COMP 3000 2011 Report: Damn Vulnerable Linux - Revision history

Amurphy7 at 21:00, 15 December 2011

2011-12-15T21:00:44Z

← Older revision		Revision as of 21:00, 15 December 2011
Line 66:		Line 66:
	==Basic Operation==		==Basic Operation==
	The graphical interface offered by DVL is very minimalistic and utilitarian. The desktop itself is populated solely with shortcuts to services, to provide a quick way to enable/disable various components - SSH, Apache, Mysql, PHP, etc. - or quick access to development environments such as C++ and Java.		The graphical interface offered by DVL is very minimalistic and utilitarian. The desktop itself is populated solely with shortcuts to services, to provide a quick way to enable/disable various components - SSH, Apache, Mysql, PHP, etc. - or quick access to development environments such as C++ and Java.

			Apache is an HTTP web server which is crucial to all web-based interactions within the operating system. When using Damn Vulnerable Linux, Apache must be started before HTTP, PHP, or MySql services become available.

	The bottom menu panel contains a typical ‘start’ menu, as well as fast access to the terminal, two browsers (Firefox and Konqueror) and a text editor.		The bottom menu panel contains a typical ‘start’ menu, as well as fast access to the terminal, two browsers (Firefox and Konqueror) and a text editor.
Line 71:		Line 73:
	The ‘start’ menu further mirrors the icons on the desktop, organized in a ‘Services’ category, as well as providing shortcuts to the training material and other tools.		The ‘start’ menu further mirrors the icons on the desktop, organized in a ‘Services’ category, as well as providing shortcuts to the training material and other tools.

	The overall organization of utilities is superb, as is the variety and quantity included. IDEs for many languages ~~are evident~~, ranging from Dr. Scheme to Eclipse and JEdit; IDA free and Ollydbg ~~also~~ number among ~~the~~ disassemblers and debuggers that are provided. DVL contains all the necessary development software that its users require.		The overall organization of utilities is superb, as is the variety and quantity included. Integrated Development Environments (IDEs), applications that provide comprehensive features for software programmers, are included for many languages, ranging from Dr. Scheme to Eclipse and JEdit.

			Damn Vulnerable Linux also includes disassemblers and debuggers, which are used heavily in breakpoint testing and reverse engineering. IDA free and Ollydbg number among those disassemblers and debuggers that are provided. DVL contains all the necessary development software that its users require.

	==Usage Evaluation==		==Usage Evaluation==
Line 99:		Line 103:
	=Part 2=		=Part 2=
	==Software Packaging==		==Software Packaging==
	Slackware is RPM-based, meaning that software packages are all stored as an RPM Package Manager. By invoking ''rpm -qa'', a list of installed RPMs is shown; within DVL, FPC (Free Pascal Compiler) is the only listed package. Free Pascal Compiler is an extensive RPM Package Manager that is often used in conjunction which Lazarus, which contains a full IDE.[13] The version of FPC used by Damn Vulnerable Linux is fpc-src-2.2.0-071105.i386.rpm, as reported by ''rpm -qa~~''.~~		Slackware is RPM-based, meaning that software packages are all stored as an RPM Package Manager. By invoking ''rpm -qa'', a list of installed RPMs is shown; within DVL, FPC (Free Pascal Compiler) is the only listed package. Free Pascal Compiler is an extensive RPM Package Manager that is often used in conjunction which Lazarus, which contains a full IDE.[13] The version of FPC used by Damn Vulnerable Linux is fpc-src-2.2.0-071105.i386.rpm, as reported by the following command:<source lang="cpp">
			rpm -qa
			</source>

	Lazarus contains a large host of utilities, separated into the run-time library (RTL), which contains units such as Unix, BaseUnix, and ShellAPI; and the Lazarus Component Library (LCL), which contains interface elements, such as buttons, forms, and text boxes.[11] While this is quite extensive, containing nine thousand files[12], it is the only package included in DVL. The operating system is relatively destitute compared to larger distributions such as Ubuntu, as it is focused heavily on a specialised programming environment.		Lazarus contains a large host of utilities, separated into the run-time library (RTL), which contains units such as Unix, BaseUnix, and ShellAPI; and the Lazarus Component Library (LCL), which contains interface elements, such as buttons, forms, and text boxes.[11] While this is quite extensive, containing nine thousand files[12], it is the only package included in DVL. The operating system is relatively destitute compared to larger distributions such as Ubuntu, as it is focused heavily on a specialised programming environment.
Line 105:		Line 111:
	The rpm command is very useful for adding and removing packages. The following parameters are highly useful:		The rpm command is very useful for adding and removing packages. The following parameters are highly useful:

