Offensive Security's penetration testing Linux distribution.

learn more… | top users | synonyms (2)

0
votes
1answer
16 views

Getting Operating System Username using MySQL SQLi

Suppose I have a website which has SQL injection vulnerability and I got the database schema etc. Is there any means by which I can get the operating system username or the SSH username? Asking from ...
0
votes
0answers
13 views

why function “host” gives different results when using IP instead of domain name? [migrated]

I'm learning DNS, and when using the "host" bash function on Kali, i get different results according that i give the IP adress or its domain name equivalent: host -t ns axis.com => ...
3
votes
1answer
96 views

How to detect mimikatz usage on LAN

My boss is has made it clear that we need better ways of detecting mimikatz usage on the network- and I would agree. In place already for detection is suricata/ET PRO rule set on a couple of taps. ...
0
votes
1answer
63 views

Strange behavior of Nmap

I do port scanning with Nmap when HotSpot Shield VPN is running; and I am receiving strange result - when HotSpot Shield is running, Nmap tells me that all of the ports are open and when HotSpot is ...
0
votes
0answers
24 views

Is my Kali Linux download verfied?

I downloaded Kali Linux and followed the instructions on Kali official website under download Kali Linux Images Securely. ~/Desktop $ gpg --verify SHA1SUMS.gpg SHA1SUMS gpg: Signature made Tue 22 Mar ...
-4
votes
1answer
51 views

Kali linux veil-evasion installation problem [closed]

Does anyone know the cause or fix to this problem? root@kali:~# cd Veil-Evasion root@kali:~/Veil-Evasion# cd setup root@kali:~/Veil-Evasion/setup# ./setup.sh Veil-Evasion (Setup Script) | ...
0
votes
0answers
8 views

how can I copy from windows to kali linux? [migrated]

Please help I have installed kali linux in vmware player and installed vmware tools that enables copy from windows to kali linux but it didn't work
-5
votes
1answer
50 views

Alternative of using wifi card for penetration testing [closed]

I want to learn penetration testing on kali linux platform, for that I found that the wifi card is needed. But my question is that, if I install the kali linux as main operating system or make ...
-1
votes
0answers
10 views

Installing Kali on a USB drive - NOT Live USB or Persistence partition [migrated]

Greeting's, to clarify; my question is not creating a Live USB drive or a persistence partition but creating a USB with GRUB bootloader (or other) and Kali which can be used on any machine. This is ...
2
votes
1answer
155 views

How does attacker Brute force facebook account if there is a limit for tries? [closed]

I am wondering how does a user use Kali with python Brute Force Algorithm to brute force accounts like a facebook account when there are security measure in place like:Pause your try after 3 ...
-2
votes
0answers
14 views

Retain installed packages in live Kali USB after reboot [migrated]

I am using live Kali USB to learn penetration testing. The problem is when I install any package on live USB, say nessus, all the installation and configurations are lost after I reboot. It is very ...
-5
votes
1answer
83 views

How to hack a computer on a different network? [closed]

I was wondering how I could "hack" a computer that is not on my network. For example: open a meterpreter session on someone's computer who doesn't live within my proximity. I'm assuming I would need ...
1
vote
0answers
34 views

Proxy help on Kali Linux [closed]

I've recently gotten into using tor and I understand that tor only handles tcp. What I was hoping was to route all of my network traffic from my local machine through what I, at the time, thought of ...
-4
votes
1answer
23 views

What security measures to be considered [closed]

First, I know kali Linux is not suitable for day to day work. Since I am using Windows PC with low ram so I didn't prefer installing it on a virtual machine. I have totally uninstalled my windows (I ...
0
votes
0answers
22 views

Crackle does not work?

I've used to intructions for Crackle but, cannot get this kind of results like in the example. All it does is open up the wireshark like plugin and does not show any results like the picture below. ...
0
votes
1answer
38 views

MITM Traffic forwarding not working on Kali

I'm doing a ARP Spoofing MITM attack like this: arpspoof -i wlan0 -t 192.168.1.112 192.168.1.1 -r And I can see the traffic from the target (192.168.1.112) showing up in the sniffer, but the target ...
0
votes
2answers
102 views

How to capture Wifi 802.11 traffic?

