Compile Linux kernel 2.6

Step # 1 Get Latest Linux kernel code

Visit http://kernel.org/ and download the latest source code. File name would be linux-x.y.z.tar.bz2, where x.y.z is actual version number.

root@asheesh#cd /tmp
root@asheesh#wget http://www.kernel.org/pub/linux/kernel/v2.6/linux-x.y.z.tar.bz2


Step # 2 Extract tar (.tar.bz2) file

root@asheesh# tar -xjvf linux-2.6.25.tar.bz2 -C /usr/src
root@asheesh# cd /usr/src


Step # 3 Configure kernel
root@asheesh# apt-get install gcc (if gcc is not installed)
root@asheesh#make menuconfig

Step # 4 Compile kernel

Start compiling to create a compressed kernel image
root@asheesh# make

Start compiling to kernel modules:
root@asheesh# make modules
root@asheesh#make modules_install

Step # 5 Install kernel

Compiled kernel and installed kernel modules.
root@asheesh#make install

Step # 6: Create an initrd image

Type the following command at a shell prompt:
root@asheesh# cd /boot
root@asheesh# mkinitrd -o initrd.img-2.6.37 2.6.37


Step # 7 Modify Grub configuration file
- /boot/grub/menu.lst (before Edit Please take backup)

Open file using vi or gedit:
root@asheesh# vi /boot/grub/menu.lst

title Debian GNU/Linux, kernel 2.6.25 Default
root (hd0,0)
kernel /boot/vmlinuz root=/dev/hdb1 ro
initrd /boot/initrd.img-2.6.25
savedefault
boot



Remember to setup correct root=/dev/hdXX device. Save and close the file. If you think editing and writing all lines by hand 
is too much for you, try out update-grub command to update the lines for each kernel in /boot/grub/menu.lst file. Just type 

the command:
root@asheesh#update-grub



Step # 8 : Reboot computer and boot into your new kernel
root@asheesh# reboot

Problem in Installation - Armitage

Problem while Connection Mysql Database

solution

1)msf > db_driver

2)msf > db_driver mysql

3)root@bt:/pentest/exploits/framework3# mysql -u root -p

4)mysql> CREATE USER msf3@localhost IDENTIFIED BY 'test';

5)mysql> CREATE DATABASE msf3;

6)mysql> GRANT ALL PRIVILEGES ON msf3.* TO msf3@localhost;


Another Problem while Installing if you are using sqlite3
then

root@bt:/pentest/exploits/armitage# ./armitage.sh

password is blank i.e

DB Connect String -

Armitage Setup

To install Armitage in BackTrack,

1)root@bt:~# apt-get update

2)root@bt:~# apt-get install armitage

3)root@bt:~# msfrpcd -f -U msf -P test -t Basic

4)root@bt:~# /etc/init.d/mysql start



5)root@bt:/pentest/exploits/armitage# ./armitage.sh


In BackTrack, the default MYSQL credentials are root / toor and for PostgreSQL,
if using sqlite3 credential is blank password

6)select the "Use SSL" checkbox, verify the rest of the settings and click "Connect".

Microsoft DRM technology (msnetobj.dll) ActiveX Multiple Remote Vulnerabilities

Detail of POC can be viewed
http://www.exploit-db.com/exploits/15061/
http://www.securityfocus.com/bid/43345/info

Microsoft DRM technology (msnetobj.dll) ActiveX Multiple Remote Vulnerabilities
by

Asheesh Kumar Mani Tripathi


# Vulnerability Discovered By Asheesh kumar Mani Tripathi

# email informationhacker08@gmail.com

# company www.aksitservices.co.in

# Credit by Asheesh Anaconda

# Date 18th Sep 2010

# Description: Microsoft DRM technology (msnetobj.dll) ActiveX suffers from multiple remote vulnerabilities such as buffer overflow, integer overflow and denial of service (IE crash). This issue is triggered when an attacker convinces a victim user to visit a malicious website.

The "GetLicenseFromURLAsync" function does not handle input correctly.
Remote attackers may exploit this issue to execute arbitrary machine code in the context of the affected application, facilitating the remote compromise of affected computers. Faile exploit attempts likely result in browser crashes.

Detail of POC can be viewed
link:http://www.exploit-db.com/exploits/15061/
link:http://www.securityfocus.com/bid/43345/info

Problem :No Internet in Backtrack 4

Problem :No Internet in Backtrack 4 BT4

1)start the Network ..

In command line type
bt# /etc/init.d/networking start

or Menu -> Services -> NETWORK -> Start NETWORK

Then Configure Network Card

Static IP address

ifconfig eth0 192.168.1.2

For variable subnet mask
ifconfig eth0 192.168.1.2 netmask 255.255.255.224


Add a default gateway:

route add default gw 192.168.1.1 eth0

Replace the IP address with your default gateways


Assign DNS servers:

echo nameserver 200.1.1.1 > /etc/resolv.conf


For DHCP

dhcpcd eth0

Metasploit db_create error

msf > db_create
[-]
[-] Warning: The db_create command is deprecated, use db_connect instead.
[-] The database and schema will be created automatically by
[-] db_connect. If db_connect fails to create the database, create
[-] it manually with your DBMS's administration tools.

Solution
Just use

msf > db_driver sqlite3

or
msf > db_connect

Installing Oracle Client using TOAD

1)Install the oracle instant client. (instantclient_10_2)
Unzip the files to a directory, and then copy the path of this directory to the clipboard.

2)Add this directory to the PATH environmental variable.
right click on My Computer, go to the Advanced tab, and click 'Environment Variables'. Under System variables, find 'Path'. Select it, and click edit. ctrl-v to paste the directory into the string, and say OK. e.g.:

Before:C:\Perl\bin\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\

After: C:\Perl\bin\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\Common Files\Roxio Shared\DLLShared\;C:\Program Files\Common Files\Roxio Shared\10.0\DLLShared\;C:\instantclient_10_2


3)In the same window, under 'User variables for ...', Click the New button. Call the variable 'TNS_ADMIN'. ctrl-v to paste the directory path into the 'variable value' field. Say OK, and close out the 'My Computer' properties windows.

e.g Varaible name TNS_ADMIN
variable value C:\instantclient_10_2


4)Create a file called 'TNSNAMES.ORA' in your instant client installation directory. In this file designate the connection parameters for your database. Mine looked something like this:

DB_ALIAS =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = ip.add.re.ss)(PORT = 1521))
)
(CONNECT_DATA =
(SID = orcl)
(SERVER = DEDICATED)
)
)

replace the DB_ALIAS, ip.add.re.ss, port, and SID with your settings.


5)Reset your computer, fire up Toad, and then open a new connection. You should see DB_ALIAS as an option under the database field. Set your username and password, hit connect