Offensive Security's penetration testing Linux distribution.

learn more… | top users | synonyms (2)

-3
votes
0answers
40 views

Fastest dictionary attacker? [on hold]

I made the ultimate wordlist, every possible combination of a-z 1-9 uppercase and lowercase, but by my math, it would take like 8 years for it to be completed at the very most if it did 1 password per ...
1
vote
2answers
189 views

Having Trouble using SET in Kali

I'm trying to setup a website attack vector and I get in error when it tries to load up metasploit. Here's a look at my whole process: Select from the menu: 1) Spear-Phishing Attack Vectors ...
0
votes
1answer
59 views

WireShark only showing broadcast packets

So here is my setup Desktop booting a live version of Kali from a USB drive The standard distro of wireshark that comes with Kali A Ralink RT-3070L High gain antenna My home network as a sandbox. ...
0
votes
0answers
27 views

How to relay broadcast traffic using ncat? [migrated]

I have 2 servers, 192.168.1.1 and 192.168.2.1. I want to relay any broadcast traffic (192.168.2.255) through 192.168.2.1 to 192.168.1.1. Here's what I'm doing to relay port 137 traffic, and it seems ...
1
vote
0answers
27 views

How to permanently change (spoof) the MAC address in Kali Linux (Debian) [migrated]

I use the program 'macchanger' to change MAC address. However, I have to put down an interface (wlan0) and then invoke Macchanger and then bring the interface up again. I would like to have a way I ...
0
votes
0answers
14 views

Proper way to shutdown OpenVAS [migrated]

I currently start OpenVAS by calling openvasmd, ad, and sd manually. What is the proper way to stop these services? Killing the processes works but I don't know what might not be cleaned up by the ...
0
votes
1answer
32 views

Olly Debugger Linux not functioning

In Kali Linux whenever i open a binary after compiling the c source file, it gives an error: "The file is not a valid PE file." No debugging takes place there after. Is there any workaround for ...
0
votes
1answer
98 views

Network Configurations of Metasploit and Metasploitable

All My Hacker Friends, I have installed 2 VM's on my Windows 7 machine. Backtrack(kali) and Metasploitable. When i run nmap scan on metasploitable from metasploitable VM itself, it shows that 3306 ...
1
vote
0answers
56 views

Deauth attack without being able to contact the AP

In my home pentest lab I though it would be interesting to try this scenario and see if it works: I have 2 computers and 1 AP, computer A is authenticated to the access point with WPA2 and computer B ...
0
votes
1answer
385 views

Add third party exploit to metasploit under kali linux 1.0.6

I want to add custom exploits in metasploit running inside kali linux system version 1.0.6. I start using this methode : cd /root/.msf4 cd modules mkdir -p exploits/windows/browser mv ...
0
votes
1answer
39 views

Throttle network based on OS [closed]

What do I need to learn/know to throttle a clients network based on his/her operating system. For example: Someone in my network using Kali Linux... I would like to throttle their traffic to ...
0
votes
1answer
84 views

Tor, PGP and Tor Entrance Nodes

Imagine alice posts her public PGP key on her website and bob encrypts a widget with that public key then sends it to alice over Tor. If alice's key is widely and publically available and an attacker ...
-1
votes
4answers
167 views

Software for web hacking? [closed]

I want to learn sql injection, xss and other web attacks. I am new to all this, just a beginner. I want to know which software to use. Can I use Windows for these attacks ...
0
votes
0answers
20 views

How do I resolve this error in backtrack 5 v3 (yamas.sh)? [duplicate]

Sslstrip will be listening on port 8080 and outputting log in /tmp/y.txt chmod: cannot access `/usr/bin/sslstrip/sslstrip.py': No such file or directory [-] Sslstrip is running. [+] Activating ARP ...
1
vote
1answer
262 views

Kali linux aircrack

I have AirPort Extreme network card and when I try to use airmong-ng on kali linux in a virtual machine this does not work. I know I need a usb-network card if I wanna make this work but if I boot ...
0
votes
1answer
444 views

Kali Linux /etc/shadow encryption type used by default?

