Welcome to Maryam's Security Site

Internet Footprinting Using Linux

Perceived Purpose
To explore footprinting and see how much information we could obtain about an organization’s networks.

Tools
www.arin.net/whois, www.internic.net, whois, dig, host, ping, and traceroute commands

Procedure(s)
Click here to see the procedure and result for WHOIS.
Click here to see the procedures and results for dig and host.
Click here to see the procedures and results for ping and traceroute.

Analysis and Reflection
These exercises show us how much information is accessible to people through the Internet or just through typing simple commands. Because of the fact that an organization’s network information can be so easily accessed, some organizations outsource their web server hosting, therefore no information about the company’s network is revealed.

Time
50 minutes

Linux File System Security – Access Control

Perceived Purpose
In this part of the lab, we want to explore Linux file and directory permissions and ownership.

Tools
ls command

Procedure(s) and Results
Linux only supports 3 basic permissions for users and groups: read, write, and execute and special permissions: setuid and setgid.

The command ls –al gives us a listing of the files in that specific directory.

-rwxr-xr-x 1 root root 273516 May 18 2005 pack_isam

r – read, w – write, x – execute

knoppix@0[bin]$ ls pass* -al

s is a permission; special bit used to establish setuid or setgid permissions

In the previous command, we see a new letter, ‘l’. This is the sticky bit. The sticky bit dictates that users can only delete files that he or she owns or has write permissions to. The Unix "ls" command displays a set sticky bit as a "t" in the permissions of a file or directory.

Analysis and Reflection
This lab showed us how to look at the different directories in Linux and see how the administrator set up access controls by using the sticky bit.

Time
20 minutes

Hosted by www.Geocities.ws

1