How to patch your server against The Heartbleed Bug

4/09/2014 cyb3r.gladiat0r 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3>
 <div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhF8F3vAwnst4IayJY5zYLxQJ_-NQBqWbNlmhPEVZiV0HJTJ7pQWu9FwtvAUEJYWLEIgX9_d9Bem64Sv5Fo31Sy3Gcm3fcavtdzOuyp0vG39gFf-122r39HWCB-2l_fR_VVjbFKISUwlYCg/s1600/How+to+patch+your+server+against+The+Heartbleed+Bug.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="How to patch your server against The Heartbleed Bug" border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhF8F3vAwnst4IayJY5zYLxQJ_-NQBqWbNlmhPEVZiV0HJTJ7pQWu9FwtvAUEJYWLEIgX9_d9Bem64Sv5Fo31Sy3Gcm3fcavtdzOuyp0vG39gFf-122r39HWCB-2l_fR_VVjbFKISUwlYCg/s1600/How+to+patch+your+server+against+The+Heartbleed+Bug.jpg" title="How to patch your server against The Heartbleed Bug" width="318" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</h3>
<h3>
What is the Heartbleed Bug?</h3>
<br />
The Heartbleed Bug is a serious <a href="http://www.hackerschronicle.com/search/label/Vulnerability">vulnerability</a> in the popular <a href="http://www.hackerschronicle.com/search/label/OpenSSL">OpenSSL</a> cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, email, instant messaging (IM) and some virtual private networks (VPNs).<br />
The Heartbleed bug allows anyone on the Internet to read the memory of the systems protected by the vulnerable versions of the OpenSSL software. This compromises the secret keys used to identify the service providers and to encrypt the traffic, the names and passwords of the users and the actual content. This allows attackers to eavesdrop on communications, steal data directly from the services and users and to impersonate services and users. <br />
<br />
<h3>
Before you start</h3>
Check if your OpenSSL version is vulnerable to the <a href="http://www.hackerschronicle.com/search/label/Exploit">exploit</a>. You can check it by typing in your terminal: <span class="highlight pulse">openssl version</span><br />
The result should look something like this:<br />
<div class="command wobble-horizontal">
# openssl version<br />
OpenSSL 1.0.1g 7 Apr 2014  </div>
<br />
<br />
Since we at <a href="http://www.hackerschronicle.com/">Hackers Chronicle</a> already patched our systems at the time of writing this guide, your result will probably be different.<br />
<h3>
What versions are vulnerable?</h3>
Status of different versions:<br />
<ul>
<li>OpenSSL 1.0.1 through 1.0.1f (inclusive) are vulnerable</li>
<li>OpenSSL 1.0.1g is NOT vulnerable</li>
<li>OpenSSL 1.0.0 branch is NOT vulnerable</li>
<li><a href="http://www.hackerschronicle.com/search/label/OpenSSL">OpenSSL</a> 0.9.8 branch is NOT vulnerable</li>
</ul>
<br />
Bug was introduced to OpenSSL in December 2011 and has been out in the wild since OpenSSL release 1.0.1 on 14th of March 2012. OpenSSL 1.0.1g released on 7th of April 2014 fixes the bug.<br />
<br />
Some operating system distributions that have shipped with potentially vulnerable OpenSSL version:<br />
<ul>
<li>Debian Wheezy (stable), OpenSSL 1.0.1e-2+deb7u4</li>
<li><a href="http://www.hackerschronicle.com/search/label/Ubuntu">Ubuntu</a> 12.04.4 LTS, OpenSSL 1.0.1-4ubuntu5.11</li>
<li><a href="http://www.hackerschronicle.com/search/label/CentOS">CentOS</a> 6.5, OpenSSL 1.0.1e-15</li>
<li>Fedora 18, OpenSSL 1.0.1e-4</li>
