Offensive Security's penetration testing Linux distribution.

learn more… | top users | synonyms (2)

0
votes
0answers
37 views

Install software to a windows PC through a linux live instance (e.g. Kali) [migrated]

A thought experiment. If I had physical access to a PC that was switched off, but I didn't know the password, could I boot into a live linux image and install software on the windows box? Software ...
1
vote
0answers
9 views

Monitor Mode doesn't work in Kali 2.0 [migrated]

For the last year or so I have been using this exact setup with Kali 1.0. Everything worked fine with Wireshark. Now, when I am connected to a Wi-Fi access point my card REFUSES to stay in monitor ...
3
votes
1answer
88 views

Can you exploit an Internet IP adress just like a LAN IP address?

Is exploiting an Internet IP address as simple as exploiting a LAN IP address? i.e.: Scan that IP for vulnerabilities and open ports using tools like nmap or nikto Use a vulnerability and set the ...
2
votes
1answer
83 views

Can I completely impersonate another wireless device?

I recently decided to fix up an old laptop by replacing some missing parts. I installed Kali 2.0. I also figured the most secure OS should be an OS designed for use by security professionals; ...
-2
votes
0answers
7 views

Network setting for kali linux host on virtual box [migrated]

I am running Kali Linux on virtual box. I do not have an external network adapter on my laptop. I am currently learning to use Metasploit. In order to set the payloads I need the IP address of Kali ...
0
votes
0answers
41 views

deliver a malicious payload via a cloned website

I've been tasked with conducting an internal pentest, I'm relatively new to this so please bare with me. Some time ago, I used setoolkit and I would have the option to clone a website and attach a ...
1
vote
1answer
104 views

Kali Linux Hydra http-post brute force

Im having a issue with my syntax to brute force my own account on a server for testing and reporting purposes to protect the rest of the community at hand. hydra -l username -P /root/Desktop/Test.txt ...
4
votes
3answers
3k views

Is Linux spying on its users? [closed]

If you install some kind of Linux distributions on your computer, is their a possibility that their owners may spy on you? For example, can Ubuntu, Kali or Arch linux send data to its owners on what ...
-1
votes
0answers
16 views

How to access Metasploitable2 vm frrom a Kali vm? [migrated]

I am just starting to learn Metasploit and trying to practice on a metasploitable2 instance. My host system is Ubuntu and I have 2 virtual machines set up in VMware Player. The first one has Kali 2.0 ...
7
votes
3answers
163 views

MSFConsole/Kali Linux - gain root access to unix system

I am messing around with Kali Linux, MSFConsole and DVWA (Damn Vulnerable Web Application). I have successfully been able to get into the system (Raspberry Pi) by creating a PHP backdoor and uploaded ...
-1
votes
0answers
10 views

Installing kali on usb with early 2015 macbook pro [migrated]

I've tried a fee different ways to install but none work. I used the mac linux usb loader but I got an error "(unable to find a medium containing a libe file system). I also used the ...
-5
votes
0answers
30 views

generating wordlist + a random digit

Can the Crunch software be used to read word list from a text file and append a random digit at the end of each word?
4
votes
3answers
537 views

No SMS Spoofing attack vector in Kali Linux! [closed]

I just realized that there is no SMS spoofing attack vector included in the latest version of Kali Linux. Is there a work around?
4
votes
3answers
96 views

How to convert a pcap file to a raw file?

I need to convert a pcap-ng/ now a pcap file to a raw file for being able to analyse it with multimon-ng. Any recommendations? It should be possible, but I am not aware how it should be done.
1
vote
0answers
83 views

'http_login' metasploit module isn't able to Brute Force the target. Any suggestions? [closed]

I'm trying to Brute force the http Basic authentication on the domain pentesteracademylab.appspot.com The complete path is pentesteracademylab.appspot.com/lab/webapp/basicauth I'm using the ...
-4
votes
1answer
632 views

Kali Linux Veil-Evasion install problem [closed]

I can't install Veil-Evasion. I have this error: Installing (Wine) i386 Binaries Reading package lists... Building dependency tree... Reading state information... Package wine-bin:i386 is ...
1
vote
0answers
89 views

Volatility Framework 2.4 - No suitable address space mapping found [closed]

I made some dumps with different formats (.DMP and some file made by LiveKD utility) in Windows 8.1 x64 OS. The first one is a explorer.exe dump file which was created by TaskManager->Create Dump File ...
1
vote
3answers
172 views

How can I scan open ports through Windows Firewall?

