Edwin van Nuil

BackTrack 4 beta

Just downloaded the beta of BackTrack 4 and booted the live DVD on my Eee PC. Looks nice, but I couldn't get Kismet to get working. I will install it to the HD later and then tinker so more.

Download it here: http://www.remote-exploit.org/backtrack_download.html

WPA2 Enterprise with 802.1x / EAP-TTLS

Recently I decided to upgrade my wireless network at home. My current setup is a pfsense firewall and a airport extreme accesspoint.

For my new Wireless LAN I decided to implement WPA2 Enterprise with EAP-TTLS and a radius backend.

From the wiki entry of EAP-TTLS:

"EAP-TTLS offers very good security. The client does not need be authenticated via a CA-signed PKI certificate to the server, but only the server to the client. This greatly simplifies the setup procedure as a certificate does not need to be installed on every client."

First I describe the installation of the freeRADIUS server and the configuration of the Airport Extreme. Next the client configuration on OS/X Leopard and finally the installation of a EAP client for windows that supports TTLS on Windows XP/Vista.

Paros Web Proxy on Ubuntu 8.04 LTS

Paros is a proxy program you can use to evaluate the security of web applications. It's free of charge and runs completely in Java. Through Paros's proxy nature, all HTTP and HTTPS data between server and client, including cookies and form fields, can be intercepted and modified.

In this first article I describe how to install Paros in Ubuntu 8.04 LTS, in a future article I give a description of installing it in OS/X and a brief description of the workings.

Installing Mod Security 2 on Ubuntu 8.04 server

I wanted to install Mod Security 2 on my Ubuntu Jeos 8.04 server, but there isn't a package anymore.
Some googling later I came across this article: How to install Mod Security 2.
I didn't modify the Makefile; just run

./configure

in the apache2 directory and it works.
If this is the first thing you compile on Ubuntu server you also have to install the build tools with the following command:

sudo apt-get install build-essential

Compiling Openvpn on OS/X Leopard

We use OpenVPN a lot. In the Tiger days I used Tunnelblick and everything was fine. But now in the Leopard days things are less than optimal. Tunnelblick crashes a lot, isn't updated in a while and gave al sorts of routing problems.

So I decided to compile the latest and greatest from source and start the VPN connection from the Terminal. Although I miss the visual indicator this works very well at the moment. Maybe I make a GUI frontend in the future but for now I can connect steady to our servers.

Yubico's Yubikey

Received my Yubikeys from Yubico last week. I was listening to the Security Now podcast and heard Steve Gibson telling about this product. I went direct to the website and ordered two. I downloaded the C library and received the AES key from Simon Josefsson. Now I'm making my own verification server. This way it's very easy to add strong authentication to our applications.

Getting Nessus running on Mac OS/X Leopard

Today I wanted to install nessus on my Macbook Pro using MacPorts on Leopard. But I got the following error:

libtool: warning: cannot infer operation mode from `/usr/bin/gcc-4.0'
libtool: you must specify a MODE
Try `libtool --help' for more information.
make[1]: *** [plugutils.o] Error 1
make: *** [all] Error 2

I'm running OS/X 10.5.2 with MacPorts 1.600. After some Googling I found the following bug report: http://trac.macports.org/ticket/14429 titled "nessus-libraries build failed (libtool error)". And in the comments there was the fix: I had to edit the Portfile and add the following line:

"configure.cc    gcc"

I made changes to the following files in the directory "/opt/local/var/macports/sources/rsync.macports.org/release/ports/net/":
libnasl/Portfile
nessus-libraries/Portfile
nessus-core/Portfile


After these changes it compiled and installed fine:

polaris:bin nuil$ sudo port install nessus-core

[...]

polaris:bin nuil$ nessus --version
nessus (Nessus) 2.2.6 for Darwin

(C) 1998 - 2003 Renaud Deraison 
	SSL used for client - server communication