Skip to main content

Installing Backtrack 3 under VirtualBox - Part 3

29.): You can install software on Backtrack 3 and save 'Snapshots' to save your place or
follow another tutorial about making any changes 'sticky' to preserve your work between
boots. Go back to your "Settings" and change the "Radio Button" to finish using the
Backtrack 3 installation .ISO image on your HD.


30.): See these threads for info on copying the CD/DVD-ROM .ISO image to VirtualBox's virtual
HD drives so you can make changes and update your software without resorting to Snapshots
to make things sticky.

How to install backtrack 3 final from the shell
hxxp://forums.remote-exploit.org/showthread.php?t=14751

Install BT3 live onto flash, save changes, with compiz
hxxp://forums.remote-exploit.org/showthread.php?t=14812

TUTORIAL: live install with changes, swap and data partitions
hxxp://forums.remote-exploit.org/showthread.php?t=7844

How to install BT3Final onto external USB HDD - Solve the Kernel Panic
hxxp://forums.remote-exploit.org/showthread.php?t=16593

I mainly used the fourth Tutorial (and modified the commands from the above suggestions
to suit a Virtual HD with Backtrack 3, instead of a USB Drive with BT2). I then went into
VirtualBox's "Settings", "Details", "CD/DVD-ROM" settings. I unchecked "Mount CD/DVD-ROM"
to unmounted the "bt3final_usb.iso" file and made the first virtual HD the boot drive,
upon rebooting all changes were sticky.

Use "fdisk /dev/hda" to make your first partition (boot) 1.5GB, your swap 1GB and use the
rest for the root (using an 8GB HD). You can type "p" in fdisk and it should print a table
as shown below (use "m" as needed, and don't forget to "w"rite). You may prefer to use cfdisk
instead of fdisk as it is easier to use and may have fewer bugs.


Code:
bt ~ # fdisk -l /dev/hda

Disk /dev/hda: 8589 MB, 8589934592 bytes
16 heads, 63 sectors/track, 16644 cylinders
Units = cylinders of 1008 * 512 = 516096 bytes

Device Boot Start End Blocks Id System
/dev/hda1 * 1 2906 1464592+ 83 Linux
/dev/hda2 2907 4844 976752 82 Linux swap
/dev/hda3 4845 16644 5947200 83 LinuxYou can use QTParted to format your HDs but I recommend using fdisk to partition them.


You will now type the following to get setup (thanks to goon123 in thread 16593):


Code:
bt ~ # mkswap /dev/hda2
bt ~ # swapon /dev/hda2

bt ~ # mkdir /mnt/backtrack
bt ~ # mount /dev/hda3 /mnt/backtrack/
bt ~ # mkdir /mnt/backtrack/boot
bt ~ # mount /dev/hda1 /mnt/backtrack/boot/
bt ~ # cp --preserve -R /{bin,dev,home,pentest,root,usr,etc,lib,opt,sbin,var} /mnt/backtrack/
bt ~ # mkdir /mnt/backtrack/{mnt,proc,sys,tmp}
bt ~ # mount --bind /dev/ /mnt/backtrack/dev/
bt ~ # mount -t proc proc /mnt/backtrack/proc/
bt ~ # cp /boot/vmlinuz /mnt/backtrack/boot/

bt ~ # chroot /mnt/backtrack/ /bin/bash
bt ~ # nano /etc/lilo.confYou want the following in your lilo.conf file. Set your vga correctly, here are some
suggested values: "vga=ask" (gives a menu), "vga=normal" (default), or use one of these:


Code:
640x480 800x600 1024x768 1280x1024
32K 784 787 790 793
64K 785 788 791 794
16M 786 789 792 795Code:
# Start LILO global section
lba32
boot /dev/hda
prompt
timeout = 60
change-rules
reset
compact
vga = 792
# End LILO global section
# Linux bootable partition config begins
image = /boot/vmlinuz
root = /dev/hda3
label = Backtrack3
append = ”rootdelay=10”
# Linux bootable partition config ends
The "BT3 Graphics mode (VESA KDE)" command line is:


Code:
/boot/vmlinuz vga=0x317 initrd=/boot/initrd.gz ramdisk_size=6666 root=/dev/ram0 rw autoexec=kdm
Save that and then execute lilo (I like to use the very verbose flag)

bt ~ # lilo -v -v

Exit your chroot enviorment and your Konsole shell.

bt ~ # exit
bt ~ # exit


If you ever wish to edit your lilo.conf after the above create and copy procedure you
can return to where you were by using these commands instead of the above procedure.
First use the CD/DVD-ROM boot disk to start Backtrack 3 and then enter these commands
to adjust your mounts:


Code:
bt ~ # umount /dev/hda1
bt ~ # umount /dev/hda3
bt ~ # swapoff -a
bt ~ # mkdir /mnt/backtrack
bt ~ # mount /dev/hda3 /mnt/backtrack
bt ~ # mount /dev/hda1 /mnt/backtrack/boot
bt ~ # mount --bind /dev/ /mnt/backtrack/dev/
bt ~ # mount -t proc proc /mnt/backtrack/proc/
bt ~ # chroot /mnt/backtrack/ /bin/bash
bt ~ # nano /etc/lilo.conf
bt ~ # lilo -v
Use the "Start" button "Log Out", "Turn Off Computer" to exit Backtrack3.

