Shulou(Shulou.com)06/01 Report--

Recently, because the online firewall work log report is abnormal, in order to verify the IDS and IPS functions of the firewall, we decided to install a formal BT5 to do * testing and security vulnerability scanning.

The following additional installed tools:

1. Metasploit pro (because I don't want to upgrade, I went directly to the official website to register and download it. Immediately after registration, a sales engineer called = _ = | |)

2. Postgressql is used with metasploit (I have read the BT5 guide that it comes with postgresql, but when I installed metasploit for the first time, I found that I could not connect to postgres. Finally, I couldn't find any trace of postgressql in the whole machine system, so I apt-get install one)

3. Vnc4server, something you don't have to say.

4. Register and activate Nessus

It's almost a metasploit+nessus test platform.

Here are some details of the installation experience:

1. Metasploit is divided into community version and professional version. When individuals use it, they find that the community version does not have the relevant commands of database, so they switch to the professional version, free trial for 14 days.

2. Metasploit has only done white-box experiments and does not understand the ruby language, but he has put it on his study schedule and hopes to write his own module in the future.

3, BT5 tools trial experience: a, port scanning is recommended to use nessus, namp,nessus can be imported into metasploit, with very good use; b, more interested in social engineering tools, will do more of these experiments in the future.

Write so much for the time being, and then update your records as you go deep into your study.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.