Flux-for-back… Awesome!

Thanks to the time spent by Brigante on the project “Fluxbox for BackTrack“, a new desktop environment will be soon available for your favorite distribution. Results are not bad at all:

As you know, FluxBox is a window manager very light on resources, so it’s perfect if you hate long loading times, or if you use a not very recent machine. Let me give you just a few tips, waiting its insertion into the repository…

To switch from KDE to Fluxbox and vice-versa, you should use Dragon, the new BackTrack command-line panel:

To configure Fluxbox, the customized script flux-for-back is provided (but, if you want, you can also use Flux Menu. See the first screenshot…):

Ok guys, stay tuned!

NetDiscover (libnet purge)

Many of you know netdiscover (http://nixgeneration.com/~jaime/netdiscover/), which is, according to the site:

“Netdiscover is an active/passive address reconnaissance tool, mainly developed for those wireless networks without dhcp server, when you are wardriving. It can be also used on hub/switched networks.”

Netdiscover is very good tool, based on libpcap (http://www.tcpdump.org/) and libnet (http://sourceforge.net/projects/libnet-dev/). No problems with libpcap, but libnet is difficult to obtain/build on recent operating systems, since it’s not more developed.

I’ve written a patch for NetDiscover 0.3-beta7 (the last release) that eliminates libnet dependency. To apply it:

# cd netdiscover_directory # wget http://backtrack.it/~crossbower/netdiscover0.3-beta7-no-libnet.patch
# patch -p1 < netdiscover0.3-beta7-no-libnet.patch
patching file src/ifaces.c
patching file src/ifaces.h
patching file src/main.c

Then you must comment some lines from configure.ac:

AC_INIT([netdiscover], [0.3-beta7], [jpenalbae@gmail.com])
AC_CONFIG_AUX_DIR([build-aux])
AM_INIT_AUTOMAKE([-Wall -Werror])
AC_PROG_CC dnl Checks for header files. dnl check for pcap.h
AC_CHECK_HEADER(pcap.h,, AC_MSG_ERROR(Cannot find pcap.h - You need libpcap installed.))

#dnl check for libnet.h
#AC_CHECK_HEADER(libnet.h,, AC_MSG_ERROR(Cannot find libnet.h - You need libnet 1.1.x installed.))

AC_CONFIG_HEADERS([config.h]) AC_CONFIG_FILES([Makefile src/Makefile doc/Makefile]) AC_OUTPUT

printf "\nRun ./update-oui-database.sh if you want a updated MAC vendors database.\n\n" 

And finally compile and install with:

# ./autogen
# ./configure
# make
# make install 

Et voila! If you are lazy (like me) this is a prepatched archive (with updated OUI): http://backtrack.it/~crossbower/netdiscover-patched.tar.gz

Enjoy

Update: My patch has been added to the development version of NetDiscover (http://netdiscover.svn.sourceforge.net/viewvc/netdiscover/trunk/ChangeLog):

Netdiscover 0.3-beta7 (Currently working on it)
   * Emanuele Acri <crossbower@gmail.com>: Libnet injection replaced by pcap
   ...

I’m really happy

BackTrack 4 R1 – Public Release

There’s not much to say…

Backtrack 4 R1 “chiccas”

After many sleepless nights and bloody battles that have changed the physiognomy of backtrack’s developers (group photo just before the release), I wanted to show you some chiccas (goodies) of the new BackTrack 4 R1.

First of all, by popular demand, the network configuration software WICD has been updated to version 1.7.0. Not only that, there are interfaces for all tastes:

So if you are a shell’s fanatics, like those cool guys who have won the last edition SecSum CAT, I hope you will appreciate the curses interface that allows you to switch between wireless networks in a more human manner (if you prefer airodump-ng + iwconfig, well, I recommend this).
For ordinary mortals the new gtk GUI will be just fine

Many changes also in the Snort package: improved installation process and the possibility to choose between two different web interfaces: BASE and Snorby.

And because we like eye-candy :

And last but not least, the introduction of Dragon, a new CLI Control Panel for BackTrack.

With this tools we hope to automate a number of operations that users have so far done manually or using external scripts (more or less official, more or less working).

Dragon can easily handle the installation of new tools, installed now following a new category-based method, after the genocide of the annoying “bulk mega metapackages”

In addition the selection of the default desktop manager, the management of firmware and kernel-source, is now possible even for the less experienced.

If you want more information about Dragon, Emanuele Gentili wrote a post on his blog and made an usage video: have a look!

That’s all folks, cya

PS: This would not have been possible without the cooperation of all. In particular I wish to greet Emanuele “emgent” Gentili and Marco “white_sheep” Rondini, without which we would not have Dragon and “credits –candycandy”(try it out…)

Vita da sviluppatore BackTrack (ovvero come fingere di avere un esistenza emozionante)

Almeno il logo fa la sua figura

Come avrete già compreso dal titolo questo post contiene una vena sarcastica. Talvolta ci capita di ricevere email piuttosto “particolari”, del tipo: “Ragazzi siete fantastici! Ma cosa fate tutto il giorno?” (il che potrebbe suonare come un insulto, ma noi non siamo molto suscettibili…), oppure: “Vi stimo fratelli, includete anche il mio programma in backtrack???”.

Questo post nasce da alcune riflessioni in seguito a questi folkloristici messaggi. Cerchero’ di rispondere ad alcuni dubbi che molti hanno (“ma chi gestisce il repository? Ognuno include quello che vuole?!?”, e di solito segue: “ma se e’ cosi, che vi costa aggiungere il mio t00l super c00l, scritto in visual basic?”).

Vediamo com’é veramente la vita da sviluppatore BackTrack…

BackTrack 4 Final Released

BackTrack 4 final è stata finalmente rilasciata, dopo un lungo periodo di sviluppo e perfezionamento, che hanno portato questa release ad avvicinarsi alla perfezione nelle funzionalità e nella forma.

Ringraziamo tutti voi della community per gli sforzi compiuti nello sviluppo, senza dimenticarci del grande aiuto ricevuto per testing delle nuove funzionalità quando venivano implementate. E per questo speriamo possiate apprezzare ancora di piu’ questa distribuzione, dove il contributo italiano è stato decisivo.

Questa release include un nuovo kernel, un repository più grande ed un piu’ esteso set di strumenti (di cui molti personalizzati e disponibili solo su BackTrack). Ma cosa ancora più importante, correzioni di tutti (beh, la maggior parte …) i bugs importanti di cui eravamo a conoscenza.

Abbiamo spostato BackTrack in un sito dedicato interamente ad essa, dove sarete in grado di tenervi aggiornati sullo stato di sviluppo e le novità. Il nuovo sito è: http://www.backtrack-linux.org/.

Speriamo sarete d’accordo con noi sul fatto che questa è la versione di BackTrack migliore che sia mai stata realizzata dal team – ed abbiamo deciso di chiamarla opportunamente con il nome in codice “pwnsauce”.

Articolo preso da backtrack.it (scritto da me originariamente su quel blog).