Simple Pen-test Using Nmap, Nikto, Bugtraq, Nslookup and Other Tools

Droop's Box: Simple Pen-test Using Nmap, Nikto, Bugtraq, Nslookup and Other Tools

Droops from http://infonomicon.org/ asked me to do a security scan on one of his boxes. I made a video of it that might be helpful to some wanting to do a vulnerability assessment. In this video I use Nmap, Nikto, Bugtraq and Nslookup to find out information about his box, what’s running on it and how it might be penetrated. His IP has been changes since and he has patched his problems so don’t bother hitting the ip in this tutorial.

Check it out and let me know what you think:

http://www.irongeek.com/i.php?page=videos/droops1

I think Droops plans on putting part of this video in an upcoming Infonomicon TV ep.

Its cool to watch. And verry usefull if you want to test your own computer.

After you complete a pen-test like this, do you write up a report? I think accompanying the video with this report would be very useful.

yeah i would appreciate a report too , if you have it with now, can you share it?

No real report, I just told Droops what I found via Email. I still have the Nikto log if that would help.

What IronGeek has provided is a *very* basic pen test. I'm certain he didn't go on to show the actual technique of compiling, reporting and running the exploit because of liability concerns (rightly so). In a real pen test, there is usually a POC (proof of concept) section where you publish specific details on the actual success rates of known (sometimes unknown) vulnerabilities on the box/device.

Just a suggestion for ya Irongeek. Many folks here have never done a real pen test (some don't even know what that's short for) so you may want to note in your video tut that you are only covering the initial steps of the process, not a complete penetration test.

my useless 2 cents as always,

th13 :)

PS
Change your name to "the video professor" and sell your videos on cut rate cable stations. ;)

I guess “Vulnerability Assessment” would have been a better label. I just wanted to give folks a basic idea of how to look for problems using those tools, especially Bugtraq.

Well, people keep asking me questions like "port 25 is open, what could happen?" so I figured I'd point them in the right direction to finding out.

Edit:Sorry, the above makes no sence because the post it was a response to was deleted.

You contribute a ton of useful material here. It's very rare that I can find even a suggestion to add to it. Keep it up man.

:)

I'm new here, and I hope I'm posting in the right place. When I use nmap -A -P0 ip, I get:

starting nmap 3.81 (http://insecure.org/nmap) at 2005-7-19 12:19 Eastern Daylight Time

..then nothing happens. Am I doing something wrong, or is it just taking a long time?

Im on a 2.2ghz Windows Xp box, running SP1 (5.1 - 2600), on broadband cable connection (4mb)

Yes, it could take quite awhile. give it at least 5 min. Are you sure the IP is up?

Quote:

---

What IronGeek has provided is a *very* basic pen test. I'm certain he didn't go on to show the actual technique of compiling, reporting and running the exploit because of liability concerns (rightly so). In a real pen test, there is usually a POC (proof of concept) section where you publish specific details on the actual success rates of known (sometimes unknown) vulnerabilities on the box/device.

Just a suggestion for ya Irongeek. Many folks here have never done a real pen test (some don't even know what that's short for) so you may want to note in your video tut that you are only covering the initial steps of the process, not a complete penetration test.

---

First - Irongeek - thanks for this post - great stuff.

Second - th13 - do you have information on sources for conducting 'good' pen testing?

Thanks!

I took your advice, gave it about ten minutes, and it did finish.

Now for my Nikto problem. It seems I can only find tarz, which I can't seem to open with windows?

Thanks for your help, as a newbie I found it quite helpful as a beginning point.

I use a Debian based system and just used Apt-get to install it. You may need to compile it yourself. What distro do you use? Also, I assume you found a web server running on the box you scanned?

you cannot use *nix binaries on on XP system w/out some typle of emulation..

the easiest thing is probably run a live linux CD (whoppix/knoppix, SuSe)

Did he say he was on an XP box? I could have missed that. This is the most feed back I've gotten on one of my tuts in quite awhile.

Im using Windows Xp, with SP1. I'm scanning the box that hosts both my webserver and multiple ircds.

I'd see if I could find a Linux boot cd then that has Nikto. If you use the newest version of Knoppix with unionfs you should be able to do an:

apt-get install nikto

and get it.

Will do. Thanks for the help, its greatly appreciated.

Infonomicon TV 5 is out, including Irongeeks PenTest:

http://www.infonomicon.org/video.php

For anyone that viewed the InfonomiconTV video, wth did he call that little blue box. It sounded like he said Eek-C? The portion of the video talks about using fwdnet.net.

bump