I use Kali Linux and VMWare for testing some penetration techniques. The problem is that when I scan ports with Nmap to my Windows IP "all ports are filtered". I know that the firewall is blocking the ...
2
votes
0answers
29 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
1
vote
2answers
180 views

Hashcat does 1-7 numeric characters on brute force attack when specifying 8

I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
1
vote
1answer
166 views

Difference between Kali Linux and Santoku Linux

I would like to know, before I will install Santoku, what are the differences between Kali Linux and Santoku Linux? I know that Santoku is dedicated to mobile security testing, but Kali has some tools ...
1
vote
1answer
82 views

Does it make sense to scan localhost site?

I was playing around with wpscan a little while ago. I was wondering if it makes sense to scan a site on your localhost server. I think that it is since there are examples like DVWA, but I imagine it ...
0
votes
0answers
57 views

All passwords are valid with hydra [duplicate]

I am actually testing a brute force attack with hydra on a kali linux machine (for educational purposes). I want to find the administrator password of a Joomla website. The Web server is on a dmz and ...
0
votes
0answers
162 views

“[!] Something went wrong.. Try again” sendmail with setoolkit in kali behind tor

I've been working in a little project, and the goal right now is spoof an e-mail address. That simple, but doing it in an elegant way. I've done the following, using Kali on a VM (in VirtualBox) I ...
1
vote
0answers
52 views

Domain Exploitation [closed]

I have set up a domain testing environment on a couple of old computers that i had lying around at home. I have done a lot of information gathering and attempts at exploiting the machines via ...
1
vote
1answer
223 views

Legal Website and Code for dictionary attack using hydra and kali-linux

I am trying to learn how to use hydra on Kali-Linux to crack login passwords. Does anybody know a legal website I can crack and if so the information needed or the code needed to enter the form into ...
1
vote
2answers
307 views

Setting up a security lab, looking for a little guidance [duplicate]

I'm new here. Over the past couple of years I've had a growing interest in the security aspects of IT/CS. Recently, I've started setting up a lab for myself based on a kali/win7 dualboot and I've ...
6
votes
1answer
566 views

proxychains + dnscrypt + tor

I'm currently working in Kali and I'm trying to boost my security and anonymity online. Please, bear with me for I am no expert yet. Googling and searching here has yielded useful info but not enough ...
4
votes
1answer
828 views

Why some routers ask for PIN but can't be cracked using PIN-based attacks?

I've been working with WPS assessment tools like Reaver and Bully for some time and i could successfully crack my router's PIN code and find its password on both QSS PBC and QSS PIN code. when each of ...
0
votes
0answers
71 views

Metasploit Framework console misencodes text

I am running the Metasploit Framework (v4.10.2) on Kali Linux 1.0.7. Some commands return this weird, misencoded (I think) text instead of what it should be returning. What can I do to fix this? ...
2
votes
1answer
124 views

Best way to do security testing for a server behind nginx proxy [closed]

I'm trying to do some security testing for my server(not a web server) which is sitting behind a nginx proxy. To start with it, I've done some fuzz testing using Sulley. As expected, most of the ...
1
vote
3answers
2k views

ALFA AWUS036NHV - Monitor Mode [closed]

I have recently come into ownership of the above product and was wondering if it is possible to enable monitor mode on said device? I figured this community might have a definite answer, if not a ...
0
votes
2answers
77 views

SQLmap over uni wifi [closed]

I don't know if this is the right place to ask this question but I'll give it a shot! I was playing around with Kali and SQLmap. I was just scanning some sites nothing serious. When I was doing this I ...
3
votes
1answer
167 views

Securing my network: unmasking spoofed mac possible?

