Comments on: Backtrack 4 – USB/Persistent Changes/Nessus http://www.infosecramblings.com ramblings on various information security topics Tue, 07 Feb 2012 23:34:55 +0000 hourly 1 By: install system backtrack « Team Torment http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-57217 install system backtrack « Team Torment Thu, 02 Feb 2012 23:34:22 +0000 http://www.infosecramblings.com/?page_id=682#comment-57217 [...] –   تثبيت البلاك تراك > ثابت  على لـ  With Nessus  )  USB) [...] [...] –   تثبيت البلاك تراك > ثابت  على لـ  With Nessus  )  USB) [...]

]]> By: BackTrack 4 R2 USB wersja z zapisywaniem zmian (persistent) « Lost.one.pl http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-52776 BackTrack 4 R2 USB wersja z zapisywaniem zmian (persistent) « Lost.one.pl Mon, 12 Dec 2011 12:13:12 +0000 http://www.infosecramblings.com/?page_id=682#comment-52776 [...] obraz to nic innego jak to co zostało opisane tutaj: http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/ z tą drobną różnica że mój obraz można wrzucić na nośnik USB nie posiadając innego [...] [...] obraz to nic innego jak to co zostało opisane tutaj: http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/ z tą drobną różnica że mój obraz można wrzucić na nośnik USB nie posiadając innego [...]

]]> By: frankmir http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-50321 frankmir Fri, 11 Nov 2011 02:56:57 +0000 http://www.infosecramblings.com/?page_id=682#comment-50321 i have a question...about back-track5r1..... back-track5r1 can't fond "persistent" or "nopersistent" in syslinux.cfg.... so ,it can't keep the changes.... i have a question...about back-track5r1.....
back-track5r1 can't fond "persistent" or "nopersistent" in syslinux.cfg....
so ,it can't keep the changes....

]]> By: How do I manually install and update plugin in OpenVAS3? - Admins Goodies http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-44630 How do I manually install and update plugin in OpenVAS3? - Admins Goodies Sun, 21 Aug 2011 06:03:09 +0000 http://www.infosecramblings.com/?page_id=682#comment-44630 [...] Install backtrack4 on a usb stick. From your home boot up on this and update all the tools that you want such as OpenVas and Metasploit. Then bring it back into work and boot off the USB stick to do your vulnerability scan. [...] [...] Install backtrack4 on a usb stick. From your home boot up on this and update all the tools that you want such as OpenVas and Metasploit. Then bring it back into work and boot off the USB stick to do your vulnerability scan. [...]

]]> By: Andrea http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-43673 Andrea Tue, 02 Aug 2011 17:02:45 +0000 http://www.infosecramblings.com/?page_id=682#comment-43673 "As it sits, it does not work with Backtrack 5. If you have a 16GB stick, please try this one" AND IT'S true , but why ? I do not understand what changes in a 16-gigabyte memory stick thanks for your time "As it sits, it does not work with Backtrack 5. If you have a 16GB stick, please try this one"
AND IT'S true , but why ?
I do not understand what changes in a 16-gigabyte memory stick
thanks for your time

]]> By: astroboy http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-43631 astroboy Mon, 01 Aug 2011 19:06:03 +0000 http://www.infosecramblings.com/?page_id=682#comment-43631 hey guys it seems that the link for BackTrack4 R2 is down permanently .It gives nothing found..........Any ideas from where can i download not using torrents? hey guys it seems that the link for BackTrack4 R2 is down permanently .It gives nothing found..........Any ideas from where can i download not using torrents?

]]> By: Creating a Persistent Partition for BT4 Live http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-41816 Creating a Persistent Partition for BT4 Live Sun, 26 Jun 2011 15:05:57 +0000 http://www.infosecramblings.com/?page_id=682#comment-41816 [...] Follow the instructions here. [...] [...] Follow the instructions here. [...]

