Hi,

Im looking for programs for my linux box for general hacking and security [lets be honest here].

Are there any programs for tracing incoming IP adresses ?

Any programs that will connect to that IP and be able to do certain things, such as change backgrounds, eject CD-ROMs explore files [cool stuff ]

Any programs you'd recommend ?

Thanks for your help,

SuS

Linux has a whole bunch of secutrity tools which are included with most distros. But a big percentage of them arent your regular easy, point n click windowze script kiddie apps. You have to combine some to create something that resembles an advanced trojan. But as for self security u can just use netstat ? to see incoming connections, and even cooler to sniff packets you can use tcpdump and there are others. Also the greatest scanner in the world runs on linux... NMAP. Also most exploits come out in linux source so u get to usually compile exploits first = ). A little suggestion if your going to be hackign linux boxes.. be alot more careful, linux admins are not as stupid as nt/2k admins. Linux's loggin methods are very advanced and sometimes impossible to clear.

NESSUS /w nmap for security testing..
like said prior there isn't much script kiddie programs for linux.
For Packet Sniffing... Ethereal is a good packet sniffer
and you can use http://www.visualroute.com to run a visual traceroute on the ip address or your "trace".

hth
-dissolutions

http://www.insecure.org/tools.html is all you need, they aren't ALL for Linux but most of them are.

Download them all, learn them all, love them all

welcome ST ..how you doing...long time no see

good to see you at GSO ...cool

yeah cheers mate....were getting there...how are the lads back SFDC....not seen chris about for a bit...he still grafting away as usual..

not had much of a chance to get around places as much.. due to this place, keeping up with it can be a mare at time ...you know that

dont even find time to sploit as much these days....but managed to find one or two the other day...(vivisimo post in exploits example)

pass my regards to your crew

catch you later...

anytime ..cheers

i will drop by your place later for a chat ..if your on line

Nice site Mr. Tiger, good networking forums as well as a more "white-hat" type of focus. I'll see if I can't contribute a bit over there as well.

--P>G>>

Welcome to GSO, ST!

Great to see you here.

Cheers for the welcome guys, appreciated catch you around

if you want to see incomming traffic use tcpdump, as far as the eject cdrom desktop background stuff don't waste your time, go be productive and learn something usefull

can someone tell me something about intrustion programs?

or some stuff

I?m surprised nobody said anything about the Phrack Tools Armory?
In each Phrack issue, there is usually an article called the "Tools Armory" ? This is always filled with great tools for both *nix and sometimes windows (mostly *nix)?

If you haven?t heard of Phrack, check it out @ www.phrack.org ? oh and you might want to move out of that cave you?ve been living in

recipie for intrusion:

find which servers are listening (a server is a program, not a couple of registry settings that uncripple an os), discover what version those servers are, find an exploit for that particular version, exploit, intall root kit, try to cover your tracks and hope to god they don't have an ids (network or host are the two flavors)

this is why we don't have widespread linux worms, no monoculture, and as such there isn't a little app that will aquire a l-box for you automagically

http://www.shorewall.net/
To configure your firewall.

PAM
For secure authentification.

Snort
Intrusion Detection

MRTG
Monitoring

not sure if soemone said snort , but thats a good security program.
*edit* didnt read page 2..........

You are the best tool to ensure the security of your linux machine. No matter how many tools you have, if you don't know how to use them, or how to interpret their data, then your not properly securing it! Have a look at these tools, but make sure you also have a look at some networking stuff (books etc.), and don't rely on the tools to do all the work for you.