How to install backbox linux in virtualbox

BackBox Ubuntu-

BackBox is not just an OS, but also known to be a great tool for penetration testers. It is fully Ubuntu based but has a greater interface and has more number of tools.  As BackBox is a Linux distribution , which is specially based on pen-testing and Security Assessment. To know more about this Open Source Linux Distro you can visit the BackBox official site from here.
In this post, I will teach you how to install BackBox Linux and how to do its basic Config (on next post). There are 2 ways to install an OS. One is by installing as your main OS, and another method is by installing it on a Virtual Machine. I will recommend to you to use Virtual Machine as there are low chances of any risk with your hardware, as well as with your software. As BackBox is mainly for Penetration Testing, I would recommend you to use it on a Virtual machine, unless you have a mid-high end PC (with At least 4 GB RAM and a Quad Core CPU is Minimum requirement according to me). If you don’t have a mid-high end PC, then you may go for installing directly on hardware.

In this section, I will show how to install Backbox on VM(Virtual Machine). So to go ahead following the steps below:

First, you need to download the BackBox ISO file. You can download the latest version directly from https://backbox.org/download. If you are using a 32-bit machine, then download the BackBox Linux 4.6 – i386 .Or else download the BackBox Linux 4.6 – amd64.
(Note: In this post I will be using the 64-bit version.But don’t worry as the process of installation is same for both)

For running Virtual Machine, I will be using Virtualbox which is a great free tool.But you can also use VM-Ware or Hyper VM(in Windows 10 only). The process will almost same for all programs, but if you find any huge difference, then you can comment below so that we can send you the suitable tutorial and don’t worry we will be quick in our work.

You can download Virtualbox from here. For VMware visit here.

http://download.virtualbox.org/virtualbox/5.1.16/VirtualBox-5.1.16-113841-Win.exe

http://download.virtualbox.org/virtualbox/5.1.16/Oracle_VM_VirtualBox_Extension_Pack-5.1.16.vbox-extpack

You don’t need to download Hyper VM in windows 10 ,as it comes inbuilt with windows 10. And for Installing it, I am pretty sure that you can do that yourself. So follow the steps below after you have installed and configured your Virtualbox. Read the Virtualbox Documentation for more help.

Now to add new Virtual machine (your black-box) on virtual Machine click on “new”.And type the VM name you want to use. Then click on “next”.

Now choose the amount of RAM you want to use in your VM and click “next”. Never choose more than half RAM you have. For BackBox 2GB will be enough.

Now in the hard disk section, check on “Create a virtual hard disk now”. (Note: If you have never used any virtual machine section, check then strictly follow me for now. Later you will get to know the function of each option).

In the next window check on “VDI”. Then on next check on “Dynamically Allocated”, which will increase your VM hard disk accordingly, when it the storage will get full.

Next in the File Location and Size section, choose the size of your VDI (You Virtual Hard disk). 10GB is enough here. After that click “create”.Now you have successfully added BackBox VM to Virtual Machine. But before running you need to do some settings.

So click on settings

Do exactly the same settings as in Screenshots and in Storage section, locate your Downloaded ISO file in “Optical drive”.

Settings are done.Now click “ok”.

Now the VM is ready to start. So select your VM on Virtualbox menu, and click on “Start”. Then your Backbox Live will start. You can test Backbox on the live mode too. But you need to install it to get all its features. So, click on “Install BackBox Linux” in the Desktop menu to start the installer.

After completing those steps installation will start. At this moment, you should be patient as it will take time depending on your hardware and internet speed.

After the setup has finished, it will prompt a window, where you have to choose “Restart now”. After restart, you will have to enter the password and login

Congrats!! You have successfully installed BackBox VM.

(Note:As you can see that you are not able to navigate properly in the machine and screen size is too small, so there you need to install the Virtualbox guest addition, which installs necessary tools and driver in a OS to make run properly on Virtualbox.)

To learn how to install Virtualbox guest addition on the system please follow the next post here-VIRTUALBOX GUEST ADDITIONS INSTALLATION ON WINDOWS AND LINUX .

url :  https://backbox.org/linux

download mirror :  https://backbox.org/download

ISO mirror http://ba.mirror.garr.it/mirrors/backbox/backbox-4.7-amd64.iso

Error message comimg form Maximizer Clients Systems

Error (1) #  "Failed to create a new database" from Maximizer Clients Systems
Error (2) # "unable to connect maconfig database maximizer"

The problem is very likely to be caused by incorrect initialization of the instance Microsoft SQL server that is installed when you installed Maximizer. If you have the option in the Administrator to repair database this may resolve the problem but you may not be able to get into this menu due to the problems you are experiencing. The simplest solution will probably be to remove both Maximizer and the SQL cleaning up the machine (check for other SQL instances). Then re-install allowing Maximizer to perform a clean and correct SQL installation. 