I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
-4
votes
1answer
80 views

Anonymity on a non-anonymous computer [closed]

Question: What steps should be done on a not anonymous PC with personal data to get as anonymous as possible ? Background Info: I use my laptop with Kali Linux for java coding and some C# on ...
2
votes
1answer
83 views

Unable to Spoof DNS in Kali

I am new to Kali But not new to Information Security. Warming up with Kali, I tried to dns_spoof. But that didn't quite work. Here is what I did. Tampered ip_forward to 1 in /proc/sys/net/ipv4 ...
2
votes
0answers
26 views

PMK/s and Keys/s: Which is faster?

I'm practicing on Kali Linux and was struck with the fact that almost all tutorials on the internet specified speed of aircrack-ng in Keys per second and the speed of pyrite as PMKs per second. So, ...
1
vote
1answer
102 views

Can't get into Damn Vulnerable Web App with Hydra even though correct password is supplied

I've got VMware Workstation. I'm running Metasploitable2 and Damn Vulnerable Web App. I'm trying to attack it using Hydra in kali Linux. To save time I made a very small password list and included the ...
2
votes
1answer
53 views

What are the advantage of running a penetration test through Docker?

I was looking at Kali's blog post about its official Docker image, and I was wondering what the real benefits are. Why would I would run penetration testing through a docker image? Is it something ...
0
votes
0answers
39 views

Domain redirection when using Evil Twin method?

When clients are connected to my fake access point, is there a way to redirect their requests to a different domain (eg.: google.com --> hotmail.com)? Could this be achieved maybe via iptables or the ...
0
votes
0answers
31 views

LAMPSec variation hack trouble

For an assignment we have been given a virtual machine to attack. I am fairly new to this but have put in a lot of effort and still can't get through. Can anyone provide me with any other ideas? My ...
-1
votes
1answer
147 views

Kali password attack

I am new to kali pentesting and am working on a password attack for an assignment. The target has SSH and apache running so I go to the website apache is hosting and see a login. If I go to 'Create a ...
1
vote
1answer
107 views

Difficulty using SET within Kali Linux

When setting a website attack vector, I find that Kali does not give me the option to specify a port in order to receive information back to my local. Furthermore, I am unable to access the listener I ...
2
votes
3answers
68 views

How long til a 4-way handshake is captured with Aireplay-ng

I've got a TP-Link TL-WN722N wifi adapter which I believe allows monitoring/injection to a network (was reassured by the comments of other users). When I follow a guide by Vulnerableuser I can get to ...
1
vote
1answer
95 views

Kali Linux + How to find information behind NAT

I am working on an assignment where we are supposed to attack a private network simulated by a virtual machine provided to us using Kali. My Kali VM and the target network are on a 'host-only' private ...
2
votes
2answers
99 views

How to do arp spoofing on the virtual machine? (Against host)

I have an Ubuntu host and a Kali guest, I want to do spoofing over the host network but when I tried to do spoofing it just recognize network between guests. Is there any solution?
-2
votes
1answer
25 views

How to install Kali VB image? [closed]

I'd like to install Kali's VirtualBox image in order of avoiding some bugs with standard iso file. When I download it I see not just one file as I expexted but various kinds of files. How can it be ...
0
votes
1answer
237 views

trying to dns spoof using mitmf

I am trying to redirect a page of taulukko.com to google.com for learning purposes but no success. When i enter in the taulukko.com from the spoofed node i receive: The webpage cannot be found my ...
1
vote
1answer
540 views

ms08_067_netapi not performing as expected on Windows XP SP1/SP3

I tried the exploit with meterpreter reverse tcp on both SP1/SP3 machines and both returned a statement of exploit completed but no session was created. Both machines have firewall off. I want to have ...
0
votes
1answer
119 views

SETOOL Kit:Error: “Unable to Clone the site. Check your network connection”

