Followers

Powered by Blogger.
Showing posts with label networking. Show all posts
Showing posts with label networking. Show all posts
Saturday, August 8, 2009

Howto setup Second IP address or Virtual IP address to your Networkcard in ubuntu

If you are a Network Administrator some time you need to assign more than ONE ip address (second ipaddress) to your network card of Ubuntu machine. For this you need to edit the /etc/network/interfaces file by adding the following lines . See the example below and make change according to your ip address settings

#vi /etc/network/interfaces

auto eth0
iface eth0 inet static
address 192.168.0.5
netmask 255.255.255.0
network x.x.x.x
broadcast x.x.x.x
gateway x.x.x.x

auto eth0:1
iface eth0:1 inet static
address 192.168.0.50
netmask 255.255.255.0
network x.x.x.x
broadcast x.x.x.x
gateway x.x.x.x

after entering the values save this file and you need to restart networking services in ubuntu using the following command to take effect of our new ipaddress.

After entering all the details you need to restart networking services using the following command

#/etc/init.d/networking restart

Friday, July 17, 2009

Web based (Http) Network Traffic / Bandwidth Monitoring Tool: Darkstat

DarkStat is a simple Packet Sniffing Network Traffic/Bandwidth monitoring Tool for Ubuntu and other Linux distributions. DarkStat gives simple web based output with nice graphs and statistics , it will automatically refreshed. Darkstat uses a very low footprint and the memory, CPU usage.

How to install darkstat in Ubuntu / debian
$ sudo apt-get install darkstat ( or use Synaptic package manager)

For Running darkstat
$ sudo darkstat -i eth0
or for wireless
$ sudo darkstat -i wlan0
Now darkstat will start and run in background (You will not get any output now!!!!!)

Open your Browser
type http://127.0.0.1:667 in address bar

Thursday, July 16, 2009

Howto Check your webserver for vulnerabilities : Nikto a website scanner



Nikto is an Open Source (GPL) web server scanner which scans your webserver against more than 3500 dangerous files/CGIs, outdated version checking, It has a very good plugin support
Official site
To install in ubuntu / debian
$ sudo apt-get install nikto

Full installation of nikto will offer lot of options
$ nikto will give the list of options

For simple test

$ sudo nikto -h www.yoursite.com

output will we like this
abc@abc-desktop:~$ sudo nikto -h www.xxxx.com
- Nikto v2.03/2.04
---------------------------------------------------------------------------
+ Target IP: 210.222.232.234 (fake value)
+ Target Hostname: www.xxxx.com
+ Target Port: 80
+ Start Time: 2009-07-17 22:06:29
---------------------------------------------------------------------------
+ Server: Apache/2.2.9 (Debian) PHP/5.2.6-1+lenny3 with Suhosin-Patch mod_perl/2.0.4 Perl/v5.10.0
- Allowed HTTP Methods: GET, HEAD, POST, OPTIONS, TRACE
+ OSVDB-877: HTTP method ('Allow' Header): 'TRACE' is typically only used for debugging and should be disabled. This message does not mean it is vulnerable to XST.
+ OSVDB-0: ETag header found on server, inode: 3965147, size: 2857, mtime: 0x433a88acc26c0
+ PHP/5.2.6-1+lenny3 appears to be outdated (current is at least 5.2.6RC4)
+ mod_perl/2.0.4 appears to be outdated (current is at least 5.8)

Saturday, July 11, 2009

mz (Mausezahn) : Network Traffic Generation Tool ( as wll as Network Jamming Tool) for Ubuntu / Debian Linux

mz (Mausezahn) is a versatile packet creation and network traffic generation tool. Using this tool You can Jam a Network.

This utility is used for Stress Testing of Networks and Firewall Testing. also for Finding weaknesses in network software or appliances.

Canonical does not provide updates for mz. Some updates may be provided by the Ubuntu community.
Don't Try to make headache to your Network Administartor

$ sudo apt-get install mz

this will send a specified packet to a destination port
$ sudo mz eth0 -t udp "sp=1, dp=80, p=aa:ff:00:11:22:33"
sp: source port dp: destination port p: packet

Flooding a network ,

Inject infinite frames as fast as possible:


$ mz eth0 -c 0 "aa bb cc dd ...."

Inject 100,000 frames with a 50 msec interval:

$ mz eth0 -c 100000 -d 50msec "aa bb cc dd ...."

I have purposefully made some simple mistakes in commands

About Me