I know that shadow's file hash follows this syntax: $id$salt$encrypted Where ID is the algorithm used: $0 DES $1 MD5 $2a Blowfish $5 Shadw-256 $6 SHA512 My shadow: ...
1
vote
1answer
55 views

Can't successfully do an idle scan

I have kali linux installed in VirtualBox and would like to do an idle scan. For this I need to find a suitable zombie pc. I'm using the ipidseq script to find one. The script finds some ip addresses ...
1
vote
0answers
518 views

GnuTLS ServerHello exploit (CVE-2014-3466) - how to verify?

So pretty much all of the GNUTLS world is worrying about CVE-2014-3466. I checked my Kali and it responds with this - # apt-cache rdepends libgnutls26 | grep -v lib Reverse Depends: ...
1
vote
1answer
117 views

Is there anyway to generate a SAM file?

I was wondering if it is possible to create a windows SAM file. I already tried using chntpw but it seems like it only works under a Redhat based linux, ie I was able to blank/change a Windows 7 ...
0
votes
3answers
161 views

How to set iptables to drop packets that I'm not listening on?

I've got a Kali Linux box I use for pen testing. I would like to configure my machine to DROP incoming packets, but only when I'm not listening on them. e.g. if I run a netcat listener on port 80, I ...
0
votes
0answers
252 views

Testing Basic Authentication with ncrack

I'm conducting some basic pen testing against a page protected with Basic Authentication. I've sucessfully tested with Medusa and Hydra but am struggling to get the syntax correct for ncrack. the ...
0
votes
1answer
102 views

How to set correctly set Local Host on a payload for a user outside subnet?

I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
2
votes
1answer
1k views

No Handshake from Airodump

I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD. airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
1
vote
2answers
312 views

Msfpayload: Exe within an exe?

So you can use msfpayload or msfvenom to add a payload to an existing exe, most people online seem to use reverse shell. But I was wondering if you could include a custom exe of your own design as a ...
3
votes
1answer
2k views

Setup of Kali Linux for reverse shell connections over the internet

I am running Kali Linux as a VM on my Windows machine which is NAT'd behind my company network, if I wish to pen test a website for a client and believe that a reverse shell is possible, what is a ...
0
votes
3answers
170 views

What are the pros and cons of using live CDs vs VMs for malware analysis?

I'm planning on doing some malware research for a research project, and I was wondering what would be a better option for keeping my system safe from viruses accidentally infecting it. I'm only ...
2
votes
2answers
682 views

Major differences between Kali and SecurityOnion

Curious about the major differences between Kali Linux and SecurityOnion. Do you think it would be easy or useful to replicate what has been done with SecurityOnion on Kali? Why is there such a ...
-6
votes
1answer
575 views

Can kali linux be hacked [duplicate]

I'm just curious if new version of backtrack Kali be hacked like back-doored or crack user password like the windows or mac
1
vote
1answer
2k views

Use Metasploit to exploit SMB through Conficker

I've got an SP0/unpatched Windows XP which is vulnerable to the Conficker worm. I'm using metasploit to use the Conficker exploit with the purpose of opening a remote shell/command line. My ...
1
vote
3answers
35k views

Wordlists on Kali Linux?

I notice that in /usr/share/wordlists in Kali Linux (former Backtrack) there are some lists. Are they used to bruteforce something? Is there specific list for specific kind of attacks?
-2
votes
2answers
24k views

backtrack or kali linux ??? Which is best for a beginner pen tester ? [closed]

I am using backtrack right now but i also wish to switch to kali linux if its more interactive. Because i am just a beginner pen tester. I tried with both bt4 and bt5, but novice in kali linux.
0
votes
5answers
4k views

Can I use Kali Linux when I learn Backtrack well?

I'm new to security issues and I'm almost buying a course at ELearningSec(begginners course,of course), I will in a company and want to learn about offensive and defensive skills to improve the ...
2
votes
2answers
2k views

Is it practically possible to spoof a WLAN access point?

I want to try something out, but I wanted to see other opinions from you guys. What I have: WLAN Access point, with WPA2, ESSID: testing. Home router, I can change the configuration and everything ...
25
votes
6answers
3k views

Most secure way to partition linux?

I recently acquired a netbook to play with, and I want to install Kali Linux so I can start learning about network security and exploit development. I want to use this to learn as much about security ...
0
votes
1answer
643 views

What's the best route to watch network traffic on our networks?

