🚀 go-pugleaf

In <3lv41u$1hae@tequesta.gate.net>, toyboy@gate.net (toyboy) writes:
>toyboy (toyboy@gate.net) wrote:
>: I was just reading about Satan in the Sun Sentinel (FL).  Three questions,
>: with a few subquestions:
>
>:   - Where can I get a copy?

You answered your own question on this.  (See list, below.)

>:   - Is there an OS/2 version?

Read the following from your documentation post:

     :>  It may take several tens of seconds to read all data from file.  you
     :>  will need a machine with lots of CPU (sparc5, indy, or better) and
     :>  memory (32 MB or better).

I can now update my previous answer and say definitely not, unless there
is a unix shell that runs under OS/2, along with a PERL and Web Browser for
that same environment.  (Never say "never.")  Of course, even if you crossed
that barrier, you would need a pretty "hot" OS/2 machine. (see above.)

>:     - If no, is the source for porting available?

I do not have a "tar" program available because I work in OS/2 land.  There
may be a "tar" that will run under OS/2.  If you can find a "tar" you will
probably be able to read the source since the instructions you received
included instructions to "make" the software, and that would indicate that
a source file is included.  Of course, if it were designed to be used under
UNIX, you would have to port the source if you wanted to make it available
for a lot of machines simultaneously.  That is what the author intended, so
my guess is that if you can find a "tar" program you can have the source,
and then you can have at it.  (You would also need PERL unless you are
going to translate the source to a different language as well.)

>:   - Anyone know how it works?
>:     - If yes, how?

As I said in my prior response, it emulates about every nasty hacker trick the
authors know about, and reports on which succeed and which fail.

Of course, many of those nasty hacker tricks can cause the target system to
take a nosedive.  That is why I suggested in my previous post that you not
run it against any site from which you have not obtained a written waiver of
liability.  (Good luck on getting one.)

The author is VERY controversial.  Some folks avidly support him because the
net will end up more secure as a result.  This is the "end justifies the means"
crowd.  Others are rabidly against allowing this software to exist.  This is the
"head in the sand" crowd.  However, to avoid the political power that this
latter group wields, the author chose to mass-distribute the files to the public
in this rather unconventional manner in order to ensure that nobody from the
"head in the sand" crowd could prevent its distribution.

IMHO, this software should be used very carefully, and only in a controlled test.

However, there will (obviously) be a lot of hackers get copies of it and then
"enhance" it to pull even dirtier and/or nastier tricks.  The net will be a LOT
less stable a place to be for the next few weeks.  Hold onto your login IDs
folks, it could be a really rocky ride.  Then, again, maybe nobody will use this
program on your favorite site(s) after all.  And maybe there IS a tooth fairy.

>: Thanks in advance.

Don't mention it.  (As if you could stop me from ranting on my own anyway. ;-)

=====
>
>mmm, following up my own note.  Anyway.  I found the answer to
>the first question.  See attached.
>
>As for the second, it seems to be in PEARL 5.000 according to the
>documentation.  It also requires a web browser.  It doesn't
>mention WebExplorer, though.  How parochal can they be?!?

Look: this thing is written for UNIX and I don't know of any WebExplorer
ports for UNIX.  So, it is natural that there would be no mention of WE in
the release documentation!  If somebody can make it function in an OS/2
environment, THEN is the time to think about using it with WE.

================================================================= 
:>
:>This is an updated SATAN public documentation release. We're releasing
:>it so that you can get some idea of what the final product will be like.
:>
:>SATAN will become available on April 5 near 14:00 GMT on the following
:>sites (this list is still under construction).
;>
:>    ftp://ftp.mcs.anl.gov/pub/security
:>    ftp://coast.cs.purdue.edu/pub/tools/unix/satan
:>    ftp://vixen.cso.uiuc.edu/security/satan-1.0.tar.Z
:>    ftp://ftp.denet.dk/pub/security/tools/satan/satan-1.0.tar.Z
:>    http://ftp.luth.se/pub/unix/security/satan-1.0.tar.Z
:>    ftp://ftp.luth.se/pub/unix/security/satan-1.0.tar.Z
:>    ftp://ftp.dstc.edu.au:/pub/security/satan/satan-1.0.tar.Z
:>    ftp://ftp.acsu.buffalo.edu/pub/security/satan-1.0.tar.Z
:>    ftp://ftp.acsu.buffalo.edu/pub/security/satan-1.0.tar.gz
:>    ftp://ftp.net.ohio-state.edu/pub/security/satan/satan-1.0.tar.Z
:>    ftp://ftp.cerf.net/pub/software/unix/security/

OBTW:  I got it from CERFnet, just out of curiosity.  It is there.  But it IS in
tar format.....

