ADIOS Project

-- Live Linux ADIOS CD home

ADIOS Software

How to use the following software

• autopsy forensic (sleuthkit)
• nessus Secuity Scanner
• rinetd redirection server
• swish-e web search engine

How to find out what else is on the ADIOS CD

For a full list of RPMs installed on the ADIOS CD enter "rpm -qa".

The Fedora Core extra software installed via RPMs on ADIOS CD include

• balsa - Mail client
• cfengine - Systems administration tool for networks
• dia - Diagram drawing program
• dillo - Small and fast GUI web browser
• gparted - Gnome Partition Editor
• openvpn - Full-featured SSL VPN solution
• putty - Graphical ssh, telnet and rlogin client
• uw-imap - IMAP and POP server
• xine - Movie player
• xmms - Multimedia player

To display information and then list the files within a package such as cfengine enter rpm -qi cfengine and rpm -ql cfengine

Network Security tools on ADIOS CD include

• aircrack - Reliable 802.11 (wireless) sniffer and WEP key cracker
• airsnort - Wireless LAN (WLAN) tool which recovers encryption keys
• airtraf - Wireless sniffer for 802.11 wireless networks
• chkrootkit - Tool to locally check for signs of a rootkit
• darkstat - Network traffic analyzer
• ddrescue - Data recovery tool
• dnstracer - Trace a chain of DNS servers to the source
• foremost - Recover files by "carving" them from a raw disk
• fping - Scriptable, parallelized ping-like utility
• fwbuilder - Firewall Builder
• hunt - Tool for demonstrating known weaknesses in TCP/IP protocol
• john - John the Ripper password cracker
• kismet - Kismet is an 802.11 network sniffer and network dissector.
• memfetch - Dump the memory of a running process.
• nc6 - Netcat with IPv6 Support
• nessus - Network vulnerability scanner
• rinetd - TCP redirection server
• snort - Intrusion detection system
• testdisk - Tool to check and undelete partition
• wipe - Secure file deletion utility

Additional software installed via TGZ/BZ2 archives include

• acid - analysis console for incident database
• autopsy - graphical front-end for sleuthkit
• drupal - content management system
• ettercap - man in the middle attacks
• icewm - small X11 window manager
• mac-robber - forensic and incident response tool
• mambo - content management system
• ndiswrapper - kernel module to load and run NDIS
• phpMyAdmin - MySQL web front end
• sleuthkit - file system analysis
• swish-e - small web search engine
• tct - The Coroners Toolkitls
• tctutils - utilities for tct
• uml - utilities for virtual machines
• unionfs - copy-on-write filesystem
• xtraceroute - graphical traceroute

Autopsy

First login as root and start the autopsy server by entering:

autopsy &

Then either click on the autopsy menu button
or start a web browser and enter http://localhost:9999/autopsy  

Read the manual entries for the sleuthkit file system analysis tools as you will need to run these.

• dcalc, dcat, dls, dstat, ffind, file, fls, fsstat, hfind
• icat, ifind, ils, istat, mactime, md5. mmls, sha1, sorter

Nessus

First login as root and start the nessusd server by entering:

nessusd &

Then either click on the Nessus menu button
or enter nessus at the command prompt

For user adios enter the password 12qwaszx and click on Login. The more Plugins you select the longer it will take to scan the hosts.  Before starting the scan you must enter hosts in the Target selection, at a minimum enter localhost.  For KDE and Gnome click on the taskbar button to collapse the taskbar so that the Start the scan button is visible to click on.

For example for the localhost, in the Nessus "NG" Report, then in the Subnet menu click on the localhost, then in the Host menu click on the localhost, then in the Port menu click on a service, then in the Severity menu click on the warning, note, or hole. 

Next save the report to /var/www/html, using file format HTML, and filename nessus.   Then using a web browser at URL http://localhost/nessus.html view the report.

Rinetd

Read the manual entry at http://localhost/cgi-bin/man/man2html?rinetd. The configuration file /etc/rinetd.conf to redirect localhost web requests to a web server at 192.168.201.1 is as follows:

127.0.0.1  80  192.168.201.1  80

Then to start the redirection server enter /usr/sbin/rinetd.

Swish-e

If you create your own web site and want a small and efficient web search engine.  First modify the configuration file /etc/swish.conf to suit your web site.  Then run the swish-e program, enter "swish-e -h" for list of options.

cd /var/www/swish
swish-e -c /etc/swish.conf  -f index.swish

The index files take up about 20Mbytes on the ADIOS CD.  Thus you need write access for possibly a large swish-e index.

Also you then need a write a CGI search program such as /var/www/cgi-bin/search.cgi which is freely distributed with the ADIOS CD.

Written by Neville Richter, n.richter@cqu.edu.au Copyright GNU Public Licence 2006.