Shulou(Shulou.com)05/31 Report--

Editor to share with you how to install BlindElephant on BT4. I hope you will get something after reading this article. Let's discuss it together.

BlindElephant is a Web Application Fingerprinter program, of course, there is also similar WhatWeb, but WhatWeb does not seem to be able to scan plug-ins, this can.

Patrick Thomas, a security researcher at Qualys, discussed the open source Web application fingerprint engine BlindElephant at the Black Hat conference. BlindElephant is a tool that helps security experts and system administrators identify everything on the server, including any Web applications that users download. Instead of discovering vulnerabilities, it checks the version of the Web application running)

This tool requires a Python 2.6.x environment to run, while Python on BT4 is 2.5.2 by default, and running BlindElephant will result in an error.

1. Download Python-2.7.tar.bz2 from the official python website and go back to your local location, decompress and install.

Root@pentestbox:/pentest/scanners# tar xjvf Python-2.7.tar.bz2root@pentestbox:/pentest/scanners#. / configure-prefix=/opt/python2.7root@pentestbox:/pentest/scanners# makeroot@pentestbox:/pentest/scanners# make install

2.svn downloads BlindElephant and installs

Root@pentestbox:/pentest/scanners#svn co https://blindelephant.svn.sourceforge.net/svnroot/blindelephant/trunk blindelephantroot@pentestbox:/pentest/scanners#cd blindelephant/srcroot@pentestbox:/pentest/scanners#sudo python setup.py install

At this point, there will be an extra bulid folder, go in and run BlindElephant to test

The method of fingerprint comparison of static files as shown in the following figure

After reading this article, I believe you have a certain understanding of "how to install BlindElephant on BT4". If you want to know more about it, you are welcome to follow the industry information channel. Thank you for reading!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.