:>    ftp://coombs.anu.edu.au/pub/security/satan/
:>    ftp://ftp.wi.leidenuniv.nl/pub/security
:>    ftp://ftp.cs.ruu.nl/pub/SECURITY/satan-1.0.tar.Z
:>    ftp://ftp.cert.dfn.de/pub/tools/net/satan/satan-1.0.tar.Z
:>    ftp://cnit.nsk.su/pub/unix/security/satan
:>    ftp://ftp.csi.forth.gr/pub/security/satan-1.0.tar.Z
:>    ftp://ftp.auscert.org.au/pub/mirrors/ftp.win.tue.nl/satan-1.0.tar.Z
:>    ftp://ftp.informatik.uni-kiel.de/pub/sources/security/MIRROR.ftp.win.tue.nl
:>    ftp://ftp.kulnet.kuleuven.ac.be/pub/mirror/ftp.win.tue.nl/security/
:>    ftp://ftp.tisl.ukans.edu/pub/security/satan-1.0.tar.Z
:>    ftp://ftp.ox.ac.uk/pub/comp/security/software/satan/satan-1.0.tar.Z
:>
:>and on ftp.win.tue.nl as /pub/security/satan-1.0.tar.Z
:>
:>In order get things up and running,
:>
:>- You will need PERL 5.000 or better, and a WWW browser (Netscape or
:>  Mosaic preferred, some Lynx versions may have a problem). SATAN looks
:>  a lot better on a color display.
:>
:>- Run the "reconfig" script. It will patch some scripts with the
:>  pathnames of your PERL 5 executable, and of your WWW browser.  If
:>  SATAN does not find the WWW browser that you want to use, edit the
:>  config/paths.pl file and change the line "$MOSAIC = [...]" to be
:>  whatever browser you prefer (make sure to preserve the quotations
:>  marks and punctuation of the line.)
:>
:>- Run the "make" command. It will build a few auxiliary programs.
:>
:>- Run the "satan" script. When run without arguments, it will start up
:>  a WWW browser. The command-line interface is described in the satan.8
:>  manual page ("nroff -man" format).
:>
:>- Choose the `data management' link, and load the `foo.org' data base.
:>  It may take several tens of seconds to read all data from file.  you
:>  will need a machine with lots of CPU (sparc5, indy, or better) and
:>  memory (32 MB or better).
:>
:>- Use your browser's PRINT button to print reports.
:>
:>Most documentation is accessible via your WWW browser. Enjoy.
:>
:>	Wietse Venema / Dan Farmer 
:>	    (satan@fish.com)

/~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|     Bill Schultz     A Warped Mind Is A Terrible Thing To Waste.....
|                                          Use OS/2 Warp: Waste Not, Want Not.....

toyboy@gate.net (toyboy) writes:
>I was just reading about Satan in the Sun Sentinel (FL).  Three questions,
>with a few subquestions:
>  - Where can I get a copy?
>  - Is there an OS/2 version?
>    - If no, is the source for porting available?
>  - Anyone know how it works?
>    - If yes, how?

It is written in a mixture of C code and scripts for the perl language
(version 5.0).  It would be a nightmare to port to OS/2.  That's the
bad news.

The good news is that you don't have to port it.  You don't have to
have it hosted on the machine you wish to test (but the web browser for
running it and reading the results must reside on the machine hosting
the running code).  If you know of a trusted person who has a Unix
machine somewhere out there in net-land, you can ask that person to run
SATAN against your OS/2 machine and report the results to you.  I have
done this (successfully) with three OS/2 machines we have here (using
SATAN hosted on a Sun Sparc).

