Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
347
questions
1
vote
0answers
42 views
Wireshark how do I see data from a phone on the same network
So I am wondering how can I see the data on wireshark?
I have my router setup to where there is no password so I can automatically connect whatever devices on to my network.
First I connect my phone ...
0
votes
0answers
47 views
Why is reaver not guessing the correct PIN?
I'm learning about network security. This time I'm trying to pen-test my router by exploiting WPS on my router.
Here's my router's stats
BSSID Ch dBm WPS Lck Vendor ESSID
--------...
0
votes
0answers
37 views
ntlmrealyx powershell usage
I would like to know about your experience regarding the use of ntlmrelayx
When using ntlmrelayx.py -tf targets.txt -c "Powershell command" does this powershell command need to be an Empire ...
0
votes
1answer
70 views
Where to find complete Kali image for docker with all the tools? [closed]
As of now, I am using window 10 & I want to run kali Linux on Docker. For that, I took the copy from kali official site Here
But after running I found it's just a base OS it doesn't contain all ...
0
votes
0answers
49 views
Empire Autorun Script
I'm tryng to run the following resource file when getting a new agent
usemodule privesc/bypassuac "name of the listener"
execute
y
back
usemodule persistence/elevated/wmi
set Listener "...
0
votes
0answers
71 views
Not able to capture 4 way handshake using airodump-ng
I am not able capture 4 way handshake, I also tried manually disconnecting and reconnecting my device to the network in hope that airodump-ng will capture the handshake but no luck. I checked the ...
0
votes
1answer
355 views
Windows Defender found threats in Kali Linux disc image
Last week, I downloaded Kali Linux from the official https://www.kali.org/ website for educational purpose. I left the downloaded disc image (.iso) on my desktop. Yesterday, Windows Defender decided ...
0
votes
1answer
24 views
How to find PHP filename and ID of the URL?
.htaccess is now a very common URL rewrite to make it SEO friendly and cover the database IDs.
What are the ways to explore php file on the server given to URL via .htaccess?
Example :
The URL is ...
1
vote
0answers
206 views
Metasploit always asks me to create MSF web service account
I run QubesOS on my laptop and created a StandaloneVM based on debian-10 template.
I installed metasploit and created a database for the MSF web service and I was given a token for the API.
I rebooted ...
0
votes
1answer
58 views
PostgreSQL exploit not loading in MSFConsole from ExploitDB
Just trying to get a postgreSQL exploit (32847.txt - Low Cost Function ) from exploitdb to run in msfconsole. After pulling my hair out trying to figure out why it isn't loading, here I am. I'm using ...
0
votes
0answers
54 views
SQLsus injections failed
I’m trying to inject a website using sqlsus tool on Kali, but i keep getting a failure message, I’ve changed the website I’m testing even though I’m sure it’s vulnerable, but still a failure message.
...
1
vote
0answers
702 views
Problem while using Reaver WPS
I was trying to crack my WiFi Router. I have two laptops an older one(Lenevo 3000 G430) and a newer one(HP Elitebook 840 G3) with their internal adapter. The old one has BCM4312 802.11b/g
chipset and ...
0
votes
3answers
518 views
How can Avast detect threats when I install Kali on VirtualBox?
I was installing Kali on VirtualBox on a W7 host, and during the upgrading/installation, Avast detected two threats in the Mimikatz package.
My question is, how can Avast "see" through the VM? Is he ...
0
votes
1answer
110 views
Using Patator ssh_login module how can I get the output to show only on success
I have the following command:
patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist>
I would like to output the success result only and not ...
1
vote
1answer
104 views
802.11 data frames missing from Wireless frames capturing
By working on the Wireless QoS (WMM/802.11e), I captured with airmon-ng and airodump-ng on Kali Linux, the 802.11 raw wireless frames, on my BSSID and channel.
I generate some traffic from my ...
0
votes
2answers
249 views
Nmap with snmp-brute script freezes at 33.33%
I'm currently undergoing a penetration testing course where I discover the basics and I have a task where I need to perform SNMP enumeration on a target.
My working environment is as follows :
Host : ...
0
votes
0answers
135 views
Generate every alphanumerical combination in crunch within 8-20 characters in length
I want to generate combinations in sequential range of the length 8-20 with the following characters:
abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890!@#$%^&*()~`";.,/[]-=
How ...
1
vote
0answers
94 views
How should I install Kali Linux on my Windows 10?
I'm using Windows 10. I found several ways to install Kali Linux on Win10:
Install it on VMWare
Install it on Docker
Install it on Linux subsystem (WSL)
I might need to access some files in my ...
0
votes
0answers
131 views
Aireplay-ng works fine from command line but can't deauth from inside Fern Wifi Cracker
I have Kali Linux 2019.4 ARM-64 installed on a Raspberry Pi 3B.
