Security Ripcord

The following is the step by step procedure I used to install Backtrack 2.0 in VMWare 5.5 Workstation on my Windows XP Professional system.

Please Note: Most of these links are broken. Please check the Remote-Exploit Site to determine where they have been relocated. Good luck. Cutaway

NOTE 2: You may also want to have a look at the latest article BackTrack 2.0 Final – Hard Drive Install Considerations

• Downloaded BackTrack 2.0 .
• Read the BackTrack FAQs to see if there was any information available.
• Read the FAQ about installing BackTrack 2.0 in VMWare .
• Read the FAQ about installing BackTrack 2.0 onto the hard drive .  NOTE: Use /dev/sda instead of /dev/hda since VMWare acts as a SCSI drive.
• Being familiar with VMWare I know that the client systems run much better when the VMWare Tools are installed.  After a little searching I found the Slax module for VMWare Tools located in the Downloads section of the Offensive-Security.com site, sister site to Remote-Exploit.org .  There I found the VMWare Tools module , the Security Focus Exploits module , and the Wicrawl module .  As VMWare does not grab the physical interface and therefore cannot interact with wireless interfaces I left the Wicrawl module alone.
• Now that I had the extra modules I needed I had to get these installed into BackTrack some how.  Fortunately I had noticed a FAQ entry titled "Backtrack FAQ Make Modules Addons" that explained it perfectly.
• Downloaded MySlax Creator to add the modules to the BackTrack ISO.
• Before I installed the modules I had already downloaded I wanted to see which Slax modules might not have been included.  So I checked out the list of tools included on BackTrack 2.0 and I noticed that the TrueCrypt module was not included.  So I downloaded it.  There may be more but this is all I could think of at the time.
• UPDATE – I have since tested the truecrypt module and for some reason it does not work.  This may have something to do with Slax combined with a hard drive install.  I started to hunt this down but have not had time.  So if you are planning on installing TrueCrypt be prepared for some hunting and work to get it working properly.
• Installed the modules by following the step by step guidance of the MySlax Creator program.
• Now that I had a working ISO with all my modules installed I could install BackTrack 2.0 into VMWare.  So I booted into the LiveCD and then I followed the instructions in the hard drive installation guide carefully.  NOTE: Use /dev/sda instead of /dev/hda since VMWare acts as a SCSI drive.
• After the installation was completed the system was rebooted.
• First things first: I changed the root password.
• Although VMWare Tools had been installed they still needed to be configured.  This was accomplished by running the following command:  /usr/bin/vmware-config-tools.pl and answering the questions that followed.
• Next I started the GUI with the command  "startx" and then set the desired resolution for my system.
• Once the GUI was up and running I updated Firefox to the latest version.
• After restarting Firefox I installed the following plugins:  ShowIP, Copy Plain Text, Tab Mix Plus, View Source Chart, NoScript, DiggiDig, Adblock, Flashblock, Dr. Web anti-virus link checker, SwitchProxy Tool, Advanced Dork,  and View Cookies.
• Although BackTrack 2.0 is relatively new some of the tools need to be updated.  I decided to update the exploit databases through the automatic update mechanisms in the menu.
• KDE Menu -> Exploit Archives -> Metasploit Framework -> Framework3-MsfUpdate
• KDE Menu -> Exploit Archives -> Metasploit Framework -> MsfUpdate (I don't think this did anything because the first command covered it, but I did it just in case).
• KDE Menu -> Exploit Archives -> Milw0rm -> Update Milw0rm

And that is were my system currently stands.  So far I have identified three other things I would like to configure but haven't gotten to yet.

• Install the OWASP Pantera Web Assessment Tool
• Install Nessus by following the procedures posted to the ProfessionalSecurityTesters.org site. 
• Grab the Penetration Testing Framework PDF from the VulnerabilityAssessment.co.uk site.

Hopefully that is helpful to you,

Go forth and do good things,

Cutaway 

BackTrack, Nessus, Milw0rm, Metasploit, Truecrypt, OWASP, Pantera, VMWare, Security Ripcord, MySlax Creator

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Unported.

You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.