Posts

Showing posts with the label Intrusion Detection

Fixing kernel timer error in Metasploitable

Image
In this blog: Disclaimer. Fixing the kernel timer error. What's next? This blog is one of a 4 part series in Metasploitable. Click here to see how to run a DOS attack on Metasploitable. Click here to see how to deface Metasploitable's webpage. Click here to see how to set up a Metasploitable lab . Click here to see how to connect Metasploitable with Kali Linux . Disclaimer The solution given in this blog is for the kernel timer error that is caused by a misconfiguration in the kernel boot settings in the BIOS. The solution is not permanent and you must complete the steps each time you start a new session. Fixing timer errors To start the virtual machine, go back to VirtualBox and click start. When starting, if you get this kernel panic – not syncing error message, follow these steps ➡️  Kernel panick error message. Go to settings, system and double the base memory to 2048MB. Doubling base memory. Provide the machine with two processors instead of one and click OK.  Doubling p...

Cron jobs (Linux)

Image
In this blog: What are Cron jobs? Why automate tasks? Automating scans. Creating a crontab. This blog is on automating a Tripwire scan. See my blog on Tripwire here What are Cron jobs? When creating home labs or working as a sysadmin or anything in between, there is always some task that we must do continuously.  For example, in my home lab comprising of a Kali Linux machine, Windows 10 Virtual Machine and a Metasploitable Virtual Machine, I want my Linux machine to run a Tripwire report every night. Tripwire is an open-source file integrity monitoring software and checks for alterations to any files in the user system. Why automate tasks? Automating tasks is not only quick and efficient, but is also more secure as fewer inputs mean fewer mistakes.  There is no possibility of forgetting to do tasks as the system will complete them automatically and you can set it to initiate during off-peak times so as to not affect work. Automating tasks To view the crontab manual page, type ...

Tripwire

Image
  In this blog: What is Tripwire? Mirrors. Installation. Initialise Tripwire. Edit twpol.txt. File integrity check. Securing our system. Email notifications.   See my blog on Intrusion Detection systems here. What is Tripwire? Tripwire is a popular open-source Linux IDS that's used for file integrity monitoring -- Basically checking for unauthorised changes to your files.  I will be using Kali Linux, which is a Debian based distro. Tripwire is part of the default repository in Ubuntu and Debian, meaning we can install it using commands in the terminal. Mirrors Before installing the tool, we must update the list of packages in the repos, which is used by the apt tool to determine the URL of the package to install.  Run ➡️  sudo apt-get update Without updating, the download manager might not be able to find the URL as the list could be out of date.  This is not a requirement if you know that the specific package you want has not been altered (no new version o...