PTES Technical Guidelines The Penetration Testing Execution Standard. This section is designed to be the PTES technical guidelines that help define certain procedures to follow during a penetration test. Something to be aware of is that these are only baseline methods that have been used in the industry. They will need to be continuously updated and changed upon by the community as well as within your own standard. Savita Bhabhi In Goa. Guidelines are just that, something to drive you in a direction and help during certain scenarios, but not an all encompassing set of instructions on how to perform a penetration test. Download and install OpenVAS in Kali. Kali Linux is a flavor of Linux targeted at digital forensics experts and penetration pen testers. The SuperSized Ethical Hacking Bundle Secure Your Own Network Learn How to Become A Certified Pentester After 78 Hours Of Training. Zed Attack Proxy. Zed Attack Proxy is also known as ZAP. This tool is open source and is developed by AWASP. It is available for Windows, UnixLinux and Macintosh. Nikto-Web-Server-Vulnerability-Scanner-for-Linux.png' alt='Install Nikto On Windows 7' title='Install Nikto On Windows 7' />What are we doing We are embedding the OWASP ModSecurity Core Rule Set in our Apache web server and eliminating false alarms. Why are we doing this ESXi USBVMware ESXi OSCentOS. ERA II sa intaluje podstatne jednoduchie ako WOG 3. Intalan sbor s aktulnou verziou ERA sta skoprova do zloky s istou intalciou Heroes 3. Terminator is a terminal emulator program that lets you use multiple splited and resized Linux terminals, all at once on a single screen. Install Nikto On Windows 7' title='Install Nikto On Windows 7' />Think outside of the box. Tools Required. Selecting the tools required during a penetration test depends on several factors such as the type and the depth of the engagement. In general terms, the following tools are mandatory to complete a penetration test with the expected results. Operating Systems. Selecting the operating platforms to use during a penetration test is often critical to the successfully exploitation of a network and associated system. As such it is a requirement to have the ability to use the three major operating systems at one time. Google Chrome For Windows Ce 6.0. on this page. This is not possible without virtualization. Mac. OS XMac. OS X is a BSD derived operating. With standard command shells such as sh, csh, and bash and native network utilities that can be used during a penetration test including telnet, ftp, rpcinfo, snmpwalk, host, and dig it is the system of choice and is the underlying host system for our penetration testing tools. Since this is a hardware platform as well, this makes the selection of specific hardware extremely simple and ensures that all tools will work as designed. VMware Workstation. VMware Workstation is an absolute requirement to allow multiple instances of operating systems easily on a workstation. VMware Workstation is a fully supported commercial package, and offers encryption capabilities and snapshot capabilities that are not available in the free versions available from VMware. Without the ability to encrypt the data collected on a VM confidential information will be at risk, therefore versions that do not support encryption are not to be used. The operating systems listed below should be run as a guest system within VMware. Linux. Linux is the choice of most security consultants. The Linux platform is versatile, and the system kernel provides low level support for leading edge technologies and protocols. All mainstream IP based attack and penetration tools can be built and run under Linux with no problems. For this reason, Back. Track is the platform of choice as it comes with all the tools required to perform a penetration test. Windows XP7. Windows XP7 is required for certain tools to be used. Many commercial tools or Microsoft specific network assessment and penetration tools are available that run cleanly on the platform. Radio Frequency Tools. Frequency Counter. A Frequency Counter should cover from 1. Hz 3 GHz. A good example of a reasonably priced frequency counter is the MFJ 8. Frequency Counter. Frequency Scanner. A scanner is a radio receiver that can automatically tune, or scan, two or more discrete frequencies, stopping when it finds a signal on one of them and then continuing to scan other frequencies when the initial transmission ceases. These are not to be used in Florida, Kentucky, or Minnesota unless you are a person who holds a current amateur radio license issued by the Federal Communications Commission. The required hardware is the Uniden BCD3. T Bearcat Handheld Digital Scanner or PSR 8. GRE Digital trunking scanner. Spectrum Analyzer. A spectrum analyzer is a device used to examine the spectral composition of some electrical, acoustic, or optical waveform. A spectrum analyzer is used to determine whether or not a wireless transmitter is working according to federally defined standards and is used to determine, by direct observation, the bandwidth of a digital or analog signal. A good example of a reasonably priced spectrum analyzer is the Kaltman Creations HF4. RF Spectrum Analyzer. USB adapter. An 8. USB adapter allow for the easy connection of a wireless adapter to the penetration testing system. There are several issues with using something other than the approved USB adapter as not all of them support the required functions. The required hardware is the Alfa AWUS0. NH 5. 00m. W High Gain 8. Wireless USB. External Antennas. External antennas come in a variety of shapes, based upon the usage and with a variety of connectors. All external antennas must have RP SMA connectors that are compatible with the Alfa. Since the Alfa comes with an Omni directional antenna, we need to obtain a directional antenna. The best choice is a panel antenna as it provides the capabilities required in a package that travels well. The required hardware is the L com 2. GHz 1. 4 d. Bi Flat Panel Antenna with RP SMA connector. A good magnetic mount Omni directional antenna such as the L com 2. GHz9. 