You are not logged in.

#1 2009-09-26 02:25:01

sharpie
Member
From: Phoenix, AZ
Registered: 2008-11-16
Posts: 72

Need suggestions for increasing vulnerability

Hey everyone, thanks for reading.  I need recommendations for stuff I can put on an Arch box that make it SIGNIFICANTLY more vulnerable to 'spoiting.  The idea is this:  I'm throwing a party with a computer CTF challenge.  The box in question will be plugged in to a 24 port switch that doesn't have internet access.  Everyone else will connect to this switch and go to town.

So far I'm going to put on it:

Kusaba
SSH
httpd
mysql
tftp

Any suggestions would be helpful!

Last edited by sharpie (2009-09-26 02:29:16)

Offline

#2 2009-09-26 06:23:24

MadTux
Member
Registered: 2009-09-20
Posts: 553

Re: Need suggestions for increasing vulnerability

Not sure if I understand your post right. Are you saying that you want to setup a vulnerable system for e.g. hacking purposes? If thats true, you may want to look at Damn Vulnerable Linux

http://www.damnvulnerablelinux.org/

The system is intended for educational training about several vulnerabilities.

Offline

#3 2009-09-26 08:56:58

fukawi2
Ex-Administratorino
From: .vic.au
Registered: 2007-09-28
Posts: 6,223
Website

Re: Need suggestions for increasing vulnerability

- mysqladmin
- roundcubemail
- Make sure you leave mysql etc open to the lan for incoming connections
- php and put a phpinfo() page in apache as test.php or something

Offline

#4 2009-09-26 10:14:01

Gen2ly
Member
From: Sevierville, TN
Registered: 2009-03-06
Posts: 1,529
Website

Re: Need suggestions for increasing vulnerability

hosts.allow
hosts.deny


Setting Up a Scripting Environment | Proud donor to wikipedia - link

Offline

#5 2009-09-26 10:53:44

ngoonee
Forum Fellow
From: Between Thailand and Singapore
Registered: 2009-03-17
Posts: 7,355

Re: Need suggestions for increasing vulnerability

Why not just install Windows? (tongue-firmly-in-cheek)


Allan-Volunteer on the (topic being discussed) mailn lists. You never get the people who matters attention on the forums.
jasonwryan-Installing Arch is a measure of your literacy. Maintaining Arch is a measure of your diligence. Contributing to Arch is a measure of your competence.
Griemak-Bleeding edge, not bleeding flat. Edge denotes falls will occur from time to time. Bring your own parachute.

Offline

#6 2009-09-26 11:09:34

zen3
Member
From: Greece
Registered: 2009-09-02
Posts: 30

Re: Need suggestions for increasing vulnerability

You want to make a pc in order to invite ppl to penetrate it?


ffc

Offline

#7 2009-09-26 11:47:51

zowki
Member
From: Trapped in The Matrix
Registered: 2008-11-27
Posts: 582
Website

Re: Need suggestions for increasing vulnerability

Heres my tip, install old versions for all your programs. This will make it SIGNIFICANTLY more vulnerable to exploits. Script kiddies all over the world can hack into servers just because they run old versions of SSH.


How's my programming? Call 1-800-DEV-NULL

Offline

#8 2009-10-22 14:04:49

jargoman
Member
Registered: 2008-03-10
Posts: 33

Re: Need suggestions for increasing vulnerability

You could change the write permission of a script that gets run with root privileges. Allowing anyone who does manage to log in the ability to enter their own commands.

Last edited by jargoman (2009-10-22 14:33:23)

Offline

Board footer

Powered by FluxBB