<li>OpenBSD 5.3 (OpenSSL 1.0.1c 10 May 2012) and 5.4 (OpenSSL 1.0.1c 10 May 2012)</li>
<li>FreeBSD 8.4 (OpenSSL 1.0.1e) and 9.1 (OpenSSL 1.0.1c)</li>
<li>NetBSD 5.0.2 (OpenSSL 1.0.1e)</li>
<li>OpenSUSE 12.2 (OpenSSL 1.0.1c)</li>
</ul>
Operating system distribution with versions that are not vulnerable:<br />
<ul>
<li>Debian Squeeze (oldstable), OpenSSL 0.9.8o-4squeeze14</li>
<li>SUSE Linux Enterprise Server</li>
</ul>
<h3>
Ubuntu</h3>
open your terminal and type in the following:<br />
<span class="command wobble-horizontal">#sudo apt-get update<br />
#sudo apt-get install -y libssl1.0.0 openssl<br />
#openssl version -a <br />
//confirm the "built on" date is >= 2014-04-07<br />
sudo lsof -n | grep ssl | grep DEL <br />
//restart all listed services. Repeat this until no results are returned</span><br />
<br />
<h3>
<a href="http://www.hackerschronicle.com/search/label/Debian">Debian</a></h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">#wget http://security.debian.org/pool/updates/main/o/openssl/libssl1.0.0-dbg_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/openssl_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/libssl1.0.0_1.0.1e-2+deb7u5_amd64.deb<br />
#wget http://security.debian.org/pool/updates/main/o/openssl/libssl-dev_1.0.1e-2+deb7u5_amd64.deb<br />
<br />
#dpkg -i openssl_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl1.0.0_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl1.0.0-dbg_1.0.1e-2+deb7u5_amd64.deb<br />
#dpkg -i libssl-dev_1.0.1e-2+deb7u5_amd64.deb<br />
<br />
#/etc/init.d/apache2 restart<br />
#/etc/init.d/ssh restart</span><br />
<br />
<h3>
CentOS</h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">#yum clean all && yum update "openssl*"</span><br />
<br />
Take note and ensure that it’s specifically <span class="system push highlight">openssl-1.0.1e-16.el6_5.7 (or later)</span> being installed. As this update has just been released, your yum mirror may not have this package yet. If your yum mirror/repository does not yet have this update, you can download and install the RPMs manually from another CentOS yum repository.<br />
<br />
After updating the packages, run the following command to see what processes still have the old, deleted OpenSSL libraries open:<br />
<span class="command wobble-horizontal">#lsof -n | grep ssl | grep DEL</span><br />
<br />
You must restart each process that still has the old libraries open.<br />
<br />
Examples of processes that may still have the old libraries open:<br />
<ul>
<li>mysql</li>
<li>postfix</li>
<li>webmin</li>
<li>openvpn</li>
<li>osad</li>
<li>nrpe</li>
</ul>
<h3>
<a href="http://www.hackerschronicle.com/search/label/Red%20Hat">Fedora/Red Hat</a></h3>
Open terminal and copy or type the following:<br />
<span class="command wobble-horizontal">$ yum update openssl</span><br />
<br />
Restart services that rely on OpenSSL<br />
<span class="command wobble-horizontal">$ lsof | grep libssl | awk '{print $1}' | sort | uniq</span><br />
<br />
<h3>
Test your website against Heartbleed Bug</h3>
<a href="http://possible.lv/tools/hb">Heartbleed Test - provided by possible.lv</a><br />
<a href="http://filippo.io/Heartbleed/">Heartbleed Test - provided by filippo.io </a><br />
<br />
Source: <a href="http://scanarch.com/" target="_blank">Scan Arch</a> </div>

