Offensive Security's penetration testing Linux distribution.

learn more… | top users | synonyms (2)

1
vote
1answer
61 views

ms08_067_netapi not performing expectedly on Windows XP Sp1/Sp3

I tried the exploit with meterpreter reverse tcp on both Sp1/Sp3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
0
votes
1answer
33 views

SETOOL Kit:Error: “Unable to Clone the site. Check your network connection”

I have to tried to check whether a site is vulnerable to Phishing attack or not using "Setool kit" in Kali Linux. But when I tried to clone a site using this Setool Kit in Kali Linux, I got an error ...
0
votes
0answers
21 views

ms03_026_dcom not working on Windows XP Sp1

I have been trying to use metasploit and kali linux when I came across the idea of using windows XP sp1 (checked the service pack with winver.exe on XP). I used the famous ms03_026_dcom and payload of ...
-5
votes
1answer
67 views

What to do if meterpreter get Caught? [closed]

Well we all have veil and its great really great But, When i run the payload the AV found that meterpreter is running from memory And then my payload is useless. How can i bypass that ? I tried ...
3
votes
1answer
33 views

MDK3 deauthentication attack problem: Every station gets disconnected

Having echo >'ed the BSSID of the AP into a file called blacklist, I run the following command to start a deauthentication attack: mdk3 wlan0mon d -w blacklist -c 11 The problem is however, ...
0
votes
1answer
33 views

No handshake recorded from airodump-ng

I've just started to attempt this by following the guide from lewiscomputerhowto. I've seen other people ask similar questions, but they all seem to be older threads. The steps I've taken are shown ...
-1
votes
1answer
80 views

Is Kali-Linux operating system is free from virus and worms? [closed]

Friends, Is Kali Linux operating system is best to use? as a beginner in security domain can I start to go with Kali-Linux OS?? Can all features which i used with Windows can be used on Kali too?
1
vote
1answer
43 views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it ...
0
votes
1answer
60 views

Suricata rule to block particular website question

I am writing rule for suricata which is going to block the possibility to enter one of the website for example xyz.com (instead of facebook, because with facebook there are some problems). I am doing ...
0
votes
2answers
76 views

Is there a tool to detect what technologies a website uses? [closed]

I'm looking for the name of a tool I've used a long time ago, that for a given URL/website address would extract the technologies used for that site. For example that the site is running Apache, using ...
-2
votes
2answers
47 views

Metasploitable: vnc_login - doesn't work with msfadmin:msfadmin

I am quite new to Metasploit and pen testing in general, so apologies for any seemingly noobish references below. I am using auxiliary/scanner/vnc/vnc_login, after seeing that the 5900 port is open ...
0
votes
1answer
63 views

Why are db_nmap results filtered, but Nmap is not

I've recently started playing with Kali on VMWare Player and Metasploitable 2 on VmWare Player. Both are on the same (default install) subnet. Metasploitable 2 has 2 adapters: settings:NAT and Host ...
0
votes
1answer
38 views

SEToolkit cloned website can be viewed over internet, but does not harvest credentials

I've been working with SEToolkit's website cloner/credential harvester. Everything works fine locally: The clone opens on the victim pc, victim inputs credentials, after submitting the victim is ...
0
votes
0answers
48 views

Pentesting - is there a way to check file permissions on linux remotely - KALI

I'm trying to modify a PHP file through a plugin on wordpress. Everything goes well, but I had to modify the permissions to 666 manually via terminal on the victim's machine, cause even when I'm ...
-2
votes
1answer
87 views

Honeypot used as as a proxy?

I'm running Kali Linux on my system at home to practice pentesting. If I implement a honeypot on my system could it be possible to use that as some sort of proxy server? I was thinking it wouldn't be ...
3
votes
1answer
4k views

service metasploit start failed to start metasploit service [closed]

I am trying to setup Metasploit for penetration testing. However first of all I cannot get the database to connect. Also whenever I attempt to start the service using service metasploit start I get ...
2
votes
1answer
619 views

msfvenom payload problem

This is for educational purposes only! I'm trying to generate android payload using msfconsole payload standalone generator: msfvenom with the command msfvenom -p android/shell/reverse_tcp ...
0
votes
1answer
196 views

Openvas - exploiting result

I am an IT administrator and I try at present to secure my network. I have made an analysis of safety with OpenVAS on one computer, and I have difficulty exploiting the result : Vulnerability ...
2
votes
2answers
169 views

How can I make wordlist smaller size?

