security vulnerability

Malachai.77 · 06-09-2006, 09:47 PM

Hello all,

I was wondering if anyone could help me out with my newbie question.

Is there a software for FC 5 or any linux that I could run a security vulnerability test that will show me what security holes a linux or windows have. Then do a test on the hole to see what happens with the machine. Like a NT, 2000 machine see if I could bring up the blue screen of death... A Gui would be nice.

I'm getting in to security so this would help me at home with my 2 computer I have already setup running windows.

[Malachai]

Capt_Caveman · 06-09-2006, 10:40 PM

Very few tools are going to be comprehensive by themselves, but something like nessus or metasploit might be what you are looking for, at least in terms of identifying potential security vulns. The standard caveats about only scanning machines you are authorized to perform this type of analysis on would clearly apply here. Also do yourself a favor and spend some time learning about how exploits work (things like how a buffer overflow works, shellcode, etc), rather than just clicking a button repeatedly.

imagineers7 · 06-10-2006, 12:12 AM

Hi Malachai.77,

You may also check SARA which is based on SATAN.

I tried it and did like the reporting style too. (Good to impress your friends / clients / boss /whosoever is concerned )

[QUOTE:Captain]
Also do yourself a favor and spend some time learning about how exploits work (things like how a buffer overflow works, shellcode, etc), rather than just clicking a button repeatedly.[/QUOTE]

I would like to know some ref. sites or links captain.

Thanks in advance