How to patch your server against The Heartbleed Bug

What is the Heartbleed Bug? The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the…

Installing Aircrack on CentOS 6.4 and Ubuntu 13.10

3/11/2014 The Hackers Chronicle 0

<div dir="ltr" style="text-align: left;" trbidi="on">
I've got so many queries about installing <a href="http://www.hackerschronicle.com/search/label/Aircrack" target="_blank">Aircrack</a> suite on <a href="http://www.hackerschronicle.com/search/label/Centos">CentOS</a> or Ubuntu. Today I will show you how to install Wi-Fi cracking suite on both CentOS 6.3 and <a href="http://www.hackerschronicle.com/search/labels/Ubuntu" target="_blank">Ubuntu</a> 13.10<br />
<h3>
Introduction</h3>
<div class="define border-fade">
Aircrack-ng is an 802.11 <a href="http://www.hackerschronicle.com/search/label/WEP" target="_blank">WEP</a> and <a href="http://www.hackerschronicle.com/search/label/WPA" target="_blank">WPA-PSK</a> keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks, as well as the all-new PTW attack, thus making the attack much faster compared to other WEP cracking tools. In fact, Aircrack-ng is a set of tools for auditing wireless networks.</div>
<div class="highlight pop">
Note:</div>
Click on the pics to view screenshots in higher resolution.<br />
<h3>
Ubuntu 13.10</h3>
I've installed Ubuntu 13.10 on my system, Step required to install Aircrack are as follows.<br />
<ol>
<li>Check your system architecture.<br />
 <br /><div class="command wobble-horizontal">
# #uname -ni</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mWxZ3-23U_ObCR3IfbBRzDASuEV0yNgXbM60Jc-YsNjDMwjHyd-K8d4c3RJy1kKydvxD4WY0fZR5EOznYF3S2e3RJlBGDlQupOguKzeA2HgX8TtW-dbjyn62ztx7bVzq3iOOIjXqI-3h/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Installing Aircrack" border="0" height="209" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2mWxZ3-23U_ObCR3IfbBRzDASuEV0yNgXbM60Jc-YsNjDMwjHyd-K8d4c3RJy1kKydvxD4WY0fZR5EOznYF3S2e3RJlBGDlQupOguKzeA2HgX8TtW-dbjyn62ztx7bVzq3iOOIjXqI-3h/s1600/1.png" title="Installing Aircrack" width="320" /></a></div>
<li>Switch to root account <br /><div class="command wobble-horizontal">
# sudo su</div>
</li>
<br />
<li>Install gcc, Kernel headers and make <br /><div class="command wobble-horizontal">
# apt-get install build-essential</div>
</li>
<br />2<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkylUlwOUZJiMuAgUvnhxuYI7v-xvfmUaxZfAxjtV9UzmSUoT1Wsi37OPIKxiRLojtNJl6ypZdnrsiQy9I6TgRx_XFOUiwNJCVzILg7t_syVJMDDb5HQYP7FHqmqYtFlAhhPC6Ga0wXlXC/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="66" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkylUlwOUZJiMuAgUvnhxuYI7v-xvfmUaxZfAxjtV9UzmSUoT1Wsi37OPIKxiRLojtNJl6ypZdnrsiQy9I6TgRx_XFOUiwNJCVzILg7t_syVJMDDb5HQYP7FHqmqYtFlAhhPC6Ga0wXlXC/s1600/2.png" width="320" /></a></div>
<li>Install OpenSSl development <br /><div class="command wobble-horizontal">
# apt-get install libssl-dev</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8kBgbhA28zdZhkQJszjVO34K-9snGWLrJ76sRBoYxCtU9h5zMzAdpTZBPOXsgmC3muMOa_E1pCbgrNz9h6f4Qss6UNTgoCMrred_qWA0oskacN6PO31ew_yF562LYmAceE3eA3mWzNgd4/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="132" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8kBgbhA28zdZhkQJszjVO34K-9snGWLrJ76sRBoYxCtU9h5zMzAdpTZBPOXsgmC3muMOa_E1pCbgrNz9h6f4Qss6UNTgoCMrred_qWA0oskacN6PO31ew_yF562LYmAceE3eA3mWzNgd4/s1600/3.png" width="320" /></a></div>
<li>Download the source of Aircrack-ng <br /><div class="command wobble-horizontal">
