Entries Tagged as ''

Install Nessus on Ubuntu 9.04

In the Vulnerability Scanner world, many commercial products, including Retina, Qualyst and FoundStone, still, there are some open source that widely adopted. Nessus is one of them. The following are the list of Vulnerablility Scanners.

  • FoundStone (Macfee)
  • HarrisSTATGuardian (Harris)
  • ISS (IBM)
  • Nessus (Open Source)
  • OVAL
  • Qualys
  • Retina (eEye Digital Security)

For Nessus, since it’s open source, it’s easy to install on most of Linux distribution. In here, I use Ubuntu 9.04. You can check your distribution by

cat /etc/lsb-release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=9.04
DISTRIB_CODENAME=jaunty
DISTRIB_DESCRIPTION=”Ubuntu 9.04″

Then, we can just follow the steps below:

  1. sudo apt-get install nessus (client)
  2. sudo apt-get install nessusd (server)
  3. sudo nessus-mkcert
  4. sudo nessus-adduser
  5. sudo /etc/init.d/nessusd restart
  6. Go to menu Application->Internet->Nessus to open Nessus client.
  7. After input the target(s), you can start scan.

Screenshot-Scanning network from localhost

Astro Boy

When my childhood
At the time not have TV at home
Still could sing Astro Boy

To Astro Boy 2009

Trac on Ubuntu

I am looking for some platform can manage some projects and share some ideas. I have used Twiki which implemented by Perl and I have also used Tikiwiki which implemented by PHP. However, people recommended that Trac is good for development project. The benefits are as follows:

  • SVN to manage code check-in/check-out
  • Wiki page to have document for each changes and implementations.
  • Bug preview and bug tracking
  • More…

So, I followed the TracOnUbuntu to install. I still need time to figure out how to maintain the system.

trac_logo

Besides the link above, there are two things need to be considered.

  1. sudo chmod -R +w /var/lib/trac/, otherwise, the web page will throw exceptions.
  2. sudo htpasswd -c /etc/apache2/dav_svn.passwd username, otherwise, you can’t login to revise wiki page.

Shell Programming: test operators

Shell programming can execute test command for strings, integers and files. It’s commonly used when process conditional commands by using if-then-else appraoch.

You can compare two strings to see whether they are equivalent or not. You also can test a single string to see whether it has a value or not.

String

The test command can perform comparaion for integers.

Integers

All the file test options return true only if the file exists.

File

Korn Shell Pattern Expressions

A pattern expression is any word consisting of ordinary characters and one or more shell pattern-matching characters. The pattern-matching characters are the familiar *, ?, and [...], as well as any of these pattern-matching expressions.

pattern-expression