Penetration Tests With Nessus (Chapter 1) Nessus İle Sızma Testleri

Penetration Tests With Nessus (Chapter 1) Nessus İle Sızma Testleri

   Aralık 28, 2017       Berk Düşünür

---

Hello  everyone. Today I will write to you about "Nessus Vulnerability Scanner"

This is the first part of my wiriting about nessus  in this section I will talk about simple scans and setup 

You can follow us on twitter @berkdusunur

Okay let's start :)

Nessus Linux Installation

You should first download the appropriate for your system.

You can view the packages in this;

https://www.tenable.com/products/nessus/select-your-operating-system 

I downloaded the debian package.  Let's go to setup :)


dpkg  -i Nessus-7.0.0-debian6_amd64.deb 

We got the activation code after opening Tenable membership. I then connected with the 8834 port scanner and entered the necessary information

Meanwhile I downloaded the "metasploitable 2" virtual machine.  Then started broadcasting with VirtualBox

FOr a short time IP Address for vulnerability researcher
Now right click on the new scan option

I will choose a simple network scan to be an example

after...

We enter the target name and ip address 212.83.175.136

This part asks if you want to do the scanning at the widespread ports or not

This section asks how to perform a scan on the web application.

We started scanning

Continues to scan I will have a coffee :) Nessus gives  more healthier result than its competitors.

I am using nessus with remote server because  I do not have to wait for slow scans

Many security vulnerabilities have been achieved.

In the second part we will explain how to exploit these vulnerabilities.

Thank you for reading.

E-Mail for your questions berkdusunurx@gmail.com

Read More

What is fail2ban? İnstallation and Usage

What is fail2ban? İnstallation and Usage

   Aralık 01, 2017       Berk Düşünür

---

What is Fail2Ban? İnstallation and Usage

Hello  everyone. Today I will write to you about Fail2Ban systems

You can follow us on twitter @berkdusunur

Okay let's start :)

What is fail2ban?

As technology advances, methods of attack, as well as protection methods, are developing. 

Fail2ban is a nice python application that allows you to reject your server's log files for a period of time that you determine again the IP address of a failed login attempt on a number you specify.

How To İnstall Fail2Ban

I am remotely connected to a linux hosting server

First I update packages

"apt-get update"      "apt-get upgrade"

 Then install the required package with "apt-get install fail2ban"

Usage

I have not upgraded any packages I have already installed

Bckup Fail2Ban Main Configuration File

All configuration files are found under /etc/fail2ban directory. The main configuration file is /etc/fail2ban/jail.conf. Its a good idea to take backup of main config file to avoid merges during upgrades. Take local copy of /etc/fail2ban/jail.conf file as shown below:

cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local

Once the Fail2ban configuration file is copied, you need to make changes and additions to the jail.local file. Open the "jail.local" file with any text editor (vim, vi, nano etc.) and make the changes as follows.

Ok folks. There are many settings here. ignoreip, bantime, findtime, maxretry,

For now I will only configure the maxretry setting

This default is five

I have no other setup to do. I will do brute force on my ssh service

Ok this is the attacker's ip address = 80.211.160.46

"proxychains hydra -s 2222 -l admin -P user_pass.txt 217.182.38.175 ssh"

and view the blocks that come with the server

"cat /var/log/fail2ban.log | grep Found"

Today we have implemented the fail2ban systems as your applications. Thank you for reading. Leave me an e-mail for your requests and suggestions berkdusunurx@gmail.com

Read More