maemo.org - Talk - Pentesting with IT 2008 OS

maemo.org - Talk (https://talk.maemo.org/index.php)

- OS2008 / Maemo 4 / Chinook - Diablo (https://talk.maemo.org/forumdisplay.php?f=29)

- - Pentesting with IT 2008 OS (https://talk.maemo.org/showthread.php?t=20648)

Re: Pentesting with IT 2008 OS

w3af seems to be mostly python, so it should be possible

Re: Pentesting with IT 2008 OS

Ok so w3af is running I just have to test it more to make sure it is fully working, there is a python2.5-pyopenssl that can be used an seems to work

Re: Pentesting with IT 2008 OS

Quote:

MiniDemon:~/workbench/1_script/w3af# python w3af
w3af>>> plugins
w3af/plugins>>> output console,textFile
w3af/plugins>>> output
Enabled output plugins:
textFile
console
w3af/plugins>>> output config textFile
w3af/plugin/textFile>>> set fileName output-w3af.txt
w3af/plugin/textFile>>> set verbosity 10
w3af/plugin/textFile>>> back
w3af/plugins>>> output config console
w3af/plugin/console>>> set verbosity 0
w3af/plugin/console>>> back
w3af/plugins>>> back
w3af>>> plugins
w3af/plugins>>> plugins
command not found
w3af/plugins>>> audit osCommanding
w3af/plugins>>> audit
Enabled audit plugins:
osCommanding
w3af/plugins>>> back
w3af>>> target
w3af/target>>> target
command not found
w3af/target>>> set target http://google.com/?q=
w3af/target>>> back
w3af>>> start
Found 1 URLs and 1 different points of injection.
The list of URLs is:
- http://google.com/
The list of fuzzable requests is:
- http://google.com/ | Method: GET | Parameters: (q)
Starting osCommanding plugin execution.
100% [================================================== ==] 1/1

Seems the CLI works like a charm

Quote:

MiniDemon:~/workbench/1_scripts/w3af# ./w3af -g
Traceback (most recent call last):
File "./w3af", line 93, in <module>
main()
File "./w3af", line 69, in main
core.ui.gtkUi.main.main(profile)
File "/root/workbench/1_scripts/w3af/core/ui/gtkUi/main.py", line 652, in main
MainApp(profile)
File "/root/workbench/1_scripts/w3af/core/ui/gtkUi/main.py", line 287, in __init__
toolbut_startstop = entries.ToolbuttonWrapper(toolbar, 2)
File "/root/workbench/1_scripts/w3af/core/ui/gtkUi/entries.py", line 326, in __init__
self.image = box.get_children()[0]
AttributeError: 'gtk.Image' object has no attribute 'get_children'

Error in sys.excepthook:
Traceback (most recent call last):
File "/root/workbench/1_scripts/w3af/core/ui/gtkUi/helpers.py", line 269, in _crash
gtk.main_quit()
RuntimeError: called outside of a mainloop

Original exception was:
Traceback (most recent call last):
File "./w3af", line 93, in <module>
main()
File "./w3af", line 69, in main
core.ui.gtkUi.main.main(profile)
File "/root/workbench/1_scripts/w3af/core/ui/gtkUi/main.py", line 652, in main
MainApp(profile)
File "/root/workbench/1_scripts/w3af/core/ui/gtkUi/main.py", line 287, in __init__
toolbut_startstop = entries.ToolbuttonWrapper(toolbar, 2)
File "/root/workbench/1_scripts/w3af/core/ui/gtkUi/entries.py", line 326, in __init__
self.image = box.get_children()[0]
AttributeError: 'gtk.Image' object has no attribute 'get_children'

But the GTK user interface is broke, Cli for the win anyway

Re: Pentesting with IT 2008 OS

Great!
Could you upload a deb once you et the gtk working?
Thanx

Re: Pentesting with IT 2008 OS

I am not really a programmer so getting the gtk ui to work may be abit too much for me to do, but I don't see whats wrong with just useing the Cli insted?

Re: Pentesting with IT 2008 OS

we could always ask qwerty12

Re: Pentesting with IT 2008 OS

Could do, but im happy enough useing w3af's cli

Re: Pentesting with IT 2008 OS

:/ since the latest update w3af stoped working, I had reflashed an updated went to install the libs python needs an im getting

MiniDemon:~/WorkBench/w3af/extlib/pygoogle# python setup.py install
Traceback (most recent call last):
File "setup.py", line 2, in <module>
from distutils.core import setup
ImportError: No module named distutils.core

Any ideas?

I asm missing python2.5-sdk :|

Re: Pentesting with IT 2008 OS

Thanks to all for a great thread!

I'm having some trouble with netdiscover, it is having trouble fitting on the screen. Is there something I'm missing? Redirecting output to a file doesn't help, since the file still has the screen-formatting stuff in it.

Someone mentioned having trouble with nokismet.... I installed it on my N800 after re-flashing the OS (I'm at 4.2008.30-2 now) and it runs well. I had to install libpcap seperately and it still has the issue with leaving the WiFi card in limbo, but it is working fine otherwise.

Walt

Re: Pentesting with IT 2008 OS

On the subject of libpcap, I am not finding it anywhere. I was following the instructions someone left in another thread (red pill mode, install ncurses-base and libpcap prior to installing kismet) and was able to locate the listed nurses-base and kismet, but not libpcap. Where can I find it? How to install? Please bear in mind I am new to the tablet and just discovered the red pill mode, so the more detailed instructions, the better...