In VirtualBox's "Settings", "Details", "CD/DVD-ROM" pane you can click on the
"Mount CD/DVD-ROM Drive" to disengage the "bt3final_usb.iso" from the CD/DVD-ROM
drive or better still go to "Settings", "General", "Advanced", "Boot Order" and
click on "Hard Disk" and the "Up Arrow" (to the right) to make the HD boot first.

Click "OK" and now click the green "Start" right-arrow to restart Backtrack 3 (from the VHD).
Ensure that Backtrack 3 is working and use the "Start" button to "Log Out","


31.): In some Wireless Network Drivers you are able to use Bridging, and some you can not.
If you have a very new computer then, when configuring VirtualBox, you are able to set
on the "General", "Settings", "Advanced" tab the "Extended Features", "Enable VT-x/AMD-V"
checkbox. With this set you can use VT-d to directly access your Wireless Network card.

My computer is new, but not that new so I had to use Bridging, here is what I did:

In Windows open the "Network Connections", locate and click on both your "Wireless
Network Adapter" and your "VirtualBox TAP Adapter", now right-click and choose Bridge.


32.): When you have everything correctly installed on your HD you can add the Virtual Tools.

In the VirtualBox menu "Devices" there is an entry called "Install Guest Additions...".

To install these tools go to the VirtualBox Toolbar (bottom right of the window) and
right-click on the CD/DVD-ROM, choose "Unmount CD/DVD-ROM" to unmount the Backtrack 3
installation CD/DVD-ROM.

Now select "Install Guest Additions..." and it will appear on your Backtrack 3 Desktop
as a CD Icon. The file is called VBOXADDITIONS_2.0.2_36486. In order to mount this file
you will need to open Konsole and create a new directory called /mnt/hdc first.

When you have it mounted in your Konsole type this and then reboot:


Code:
cd /mnt/hdc
./VBoxLinuxAdditions-x86.run
echo 98vboxadd-xclient > ~/.xinitrc
reboot
33.): Start Backtrack 3 in VirtualBox and type "ifconfig", notice that you have "eth1" and "lo".
If you can use VT-d then you might have your Wireless Networking already working but for
the rest of use that must use Bridging you can enable Promiscuous mode on the Bridge:


Code:
ifconfig eth0 up
ip link set dev eth0 promisc onNow type "ifconfig" and you will see "PROMISC" working for eth0 (your Wireless Bridge).
Notice your HWaddr, it should be the MAC of your "Wireless Network Adapter".

When following tips given you will use eth0 instead of wifi0 or ath0 and likely will
need to tweak the tips a bit to get everything working to the extent it is possible.

You will find that some programs only work if they can detect a "Wireless Network
Adapter". Wireshark works but you might want to filter out "STP" packets. You can
also use any of Backtrack 3's tools on capture files saved from OmniPeek (you can use
Wireshark to read OmniPeek ".pkt" files and save them to ".cap" format.

write by Nokii@forums.remote-exploit.org

Comments

Popular posts from this blog

Test New ALFA-AWUS036H v.2 (1.000mW) VS ALFA-AWUS036H v.1 (500mW)

- Recently emerged the New ALFA-AWUS036H v.2 (1.000mW), and these are the tests. TEST WITH NETSTUMBLER 1) usb da 100mW chipset railink 2) usb da 200mW chipset railink rt73 3) intel 2200 b/g con connettore esterno rp-sma 4) Alfa-AWUS036H 500mW 5) New Alfa-AWUS036H V2 da 1.000mW

Creating A Cheap Bluetooth Sniffer

Many papers and posts on internet forums have commented on the success of turning normal everyday bluetooth USB dongles ($10), into their more powerful counterparts that allow the capturing of packets from the airwaves. These more powerful USB dongles are usually sold at a much higher price ($10,000) together with the software to drive and control these devices. The problems associated with BlueTooth sniffing You cant simply just purchase the dongle with the alternate firmware. There is next to no real opensource packet capture program for the bluetooth protocol. Hardware & Limitations Chipsets: Whats the difference? The chipset of the Bluetooth USB Dongles are very important. Broadcom chipsets are cheap hardware and are deemed unsuitable devices for this paper. But unfortunalty nowadays, every manufacturer seems to prefer putting these chips in their products compared to the more reliable Cambridge Silicon Radio (CSR) chipset. If your lucky enough to find a dongle with a CSR chips...

ALFA-­AWUS036H & ALFA-­AWUS050NH INSTALLING/UPDATING DRIVERS RTL8187, r8187, RT2800usb on UBUNTU

NOTE: For surfing Internet with ALFA-AWUS050NH on Ubuntu Jaunty with rt2870sta driver, you must use the Kernel "2.6.28-11-generic #42-Ubuntu", without change or updates the drivers modules. NOTE: The tutorial is not related to Ubuntu karmic. Driver RTL8187/Stacks-­mac80211 (ref. ALFA-­AWUS036h) ­- These drivers, for surfing Internet, are more stable than r8187, and fully compatible with Network-Manager 0.7 installed by default on Ubuntu 9.04. Network-Manager 0.7 installed by default on Ubuntu 9.04. ­- Supports all encryption without problems. (OPEN, WEP and WPA/WPA2) ­- With Compat-Wireless, the "injection" working, but for support “Fragmentation attack” (opt. -5) you need to install one patch. - The RX sensitivity and packets injection is less, related to drivers r8187. Driver r8187/Stacks-ieee80211 (ref. ALFA-AWUS036h) - This driver is recommended for use with the Suite of Aircrack-ng, but not particularly suitable for Internet connections, as less stable and disc...