your domain policy. The path to the policy is User Configuration\Administrative Templates\Windows Components\Windows Explorer In that location, two …

Read More

The following is a list of event handlers which can be used in HTML code to execute Javascript code. FSCommand(): attacker can use this when executed from within an embedded Flash object onAbort(): when user aborts the loading of an image onActivate(): when object is set as the active element onAfterPrint(): activates …

Read More

This page contains a collection of publicly available secure software development guides. Each guide has its own approach to introducting security in the software development lifecycle. Apple Secure Coding Guide …

Read More

Some examples of using tcpdump. Show all packets received from host 123.123.123.123 tcpdump -r $i src host 123.123.123.123 Show all TCP packets received from host 123.123.123.123 except the RCP RESET packets tcpdump -r $i src host 123.123.123.123 and tcp[tcpflags] & tcp-rst==0 Show all UDP packets received from host …

Read More

This page contains some SQL queries that can be used on an SQL Server to test some parts of the security configuration. select name from sys.sql_logins where type = 'S' and is_policy_checked <> '1' This query is only usefull when the server is configured to use ‘Mixed authentication’. Furthermore, this query is only …

Read More

An example of how you can concatenate lines from an input file using the sed command line tool. Suppose you have the following file: AA 123 BB 456 CC 789 And you want to transform it into the following: AA; 123 BB; 456 CC; 789 This can easily be achieved by using the Linux command sed. However, putting all …

Read More

The following pages contain information about the default audit settings on Windows operating systems, how you can change these settings, how you can increase the size of the event logs, how all of this should be done via domain controller policies and on stand-alone servers/workstations. php print l(“Adjust the …

Read More