Offensive Security's penetration testing Linux distribution.

learn more… | top users | synonyms (2)

0
votes
0answers
47 views

Browser Autopwn2 Unable to exploit Firefox 47.0.1

Virtual Appliance: VMWare Workstation 12 Player Local VM: Kali Linux 2 Remote (Victim) VM: Windows XP Browsers on Remote VM: Firefox 47.0.1, IE 6 This article explains Browser Autopwn2 exploit. I ...
0
votes
0answers
6 views

Iterate through and decode Dot11Elt layers — Scapy

OBJECTIVE I want to iterate through the Dot11Elt layers of a beacon frame that I captured with Scapy. I also want to decode the .info of each ID layer. def packet_handler(packet) : if packet....
1
vote
1answer
56 views

How to Edit Malicious Webpage in BindTCP

I'm studying Ethical Hacking, using BindTCP on Metasploit, Kali Linux. This video shows the steps, and I successfully exploited an unpatched Windows XP running a vulnerable IE 6 (on my personal ...
1
vote
3answers
62 views

What security measures can stop an attacker to obtain reverse shell even if a victim clicks and downloads a malicious exe file?

I am doing some hands-on training with Kali linux and one of the exercise I came across was to make an exe file containing malicious payload(say to obtain reverse shell), send it to a victim and hope ...
2
votes
2answers
117 views

Ethical Hacking: Cracking my personal wireless network

I am teaching myself ethical hacking. Now, I am attempting to crack the password of my Verizon FIOS Router at home. Using Kali Linux 2 based on this website. Steps So Far On Kali Linux typed ...
1
vote
2answers
81 views

What is Shikata Ga Nai

I came across this payload named "Shikata Ga Nai" (in Japanese it means nothing can be done about it). Some exe file was generated and when it is executed, a reverse shell can be obtained. But this ...
0
votes
2answers
23 views

Kali Linux: wrong kernel. What to do? [closed]

What does this mean : Unable to boot- please use a kernel appropriate for your CPU what do I have to do ?!
3
votes
2answers
132 views

Why is Kali Linux often used as a VM guest and not as the host? [closed]

I'm trying to enter the world of pentesting, and I've gone through quite a few tutorials in the past few days, and noticed that there's nearly no information regarding exploiting virtual machines ...
1
vote
1answer
62 views

MITMf arp spoofing inconsistent

using MITMf I'm getting inconsistent results, sometimes it just works, other times it just doesn't... I'm wondering is it like that for others or am I doing something wrong? the command I'm using ...
-1
votes
1answer
28 views

WebGoat on a separate computer?

I was wondering if it's possible to have webgoat on one computer and access it from another computer running Kali Linux. Detailed instructions would be very much appreciated
0
votes
1answer
52 views

Setoolkit - credential harvester, only display the first character of the password

I'm launching a spear phishing campaign and my client has specifically asked me to only harvest the first character of the password, is there a way to do so? Basically instead of showing the whole ...
-1
votes
0answers
23 views

Need help with syntax to unzip rockyou.txt wordlist in Kali 2.0 [migrated]

I am trying to access the built in wordlists in Kali v2.0. In this link (Wordlists on Kali Linux?) a fellow by the name of "d3lphi" gives the code to unzip the popular rockyou.txt wordlist. However, ...
-1
votes
2answers
130 views

Trouble with Metasploit framework (kali linux) [ms08_067_netapi]

I'm new to kali linux and just penetration testing in general. I'm having a bit of trouble with the metasploit framework in getting into my own pc. I've used this tutorial and I get an error that says ...
1
vote
2answers
56 views

Cannot capture frames other than broadcast or multicast in Wireshark

My problem is that I cannot capture any frames other than broadcast or multicast over Wireshark on my WLAN interface (eg. no ICMP packets, no HTTP packets, etc.) Please follow details below: OS: ...
4
votes
1answer
171 views

Is it possible to hack WPS PIN of routers that lockout exponentially after failed tries?

