LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (https://www.linuxquestions.org/questions/slackware-14/)
-   -   What 's the best Security Tools Collection for Slackware? (https://www.linuxquestions.org/questions/slackware-14/what-s-the-best-security-tools-collection-for-slackware-4175490213/)

mbzadegan 01-05-2014 05:40 AM

What 's the best Security Tools Collection for Slackware?
 
Hi,
I'm new to slackware and I search for a best Slackware Security tools collection.
I found wifislax but its main tools run in spanish!
backtrack3 (Slackware base) is too old!

Any Other?

chemfire 01-05-2014 06:54 AM

Actually backtrack/kali are probably your best bets.

There is a reason almost the entire pen test community uses them. Lots and lots of the tools in there depend on very specific versions of things like python, ruby, samba openldap, openssl, etc which are often out of date and have vulnerabilities of their own. Those same tools also almost always need root to do privileged operations and because they are developed quickly don't then do things like drop privileges etc. You can be exposing the machine you are doing your tests from quite bit that way.

If there is are tools you are using often in an environment you support I'd consider building and installing those specific applications in your Slackware environment; but for the rest of it my recommendation is just running the current Kali in kvm/vmware player/virtual box/etc. Save any information you need to keep somewhere persistent but do your work in a snapshot and revert to the base state whenever you need. You'll find its nice working on a system where you are completely free to trash the filesystem, replace libraries/modified their behavior to be out of spec/etc without worrying if you break something on your system.

mbzadegan 01-05-2014 07:00 AM

OK,
If I copy the KALI pentest folder into slackware root directory, can its tools work correctly or must be compiled again in slackware?

Habitual 01-05-2014 09:34 AM

Quote:

Originally Posted by mbzadegan (Post 5092265)
OK,
If I copy the KALI pentest folder into slackware root directory, can its tools work correctly or must be compiled again in slackware?

Epic fail most likely. Some may run, but it's a recipe for disaster.

chemfire 01-05-2014 09:35 AM

I am sure some will work, but most I think you will need to rebuild. I am not sure what your objectives are, if its generic pentesting kind of work I really think long term you will be happier just running Kali in a VM.

That way you can just download the latest version when you need it rather than trying to keep all those tools up to date. The unfortunate reality is so much of that stuff is just not written to be especially portable and its not packaged up to built with make and autoconf.

Even stuff like metasploit pretty much ships with its own Ruby and Java binaries an just installs everything in its own folder up /opt sharing nothing with the rest of the system because no sane disto would use compatible versions of that stuff.

If all you want is metasploit, nmap, and stuff than you could install that directly to Slackware: http://slackbuilds.org/repository/14...rch=metasploit

But if you are after the whole tool box so to speak; its just to much work to make it all work happily on Slackware or any other desktop/server Linux distribution.

mbzadegan 01-05-2014 11:57 AM

Ok,
I need some speed tools such as pktgen or hping,... that work in high speed process but virtualling systems can't runs process on the highest speed.


All times are GMT -5. The time now is 02:11 AM.