	~~rpm -qa lists~~ all installed packages as well as their version number and release date.[14]		To get a comprehensive list of all installed packages, as well as their version number and release date[14]:
			<source lang="cpp">rpm -qa</source>

	rpm -e <packagename> ~~uninstalls a specific package.[14]~~		To uninstall a specific package[14]:
			<source lang="cpp">rpm -e <packagename></source>

	rpm -ivh <packagename> ~~installs a specific package.[14]~~		To install a specific package[14]:
			<source lang="cpp">rpm -ivh <packagename></source>

	rpm -Uvh <packagename> ~~updates an already-installed package.[14]~~		To update a previously-installed package[14]:
			<source lang="cpp">rpm -Uvh <packagename></source>

	The rpm command can also be used to request a list of installed files by a rpm, by invoking ''rpm -ql fpc-src-2.2.0-071105~~''.~~		The rpm command can also be used to request a list of installed files by a rpm, by invoking the following command:
			<source lang="cpp">rpm -ql fpc-src-2.2.0-071105</source>

	==Major Package Versions==		==Major Package Versions==
Line 122:		Line 133:
	! Software !! Version(Date) !! Most Recent Version !! Command Used		! Software !! Version(Date) !! Most Recent Version !! Command Used
	\|-		\|-
	\| libc \|\| 2.3.6 \|\| 2.14 \|\| /lib/libc.so.6 --version \|\|		\| libc \|\| 2.3.6 \|\| 2.14 \|\| <source lang="cpp">/lib/libc.so.6 --version</source> \|\|
	\|-		\|-
	\| bash \|\| 3.1.17(2005) \|\| 4.2 \|\| /bin/bash --version \|\|		\| bash \|\| 3.1.17(2005) \|\| 4.2 \|\| <source lang="cpp">/bin/bash --version</source> \|\|
	\|-		\|-
	\| kernel \|\| 2.6.20-BT-PwnSauce(2007) \|\| 3.1.1 \|\| uname -a \|\|		\| kernel \|\| 2.6.20-BT-PwnSauce(2007) \|\| 3.1.1 \|\| <source lang="cpp">uname -a</source> \|\|
	\|-		\|-
	\| GNU CoreUtils \|\| 5.97 \|\| 8.14 \|\| /bin/ls --version \|\|		\| GNU CoreUtils \|\| 5.97 \|\| 8.14 \|\| <source lang="cpp">/bin/ls --version</source> \|\|
	\|-		\|-
	\| procps \|\| 3.2.7 \|\| 3.2.8 \|\| /bin/ps --version \|\|		\| procps \|\| 3.2.7 \|\| 3.2.8 \|\| <source lang="cpp">/bin/ps --version</source> \|\|
	\|-		\|-
	\| MySQL \|\| 5.0.24a \|\| 5.5.17 \|\| mysql -V \|\|		\| MySQL \|\| 5.0.24a \|\| 5.5.17 \|\| <source lang="cpp">mysql -V</source> \|\|
	\|-		\|-
	\| HTPPD \|\| Apache 1.3.37 \|\| 2.2.21 \|\| httpd -V \|\|		\| HTPPD \|\| Apache 1.3.37 \|\| 2.2.21 \|\| <source lang="cpp">httpd -V</source> \|\|
	\|-		\|-
	\| SSH \|\| OpenSSH 4.4pl (2006) \|\| 5.9 \|\| ssh -V \|\|		\| SSH \|\| OpenSSH 4.4pl (2006) \|\| 5.9 \|\| <source lang="cpp">ssh -V</source> \|\|
	\|-		\|-
	\| Konqueror \|\| 3.5.3(2005) \|\| 4.7.3 \|\| konqueror -v \|\|		\| Konqueror \|\| 3.5.3(2005) \|\| 4.7.3 \|\| <source lang="cpp">konqueror -v</source> \|\|
	\|-		\|-
	\| Qt \|\| 3.3.6 \|\| 4.7.4 \|\| konqueror -v \|\|		\| Qt \|\| 3.3.6 \|\| 4.7.4 \|\| <source lang="cpp">konqueror -v</source> \|\|
	\|-		\|-
	\| KDE \|\| 3.5.3 \|\| 4.7 \|\| konqueror -v \|\|		\| KDE \|\| 3.5.3 \|\| 4.7 \|\| <source lang="cpp">konqueror -v</source> \|\|
	\|}		\|}
	''Note: The HTTPD version was likely chosen because of the significance of its version number among the target audience. Specifically, 1337 is usually inferred as numerical-representation of "leet", or elite.''		''Note: The HTTPD version was likely chosen because of the significance of its version number among the target audience. Specifically, 1337 is usually inferred as numerical-representation of "leet", or elite.''

