Offensive Security's penetration testing Linux distribution.

learn more… | top users | synonyms (2)

-10
votes
1answer
57 views

How to Clone Facebook in English Language using setoolkit? [closed]

I am having a problem while cloning www.facebook.com. Whenever I clone facebook the language changes into Urdu. I don't know why it's happening. Any ideas how to clone it in English language?
-4
votes
0answers
70 views

Need help getting Metasploit (MS08-067) to work in Kali Linux 2

I apologize right off the bat for this seemingly common problem, but I cannot seem to resolve it no matter how many fixes I try that I have found from this website and others. I am running Kali ...
-3
votes
0answers
18 views

apktool showing java exception in msfvenom Android payload [duplicate]

I've generated an Android payload using msfvenom ( msfvenom -p android/materpreter/reverse_tcp R > payl.apk) and when I debug it using apktool ,it couldn't and showed Java exception error, plz help me ...
1
vote
2answers
43 views

Cannot capture frames other than broadcast or multicast in Wireshark

My problem is that I cannot capture any frames other than broadcast or multicast over Wireshark on my WLAN interface (eg. no ICMP packets, no HTTP packets, etc.) Please follow details below: OS: ...
-2
votes
0answers
27 views

Kali Linux is not showing on booting time [migrated]

I have been installed the Kali Linux. Its successfully installed without any error. But after installation while, I tried to reboot the system to start the Kali Linux. There was no option showing for ...
3
votes
1answer
117 views

Is it possible to hack WPS PIN of routers that lockout exponentially after failed tries?

I have been interested in Wireless hacking lately, and I can do dictionary attacks, and some other type of attacks. Though, I wanted to hack my ASUS RT-N12D1 router's WPS PIN. ASUS doesn't alllow to ...
0
votes
0answers
15 views

meterpreter/reverse_tcp handler other then metasploit's handler [duplicate]

Actually i am getting the error on metasploit handler "Connection reset by peer ssl_accept". On investigation, I came to know that I was running my powershell payload using powershell.exe (32 bit ...
3
votes
1answer
65 views

using netcat as a handler for windows/meterpreter/reverse_tcp payload

How we can use netcat as a handler for windows/meterpreter/reverse_tcp payload. I am getting the connection but unable to run any command.
1
vote
0answers
14 views

Snort Modules Tweaking

I want to tweak and add new functionalities to snort code(Preprocessor)(v2.9.8). So,i have installed snort using source code,on ubuntu 14.04,however due to unknown problems,functionalities aren't ...
0
votes
0answers
107 views

Apache Web Server ETag Header Information Disclosure Weakness

How this vulnerability allow remote attackers to obtain sensitive information likes inode number and child process though ETag header ? and how to locate path to a file from inode number ?
1
vote
0answers
59 views

Linux Priv Escalation Scripts

I am aware of a number of good linux priv escalation scripts out there which i use for my hacking ( legal only, mainly practice for my OSCP ). I like Linux Priv Escalation Scripts . My prefered one ...
1
vote
1answer
52 views

using psexec_command to trigger veil payload

I have been following various tutorials in an attempt to get a meterpreter session on a lab VM, but I am having some problems triggering the payload. I created the payload using veil (setup1.exe). I ...
1
vote
2answers
202 views

Kali Linux/Metasploit in VirtualBox - Issue with ports

I've been attempting to get port 4444 to open these past couple of days. I finally figured I'd try to get it working on my Windows machine first and I finally got it. Now, no matter what I do in the ...
0
votes
1answer
35 views

Getting Operating System Username using MySQL SQLi

Suppose I have a website which has SQL injection vulnerability and I got the database schema etc. Is there any means by which I can get the operating system username or the SSH username? Asking from ...
3
votes
1answer
162 views

How to detect mimikatz usage on LAN

My boss is has made it clear that we need better ways of detecting mimikatz usage on the network- and I would agree. In place already for detection is suricata/ET PRO rule set on a couple of taps. ...
-1
votes
1answer
82 views

Strange behavior of Nmap

I do port scanning with Nmap when HotSpot Shield VPN is running; and I am receiving strange result - when HotSpot Shield is running, Nmap tells me that all of the ports are open and when HotSpot is ...
0
votes
0answers
57 views

Is my Kali Linux download verfied?

