|
|
Home
|
Using commercial tools in Backtrack 3 |
|
|
|
Sunday, 02 November 2008 |
|
Page 2 of 4
Step 2: Run Security Administrator's Integrated Network Tool
SAINT (Security Administrator's Integrated Network Tool) uncovers areas of weakness in your network and recommends fixes. With the SAINT vulnerability scanner, you can:
- Detect and fix possible weaknesses in your network’s security before they can be exploited by intruders
- Anticipate and prevent common system vulnerabilities.
- Demonstrate compliance with current government regulations such as
FISMA, SOX, GLBA, HIPAA, and COPPA and with industry regulations such
as PCI DSS.
SAINT has provided BackTrack users with a functional version of SAINT, pending a free request for an IP range license through the SAINT website, valid for 1 year.
Use you’re your KDE environment and click in your menu on Backtrack – Vulnerability Identification – Saint Exploit – Saint Exploit License. This will open a website - scroll down and click on the button “Get License”.
http://www.saintcorporation.com/welcome/offensive-security.html After registration you will get your user name and password that gives you the ability to login to the SAINT website and to generate a key for 10 IP-addresses by clicking on the “NEW KEY” button.
Just follow step by step the images below. Find a documentation here.
Create a file called saint.key and add the content given in the website. Store it in the Saint directory (/opt/saint-6.7.11).
It’s time to start our first vulnerability scan using SAINT. First of all, make sure that your favourite browser (Firefox) is not running. Otherwise you’ll probably get an error message. Use your KDE environment and click the menu on Backtrack – Vulnerability Identification – Saint Exploit – Saint Exploit. SAINT will try to retrieve updates and will start a web interface using your favourite browser. Choose in the “Administration Functions” – Configure SAINT Key und click Submit. You’ll will see the installed key and the host IP-addresses you are “allowed” to scan.
To prepare the scan, go to “Scan Set-Up” and add the IP-addresses, ranges and subnet you would like to penetrate. In the next entries you are able to adjust:
- Data Preservation
- Scanning Level
- Authentication
- Firewall Support
Click on “Scan Now” to perform your first scan.
|
|
Who's Online
We have 36 guests online
Virus Info Feed
Alexa Traffic Stats
|