Amurphy7: /* Major Package Versions */

2011-11-25T04:45:27Z

Major Package Versions

← Older revision		Revision as of 04:45, 25 November 2011
Line 144:		Line 144:
	\| KDE \|\| 3.5.3 \|\| 4.7 \|\| konqueror -v \|\|		\| KDE \|\| 3.5.3 \|\| 4.7 \|\| konqueror -v \|\|
	\|}		\|}
	''Note: The HTTPD version was likely chosen because of the significance of its version number among the target audience.''		''Note: The HTTPD version was likely chosen because of the significance of its version number among the target audience. Specifically, 1337 is usually inferred as numerical-representation of "leet", or elite.''

	==Initialization==		==Initialization==

Amurphy7: /* Init Script Startup */

2011-11-25T04:42:02Z

Init Script Startup

← Older revision		Revision as of 04:42, 25 November 2011
Line 164:		Line 164:

	==Init Script Startup==		==Init Script Startup==
			[[File:Dvl_processes.png\|thumb\|right\|'''Figure 5: '''Running Processes]]
	The specific process executing order during initialisation is as follows:		The specific process executing order during initialisation is as follows:

	Init(8) is run, resulting in:		Init(8) is run, resulting in:

	/etc/rc.d/rc.M is executed, which in turn starts the following processes:		''' /etc/rc.d/rc.M is executed, which in turn starts the following processes:'''
			<ol>
	~~1) /usr/sbin/syslogd: this is started by rc.M, by calling rc.syslog start~~

	~~1.1) /usr/sbin/klogd: syslog then starts klog if it is a SMP kernel~~

	~~2) inet1: this is started by rc.M~~

	~~2.1) dhcpcd: this is then started by inet1 if it is not already running, and set to eth0~~

	~~3) /usr/sbin/cupsd is started by rc.M, by calling rc.cups start~~

	~~4) /usr/sbin/crond is started by rc.M~~

	5) /usr/sbin/~~acpid~~: this is started by rc.M, by calling ~~acpid~~ start		<li> /usr/sbin/syslogd: this is started by rc.M, by calling rc.syslog start
			<ol>
			<li> /usr/sbin/klogd: syslog then starts klog if it is a SMP kernel
			</ol>
			<li> inet1: this is started by rc.M
			<ol>
			<li> dhcpcd: this is then started by inet1 if it is not already running, and set to eth0
			</ol>
			<li> /usr/sbin/cupsd is started by rc.M, by calling rc.cups start

	6) rc.M ~~then calls the rc.slax extension~~		<li> /usr/sbin/crond is started by rc.M

	~~6.1)~~ /~~bin~~/sh: this is started by rc.~~slax~~		<li> /usr/sbin/acpid: this is started by rc.M, by calling acpid start

	6.2) /bin/~~bash~~: this is started by rc.slax		<li> rc.M then calls the rc.slax extension
			<ol>
			<li> /bin/sh: this is started by rc.slax

	7) /usr/libexec/mysqld: this is started by rc.M by calling rc.mysqld start		<li> /bin/bash: this is started by rc.slax
			</ol>
			<li> /usr/libexec/mysqld: this is started by rc.M by calling rc.mysqld start

	8) /usr/sbin/gpm: this is started by rc.M, by calling rc.gpm start		<li> /usr/sbin/gpm: this is started by rc.M, by calling rc.gpm start
			</ol>

	==References==		==References==

Amurphy7 at 04:36, 25 November 2011

2011-11-25T04:36:33Z

@@ Line 162: / Line 162: @@
 As opposed to System V convention (which uses /etc/rc.d/rc(runlevel).d/ directories to house scripts), the primary script in DVL is run from /etc/rc.d/rc.M. This defines the system hostname, activates PCMCIA support, activates the firewall, starts network services, launches Inetd and OpenSSH, Bind, NIS, and NFS; starts system logging, smartd, cron, atd, MySQL, Apache, Samba, and any System V init scripts that have been added.[10]
 ==References==
 [1] http://distrowatch.com/table.php?distribution=dvl

Amurphy7: /* Software Packaging */

2011-11-14T02:17:54Z

Software Packaging

← Older revision		Revision as of 02:17, 14 November 2011
Line 101:		Line 101:
	Slackware is RPM-based, meaning that software packages are all stored as an RPM Package Manager. By invoking ''rpm -qa'', a list of installed RPMs is shown; within DVL, FPC (Free Pascal Compiler) is the only listed package. Free Pascal Compiler is an extensive RPM Package Manager that is often used in conjunction which Lazarus, which contains a full IDE.[13] The version of FPC used by Damn Vulnerable Linux is fpc-src-2.2.0-071105.i386.rpm, as reported by ''rpm -qa''.		Slackware is RPM-based, meaning that software packages are all stored as an RPM Package Manager. By invoking ''rpm -qa'', a list of installed RPMs is shown; within DVL, FPC (Free Pascal Compiler) is the only listed package. Free Pascal Compiler is an extensive RPM Package Manager that is often used in conjunction which Lazarus, which contains a full IDE.[13] The version of FPC used by Damn Vulnerable Linux is fpc-src-2.2.0-071105.i386.rpm, as reported by ''rpm -qa''.