I downloaded Kali Linux and followed the instructions on Kali official website under download Kali Linux Images Securely. ~/Desktop $ gpg --verify SHA1SUMS.gpg SHA1SUMS gpg: Signature made Tue 22 Mar ...
-4
votes
1answer
185 views

Kali linux veil-evasion installation problem [closed]

Does anyone know the cause or fix to this problem? root@kali:~# cd Veil-Evasion root@kali:~/Veil-Evasion# cd setup root@kali:~/Veil-Evasion/setup# ./setup.sh Veil-Evasion (Setup Script) | [...
-5
votes
1answer
84 views

Alternative of using wifi card for penetration testing [closed]

I want to learn penetration testing on kali linux platform, for that I found that the wifi card is needed. But my question is that, if I install the kali linux as main operating system or make ...
2
votes
1answer
265 views

How does attacker Brute force facebook account if there is a limit for tries? [closed]

I am wondering how does a user use Kali with python Brute Force Algorithm to brute force accounts like a facebook account when there are security measure in place like:Pause your try after 3 ...
-4
votes
1answer
133 views

How to hack a computer on a different network? [closed]

I was wondering how I could "hack" a computer that is not on my network. For example: open a meterpreter session on someone's computer who doesn't live within my proximity. I'm assuming I would need ...
1
vote
0answers
40 views

Proxy help on Kali Linux [closed]

I've recently gotten into using tor and I understand that tor only handles tcp. What I was hoping was to route all of my network traffic from my local machine through what I, at the time, thought of ...
-4
votes
1answer
25 views

What security measures to be considered [closed]

First, I know kali Linux is not suitable for day to day work. Since I am using Windows PC with low ram so I didn't prefer installing it on a virtual machine. I have totally uninstalled my windows (I ...
0
votes
0answers
26 views

Crackle does not work?

I've used to intructions for Crackle but, cannot get this kind of results like in the example. All it does is open up the wireshark like plugin and does not show any results like the picture below. ...
0
votes
1answer
61 views

MITM Traffic forwarding not working on Kali

I'm doing a ARP Spoofing MITM attack like this: arpspoof -i wlan0 -t 192.168.1.112 192.168.1.1 -r And I can see the traffic from the target (192.168.1.112) showing up in the sniffer, but the target ...
0
votes
2answers
111 views

How to capture Wifi 802.11 traffic?

I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
-4
votes
1answer
82 views

Anonymity on a non-anonymous computer [closed]

Question: What steps should be done on a not anonymous PC with personal data to get as anonymous as possible ? Background Info: I use my laptop with Kali Linux for java coding and some C# on VM's....
2
votes
1answer
126 views

Unable to Spoof DNS in Kali

I am new to Kali But not new to Information Security. Warming up with Kali, I tried to dns_spoof. But that didn't quite work. Here is what I did. Tampered ip_forward to 1 in /proc/sys/net/ipv4 ...
2
votes
0answers
33 views

PMK/s and Keys/s: Which is faster?

I'm practicing on Kali Linux and was struck with the fact that almost all tutorials on the internet specified speed of aircrack-ng in Keys per second and the speed of pyrite as PMKs per second. So, ...
2
votes
1answer
165 views

Can't get into Damn Vulnerable Web App with Hydra even though correct password is supplied

I've got VMware Workstation. I'm running Metasploitable2 and Damn Vulnerable Web App. I'm trying to attack it using Hydra in kali Linux. To save time I made a very small password list and included the ...
2
votes
1answer
65 views

What are the advantage of running a penetration test through Docker?

I was looking at Kali's blog post about its official Docker image, and I was wondering what the real benefits are. Why would I would run penetration testing through a docker image? Is it something ...
0
votes
0answers
55 views

Domain redirection when using Evil Twin method?

