How to write a Linux virus – well or a trojan.

<a href="http://www.geekzone.co.nz/foobar/6229" target="_blank">How to write a Linux virus

and the folloup thereof

<a href="http://www.geekzone.co.nz/foobar/6236" target="_blank">Follow up: How to write a Linux virus

Thats quite a lot of discussion and an interesting one too. I too liked the point that the authour is trying to make, that is Linux too is not completely safe. I would rather like to put it as not &#8221;Fool Proof&#8221;.

But no one is fool. Its just the matter of time when you do something foolish. People do keep thinking about various things and keep working. That being the case, it is not too difficult that someone would actually run the program. But the caveat is that the program/virus/trojan would still show up at some places. So you need to do few more things for this to work. If you are keen on doing this, then you need to atleast add these:

Damn Vulnerable Linux – DVL review

Today morning I got a chance to look at one of the other less commonly known Linux Distribution and out of the line distribution, very good for Learning purposes. The distribution is known as DVL (Damn Vulnerable Linux). As the name suggest this is for people looking at developing their skills in Security and Penetration testing. Quite a lot of good and interesting tools are included. More is left for users to experiment but I definately liked the distribution. Here is the <a href="http://www.damnvulnerablelinux.org/" target="_blank">homepage.

Metasploit Project Sold To Rapid7

[ad]

ancientribe writes &#8221;The wildly popular, open-source Metasploit penetration testing tool project has been sold to Rapid7, a vulnerability management vendor, paving the way for a commercial version of Metasploit to eventually hit the market. HD Moore, creator of Metasploit, was hired by Rapid7 and will continue heading up the project. This is big news for the indie Metasploit Project, which now gets full-time resources. Moore says this will translate into faster turnaround for new features. Just what a commercial Metasploit product will look like is still in the works, but Rapid7 expects to keep the Metasploit penetration testing tool as a separate product with &#8217;high integration&#8217; into Rapid7&#8217;s vulnerability management products.&#8221;

Database of vulnurability at milw0rm.com – udpate and makeindex with cron.

I am quite regular visitor of milw0rm and generally try to keep up with the vul&#8217;s. For doing this I wrote a small scripts rather set of scripts to keep myself update.  Here&#8217;s what we are going to do:

1. Get the latest tar from the site.

2. Extract it.

3. Make the index

4. Have a shortcut to search the index.

Download the attached files for the first 2 points. <a href="http://blog.amit-agarwal.co.in/wp-content/uploads/2009/09/makeindex-milw0rm.sh">makeindex-milw0rm and <a href="http://blog.amit-agarwal.co.in/wp-content/uploads/2009/09/udpate-milw0rm.sh">udpate-milw0rm

Consider your account to be for you then use Linux

Found <a href="http://www.esecurityplanet.com/features/article.php/51671_3834031_1/Consider-Linux-for-Secure-Online-Banking.htm" target="_blank">this nice article today, may be it will save someone his lifetime earning.

[[danscartoon]]