00 MHz 3 d. Bi Omni Magnetic Mount Antenna with RP SMA Plug Connector is a good choice. USB GPSA GPS is a necessity to properly perform an RF assessment. Without this its simply impossible to determine where and how far RF signals are propagating. There are numerous options are available, therefore you should look to obtain a USB GPS that is supported on operating system that you are using be that Linux, Windows and Mac OS X. Software. The software requirements are based upon the engagement scope, however weve listed some commercial and open source software that could be required to properly conduct a full penetration test. Software. URLDescription. Windows Only. Maltego. The defacto standard for mining data on individuals and companies. Comes in a free community version and paid version. A vulnerabilty scanning tool available in paid and free versions. Nessus is useful for finding and documenting vulnerabilities mostly from the inside of a given network. IBMs automated Web application security testing suite. ProductsRetina. aspx. Retina is an an automated network vulnerability scanner that can be managed from a single web based console. It can be used in conjunction with Metasploit where if an exploit exists in Metasploit, it can be launched directly from Retina to verify that the vulnerability exists. Nexpose is a vulnerability scanner from the same company that brings you Metasploit. Available in both free and paid versions that differ in levels of support and features. Open. VAS is a vulnerability scanner that originally started as a fork of the Nessus project. The actual security scanner is accompanied with a daily updated feed of Network Vulnerability Tests NVTs, over 2. January 2. 01. 1. HP Web. Inspect performs web application security testing and assessment for complex web applications. Supports Java. Script, Flash, Silverlight and others. TUVEindex. php keyswf. HP SWFScan is a free tool developed by HP Web Security Research Group to automatically find security vulnerabilities in applications built on the Flash platform. Useful for decompiling flash apps and finding hard coded credentials, etc. Backtrack Linux. 1One of the most complete penetration testing Linux distributions available. Includes many of the more popular free pentesting tools but is based on Ubuntu so its also easily expandable. Can be run on Live CD, USB key, VM or installed on a hard drive. Samurai. WTF Web Testing Framework. A live Linux distribution built for the specific purpose of web application scanning. Install NVIDIA Drivers in RHELCent. OSFedora and DebianUbuntuLinux Mint. Photoshop Vector Psd Files. During an interview, in Finland Linus Torvalds the man behind the exceptional idea of Linux and git source code management, gave his Middle Finger Salute to NVIDIA in frustration with the support provided by the company for the Linux platform. Torvalds is depressed with the fact that NVIDIA is not supporting Linux, enough. It gets even more worse with the truth that NVIDIA is getting hot with every passing day in Android based mobile handset market which literally means that NVIDIA is not supporting Linux. Install NVIDIA Drivers in Linux. The outburst of anger and frustration was the result of the question asked by a Linux user. The question was Optimus feature of NVIDIA which lets the user to switch OnOff Graphics Processing Unit GPU to save power came late for Linux, as compared to other Operating Systems. NVIDIA was very much clear when asked about this, and clearly stated that NVIDIA is not going to support Linux to the point, Windows and Mac would get. This issue of NVIDIA is not new and the users have been complaining for years regarding this. The Advanced Micro Devices AMD has tried to fill this with its own open source driver. NVIDIA refused to release Open Source driver saying that it can not make critical informations publicly available. On the other hand, the act of Linus Torvalds of showing middle finger on camera was criticized, some said that it does not suit an intellectual like him, other said it was not professional at all, while some said that even Torvalds is a human and it was just an outburst. Most of the todays distro comes with an open source NVIDIA alternative called Nouveau. Nouveau render graphics perfectly, however it lacks 3. D support. Hence to Install Proprietary NVIDIA driver. Nouveau must be stopped from starting automatically, which we will be calling as blacklisting throughout the article. Installation of NVIDIA Drivers in RHELCent. OS and Fedora. First, install needed Development packages using YUM command as shown. Development Tools. Before installing NVIDIA drivers, you need to know your driver product type by using following command. VGASample Output. VGA compatible controller 0. NVIDIA Corporation GF1. GL Quadro 6. 00 1. Once you know your driver name, then go to NVIDIA official website and download required drivers for your system. Download drivers using following link. Downloadindex. aspx. Disable Nouveau Driveropen etcmodprobe. Next create a new initramfs file and taking backup of existing. Reboot the machine. Login into command mode using AltF4 ALTF5 as root. Once you in command line mode, next go to the folder where youve downloaded NVIDIA driver and run the script as show. If any dependency, you need to Yum the required packages. NVIDIA Linux. Once installation is complete, generate xorg. X configure. Copy xorg. X1. 1xorg. conf. cp rootxorg. X1. 1xorg. conf. Now switch to X Window as root user by typing. Launch NVIDIA configuration window and set the Resolution, manually, and at last click on Save to X Configuration File and quit. For reference, follow the screen shot added below. Installation of NVIDIA Drivers DebianUbuntuLinux Mint. First, check the information about your supported Graphics Card by issuing following command. VGASample Output. VGA compatible controller 0. NVIDIA Corporation GF1. GL Quadro 6. 00 1. Next add a repository under etcaptsources. Save and close it. Disable Nouveau Driver. Open etcmodprobe. Save and close the file. Next, do a system update and then install NVIDIA drivers and required Kernel packages using apt get command. Stop the X service gdm. Generate new xorg. X configure. Copy xorg. X1. 1xorg. conf. cp rootxorg. X1. 1xorg. conf. Now switch to X Window as root user by typing. Open NVIDIA configuration wizard and set the Resolution, manually, and at last click on Save to X Configuration File and quit. NVIDIA Driver Settings. Congrats Your installation and configuration of NVIDIA Graphics Driver is complete. Thats all for now, If you gets stuck at a place during installation and could not fix it yourself, you can always ask for guidance in comment section. Do a favor for us by sharing the article.