I've been thinking if I create numeric 8chars wordlist and then compress it, can I directly input compressed wordlist into aircrack-ng or is there a way to make a smaller size wordlist, because if I ...
2
votes
1answer
378 views

Airmon-ng confliciting with network manager in Kali

When starting monitor mode on wlan0 using airmon-ng start wlan0 I got a list of processes 'including network manager' that could cause troubles. I must kill those processes before starting airbase-ng ...
0
votes
0answers
133 views

Injecting meterpreter/reverse_tcp into apache2 with msfvenom results in seg fault of apache2

I've been trying to use msfvenom with the linux/x86/meterpreter/reverse_tcp payload and an apache2 binary. My intent is to create a tainted version of apache2 to establish a persistent backdoor on the ...
3
votes
3answers
168 views

How to choose a linux for learning? [closed]

I am beginner in Security. My first assignment is about "Linux firewall using IPTABLES" . I know about Ubuntu, backtrack and kali Linux. How to choose a Linux distribution to learn about security?
2
votes
1answer
264 views

Trying to create a reverse bind shell from Windows to Linux

I’m trying to create an encrypted reverse bind shell from my Windows machine to my Linux machine. Being totally new to penetration testing, I’m having a little bit of trouble. First, on my Linux ...
3
votes
1answer
290 views

Can you exploit an Internet IP adress just like a LAN IP address?

Is exploiting an Internet IP address as simple as exploiting a LAN IP address? i.e.: Scan that IP for vulnerabilities and open ports using tools like nmap or nikto Use a vulnerability and set the ...
2
votes
1answer
101 views

Can I completely impersonate another wireless device?

I recently decided to fix up an old laptop by replacing some missing parts. I installed Kali 2.0. I also figured the most secure OS should be an OS designed for use by security professionals; ...
0
votes
0answers
93 views

deliver a malicious payload via a cloned website

I've been tasked with conducting an internal pentest, I'm relatively new to this so please bare with me. Some time ago, I used setoolkit and I would have the option to clone a website and attach a ...
1
vote
1answer
395 views

Kali Linux Hydra http-post brute force

Im having a issue with my syntax to brute force my own account on a server for testing and reporting purposes to protect the rest of the community at hand. hydra -l username -P /root/Desktop/Test.txt ...
4
votes
3answers
4k views

Is Linux spying on its users? [closed]

If you install some kind of Linux distributions on your computer, is their a possibility that their owners may spy on you? For example, can Ubuntu, Kali or Arch linux send data to its owners on what ...
7
votes
3answers
1k views

MSFConsole/Kali Linux - gain root access to unix system

I am messing around with Kali Linux, MSFConsole and DVWA (Damn Vulnerable Web Application). I have successfully been able to get into the system (Raspberry Pi) by creating a PHP backdoor and uploaded ...
4
votes
3answers
5k views

No SMS Spoofing attack vector in Kali Linux! [closed]

I just realized that there is no SMS spoofing attack vector included in the latest version of Kali Linux. Is there a work around?
4
votes
3answers
488 views

How to convert a pcap file to a raw file?

I need to convert a pcap-ng/ now a pcap file to a raw file for being able to analyse it with multimon-ng. Any recommendations? It should be possible, but I am not aware how it should be done.
1
vote
0answers
316 views

'http_login' metasploit module isn't able to Brute Force the target. Any suggestions? [closed]

I'm trying to Brute force the http Basic authentication on the domain pentesteracademylab.appspot.com The complete path is pentesteracademylab.appspot.com/lab/webapp/basicauth I'm using the ...
-4
votes
1answer
2k views

Kali Linux Veil-Evasion install problem [closed]

I can't install Veil-Evasion. I have this error: Installing (Wine) i386 Binaries Reading package lists... Building dependency tree... Reading state information... Package wine-bin:i386 is ...
1
vote
0answers
281 views

Volatility Framework 2.4 - No suitable address space mapping found [closed]

I made some dumps with different formats (.DMP and some file made by LiveKD utility) in Windows 8.1 x64 OS. The first one is a explorer.exe dump file which was created by TaskManager->Create Dump File ...
1
vote
3answers
513 views

How can I scan open ports through Windows Firewall?