]]> By: chris http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-39374 chris Sat, 21 May 2011 17:19:44 +0000 http://www.infosecramblings.com/?page_id=682#comment-39374 I have used this how-to in order to have a BT4+persistent+nessus but without truecrypt : it was perfect Now, I have tried to reuse this USB key for BT5 by just changing BT4 files with the new BT5 ones and reformatting the "casper-rw" partition in order to avoid "side effects" : of course, as added in the beginning of this topic, my attempt was not a success. The problem seems to be quite "simple" : the boot breaks during initrd scripts by giving an error on an attempt to mount the first partition on my USB and claiming "already mounted or device busy". This was the start of my investigation in order to find out a way to get things working. I am not sure I have found the "root cause" but I have a solution which works on my case and I wish to share it with the community. In fact, the system mount /dev/sdb as /cdrom instead of /dev/sdb1 which is the real vfat partition, then the system refuses to mount sdb1 ,sdb2, sdb3 since the whole drive is busy. The error seems to be inside the function subdevices() in initrd:/scripts/casper-helpers where the code is supposed to check drive partitions but starts with the whole disk device (for my USB key, the function tries '/dev/sdb /dev/sdb/sdb1 /dev/sdb/sdb2 ...") unfortunately, the analysis done in this function found that /dev/sdb IS the correct partition instead of /dev/sdb1 !!. What did I try ? I patched this faulty script as : subdevices() { sysblock=$1 r="" for dev in "${sysblock}" "${sysblock}"/*; do if [ -e "${dev}/dev" ]; then r="${r} ${dev}" fi done echo ${r} } by subdevices() { sysblock=$1 r="" for dev in "${sysblock}"/*; do if [ -e "${dev}/dev" ]; then r="${r} ${dev}" fi done if [ -z "$r" ]; then if [ -e "${sysblock}/dev" ]; then r="${sysblock}" fi fi echo ${r} } Of course then, I played with CPIO to create a new inird (don't forget the bloody --format="newc" !!) and modified my boot menu to use my patched version BUT IT WORKS LIKE A CHARM FOR ME : I NOW HAVE THE PERSISTENT USB !!! If this could help developers trying to find out a way to get things working for this superb security distro and to write a new version for this really clear how-to .... --chris I have used this how-to in order to have a BT4+persistent+nessus but without truecrypt : it was perfect
Now, I have tried to reuse this USB key for BT5 by just changing BT4 files with the new BT5 ones and reformatting the "casper-rw" partition in order to avoid "side effects" : of course, as added in the beginning of this topic, my attempt was not a success.
The problem seems to be quite "simple" : the boot breaks during initrd scripts by giving an error on an attempt to mount the first partition on my USB and claiming "already mounted or device busy".
This was the start of my investigation in order to find out a way to get things working.
I am not sure I have found the "root cause" but I have a solution which works on my case and I wish to share it with the community.
In fact, the system mount /dev/sdb as /cdrom instead of /dev/sdb1 which is the real vfat partition, then the system refuses to mount sdb1 ,sdb2, sdb3 since the whole drive is busy.
The error seems to be inside the function subdevices() in initrd:/scripts/casper-helpers where the code is supposed to check drive partitions but starts with the whole disk device (for my USB key, the function tries '/dev/sdb /dev/sdb/sdb1 /dev/sdb/sdb2 ...") unfortunately, the analysis done in this function found that /dev/sdb IS the correct partition instead of /dev/sdb1 !!.
What did I try ? I patched this faulty script as :

subdevices() {
sysblock=$1
r=""
for dev in "${sysblock}" "${sysblock}"/*; do
if [ -e "${dev}/dev" ]; then
r="${r} ${dev}"
fi
done
echo ${r}
}

by

subdevices() {
sysblock=$1
r=""
for dev in "${sysblock}"/*; do
if [ -e "${dev}/dev" ]; then
r="${r} ${dev}"
fi
done
if [ -z "$r" ]; then
if [ -e "${sysblock}/dev" ]; then
r="${sysblock}"
fi
fi
echo ${r}
}

Of course then, I played with CPIO to create a new inird (don't forget the bloody --format="newc" !!) and modified my boot menu to use my patched version BUT IT WORKS LIKE A CHARM FOR ME : I NOW HAVE THE PERSISTENT USB !!!

If this could help developers trying to find out a way to get things working for this superb security distro and to write a new version for this really clear how-to ....

--chris

]]> By: aalex http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-39125 aalex Mon, 16 May 2011 12:47:51 +0000 http://www.infosecramblings.com/?page_id=682#comment-39125 Hi guys, While my BT4 encrypted usb stick works perfectly, i deleted and then emptied the trash for 3 crucial files i had on the desktop, thinking that i had them saved on another drive. Is it possible to somehow recover them? Can anyone suggest something that might work to help me recover them? Thanks very much aalex Hi guys,

While my BT4 encrypted usb stick works perfectly, i deleted and then emptied the trash for 3 crucial files i had on the desktop, thinking that i had them saved on another drive.

Is it possible to somehow recover them? Can anyone suggest something that might work to help me recover them?

Thanks very much

aalex

]]> By: michael http://www.infosecramblings.com/backtrack/backtrack-4-usbpersistent-changesnessus/#comment-39058 michael Sun, 15 May 2011 00:35:58 +0000 http://www.infosecramblings.com/?page_id=682#comment-39058 another bt5 solution is to use the installer provided on the desktop :-) boot from bt5 dvd insert usb stick prior to starting x (otherwise you would probably have to unmount it) then startx start the installer on the desktop click, click, click to your liking. when it comes to disk/partition selection, just select manual or advanced and choose your usb (be carefull not to wipe your hdd) installing takes a while but be patient. reboot, eject cd, boot from usb. worked for me :-) btw: great guide you got here :-) another bt5 solution is to use the installer provided on the desktop :-)
boot from bt5 dvd
insert usb stick prior to starting x (otherwise you would probably have to unmount it)
then startx
start the installer on the desktop
click, click, click to your liking.
when it comes to disk/partition selection, just select manual or advanced and choose your usb (be carefull not to wipe your hdd)

installing takes a while but be patient.

reboot, eject cd, boot from usb.
worked for me :-)

btw: great guide you got here :-)

]]>