Review SSR

8/18/2019 Review SSR

1/18

PENETRATION TESTING AND

SECURITY AUDITING DISTRO. Reshma Shaik (12311A1263)

Shabana Fatima (12311A1282) Shahul Ahmed (12311A1283)

SSR V1.1.10


2/18

HISTORY OF SSR 1.1.10

!

The evolution of SSR spans many Months of development,penetration tests, and unprecedented help from the security

community. SSR originally started with earlier versions of live

Linux distributions called Whoppix, IWHAX, and Auditor.

When SSR was developed, it was designed to be an all in oneSoftware used on security audits and was specifically crafted

to not leave any remnants of itself on the laptop.

! It has since expanded to being the most widely adopted

penetration testing framework in existence and is used by thesecurity community all over the world.


3/18

ABOUT SSR 1.1.10

!

A Linux distribution is an operating system made from a softwarecollection, which is based upon the Linux kernel and, often, a

package management system.

! Linux users usually obtain their operating system by downloading

one of the Linux distributions, which are available for a wide variety

of systems ranging from embedded devices and personal computers

to powerful supercomputers.

! A typical Linux distribution comprises a Linux kernel, GNU tools

and libraries, additional software, documentation, a window system,

a window manager, and a desktop environment.

! Most of the included software is free and open-source software made

available both as compiled binaries and in source code form, allowing

modifications to the original software.


4/18

! A Linux distribution may also be described as a particular

assortment of application and utility software (various GNUtools and libraries, for example), packaged together with the

Linux kernel in such a way that its capabilities meet the needs

of many users.

! The software is usually adapted to the distribution and thenpackaged into software packages by the distribution's

maintainers.

! The software packages are available online in so-called

repositories, which are storage locations usually distributed

around the world.


5/18

FEATURES OF SSR 1.1.10

!

Identify Live Hosts! Information Gathering

Analysis

! Web Crawlers

! Database Analysis

! Bluetooth Analysis

! Vulnerability Assessment

! Exploitation Tools

! Wireless Exploitation Tools

! A Bunch of Password Tools

UNIX was not designed to stop its users

from doing stupid things, as that would also

stop them from doing clever things.

— Anonymous


6/18

FEATURES OF SSR 1.1.10

MULTI PLATFORM OTA - SUPPORT

Premium linux distro


7/18

Programming languages

! C# .Net

! VB .Net

! ADO .Net

! ASP .Net

! PYTHON

! RUBY! SHELL Script

! BATCH Script

! SQL

! HTML5

! PHP

! CSS

! JAVASCRIPT

Development Tools

! Visual Studio 2015

! XAMARIN mono

! SQL Server

! MS ACCESS

! MYSQL

!

Visual Ruby! GTK2 rubygem

! Quickly

! IronPython | PyQt

Design Tools! Photoshop CS6

! Skincrafter 3 [light]

! Metro style


8/18

CURRENT….

PROJECT..

STATUS.

Still in development phase,…


9/18

WATERFALL MODEL - CURRENTLY BETWEEN PHASE “ 3-4 ”


10/18

PROJECT PHASES FOR SOFTWARE DEVELOPMENT USING THE WATERFALL MODEL

ANALYSIS:! We analysed the requirements, and fully understood the

problems. This is a research phase that includes no building.

We attempted to ask all the questions and secure all the

answers we need to build the product requirement.

DESIGN:

! We designed a technical solution to the problems set out by

the product requirements, including scenarios, layouts anddata models. This phase is usually accompanied by

documentation for each requirement, which enables other

developers to review it for validation.


11/18

PROJECT PHASES FOR SOFTWARE DEVELOPMENT USING THE WATERFALL MODEL

IMPLEMENTATION:! With inputs from system design, the system is first developed

in small programs called units, which are integrated in the

next phase. Each unit is developed and tested for its

functionality which is referred to as Unit Testing.

Presently Integration and Testing phase is going on,..


12/18

In detail status about all the modules working on,…

WINDOWS PLATFORM

Installer is completed - 100% Application GUI Completed - 70%

Integration of tool completed - 20%

Resource allocation completed - 20%

Application Host Server Completed - 45%

Application OTA Support completed - 55%

LINUX PLATFORM Front End - 30%

Back End - 60%

Tools collaboration - 65%

OTA Support - 65%

MAC OSX PLATFORM

Front End- 20%

Back End - 35%

Tools Integration - 38%

OTA Support - 42%

Official Website for the Software

Webpage Hosted - 100%

Web-design and Content entered - 60% Webserver & App Resource connection - 55%


13/18


14/18

SCREEN-SHOT’S


15/18

ADVANTAGES OF SSR 1.1.10

! !"#$ &' ()#&"**! +"(,*$ -"#$ &' .#-/! 0''1 02324 50,"67(8"* 3#-, 4)&-,9"8-:! ;'


16/18

DISADVANTAGES OF SSR 1.1.10

! ;") K- .#-1 9', 1-#&,.8?') 6.,6'#-#! ;") 8".#- *'## '9


17/18

ETHICAL ISSUES

! ;") K- .#-1 9', 7"8T()GQ &' 1(#8'J-, J.*)-,"K*- 6',

! B$#&-< "1


18/18

“If I had 6h to chop down a tree,I’d spend the first four of them

sharpening my axe.

- Patrick Engebretson

Documents

Review SSR