Please don't ask me to run SATAN against your OS/2 system.  You don't
know me and you don't know that I am not a malicious cracker.  Find
someone you know and trust from whom to request such a service!

-Dean
-- 
N. Dean Pentcheff 
Biological Sciences, Univ. of South Carolina, Columbia SC 29208 (803-777-3936)
Internet addresses: pentcheff@acm.org or dean@tbone.biol.scarolina.edu
WWW link:  <a href="http://tbone.biol.scarolina.edu/~dean/">home page</a>

In <3lub5a$mvh@tequesta.gate.net>, toyboy@gate.net (toyboy) writes:
:>I was just reading about Satan in the Sun Sentinel (FL).  Three questions,
:>with a few subquestions:
:>
:>  - Where can I get a copy?

It is available for downloading.  I had the location on my disk, but that is one
of the text files that I lost in a recent disk crash.  I am sure somebody else
will respond with the information, though.

:>  - Is there an OS/2 version?

To the best of my knowledge, no.

:>    - If no, is the source for porting available?

Its up to the author, whose name is MUD by now. ;-)

:>  - Anyone know how it works
:>    - If yes, how?

Yes.  It emulates every known nasty hacker trick and reports which ones
succeed and which ones fail.  My suggestion is that you do not run it pointed
at any site from which you have not obtained a waiver of liability, in writing,
in advance.  It has been know to crash a site here and there.  I have seen
some discussions of what it actually did in one of the other comp.* groups,
but it escapes me at the moment.

:>
:>Thanks in advance.

Your welcome.  Just sorry I lost that URL.

/~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|     Bill Schultz     A Warped Mind Is A Terrible Thing To Waste.....
|                                          Use OS/2 Warp: Waste Not, Want Not.....

toyboy (toyboy@gate.net) wrote:
: I was just reading about Satan in the Sun Sentinel (FL).  Three questions,
: with a few subquestions:

:   - Where can I get a copy?
:   - Is there an OS/2 version?
:     - If no, is the source for porting available?
:   - Anyone know how it works?
:     - If yes, how?

: Thanks in advance.

: TB (toyboy - It is my wife's nickname for me.)
:            - Visit alt.clothing.sneakers and then participate.
:            - Finally, get others to participate!

: sneaker ftp site:  host:      ftp-sneakers.os2rus.com
:                    userid:    sneakers    password:  rule

: also:  ftp://sneakers@ftp-sneakers.os2rus.com  ...  password: rule

: R/O site.  Contact toyboy@gate.net to submit something.

mmm, following up my own note.  Anyway.  I found the answer to
the first question.  See attached.

As for the second, it seems to be in PEARL 5.000 according to the
documentation.  It also requires a web browser.  It doesn't
mention WebExplorer, though.  How parochal can they be?!?

At least for now, toyboy.

- - - - - - - - 

This is an updated SATAN public documentation release. We're releasing
it so that you can get some idea of what the final product will be like.

SATAN will become available on April 5 near 14:00 GMT on the following
sites (this list is still under construction).

    ftp://ftp.mcs.anl.gov/pub/security
    ftp://coast.cs.purdue.edu/pub/tools/unix/satan
    ftp://vixen.cso.uiuc.edu/security/satan-1.0.tar.Z
    ftp://ftp.denet.dk/pub/security/tools/satan/satan-1.0.tar.Z
    http://ftp.luth.se/pub/unix/security/satan-1.0.tar.Z
    ftp://ftp.luth.se/pub/unix/security/satan-1.0.tar.Z
    ftp://ftp.dstc.edu.au:/pub/security/satan/satan-1.0.tar.Z
    ftp://ftp.acsu.buffalo.edu/pub/security/satan-1.0.tar.Z
    ftp://ftp.acsu.buffalo.edu/pub/security/satan-1.0.tar.gz
    ftp://ftp.net.ohio-state.edu/pub/security/satan/satan-1.0.tar.Z
    ftp://ftp.cerf.net/pub/software/unix/security/
    ftp://coombs.anu.edu.au/pub/security/satan/
    ftp://ftp.wi.leidenuniv.nl/pub/security
    ftp://ftp.cs.ruu.nl/pub/SECURITY/satan-1.0.tar.Z
    ftp://ftp.cert.dfn.de/pub/tools/net/satan/satan-1.0.tar.Z
    ftp://cnit.nsk.su/pub/unix/security/satan
    ftp://ftp.csi.forth.gr/pub/security/satan-1.0.tar.Z
    ftp://ftp.auscert.org.au/pub/mirrors/ftp.win.tue.nl/satan-1.0.tar.Z
    ftp://ftp.informatik.uni-kiel.de/pub/sources/security/MIRROR.ftp.win.tue.nl
    ftp://ftp.kulnet.kuleuven.ac.be/pub/mirror/ftp.win.tue.nl/security/
    ftp://ftp.tisl.ukans.edu/pub/security/satan-1.0.tar.Z
    ftp://ftp.ox.ac.uk/pub/comp/security/software/satan/satan-1.0.tar.Z