I have to tried to check whether a site is vulnerable to Phishing attack or not using "Setool kit" in Kali Linux. But when I tried to clone a site using this Setool Kit in Kali Linux, I got an error ...
0
votes
0answers
38 views

ms03_026_dcom not working on Windows XP Sp1

I have been trying to use metasploit and kali linux when I came across the idea of using windows XP sp1 (checked the service pack with winver.exe on XP). I used the famous ms03_026_dcom and payload of ...
-5
votes
1answer
86 views

What to do if meterpreter get Caught? [closed]

Well we all have veil and its great really great But, When i run the payload the AV found that meterpreter is running from memory And then my payload is useless. How can i bypass that ? I tried ...
3
votes
1answer
84 views

MDK3 deauthentication attack problem: Every station gets disconnected

Having echo >'ed the BSSID of the AP into a file called blacklist, I run the following command to start a deauthentication attack: mdk3 wlan0mon d -w blacklist -c 11 The problem is however, ...
1
vote
1answer
150 views

No handshake recorded from airodump-ng

I've just started to attempt this by following the guide from lewiscomputerhowto. I've seen other people ask similar questions, but they all seem to be older threads. The steps I've taken are shown ...
-1
votes
1answer
150 views

Is Kali-Linux operating system is free from virus and worms? [closed]

Friends, Is Kali Linux operating system is best to use? as a beginner in security domain can I start to go with Kali-Linux OS?? Can all features which i used with Windows can be used on Kali too?
1
vote
1answer
70 views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it ...
0
votes
1answer
152 views

Suricata rule to block particular website question

I am writing rule for suricata which is going to block the possibility to enter one of the website for example xyz.com (instead of facebook, because with facebook there are some problems). I am doing ...
0
votes
2answers
94 views

Is there a tool to detect what technologies a website uses? [closed]

I'm looking for the name of a tool I've used a long time ago, that for a given URL/website address would extract the technologies used for that site. For example that the site is running Apache, using ...
-2
votes
2answers
70 views

Metasploitable: vnc_login - doesn't work with msfadmin:msfadmin

I am quite new to Metasploit and pen testing in general, so apologies for any seemingly noobish references below. I am using auxiliary/scanner/vnc/vnc_login, after seeing that the 5900 port is open ...
0
votes
1answer
97 views

Why are db_nmap results filtered, but Nmap is not

I've recently started playing with Kali on VMWare Player and Metasploitable 2 on VmWare Player. Both are on the same (default install) subnet. Metasploitable 2 has 2 adapters: settings:NAT and Host ...
0
votes
1answer
68 views

SEToolkit cloned website can be viewed over internet, but does not harvest credentials

I've been working with SEToolkit's website cloner/credential harvester. Everything works fine locally: The clone opens on the victim pc, victim inputs credentials, after submitting the victim is ...
0
votes
0answers
70 views

Pentesting - is there a way to check file permissions on linux remotely - KALI

I'm trying to modify a PHP file through a plugin on wordpress. Everything goes well, but I had to modify the permissions to 666 manually via terminal on the victim's machine, cause even when I'm ...
-2
votes
1answer
93 views

Honeypot used as as a proxy?

I'm running Kali Linux on my system at home to practice pentesting. If I implement a honeypot on my system could it be possible to use that as some sort of proxy server? I was thinking it wouldn't be ...
3
votes
1answer
10k views

service metasploit start failed to start metasploit service [closed]

I am trying to setup Metasploit for penetration testing. However first of all I cannot get the database to connect. Also whenever I attempt to start the service using service metasploit start I get ...
2
votes
1answer
2k views

msfvenom payload problem

This is for educational purposes only! I'm trying to generate android payload using msfconsole payload standalone generator: msfvenom with the command msfvenom -p android/shell/reverse_tcp ...
0
votes
1answer
394 views

Openvas - exploiting result

I am an IT administrator and I try at present to secure my network. I have made an analysis of safety with OpenVAS on one computer, and I have difficulty exploiting the result : Vulnerability ...
2
votes
2answers
317 views

How can I make wordlist smaller size?

I've been thinking if I create numeric 8chars wordlist and then compress it, can I directly input compressed wordlist into aircrack-ng or is there a way to make a smaller size wordlist, because if I ...