# wget http://download.aircrack-ng.org/aircrack-ng-1.2-beta2.tar.gz</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiVNBT3lp6YxIi6o4BoMN0ZAhTxQKfLixIHqhIFPisF2oWP3oVsbPn4zkoVGqYPqfRQ8zOW6SI4TAEnKWqLzlmKR5Gchq96gvW_8-SWRal8nmjP-uS2Y40KbeMBXYOJjW6ZlPtLybmvtfO/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="107" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiVNBT3lp6YxIi6o4BoMN0ZAhTxQKfLixIHqhIFPisF2oWP3oVsbPn4zkoVGqYPqfRQ8zOW6SI4TAEnKWqLzlmKR5Gchq96gvW_8-SWRal8nmjP-uS2Y40KbeMBXYOJjW6ZlPtLybmvtfO/s1600/4.png" width="320" /></a></div>
<li>Untar the tar file <br /><div class="command wobble-horizontal">
# tar -zxvf aircrack-ng-1.2-beta2.tar.gz</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAe_K4HuXn5zjVOmA2-eRvYa7iiS9GwBINKB1C3vfuXAfBLLKDk0PEz8zQFm9F69Vj4UbFvl1Ja8Ckt23aM_e3FKh61AD9B4_Ouc8gO6e65p35G7xjyS4p_o8GHRum4hlrS-XeuMfs1oKR/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="42" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAe_K4HuXn5zjVOmA2-eRvYa7iiS9GwBINKB1C3vfuXAfBLLKDk0PEz8zQFm9F69Vj4UbFvl1Ja8Ckt23aM_e3FKh61AD9B4_Ouc8gO6e65p35G7xjyS4p_o8GHRum4hlrS-XeuMfs1oKR/s1600/5.png" width="320" /></a></div>
<li>Move to aircrack directory and edit common.mak file. <br /><div class="command wobble-horizontal">
# cd aircrack-ng-1.2-beta2<br />
nano common.mak</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtqOkah3b8ro6HDKcsPnRHnoLYxPq4TbNVal4yhyphenhyphen7-U06pjHl-mQTicf1S25Obrc5wOt63lemMMW8Nt4dN_nXOBRyKd_q2uZCXF8WPgzZY-Th8fZCVezymbl0faKlreT5oF2M8fRL91hFE/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="45" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtqOkah3b8ro6HDKcsPnRHnoLYxPq4TbNVal4yhyphenhyphen7-U06pjHl-mQTicf1S25Obrc5wOt63lemMMW8Nt4dN_nXOBRyKd_q2uZCXF8WPgzZY-Th8fZCVezymbl0faKlreT5oF2M8fRL91hFE/s1600/6.png" width="320" /></a></div>
<li>Find CFLAGS line, it should look like CFLAGS ?= -g -W -Wall -O3</li>
<br />
<li>Save and exit</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNs6YZwb8iiLLnLHe7R9oiq27fSlBsqBIT6swgZIHalVgaITbiCTiCPiQRbc3lwhhR5-IEQLJC9X36FPlUtyL0rE39xxZK18fzIPmAd9WenKJxc6HxQQ4C7-rhLuC7hAoNez2sNcIc1v8g/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNs6YZwb8iiLLnLHe7R9oiq27fSlBsqBIT6swgZIHalVgaITbiCTiCPiQRbc3lwhhR5-IEQLJC9X36FPlUtyL0rE39xxZK18fzIPmAd9WenKJxc6HxQQ4C7-rhLuC7hAoNez2sNcIc1v8g/s1600/7.png" width="320" /></a></div>
<li>Compile and install the source <br /><div class="command wobble-horizontal">
# make install</div>
</li>
<br />
<li>Update Aircrack Suite <br /><div class="command wobble-horizontal">
# airodump-ng-oui-update</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrPgHvIz59d-nQoFN_ISjVr1O5h6Cu40mRj50kE0A7HgI31vDYgNlZni96xQplYpLj03z1zKiYz4J4uCORnu21qblK98Dl-z7B7amlq3wG3rwVFYsuTw80KnkpqfIMN2Pzz-aaxORPr6J4/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="49" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrPgHvIz59d-nQoFN_ISjVr1O5h6Cu40mRj50kE0A7HgI31vDYgNlZni96xQplYpLj03z1zKiYz4J4uCORnu21qblK98Dl-z7B7amlq3wG3rwVFYsuTw80KnkpqfIMN2Pzz-aaxORPr6J4/s1600/8.png" width="320" /></a></div>
</ol>