In Kali you can: airmon-ng start wlan0 ifconfig mon0 down macchanger -r mon0 (-r changes mac id to a random number) ifconfig mon0 up This attack for example: aireplay-ng -0 2 -a [ap mac #] -c ...
0
votes
0answers
35 views

hydra password penetration test syntax [duplicate]

I am trying to penetrate a password on my own website using hydra. Let's say that I know login and password and i just put both there like in sample below: hydra -l admin -p password 123.123.123.123 ...
4
votes
1answer
4k views

SMS Spoofing not available in kali

Has the SMS Spoofing option been removed from the Social Engineering Toolkit ? I run 3.14-kali1-amd64. I get only the options shown below. Tried updating both kali and SET but i still dont get the ...
2
votes
0answers
115 views

SET tool autopwn website type penetration [closed]

I tried to hack my second computer and phone in my local network. I am not very experienced so instead of picking the particular options and payloads i just pressed autopwn to use them all instantly. ...
0
votes
1answer
186 views

Upgrade my Dell Inspiron laptop for PenTesting [closed]

I have a Dell Inspiron N5110 & wanna upgrade it to start practising pentesing with virtual machines. What do u suggest from specs below to upgrade (I have Kali Linux, Tails OS, XP, Metasploitable ...
1
vote
1answer
1k views

Hydra from Kali Linux + Tamper http post form syntax of the failure login attempt [duplicate]

I had asked this question in the general forum I think it is more adequate to place it here. ...
1
vote
1answer
972 views

Different between arpspoof command spoof only target and both target and gateway

Is there any different on case 1 arpspoof -i <interface> -t <target> <default gateway> case 2 arpspoof -i <interface> -t <target> <default gateway> arpspoof -i ...
1
vote
1answer
105 views

is it secure to use proxychains+tor while logged in as root

when using proxychains+tor in kali,you should be logged in as root because proxychanis doesnt work when you are not logged in as root but using tor while logged in as root is not secure so what is ...
-2
votes
1answer
322 views

how to use tor in linux kali with other applications

I want to know how to open applications as nmap and recon-ng through tor first I have kali linux v 1.0.9 and tor I tried using proxychains recon-ng but all I get is that the normal banner of ...
0
votes
2answers
4k views

Exploit failed [unreachable]: Rex::ConnectionTimeout The connection timed out(remote host ip)

I keep getting this when I start to exploit, trying to exploit my xp machine but this keeps happening, I can not find the fix anywhere, I don't believe I am the only one getting this.. I am a ...
0
votes
1answer
622 views

getting an error in aireplay-ng in kali linux

When I was testing penetration testing on my router using kali linux, I followed all the steps from this link. In the step where you have to enter the router's bssid and client's bssid in aireplay-ng ...
0
votes
0answers
437 views

oclHashcat error messag in Kali Linux

I am in the process of learning oclHashcat syntax. Currently, I am working on breaking a file of md5crypt strings with a dictionary file. The dictionary I am using is rockyou.txt from an installation ...
2
votes
0answers
185 views

XSSER get and post

I am using xsser for XSS vulnerability testing and I have a doubt about the parameters when it's a POST method. I have tried against DVWA (which uses get) with success like this: xsser -u ...
1
vote
2answers
3k views

Having Trouble using SET in Kali

I'm trying to setup a website attack vector and I get in error when it tries to load up metasploit. Here's a look at my whole process: Select from the menu: 1) Spear-Phishing Attack Vectors ...
0
votes
1answer
1k views

WireShark only showing broadcast packets [closed]

So here is my setup Desktop booting a live version of Kali from a USB drive The standard distro of wireshark that comes with Kali A Ralink RT-3070L High gain antenna My home network as a sandbox. ...
0
votes
1answer
102 views

Olly Debugger Linux not functioning

In Kali Linux whenever i open a binary after compiling the c source file, it gives an error: "The file is not a valid PE file." No debugging takes place there after. Is there any workaround for ...
0
votes
1answer
2k views

Network Configurations of Metasploit and Metasploitable

All My Hacker Friends, I have installed 2 VM's on my Windows 7 machine. Backtrack(kali) and Metasploitable. When i run nmap scan on metasploitable from metasploitable VM itself, it shows that 3306 ...