	Lazarus contains a large host of utilities, separated into the run-time library (RTL), which contains units such as Unix, BaseUnix, and ShellAPI; and the Lazarus Component Library (LCL), which contains interface elements, such as buttons, forms, and text boxes.[11]		Lazarus contains a large host of utilities, separated into the run-time library (RTL), which contains units such as Unix, BaseUnix, and ShellAPI; and the Lazarus Component Library (LCL), which contains interface elements, such as buttons, forms, and text boxes.[11] While this is quite extensive, containing nine thousand files[12], it is the only package included in DVL. The operating system is relatively destitute compared to larger distributions such as Ubuntu, as it is focused heavily on a specialised programming environment.

	The rpm command is very useful for adding and removing packages. The following parameters are highly useful:		The rpm command is very useful for adding and removing packages. The following parameters are highly useful:

Amurphy7 at 02:14, 14 November 2011

2011-11-14T02:14:24Z

← Older revision		Revision as of 02:14, 14 November 2011
Line 106:		Line 106:

	rpm -qa lists all installed packages as well as their version number and release date.[14]		rpm -qa lists all installed packages as well as their version number and release date.[14]

	rpm -e <packagename> uninstalls a specific package.[14]		rpm -e <packagename> uninstalls a specific package.[14]

	rpm -ivh <packagename> installs a specific package.[14]		rpm -ivh <packagename> installs a specific package.[14]

	rpm -Uvh <packagename> updates an already-installed package.[14]		rpm -Uvh <packagename> updates an already-installed package.[14]

Amurphy7 at 02:13, 14 November 2011

2011-11-14T02:13:41Z

@@ Line 99: / Line 99: @@
 =Part 2=
 ==Software Packaging==
 ==Major Package Versions==
@@ Line 167: / Line 179: @@
 [10]http://openskill.info/infobox.php?IDbox=1042

Amurphy7 at 01:20, 14 November 2011

2011-11-14T01:20:10Z

@@ Line 132: / Line 132: @@
 ==Initialization==
 ==References==
 [1] http://distrowatch.com/table.php?distribution=dvl
@@ Line 152: / Line 165: @@
 [9]http://www.reddit.com/r/linux/comments/fid3k/damn_vulnerable_linux_is_gone/

Amurphy7 at 00:38, 14 November 2011

2011-11-14T00:38:23Z

← Older revision		Revision as of 00:38, 14 November 2011
Line 95:		Line 95:

	The ease-of-use is phenomenal, and the quantity of historical exploits from live software solidifies DVL as an essential learning tool for all security enthusiasts.		The ease-of-use is phenomenal, and the quantity of historical exploits from live software solidifies DVL as an essential learning tool for all security enthusiasts.


			=Part 2=
			==Software Packaging==

	==Major Package Versions==		==Major Package Versions==
			As Damn Vulnerable Linux is designed to be vulnerable, it makes heavy use of legacy code. This fundamental attribute is also evident within the packages included with the operating system. The authors do not make any effort to modify the source code of the original code, instead intentionally selecting packages that are either known to be exploitable themselves, or complement other exploitable software. It is with this in mind that each of the software packages are chosen to be included in the operating system.

	{\| class="wikitable"		{\| class="wikitable"
Line 124:		Line 129:
	\| KDE \|\| 3.5.3 \|\| 4.7 \|\| konqueror -v \|\|		\| KDE \|\| 3.5.3 \|\| 4.7 \|\| konqueror -v \|\|
	\|}		\|}
			''Note: The HTTPD version was likely chosen because of the significance of its version number among the target audience.''

			==Initialization==

Amurphy7 at 00:15, 14 November 2011

2011-11-14T00:15:51Z

← Older revision		Revision as of 00:15, 14 November 2011
Line 118:		Line 118:
	\| SSH \|\| OpenSSH 4.4pl (2006) \|\| 5.9 \|\| ssh -V \|\|		\| SSH \|\| OpenSSH 4.4pl (2006) \|\| 5.9 \|\| ssh -V \|\|
	\|-		\|-
	\| Konqueror \|\| 3.5.3(2005) \|\| - \|\| konqueror -v \|\|		\| Konqueror \|\| 3.5.3(2005) \|\| 4.7.3 \|\| konqueror -v \|\|
	\|-		\|-
	\| Qt \|\| 3.3.6 \|\| 4.7.4 \|\| konqueror -v \|\|		\| Qt \|\| 3.3.6 \|\| 4.7.4 \|\| konqueror -v \|\|