I have been interested in Wireless hacking lately, and I can do dictionary attacks, and some other type of attacks. Though, I wanted to hack my ASUS RT-N12D1 router's WPS PIN. ASUS doesn't alllow to ...
0
votes
0answers
15 views

meterpreter/reverse_tcp handler other then metasploit's handler [duplicate]

Actually i am getting the error on metasploit handler "Connection reset by peer ssl_accept". On investigation, I came to know that I was running my powershell payload using powershell.exe (32 bit ...
3
votes
1answer
87 views

using netcat as a handler for windows/meterpreter/reverse_tcp payload

How we can use netcat as a handler for windows/meterpreter/reverse_tcp payload. I am getting the connection but unable to run any command.
1
vote
0answers
14 views

Snort Modules Tweaking

I want to tweak and add new functionalities to snort code(Preprocessor)(v2.9.8). So,i have installed snort using source code,on ubuntu 14.04,however due to unknown problems,functionalities aren't ...
0
votes
0answers
210 views

Apache Web Server ETag Header Information Disclosure Weakness

How this vulnerability allow remote attackers to obtain sensitive information likes inode number and child process though ETag header ? and how to locate path to a file from inode number ?
1
vote
0answers
70 views

Linux Priv Escalation Scripts

I am aware of a number of good linux priv escalation scripts out there which i use for my hacking ( legal only, mainly practice for my OSCP ). I like Linux Priv Escalation Scripts . My prefered one ...
1
vote
1answer
70 views

using psexec_command to trigger veil payload

I have been following various tutorials in an attempt to get a meterpreter session on a lab VM, but I am having some problems triggering the payload. I created the payload using veil (setup1.exe). I ...
0
votes
2answers
247 views

Kali Linux/Metasploit in VirtualBox - Issue with ports

I've been attempting to get port 4444 to open these past couple of days. I finally figured I'd try to get it working on my Windows machine first and I finally got it. Now, no matter what I do in the ...
0
votes
1answer
37 views

Getting Operating System Username using MySQL SQLi

Suppose I have a website which has SQL injection vulnerability and I got the database schema etc. Is there any means by which I can get the operating system username or the SSH username? Asking from ...
3
votes
1answer
205 views

How to detect mimikatz usage on LAN

My boss is has made it clear that we need better ways of detecting mimikatz usage on the network- and I would agree. In place already for detection is suricata/ET PRO rule set on a couple of taps. ...
-1
votes
1answer
83 views

Strange behavior of Nmap

I do port scanning with Nmap when HotSpot Shield VPN is running; and I am receiving strange result - when HotSpot Shield is running, Nmap tells me that all of the ports are open and when HotSpot is ...
0
votes
0answers
70 views

Is my Kali Linux download verfied?

I downloaded Kali Linux and followed the instructions on Kali official website under download Kali Linux Images Securely. ~/Desktop $ gpg --verify SHA1SUMS.gpg SHA1SUMS gpg: Signature made Tue 22 Mar ...
-4
votes
1answer
298 views

Kali linux veil-evasion installation problem [closed]

Does anyone know the cause or fix to this problem? root@kali:~# cd Veil-Evasion root@kali:~/Veil-Evasion# cd setup root@kali:~/Veil-Evasion/setup# ./setup.sh Veil-Evasion (Setup Script) | [...
-5
votes
1answer
117 views

Alternative of using wifi card for penetration testing [closed]

I want to learn penetration testing on kali linux platform, for that I found that the wifi card is needed. But my question is that, if I install the kali linux as main operating system or make ...
2
votes
1answer
407 views

How does attacker Brute force facebook account if there is a limit for tries? [closed]

I am wondering how does a user use Kali with python Brute Force Algorithm to brute force accounts like a facebook account when there are security measure in place like:Pause your try after 3 ...
-4
votes
1answer
196 views

How to hack a computer on a different network? [closed]

I was wondering how I could "hack" a computer that is not on my network. For example: open a meterpreter session on someone's computer who doesn't live within my proximity. I'm assuming I would need ...
1
vote
0answers
45 views

Proxy help on Kali Linux [closed]

I've recently gotten into using tor and I understand that tor only handles tcp. What I was hoping was to route all of my network traffic from my local machine through what I, at the time, thought of ...
-4
votes
1answer
25 views

What security measures to be considered [closed]

First, I know kali Linux is not suitable for day to day work. Since I am using Windows PC with low ram so I didn't prefer installing it on a virtual machine. I have totally uninstalled my windows (I ...
0
votes
0answers
34 views

Crackle does not work?

