Golismero.py Web tool in BackTrack 5 R3

What is GoLISMERO?

GoLISMERO is a web spider is able to detect vulnerabilities and format results a very useful when starting a web audit.

It's for?

GoLISMERO is intended to be a first step when starting a web security audit.

Every time we face a new URL, would not it be great to have easily and quick all the links, forms with parameters, to detect possible URL vulnerable and in addition to being presented so that gives us an idea of ​​all points of entry where we could launch attacks? GoLISMERO lets us do all this.

Click Here to Watch Video[Tutorial]

Learning with examples

Remember: For execute GoLismero you need python 2.7.X or abobe.

Below are several examples and case studies, which are the best way to learn to use a security tool.

1. Getting all links and forms from a web, with all its parameters, extended format:

GoLISMERO.py –t google.com

1. Getting all links, on compact mode, and colorize output:

GoLISMERO.py –c –m –t google.com

1. Getting only links. Removing css, javascript, images and mails:

GoLISMERO.py --no-css--no-script --no-images --no-mail –c –A links –m –t google.com

Or, reduced format:

GoLISMERO.py –na –c –A links –m –t google.com

1. Getting only links with params and follow redirects (HTTP 302) and export results in HTML:

GoLISMERO.py –c –A links --follow –F html –o results.html –m –t google.com



And HTML generated code:

1. Getting all links, looking for potentially vulnerable URL and using an intermediate proxy to analyze responses. The URLs or vulnerable parameters are highlighted in red.

GoLISMERO.py –c –A links --follow -na –x –m –t terra.com



Check as ZAP Proxy capture request:



VIDEO :

Install Nessus in Kali Linux

 Click Here to Download Nessus

In computer security, Nessus is a proprietary comprehensive vulnerability scanning program. It is free of charge for personal use in a non-enterprise environment. Its goal is to detect potential vulnerabilities on the tested systems.

According to surveys done by sectools.org, Nessus is the world's most popular vulnerability scanner, taking first place in the 2000, 2003, and 2006 security tools survey.Tenable estimates that it is used by over 75,000 organizations worldwide.

History :

The "Nessus" Project was started by Renaud Deraison in 1998 to provide to the Internet community a free remote security scanner. On October 5, 2005, Tenable Network Security, the company Renaud Deraison co-founded, changed Nessus 3 to a proprietary (closed source) license. The earlier versions appear to have been removed from the official website since then. The Nessus 3 engine is still free of charge, though Tenable charges $100/month per scanner for the ability to perform configuration audits for PCI, CIS, FDCC and other configuration standards, technical support, SCADA vulnerability audits, the latest network checks and patch audits, the ability to audit anti-virus configurations and the ability for Nessus to perform sensitive data searches to look for credit card, social security number and many other types of corporate data.

In July of 2008, Tenable sent out a revision of the feed license which will allow home users full access to plugin feeds.A professional license is available for commercial use.

The Nessus 2 engine and a minority of the plugins are still GPL, leading to forked open source projects based on Nessus like OpenVAS and Porz-Wahn.Tenable Network Security has still maintained the Nessus 2 engine and has updated it several times since the release of Nessus 3.

Nessus 3 is available for many different Unix-like and Windows systems, offers patch auditing of UNIX and Windows hosts without the need for an agent and is 2-5 times faster than Nessus 2.

On April 9, 2009, Tenable released Nessus 4.0.0. On February 15, 2012, Tenable released Nessus 5.0.

VIDEO : Install Nessus in Kali Linux

Install Indicator Reminder for Ubuntu/Linux Mint

indicator reminder for ubuntu :

Indicator Reminder is an indicator app specially designed for Ubuntu to set schedule reminders. It is build using the development tool Quickly and written in Python using GTK+. Indicator Reminder is licensed under the GNU General Public License version 3. These reminders can be configured to play a sound, show a notification, and/or run a command. Want to wake up in the morning? Schedule a reminder every day with music to wake you up.
Indicator Reminder has a powerful date/time selection feature that allows you to express recurring dates/times in plain English. For example: "every day", "every Monday , "every other", "every weekday", "every 30 minutes", and more!. They can also be set to repeat minutely or hourly.

To install indicater reminder in Ubuntu/Linux Mint

• sudo add-apt-repository ppa:bhdouglass/indicator-remindor


• sudo apt-get update


• sudo apt-get install indicator-remindor

or install Reminder-qt via this command:

• sudo add-apt-repository ppa:bhdouglass/indicator-remindor


• sudo apt-get update


• sudo apt-get install remindor-qt

 

VIDEO

How to Recover Deleted Files From Pendrive

Introduction

• fatback is a tool in Backtrack 5 which is used to recover the deleted files from FAT(file Allocation Table ) file system.


• Here fatback first read the FAT image file system then it will recovered all deleted file .


• This tool was developed in  year 2000-2001 at DoD (Department of Defence ) Computer Forensic Lab by SrA Nicholas Harbour.


• fatback  is also  useful  for investigation windows filesystem .

VIDEO :