Congrats, Aircrack suite is now installed.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmfvH85Uz1QkcZK-wC-o5amh9mnm6STjpyo_pAg2bypbNALbgvFQEldqf2TjFUvlPIBXF1i2NKbx3GIj8B2O79zMAnasW8hDLcgTeBD_56Z-CNzuhnghdIXxiv2PuOZrdQSij5A6wAl0vq/s1600/9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="74" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmfvH85Uz1QkcZK-wC-o5amh9mnm6STjpyo_pAg2bypbNALbgvFQEldqf2TjFUvlPIBXF1i2NKbx3GIj8B2O79zMAnasW8hDLcgTeBD_56Z-CNzuhnghdIXxiv2PuOZrdQSij5A6wAl0vq/s1600/9.png" width="320" /></a></div>
<br />
<h3>
CentOS 6.4</h3>
<ol>
<li>Check your system architecture <br /><div class="command wobble-horizontal">
# uname -ni</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXj1gfbpV87Li960jkTZR3tnakWDWSgXBq5nrpC0VC7G9b1M_kJalTxt9IEKYqHNw7oTOF5GVVzuZ2UqSykGFs0S8slQHUYYHLQnHlqjLLza-KWD1NROozepxZAWKT4j0Kg5u6wsTO5H6G/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXj1gfbpV87Li960jkTZR3tnakWDWSgXBq5nrpC0VC7G9b1M_kJalTxt9IEKYqHNw7oTOF5GVVzuZ2UqSykGFs0S8slQHUYYHLQnHlqjLLza-KWD1NROozepxZAWKT4j0Kg5u6wsTO5H6G/s1600/1.png" width="320" /></a></div>
<li>Open Browser and check for appropriate RPM package from<div class="system pop">
http://pkgs.repoforge.org/aircrack-ng/</div>
</li>
<br />
<li>Copy the link for RPM package and download that package <br /><div class="command wobble-horizontal">
# wget http://pkgs.repoforge.org/aircrack-ng/aircrack-ng-0.9.3-1.el5.rf.i386.rpm</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA8Q_hGimI4oLuT36T1Z0vhKtLa2NfUBBhQRNftYYnFvuHicCMcOCIabzO7z4pbWROMwWiWkpNHYuwOjbe5ZfpoSSUuvHQQS-ojgRFHQ3GsFavaffPXgmlfRwcZ5VizM1YMCcErgPtkqJg/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="237" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiA8Q_hGimI4oLuT36T1Z0vhKtLa2NfUBBhQRNftYYnFvuHicCMcOCIabzO7z4pbWROMwWiWkpNHYuwOjbe5ZfpoSSUuvHQQS-ojgRFHQ3GsFavaffPXgmlfRwcZ5VizM1YMCcErgPtkqJg/s1600/2.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1t1ScgXAHosovv87fhkUM5MxsVfR2YwloaOFdeCOIiXjxerBTc3hkeixQFmLqS47W5Y1MB__segnGz4Mo8wGop4pbDne6HZ8GcGEPv3OI-lbkRkCy5rXnxRqfGZ4ziLw4ZdIjoL70Hx-F/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1t1ScgXAHosovv87fhkUM5MxsVfR2YwloaOFdeCOIiXjxerBTc3hkeixQFmLqS47W5Y1MB__segnGz4Mo8wGop4pbDne6HZ8GcGEPv3OI-lbkRkCy5rXnxRqfGZ4ziLw4ZdIjoL70Hx-F/s1600/3.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<li>Install the package <br /><div class="command wobble-horizontal">
# rpm -ivh aircrack-ng-0.9.3-1.el5.rf.i386.rpm</div>
</li>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_jLNg3lQIhiJJdo0hGu8LPO1ZqLxaKsyojiNSlUEFbWaCALD8Hzl0cQ2nh7KWUUk67l4MhmaRz23-x-I0_8f3HnnlVcnJ8niJurH1FHACHgM4dmDfpvKlnYmgW4jIrh9FK5p2leqwLWGS/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj_jLNg3lQIhiJJdo0hGu8LPO1ZqLxaKsyojiNSlUEFbWaCALD8Hzl0cQ2nh7KWUUk67l4MhmaRz23-x-I0_8f3HnnlVcnJ8niJurH1FHACHgM4dmDfpvKlnYmgW4jIrh9FK5p2leqwLWGS/s1600/4.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</ol>
<div class="highlight">
<strong>Congrats</strong></div>
Aircrack Suite has been installed on your Machine.<br />
We will soon post about cracking Wi-Fi with CentOS/Ubuntu</div>