I've used to intructions for Crackle but, cannot get this kind of results like in the example. All it does is open up the wireshark like plugin and does not show any results like the picture below. ...
0
votes
1answer
77 views

MITM Traffic forwarding not working on Kali

I'm doing a ARP Spoofing MITM attack like this: arpspoof -i wlan0 -t 192.168.1.112 192.168.1.1 -r And I can see the traffic from the target (192.168.1.112) showing up in the sniffer, but the target ...
0
votes
2answers
111 views

How to capture Wifi 802.11 traffic?

I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
-4
votes
1answer
84 views

Anonymity on a non-anonymous computer [closed]

Question: What steps should be done on a not anonymous PC with personal data to get as anonymous as possible ? Background Info: I use my laptop with Kali Linux for java coding and some C# on VM's....
2
votes
1answer
170 views

Unable to Spoof DNS in Kali

I am new to Kali But not new to Information Security. Warming up with Kali, I tried to dns_spoof. But that didn't quite work. Here is what I did. Tampered ip_forward to 1 in /proc/sys/net/ipv4 ...
2
votes
0answers
42 views

PMK/s and Keys/s: Which is faster?

I'm practicing on Kali Linux and was struck with the fact that almost all tutorials on the internet specified speed of aircrack-ng in Keys per second and the speed of pyrite as PMKs per second. So, ...
2
votes
1answer
196 views

Can't get into Damn Vulnerable Web App with Hydra even though correct password is supplied

I've got VMware Workstation. I'm running Metasploitable2 and Damn Vulnerable Web App. I'm trying to attack it using Hydra in kali Linux. To save time I made a very small password list and included the ...
2
votes
1answer
68 views

What are the advantage of running a penetration test through Docker?

I was looking at Kali's blog post about its official Docker image, and I was wondering what the real benefits are. Why would I would run penetration testing through a docker image? Is it something ...
0
votes
0answers
62 views

Domain redirection when using Evil Twin method?

When clients are connected to my fake access point, is there a way to redirect their requests to a different domain (eg.: google.com --> hotmail.com)? Could this be achieved maybe via iptables or the ...
0
votes
0answers
43 views

LAMPSec variation hack trouble

For an assignment we have been given a virtual machine to attack. I am fairly new to this but have put in a lot of effort and still can't get through. Can anyone provide me with any other ideas? My ...
-1
votes
1answer
183 views

Kali password attack

I am new to kali pentesting and am working on a password attack for an assignment. The target has SSH and apache running so I go to the website apache is hosting and see a login. If I go to 'Create a ...
1
vote
1answer
195 views

Difficulty using SET within Kali Linux

When setting a website attack vector, I find that Kali does not give me the option to specify a port in order to receive information back to my local. Furthermore, I am unable to access the listener I ...
2
votes
3answers
99 views

How long til a 4-way handshake is captured with Aireplay-ng

I've got a TP-Link TL-WN722N wifi adapter which I believe allows monitoring/injection to a network (was reassured by the comments of other users). When I follow a guide by Vulnerableuser I can get to ...
1
vote
1answer
143 views

Kali Linux + How to find information behind NAT

I am working on an assignment where we are supposed to attack a private network simulated by a virtual machine provided to us using Kali. My Kali VM and the target network are on a 'host-only' private ...
2
votes
2answers
214 views

How to do arp spoofing on the virtual machine? (Against host)

I have an Ubuntu host and a Kali guest, I want to do spoofing over the host network but when I tried to do spoofing it just recognize network between guests. Is there any solution?
-2
votes
1answer
29 views

How to install Kali VB image? [closed]

I'd like to install Kali's VirtualBox image in order of avoiding some bugs with standard iso file. When I download it I see not just one file as I expexted but various kinds of files. How can it be ...
0
votes
1answer
716 views

trying to dns spoof using mitmf

I am trying to redirect a page of taulukko.com to google.com for learning purposes but no success. When i enter in the taulukko.com from the spoofed node i receive: The webpage cannot be found my ...
1
vote
1answer
1k views

ms08_067_netapi not performing as expected on Windows XP SP1/SP3

I tried the exploit with meterpreter reverse tcp on both SP1/SP3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...