and on ftp.win.tue.nl as /pub/security/satan-1.0.tar.Z

In order get things up and running,

- You will need PERL 5.000 or better, and a WWW browser (Netscape or
  Mosaic preferred, some Lynx versions may have a problem). SATAN looks
  a lot better on a color display.

- Run the "reconfig" script. It will patch some scripts with the
  pathnames of your PERL 5 executable, and of your WWW browser.  If
  SATAN does not find the WWW browser that you want to use, edit the
  config/paths.pl file and change the line "$MOSAIC = [...]" to be
  whatever browser you prefer (make sure to preserve the quotations
  marks and punctuation of the line.)

- Run the "make" command. It will build a few auxiliary programs.

- Run the "satan" script. When run without arguments, it will start up
  a WWW browser. The command-line interface is described in the satan.8
  manual page ("nroff -man" format).

- Choose the `data management' link, and load the `foo.org' data base.
  It may take several tens of seconds to read all data from file.  you
  will need a machine with lots of CPU (sparc5, indy, or better) and
  memory (32 MB or better).

- Use your browser's PRINT button to print reports.

Most documentation is accessible via your WWW browser. Enjoy.

	Wietse Venema / Dan Farmer 
	    (satan@fish.com)

In <3lub5a$mvh@tequesta.gate.net>, toyboy@gate.net (toyboy) writes:
>I was just reading about Satan in the Sun Sentinel (FL).  Three questions,
>with a few subquestions:
>
>  - Where can I get a copy?
>  - Is there an OS/2 version?
>    - If no, is the source for porting available?
>  - Anyone know how it works?
>    - If yes, how?
>
>Thanks in advance.
>
>TB (toyboy - It is my wife's nickname for me.)
>           - Visit alt.clothing.sneakers and then participate.
>           - Finally, get others to participate!
>
>sneaker ftp site:  host:      ftp-sneakers.os2rus.com
>                   userid:    sneakers    password:  rule
>
>also:  ftp://sneakers@ftp-sneakers.os2rus.com  ...  password: rule
>
>R/O site.  Contact toyboy@gate.net to submit something.


The source for Satan was going to be posted today as I understand it.  Somebody
will then have to compile it for OS/2.

Ran Hooper
ran@qnet.com

I hope I am not the only one who wants this answer, but what is satan?

In article <3lvnfa$n4m@news.primenet.com>, heitzm@primenet.com wrote:
:I hope I am not the only one who wants this answer, but what is satan?

Not a stupid question. SATAN is a piece of software that analyzes 
and reports on security holes in systems connected to the Internet. 
It's basically a compilation of everything widely known about how to
misconfigure one's system, and advice on what to do about it. Think 
of it as the CFGINFO of the Internet world. :-)

It's controversial in that it's widely accessible, and can be used 
as a tool for criminal (or just immoral) cracking. The 
counter-argument is that security by obscurity - hoping that nobody 
will notice, and not talking about it - isn't all that secure at 
all. Further discussion is available in, hmm, newsgroups with 
"security" in the name, I'd guess.

bruceab@teleport.com___________http://www.teleport.com/~bruceab/
List Manager, Christlib, for Christian and libertarian concerns
Preview S.M. Stirling's forthcoming novel DRAKON at
                               http://www.teleport.com/~bruceab/drakon.html
Finger me for PGP 2.6.2 key.  "Proclaim liberty throughout the land."