I have installed the Fern Wifi Cracker software. When I launch the "Wifi Attack" from inside Fern, I can see Aireplay-ng sending Deauth ...
0
votes
1answer
79 views
Monitor mode not sniffing from other devices on the same network
i'm currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices.
Pinging from ...
0
votes
0answers
155 views
Kaspersky TS blocking apt-get upgrade and marking files as HEUR:Trojan.Script.Generic
I have just recently downloaded kali linux onto my VM software and i was doing apt-get upgrade in terminal and some files got blocked by my kts and i was wondering whether it was a false positive as ...
-1
votes
1answer
200 views
Kali Linux Firewalls and Endpoint security [closed]
I was asked to explain why Kali Linux does not have any firewalls or endpoint security. I would appreciate any help as I am a complete beginner to Kali Linux.
2
votes
1answer
269 views
why my Metasploit folder does not have wordlists folder (usr/share/)?
I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config.
I am not sure how that happened but my msf is updated.
Is there any ...
0
votes
0answers
52 views
Aireplay-ng doesnt get ACKs
I use the panda pau09 wireless adapter with a kali vm. I am attempting to deaauth my laptop off my home wifi. My last theory was that for some reason i wasn't able to deauth on 5Ghz band but after ...
0
votes
0answers
251 views
Aireplay-ng deauth has no effect
I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop.
The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
0
votes
1answer
129 views
Extract data from burp response and use in another request
I have a scenario where I need to call /api/login to get a token and then use said token in subsequent calls until it expires.
Is there a way to automate the call and token extraction and then to ...
0
votes
0answers
381 views
aireplay-ng --fakeauth issue with deauth packet
I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
0
votes
1answer
130 views
How Dirbuster find the files within a directory? (Differentiating between files and directories) [closed]
I am writing the python code of DIRBUSTER tool in kali linux but I got stuck at finding files that lies within directories. So my question is how can I differentiate between Files and Directories ...
1
vote
0answers
401 views
Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi
I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM.
...
1
vote
0answers
85 views
Hydra gives different password each time (DVWA)
I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA.
Here's my command
hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
1
vote
1answer
256 views
SSH Timed out problem [closed]
I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin
That's how i booted up my ssh ...
2
votes
0answers
194 views
Deauthentication attack failure
Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is:
airodump-ng --bssid MAC address here --channel channel # here --write ...
0
votes
1answer
383 views
Limiting the number of duplicate character types in crunch
I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters.
I see option -d which allows a set limit of duplicates of ...
0
votes
1answer
1k views
Wireshark - How to see the domain of HTTPS websites visited
How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
0answers
2k views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
-4
votes
1answer
81 views
I just can't use social engeneering tool in kali [closed]
I'm doing an information security course, but one the main tools isn't working, I can't learn how to clone a site like this, look...
It keeps asking me to copy all the content inside www directory to ...
1
vote
0answers
704 views
aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”
I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
438 views
mitmf doesn't work when disabled ip forward
I have virtual machine windows connected to NAT network.
I also have kali linux virtual machine connected to same NAT network.
I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward
gives ...
1
vote
2answers
2k views
Reverse shell refusing/difficulties to establish connection
I've been trying to reverse shell between different devices, however,
I'm never able to establish a connection or get a shell prompt
.
Let's say I have a Mac OSX as victim and use a raspberry Pi ...
-1
votes
1answer
321 views
wpscan is not show the real version
When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket
Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI)
| Fixed in: 2.10.4
But I when I ...
-1
votes
1answer
2k views
How to switch from Ubuntu 18.04 to kali linux? [closed]
I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0answers
267 views
How can I get MITM attack using sslstrip to work?
I performed the following steps:
I modified iptables to forward to another port:
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000
I allowed port forwarding:
...
1
vote
1answer
545 views
DNS Hijack: Only spoofing sites listed in etter.dns
I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
2answers
5k views
MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter
At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop).
To do this is run Kali Linux in a ...
0
votes
1answer
2k views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
1
vote
2answers
7k views
I couldn't deauth any devices using aireplay-ng command in kali linux
I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade.
I was using aircrack-ng for pentesting my wlan network.
I wanted to deauth any device connected to my ...
2
votes
1answer
422 views
Can't log in dvwa with a simple python program, even though login credentials are good
import requests
target_url = "http://127.0.0.1/dvwa/login.php"
data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"}
...
1
vote
0answers
556 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
3
votes
1answer
22k views
Username and password files in Kali [duplicate]
I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23.
I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
3
votes
1answer
3k views
Kali.download website blocked by Kaspersky because of Trojan, is it safe?
So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website
Do all Kali Linux operating systems try to download from this webpage (http://kali....