I use Kali Linux and VMWare for testing some penetration techniques. The problem is that when I scan ports with Nmap to my Windows IP "all ports are filtered". I know that the firewall is blocking the ...
2
votes
0answers
29 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
1
vote
2answers
363 views

Hashcat does 1-7 numeric characters on brute force attack when specifying 8

I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
1
vote
1answer
318 views

Difference between Kali Linux and Santoku Linux

I would like to know, before I will install Santoku, what are the differences between Kali Linux and Santoku Linux? I know that Santoku is dedicated to mobile security testing, but Kali has some tools ...
1
vote
1answer
143 views

Does it make sense to scan localhost site?

I was playing around with wpscan a little while ago. I was wondering if it makes sense to scan a site on your localhost server. I think that it is since there are examples like DVWA, but I imagine it ...
0
votes
0answers
60 views

All passwords are valid with hydra [duplicate]

I am actually testing a brute force attack with hydra on a kali linux machine (for educational purposes). I want to find the administrator password of a Joomla website. The Web server is on a dmz and ...
0
votes
0answers
260 views

“[!] Something went wrong.. Try again” sendmail with setoolkit in kali behind tor

I've been working in a little project, and the goal right now is spoof an e-mail address. That simple, but doing it in an elegant way. I've done the following, using Kali on a VM (in VirtualBox) I ...
1
vote
0answers
71 views

Domain Exploitation [closed]

I have set up a domain testing environment on a couple of old computers that i had lying around at home. I have done a lot of information gathering and attempts at exploiting the machines via ...
1
vote
1answer
258 views

Legal Website and Code for dictionary attack using hydra and kali-linux

I am trying to learn how to use hydra on Kali-Linux to crack login passwords. Does anybody know a legal website I can crack and if so the information needed or the code needed to enter the form into ...
1
vote
2answers
637 views

Setting up a security lab, looking for a little guidance [duplicate]

I'm new here. Over the past couple of years I've had a growing interest in the security aspects of IT/CS. Recently, I've started setting up a lab for myself based on a kali/win7 dualboot and I've ...
6
votes
1answer
985 views

proxychains + dnscrypt + tor

I'm currently working in Kali and I'm trying to boost my security and anonymity online. Please, bear with me for I am no expert yet. Googling and searching here has yielded useful info but not enough ...
4
votes
1answer
2k views

Why some routers ask for PIN but can't be cracked using PIN-based attacks?

I've been working with WPS assessment tools like Reaver and Bully for some time and i could successfully crack my router's PIN code and find its password on both QSS PBC and QSS PIN code. when each of ...
0
votes
0answers
75 views

Metasploit Framework console misencodes text

I am running the Metasploit Framework (v4.10.2) on Kali Linux 1.0.7. Some commands return this weird, misencoded (I think) text instead of what it should be returning. What can I do to fix this? ...
2
votes
1answer
216 views

Best way to do security testing for a server behind nginx proxy [closed]

I'm trying to do some security testing for my server(not a web server) which is sitting behind a nginx proxy. To start with it, I've done some fuzz testing using Sulley. As expected, most of the ...
1
vote
3answers
3k views

ALFA AWUS036NHV - Monitor Mode [closed]

I have recently come into ownership of the above product and was wondering if it is possible to enable monitor mode on said device? I figured this community might have a definite answer, if not a ...
0
votes
2answers
94 views

SQLmap over uni wifi [closed]

I don't know if this is the right place to ask this question but I'll give it a shot! I was playing around with Kali and SQLmap. I was just scanning some sites nothing serious. When I was doing this I ...