Install Active Directory management tools on Windows 7 & Windows 8

The Remote Server Administration Tools (RSAT) for Windows 7 & 8 can be downloaded from Microsoft's web site:

For Windows 7 : 
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d

For Windows 8 : 

http://www.microsoft.com/en-us/download/details.aspx?id=28972

After downloading and installing the tool on your Windows 7 computer, use the Turn Windows features on or off function to enable AD management tools.

1) From the Control Panel, click on Programs.
2) Under Programs and Features, select Turn Windows features on or off.
3) Under Remote Server Administration Tools > Role Administration Tools, select AD DS and AD       LDS Tools.

Active Directory (AD)

Active Directory is Microsoft's directory service that allows administrators to assign policies, deploy software, and apply updates for an entire organization. AD also allows users to store data in a central location, where it is backed up.

Benefits of Active Directory

Active Directory is a state-wide authentication directory that supports enterprise systems, provides contact information and scheduling integration, along with providing mechanisms for centralized desktop management. There are multiple Active Directory (AD) environments in use across the University of Tennessee campuses and institutes. The purpose of the Active Directory Project is to migrate all of these environments into a single AD forest, which will provide the following benefits:

1. Single user name and password - NetID
2. Password synced between AD and LDAP Directory Services
3. Reduce overhead through standardization
4. Improve services through centralized management capabilities
5. Provide foundation for the following AD related services: a)SharePoint    b)Exchange
6. Improve workstation security
7. Central storage provided for individuals and departments
8. Backup and restoration services for central storage
9. Server storage space for user documents
10. Backed up data on Home and Departmental drives
11. Lower departmental cost because infrastructure is managed and maintained by OIT

Q: - What is Authentication Header and how it provides the protection to IP header?

Basically Authentication Header protects IP header and provides the complete authenticity to the IP packets.AH may work in two ways: transport mode and tunnel mode.

In tunnel mode; Authentication Header protects the IP header using two IP header layers inner and outer. The inner IP header is used to contain the source and destination addresses, and the outer IP header is used to contain the security gateway information.

Q: - if We have to generate a hash function then what characteristics are needed in a secure hash function?.

• A secure hash function should have the following characteristics:
• The output generated by a hash function should be of a fixed length. 
• It should be very easy to find out a hash function for a given message. 
• If a hash value is given of a message than it is almost impossible to get that message. 
• The two different messages should not have the same hash value; it is against the hash function property. 

For authentication: One can encrypt the hash (MD4/SHA) of the data with a private key. This is known as a digital signature.
To prevent DoS attacks firewall can be configured as a relay; in this approach the firewall responds on behalf of the internal host. During the attack, the firewall responds to the SYN sent by the attacker; since the ACK never arrives, the firewall terminates the connection. By Keeping protocols and Antivirus software up-to-date, we can prevent being a victim of DoS. A regular scanning of the machine is also necessary in order to detect any anomalous behavior.

Q: - What are the differences among encoding, encryption and hashing?

Encoding: Basically encoding is used to protect the integrity of data as it crosses through a communication network to keep its original message upon arriving. It is primarily an insecure function because it is easily reversible.

Encryption: Encryption is basically designed for confidentiality and data integrity and reversible only if you have the appropriate key.

Hashing: With hashing the operation is one-way i.e. non-reversible. It takes an input (or , message ) and returns a fixed-size string, which is called the hash value.

Q: - What is Data encryption?

Data encryption ensures data safety and very important for confidential or critical data. It protects data from being read, altered or forged while transmission.

Q: - What is Digital Signatures ?

A digital signature is an attachment to an electronic message used for security purpose. It is used to verify the authenticity of the sender.

Q: - How do you use RSA for both authentication and secrecy?

RSA is a public key encryption algorithm. The RSA algorithms are based on the mathematical part that it is easy to find and multiply large prime numbers together, but it is extremely difficult to factor their product.

Q: - If you are a victim of Denial of Service (Dos) then what you do?

The function of a denial of service attack is to flood its target machine with too much traffic and prevents it from being accessible to any other requests or providing services.