When clients are connected to my fake access point, is there a way to redirect their requests to a different domain (eg.: google.com --> hotmail.com)? Could this be achieved maybe via iptables or the ...
0
votes
0answers
41 views

LAMPSec variation hack trouble

For an assignment we have been given a virtual machine to attack. I am fairly new to this but have put in a lot of effort and still can't get through. Can anyone provide me with any other ideas? My ...
-1
votes
1answer
176 views

Kali password attack

I am new to kali pentesting and am working on a password attack for an assignment. The target has SSH and apache running so I go to the website apache is hosting and see a login. If I go to 'Create a ...
1
vote
1answer
165 views

Difficulty using SET within Kali Linux

When setting a website attack vector, I find that Kali does not give me the option to specify a port in order to receive information back to my local. Furthermore, I am unable to access the listener I ...
2
votes
3answers
82 views

How long til a 4-way handshake is captured with Aireplay-ng

I've got a TP-Link TL-WN722N wifi adapter which I believe allows monitoring/injection to a network (was reassured by the comments of other users). When I follow a guide by Vulnerableuser I can get to ...
1
vote
1answer
128 views

Kali Linux + How to find information behind NAT

I am working on an assignment where we are supposed to attack a private network simulated by a virtual machine provided to us using Kali. My Kali VM and the target network are on a 'host-only' private ...
2
votes
2answers
182 views

How to do arp spoofing on the virtual machine? (Against host)

I have an Ubuntu host and a Kali guest, I want to do spoofing over the host network but when I tried to do spoofing it just recognize network between guests. Is there any solution?
-2
votes
1answer
28 views

How to install Kali VB image? [closed]

I'd like to install Kali's VirtualBox image in order of avoiding some bugs with standard iso file. When I download it I see not just one file as I expexted but various kinds of files. How can it be ...
0
votes
1answer
505 views

trying to dns spoof using mitmf

I am trying to redirect a page of taulukko.com to google.com for learning purposes but no success. When i enter in the taulukko.com from the spoofed node i receive: The webpage cannot be found my ...
1
vote
1answer
1k views

ms08_067_netapi not performing as expected on Windows XP SP1/SP3

I tried the exploit with meterpreter reverse tcp on both SP1/SP3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
0
votes
1answer
225 views

SETOOL Kit:Error: “Unable to Clone the site. Check your network connection”

I have to tried to check whether a site is vulnerable to Phishing attack or not using "Setool kit" in Kali Linux. But when I tried to clone a site using this Setool Kit in Kali Linux, I got an error ...
0
votes
0answers
52 views

ms03_026_dcom not working on Windows XP Sp1

I have been trying to use metasploit and kali linux when I came across the idea of using windows XP sp1 (checked the service pack with winver.exe on XP). I used the famous ms03_026_dcom and payload of ...
3
votes
1answer
112 views

MDK3 deauthentication attack problem: Every station gets disconnected

Having echo >'ed the BSSID of the AP into a file called blacklist, I run the following command to start a deauthentication attack: mdk3 wlan0mon d -w blacklist -c 11 The problem is however, ...
1
vote
1answer
320 views

No handshake recorded from airodump-ng

I've just started to attempt this by following the guide from lewiscomputerhowto. I've seen other people ask similar questions, but they all seem to be older threads. The steps I've taken are shown ...
-1
votes
1answer
214 views

Is Kali-Linux operating system is free from virus and worms? [closed]

Friends, Is Kali Linux operating system is best to use? as a beginner in security domain can I start to go with Kali-Linux OS?? Can all features which i used with Windows can be used on Kali too?
1
vote
1answer
94 views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it doesn'...
1
vote
1answer
231 views

Suricata rule to block particular website question

I am writing rule for suricata which is going to block the possibility to enter one of the website for example xyz.com (instead of facebook, because with facebook there are some problems). I am doing ...
0
votes
2answers
103 views

Is there a tool to detect what technologies a website uses? [closed]

I'm looking for the name of a tool I've used a long time ago, that for a given URL/website address would extract the technologies used for that site. For example that the site is running Apache, using ...
-2
votes
2answers
83 views

Metasploitable: vnc_login - doesn't work with msfadmin:msfadmin

I am quite new to Metasploit and pen testing in general, so apologies for any seemingly noobish references below. I am using auxiliary/scanner/vnc/vnc_login, after seeing that the 5900 port is open ...