What are the Top 5 BT3 programs to learn?

[DJ Jackalope]

I'm not even sure if you can say -only- 5 BT3 programs to learn, but from those of you who use it on a daily basis, what are the ones you find yourself loading on a constant rate?

I am working to familiarize myself with the BT3 release and just want to make sure that I am concentrating on the right things.

I know that there are many different genres of programs on there that obviously are designed to do different things. What are the best generic all around ones...I think, more specficially, is the second part of my question.

thanks ahead of time...

[Thorn]

Re: What are the Top 5 BT3 programs to learn?

I'm not even sure if you can say -only- 5 BT3 programs to learn, but from those of you who use it on a daily basis, what are the ones you find yourself loading on a constant rate?

I am working to familiarize myself with the BT3 release and just want to make sure that I am concentrating on the right things.

I know that there are many different genres of programs on there that obviously are designed to do different things. What are the best generic all around ones...I think, more specficially, is the second part of my question.

thanks ahead of time...

Lessee...

Probably the biggest one is nmap. hydra and medusa are two others you'll want to know. Both do brute force password attacks.

If you want to learn to use BT3 in a "real-world" scenario, download the De-ICE Pentest LiveCDs from here: http://de-ice.hackerdemia.com/doku.php

The PenTest LiveCD disks presented by De-ICE.net are fully-functioning servers that provide a safe and secure way to learn and practice Penetration Test skills.

A real important point is that these LiveCDs allows you to perform attacks on an isolated LAN, without worrying about accidentally wipe something off your main PC or violating your ISP's TOS.

Start wirh the two Level 1 CDs. These were created with BT2 in mind as an attacking platform. BT3 will work, although some of the tools are located in different directories than they were in BT2, so you'll have to take that into account if you get stuck and try to follow a spoiler. You'll need a PC to run the CD and act as the target, as well a router supplying DHCP, and some Cat5 cables.

DaKahuna, theprez98, and I have all tried them and we all enjoyed the challenge.

[DJ Jackalope]

Re: What are the Top 5 BT3 programs to learn?

Holy wow, Thorn...
that is a fabulous amount of information and a good starting point. Thank you so so much for your time and info!!!

[Thorn]

Re: What are the Top 5 BT3 programs to learn?

You're welcome, Lope.

Have fun with them. You might want to join the Heorot Net forums. Heorot is run by Thomas Wilhelm (aka Grendel on the DC Forums), the creator of the De-ICE CDs.

In searching the net, I've actually found that there are several "DIY PenTest" targets. The De-ICE CDs are nice, because they're a "live CD", so it's just a matter of popping it in the CD drive of a PC and running them. The downside is that they are Linux only, due to the Windows licensing issues. However, there are some free DIY PenTest targets that are designed to be installed on a WinServer platform if you happen to have a license for an extra server or can get one someplace. Foundstone makes several in their "Hacme" series, including the Hacme Bank, Hacme Books and Hacme Travel.

http://www.foundstone.com/us/resources-free-tools.asp

[xor]

Re: What are the Top 5 BT3 programs to learn?

I'm not even sure if you can say -only- 5 BT3 programs to learn, but from those of you who use it on a daily basis, what are the ones you find yourself loading on a constant rate?

I am working to familiarize myself with the BT3 release and just want to make sure that I am concentrating on the right things.

I know that there are many different genres of programs on there that obviously are designed to do different things. What are the best generic all around ones...I think, more specficially, is the second part of my question.

thanks ahead of time...

There are also many fine books written or co-written by folks you know on this list. You should check them out as they are an excellent starting point.

xor

PS If you have the $$$ you could always take the training. They are one of the better bargains out there. You might even already know the folks. Maybe you could work something out with them over time.

[streaker69]

Re: What are the Top 5 BT3 programs to learn?

You're only really ub3rl33t if you can crack da weps, since that is what it seems most of the younglings over at RE think that's all Backtrack is good for.

[renderman]

Re: What are the Top 5 BT3 programs to learn?

Metasploit is damn useful to learn

The usual wireless tools are nice as well since all the patches are done for you.

I'd just poke through the menu's and learn all I can from the README's and man pages for what's installed.

Render

[xor]

Re: What are the Top 5 BT3 programs to learn?

You're only really ub3rl33t if you can crack da weps, since that is what it seems most of the younglings over at RE think that's all Backtrack is good for.

Fo shizzle my nizzle

xor

What people don't know is that Streaker69 is actually African American Amish. The worlds first. Afri-amish.

[DJ Jackalope]

Re: What are the Top 5 BT3 programs to learn?

Xor and streaker, I just laughed my nizzle off reading that post!

Fo shizzle my nizzle

xor

What people don't know is that Streaker69 is actually African American Amish. The worlds first. Afri-amish.

[streaker69]

Re: What are the Top 5 BT3 programs to learn?

Fo shizzle my nizzle

xor

What people don't know is that Streaker69 is actually African American Amish. The worlds first. Afri-amish.

I also recently converted to Judism so I'm JewAfriAmishAmerican

[Greyhatter]

Re: What are the Top 5 BT3 programs to learn?

I also recently converted to Judism so I'm JewAfriAmishAmerican

Wha? May God help you drive that buggie though Ohio then. You'll fill all the digital photo cards for sure if you're not run off the road first. ;~)

[DJ Jackalope]

Re: What are the Top 5 BT3 programs to learn?

Don't run into Mel Gibson.

Wha? May God help you drive that buggie though Ohio then. You'll fill all the digital photo cards for sure if you're not run off the road first. ;~)

[DaKahuna]

Re: What are the Top 5 BT3 programs to learn?

If you are serious about wanting to learn BackTrack3 check out the Offensive Security 101 course from www.offensive-security.com. From what I have been told this is a great course and is run by the guys behind BT3. As part of the course you not only get instructional .PDF files but video's as well and access to their on-line lab so you can do the exercises in the course materials without having to make a huge investment in a home lab.

If wireless is your thing, I recently successfully completed their WiFu course and certification exam and can highly recommend that for someone who wants to get a deeper understanding of how wireless works as well as how to use the aircrack-ng suite (airmon-ng, airodump-ng, airreplay-ng, etc.)

[xor]

Re: What are the Top 5 BT3 programs to learn?

If you are serious about wanting to learn BackTrack3 check out the Offensive Security 101 course from www.offensive-security.com. From what I have been told this is a great course and is run by the guys behind BT3. As part of the course you not only get instructional .PDF files but video's as well and access to their on-line lab so you can do the exercises in the course materials without having to make a huge investment in a home lab.

If wireless is your thing, I recently successfully completed their WiFu course and certification exam and can highly recommend that for someone who wants to get a deeper understanding of how wireless works as well as how to use the aircrack-ng suite (airmon-ng, airodump-ng, airreplay-ng, etc.)

So you liked it a lot? I want to take both. Was it you who introduced me to the trainer at Defcon; I forget.

xor

[mubix]

Re: What are the Top 5 BT3 programs to learn?

You could always take the training that they offer: http://www.offensive-security.com/

They also have some great videos on that page as well.