Aircrack Centos Hacking Tools Linux Tutorials Ubuntu Installing Aircrack on CentOS 6.4 and Ubuntu 13.10

I've got so many queries about installing Aircrack suite on CentOS or Ubuntu. Today I will show you how to install Wi-Fi cracking suite on both CentOS 6.3 and Ubuntu 13.10 Introduction Aircrack-ng is an 802.11 WEP and W…

Ubuntu 13.10 Kernel Exploit

2/21/2014 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUzKdvFGwYsPPLYutyQUQA5WqqWeneoTubm7ajR6GHLDx2fDjpWtdMVFfw0r0IiaoPWwrL18QXYDrLJuXY86Q4DupDSK1fXUR1wIh8RHJRib4C0e5B1JejWU7kH-8PG786QANPh5yxS8Xt/s1600/ubuntu+kernel+exploit.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Ubuntu 13.10 Kernel Exploit" border="0" height="187" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUzKdvFGwYsPPLYutyQUQA5WqqWeneoTubm7ajR6GHLDx2fDjpWtdMVFfw0r0IiaoPWwrL18QXYDrLJuXY86Q4DupDSK1fXUR1wIh8RHJRib4C0e5B1JejWU7kH-8PG786QANPh5yxS8Xt/s1600/ubuntu+kernel+exploit.jpg" title="Ubuntu 13.10 Kernel Exploit" width="400" /></a></div>
<br />
A security issue affects Ubuntu 13.10 releases of Ubuntu and its derivatives<br />
<b>Saran Neti</b> reported a flaw in the ipv6 UDP Fragmentation Offload (UFI) in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service (panic). (<div class="highlight pop">CVE-2013-4563</div>)<br />
<b>Mathy Vanhoef</b> discovered an error in the the way the ath9k driver was handling the BSSID masking. A remote attacker could exploit this error to discover the original MAC address after a spoofing attack.  (<div class="highlight pop">CVE-2013-4579</div>
)<br />
<b>Andrew Honig</b> reported a flaw in the Linux Kernel's kvm_vm_ioctl_create_vcpu function of the Kernel Virtual Machine (KVM) subsystem. A local user could exploit this flaw to gain privileges on the host machine. (<div class="highlight pop">CVE-2013-4587</div>) Various other issues were also addressed.<br />
Andrew Honig reported a flaw in the apic_get_tmcct function of the Kernel Virtual Machine (KVM) subsystem if the Linux kernel. A guest OS user could exploit this flaw to cause a denial of service or host OS system crash. (<div class="highlight pop">CVE-2013-6367</div>)<br />
Andrew Honig reported an error in the Linux Kernel's Kernel Virtual Machine (KVM) VAPIC synchronization operation. A local user could exploit this flaw to gain privileges or cause a denial of service (system crash).<br />
Source:<a href="http://www.ubuntu.com/usn/usn-2117-1/" target="_blank">Ubuntu</a> </div>

Exploit Hacking Kernel Linux News OS Ubuntu Vulnerability Ubuntu 13.10 Kernel Exploit

A security issue affects Ubuntu 13.10 releases of Ubuntu and its derivatives Saran Neti reported a flaw in the ipv6 UDP Fragmentation Offload (UFI) in the Linux kernel. A remote attacker could exploit this flaw to cause…