We have a single switch that routes all our different offices around the country using Meraki VPN. We have a VM on the switch (to the extent it can see all subdomains and different IP addresses in our ...
5
votes
1answer
1k views

Pen Testing ASP.NET application with Backtrack

We have developed an ASP.NET Based Enterprise Application which is is soon to be released. Now, we are concerned about the security aspects of the application. I've been looking into Backtrack 5 and ...
-7
votes
1answer
888 views

Is BackTrack 5 really the best OS to have in IT Security? [closed]

I am really interested in the chances of BackTrack. I can't really use it but there are many videos on the web which show that you can crack WiFi with it, etc... But against these illegal things, can ...
1
vote
4answers
577 views

NMAP scan fails

I started to read a metasploit guide book so I set up 2 Machines in VirtualBox for pen testing (host - BT 5, the second - WinXP SP2). When Im trying to scan open ports with NMAP on the Windows ...
0
votes
2answers
2k views

Msf and exploitdb on Backtrack 5

Metasploit (msf) doesn't see exploits from exploitdb. I've just updated directory on my Backtrack cd /pentest/exploits/exploitdb svn update How can I load them now into msf? When i use a script ...
3
votes
1answer
485 views

Metasploit Wifi Modules Asking for lorcon2

I'm using Metasploit Framework for Wifi Exploiation, on Backtrack R2, but I'm getting this error: The Lorcon2 module is not available: no such file to load -- Lorcon2 But actually, I have installed ...
2
votes
3answers
4k views

Cracking a wpa2-psk wifi

I'm cracking a wpa2-psk wifi with aircrack-ng. After popullating the *cap file I'll apply brute-force with john. The question is: What time is it recommend to run airodump-ng before killing it's ...
-2
votes
2answers
642 views

using exploit/unix/webapp/tikiwiki_graph_formula_exec

I have backtrack and metasploitable running on my Macbook pro and I am trying to run **exploit/unix/webapp/tikiwiki_graph_formula_exec** exploit on msfconsole to penetrate the metasploitable operating ...
-1
votes
1answer
137 views

Vulnerability Tracking Site [closed]

my ask is really simple. I have a group that do ethical hacking, we search vulnerabilities on webpages, analize them, and make the proper paper to inform the organization involved. We are having a ...
9
votes
4answers
2k views

Nessus Scan Port ID mapped to Metasploit Vulnerability exploits

My Question: Is there any sort of website that maps Nessus Scan IDs to Metasploit Vulnerabilities? My Situation: I'm learning about penetration testing and I'm beginning to get frustrated seeing a ...
1
vote
3answers
578 views

Sample vulnerable web apps to test Pentesting platforms

I am looking into a web application vulnerability scanner for my organization. I would like a sample web application that is loaded with vulnerabilities (similar to metasploitable on the application ...
2
votes
2answers
688 views

Using tor with SET to bypass firewall policy?

I'm doing a credential harvesting attack using SET from backtrack. I want to sent a spoof email using an open relay server. However, any outbound connection for smtp is blocked by the firewall. I ...
6
votes
6answers
7k views

Can you recommend a good book on Backtrack/Metasploit?

I have just downloaded Backtrack 5 R2 with Gnome and, while it looks cool, I don't really know where to start. I see it comes with Metasploit but, to be blunt, I still don't really understand what ...
10
votes
1answer
2k views

Backtrack 5 in a VM - Why bridged networking over NAT?

When running Backtrack 5 from a VM, it is recommended to use the bridged networking option instead of the NAT networking option? How does it affect the usage of Backtrack - port scanning, ...
-1
votes
2answers
5k views

Is it Possible to Dual Boot OSX Lion & Backtrack 5 R2 Smoothly? [closed]

I have a 13inch Macbook Pro i5 and I would like to duel boot backtrack 5 on it as my ram struggles a bit when I run it inside a virtualbox. I have heard stories how it has borked the install on osx, ...
1
vote
1answer
2k views

Backtrack 5 R2 & Metasploitable

I have configured the OpenVAS server as per wiki instructions: http://www.backtrack-linux.org/wiki/index.php/OpenVas And i ran the following commands: msfconsole load openvas openvas_connect admin ...