[blog.rayfoo] Infosec, DFIR, tech geekery, thoughts and whatnot

21May/100

Metasploitable!

Metasploit now has a utility to allow people to practise pentesting on a controlled environment.  Termed "Metasploitable", I'm guessing it is because it is "pwnable" ;)

It's basically an Ubuntu 8.04 server on a VMware 6.5 image, running plenty of old and vulnerable services.  Yummy!

It is available to Metasploit Express customers from the Customer Center, and for the rest of us peeps, it's freely available for download via Bittorrent. (a bit slow, but I'll try to seed this for as long as possible when I managed to get it entirely)

More info at the blog post.

[via Metasploit Blog]

8Feb/100

(Terminal) Easter Eggs

Friend of mine showed me a link to this video (http://www.youtube.com/watch?v=b-OhjAD937s) showing some easter eggs that can be done within Ubuntu's terminal.

Apparently it can be done on any linux terminal, as long as you have the correct version of apt or aptitude installed, so give it a try and enjoy!

The commands that can be run are:

  • apt-get moo
  • aptitude moo
  • aptitude moo -v
  • aptitude moo -vv
  • aptitude moo -vvv
  • aptitude moo -vvvv
  • aptitude moo -vvvvv
  • aptitude moo -vvvvvv
5Feb/100

Installing Ubuntu 7.04 server in VirtualBox

As part of the fiddling around with Metasploit, there came the need to install a victim box to test things on (we don't want to be attacking a live site don't we?  Especially one that we don't own...), so here's a modification of the instructions found at Offensive Security's walkthrough for our needs.

I wanted to run the victim machines in VirtualBox instead of VMware Player, and after some experimentation and Googling around with the crashing issue, here're the instructions on how to get things up and running.

Host OS: Ubuntu 9.10
VirtualBox 3.1.2
Guest OS: Ubuntu 7.04 Server