This page is mainly a checklist for myself to know how I have to customize a freshly downloaded version of Backtrack 4.

Change keyboard layout

Use the following command to change the keyboard layout:

dpkg-reconfigure console-setup

Accept all default, except changing the origin to Belgium (if you want to use be-latin1).

Update all packages

apt-get update apt-get upgrade

Configure SSH

You still have to generate your SSH keys

sshd-generate

Read More

This how-to explains you how to use SkipFish through a proxy. It will show you how you have to configure Burp Suite and which parameters you need to supply to SkipFish so that all SkipFish’s traffic will flow nicely through Burp Suite. Introduction What is SkipFish? Skipfish is an active web application security …

Read More

The following is a list of event handlers which can be used in HTML code to execute Javascript code. FSCommand(): attacker can use this when executed from within an embedded Flash object onAbort(): when user aborts the loading of an image onActivate(): when object is set as the active element onAfterPrint(): activates …

Read More

This page contains a collection of publicly available secure software development guides. Each guide has its own approach to introducting security in the software development lifecycle. Apple Secure Coding Guide …

Read More

An overview of all options and settings available in the Windows audit policy and user rights assignments. Copyright notice: All information on this page are based on the recommendations made in the “Microsoft Windows Server 2003 Security Guide” at http://go.microsoft.com/fwlink/?LinkId=14845 Audit Policy You can …

Read More

An overview of all options and settings available in the domain policy. Copyright notice: All information on this page are based on the recommendations made in the “Microsoft Windows Server 2003 Security Guide” at http://go.microsoft.com/fwlink/?LinkId=14845 Password Policy Settings The following table includes the …

Read More

This article shows how you can perform a DNS zone transfer using nslookup on Windows and using dig on Linux. From Wikipedia, the free encyclopedia ( http://en.wikipedia.org/wiki/Zone_transfer ): DNS zone transfer, also sometimes known by its (most common) opcode mnemonic AXFR, is a type of DNS transaction. It is one of …

Read More

This page contains a list of URLs that contain good practice guides, audit procedures and technology standards that are freely available. ISF - The Standard Of Good Practice https://www.isfsecuritystandard.com/ The Standard of Good Practice for Information Security (the Standard) is the foremost authority on …

Read More

How to configure OpenSSH to use SSH keys for authentication instead of a password. To connect to a server running openssh To connect to a server running another ssh implementation Server is running openssh To enable logging in, without a password, on machine “remote” from machine “local”, in both cases as user “pete”, …

Read More

This article shows how you can use the WebScarab bean shell to modify requests and responses that are transmitted and received by WebScarab. Description of WebScarab taken from the OWASP WebScarab project website: “WebScarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. …

Read More