Class Notes

Answers up to 64 from the review questions
look for these
www.acunetix.com

• what is SQL injectiion
• what is cross site scripting

www.ihackstuff.com

google:
ie buffer overflow
ie vulnerabilities
porn sites exploit new ie flaw


proccess explorer

Class Notes

Use ethereal to trace your messaging

1. what ports are being used
2. what server addresses are being used
3. is any of your message clear text -- username / password -- message data
   

A brief report

• IM name prot used
• server used
• how to manage through linux and microsoft

what are the differences between MSN , Yahoo, Google talk etc and Exchange IM server or Lotus sametime

Class Work

next class time 23/5/07-- Unit 3 Q 1---> 83

• Check OPENSSL on ftp server and install in the systems:

Install the OpenSSL library
If you are installing from the RPM, run the commands :
rpm -i openssl-0.x.y.rpm
rpm -i openssl-devel-0.x.y.rpm

If installing from the source, you will need to compile and install it with the commands :
tar xvzf openssl-0.x.y.tar.gz
cd openssl-0.x.y
./Configure (or ./config in new OpenSSL versions)
make ( we have problem in this stage because of the C compiler not installed as part of OS)
make install

• Install SSL under LINUX (use Net_SSLeay.pm-1.23)
  

Install the Net::SSLeay module
To install the module, use the commands :
tar xvzf Net_SSLeay.pm-x.yy.tar.gz
cd Net_SSLeay.pm-x.yy
perl Makefile.PL
make install
If you have installed OpenSSL from the RPM, you may need to run perl Makefile.PL /usr in order to find the OpenSSL library properly.

• Then open WEBMIN using SSL
  

class notes

doning the projects:
1--> 11 and then 65 --> 67

Lab1: Navigating in Linux:
mkdir - cd - touch (creating file) - ls -l (view detailed contents) - cp (copy) - mv (move) -

Lab2:Creating and modifiynig users & group
useradd -g users student1 (add an a user account name student1)
passwd student1 (password)
usermod -u 507 student1 (change the UID)
groupadd -g 510 Testers (creating a group named Testers)

Lab3:viewing file details

Lab4:Installing Webmin
from sourceforge.org
webmin-1.340-1.noarch.rpm
install
https://localhost:10000/
authentication root - password (similar to credential)

What is Webmin?
Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms (and Java for the File Manager module), you can setup user accounts, Apache, DNS, file sharing and so on.

Webmin consists of a simple web server, and a number of CGI programs which directly update system files like /etc/inetd.conf and /etc/passwd. The web server and all CGI programs are written in Perl version 5, and use no non-standard Perl modules.
Webmin is a lifesaver for me, while I do know how to use the command line, the webmin interface is just quicker to use. Almost anything can be accomplished using webmin ..... from adding new users, to deleting databases, to editing the apache config file.... it's all there to be accessed from a gui web based interface.

Keeping webmin up to date with the most current version is a MUST. As with anything, having things open to the net, does create some security issues. One of the nice things about webmin is that it will automatically update itself every night and send you an email of the actions taken.