Classic start menu in Ubuntu 11.04

7/20/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIvsTavCfw38WJ9R0kg_rM3x0oQrWs94jla5ymIG8iRuSucMNU3JsGZN9st_I6mYpUAIxd4dQQwGKNYmwi08-lJ2uQy4-ALZQWZL0IpfOU8EnB-aiKMj-kOoagdg6xO0sDCZafSAL-0yo/s1600/StartMenu.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgIvsTavCfw38WJ9R0kg_rM3x0oQrWs94jla5ymIG8iRuSucMNU3JsGZN9st_I6mYpUAIxd4dQQwGKNYmwi08-lJ2uQy4-ALZQWZL0IpfOU8EnB-aiKMj-kOoagdg6xO0sDCZafSAL-0yo/s1600/StartMenu.png" width="282" /></a></div>
<br />
<div>
<span class="Apple-style-span">In Ubuntu 11.04 Unity, you might prefer the left launcher bar but dislike the searching-style app menu in top-panel. Mac-like dock has classic app menu but there also has many useless shortcut icons that already shown in left launcher bar.</span></div>
<div>
<span class="Apple-style-span">Although we cannot replace the top-panel with the classic gnome-panel, there’s a classic start menu can be added onto left launcher bar.</span></div>
<br />
<div>
<span class="Apple-style-span">Steps:</span></div>
<div>
<span class="Apple-style-span"><strong>1.)</strong> Open up a terminal window and install cardapio from PPA:</span></div>
<div class="command wobble-horizontal">
sudo add-apt-repository ppa:cardapio-team/unstable<br />
sudo apt-get update<br />
sudo apt-get install cardapio</div>
<br />
<br />
<span class="Apple-style-span"><strong>2.)</strong> Create a launcher by:</span><br />
<br />
<div class="command wobble-horizontal">
mkdir ~/.local/share/applications<br />
gksudo gedit ~/.local/share/applications/Cardapio.desktop</div>
<br />
<br />
<span class="Apple-style-span">copy and paste following :</span><br />
<br />
<div class="content shadow-radial">
[Desktop Entry]<br />
Version=1.0<br />
Type=Application<br />
Terminal=false<br />
Exec=cardapio<br />
Name=menu<br />
Icon=gnome-main-menu</div>
<br />
<br />
<div>
<span class="Apple-style-span">Then close and save it.</span></div>
<span class="Apple-style-span"><strong>3.)</strong> In nautilus file browser, navigate to “<span class="system pop">.local/share/applications </span>” (Press Ctrl+H to view hidden files) and then drag and drop <span class="system pop">Cardapio.desktop </span> onto left Launcher.</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://ubuntuguide.net/wp-content/uploads/2011/05/StartMenu_on_Launcher-214x360.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span class="Apple-style-span"><img border="0" height="320" src="http://ubuntuguide.net/wp-content/uploads/2011/05/StartMenu_on_Launcher-214x360.png" width="190" /></span></a></div>
<br />
<div>
<span class="Apple-style-span"><strong>4.)</strong> Adjust the pop-up menu location.</span></div>
<div>
Before this, when you click the icon on Launcher it pops-up the menu in middle area of screen. To adjust the pop-up location, open up <br />
<div class="system pop">
CompizConfig-Setting-Manager  </div>
(run <br />
<div class="command wobble-horizontal">
sudo apt-get install compizconfig-settings-manager </div>
 if not installed) and click into the configuration page of <strong>Place Windows</strong>.</div>
<div>
<span class="Apple-style-span">In Fixed Window Placement tab, click New under Windows with Fixed Positions:</span></div>
<div>
<em><span class="Apple-style-span">type “name=cardapio” (without quotes) after Positioned windows<br />
check “Keep in work area”<br />
set proper value of x or y positions</span></em></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://ubuntuguide.net/wp-content/uploads/2011/05/Place_windows1-500x291.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><span class="Apple-style-span"><img border="0" height="186" src="http://ubuntuguide.net/wp-content/uploads/2011/05/Place_windows1-500x291.png" width="320" /></span></a></div>
<div>
<em><span class="Apple-style-span">Keep in touch to get new updates.</span></em><br />
<br />
<em><span class="Apple-style-span" style="-webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; color: black; font: x-small arial; letter-spacing: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px;"><em>Regards,</em><br />
<em>Hardeep Singh</em><br />
<em>(</em><a href="http://www.fb.com/h4rdeep" target="_blank"><em>www.fb.com/h4rdeep</em></a><em>)</em></span></em> </div>
</div>

Linux Linux Tutorials OS Tricks Ubuntu Classic start menu in Ubuntu 11.04

In Ubuntu 11.04 Unity, you might prefer the left launcher bar but dislike the searching-style app menu in top-panel. Mac-like dock has classic app menu but there also has many useless shortcut icons that already shown i…

How to patch your server against The Heartbleed Bug

Installing Aircrack on CentOS 6.4 and Ubuntu 13.10

Ubuntu 13.10 Kernel Exploit

Classic start menu in Ubuntu 11.04

Popular

Comments

Archive