Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
1
vote
1answer
17 views
DNS Hijack: Only spoofing sites listed in etter.dns
I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
1answer
83 views
MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter
At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop).
To do this is run Kali Linux in a ...
0
votes
1answer
25 views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
0
votes
2answers
27 views
I couldn't deauth any devices using aireplay-ng command in kali linux
I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade.
I was using aircrack-ng for pentesting my wlan network.
I wanted to deauth any device connected to my ...
-2
votes
0answers
26 views
How to configure Proxy settings in kali linux 2018 connected with Putty [closed]
I am connecting to Kali linux located on remote server using Putty with a proxy server in between.
I am trying to do apt-get install update and getting the following error.
Reading package lists... ...
0
votes
0answers
10 views
Why Isn't Netdiscover Working On My Virtual Machine? [migrated]
I am doing a vulnhub CTF walkthrough (Lampiao). I have my main VM set up using Kali Linux in VirtualBox. The victim VM is the Lampiao machine. I am supposed to run Netdiscover on Kali to search for ...
2
votes
1answer
45 views
Can't log in dvwa with a simple python program, even though login credentials are good
import requests
target_url = "http://127.0.0.1/dvwa/login.php"
data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"}
...
0
votes
0answers
10 views
Installing Kali Repositories [migrated]
Can I install Kali Linux repositories on Debian 9 Stretch. The last time I did this, my installation breaked after an update or installation of wine I think. The apt package manager was also not ...
1
vote
0answers
41 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
1
vote
1answer
77 views
Username and password files in Kali [duplicate]
I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23.
I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
1
vote
1answer
93 views
Kali.download website blocked by Kaspersky because of Trojan, is it safe?
So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website
Do all Kali Linux operating systems try to download from this webpage (http://kali....
0
votes
1answer
38 views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
-4
votes
1answer
88 views
Reason behind Chrome not running in root user in kali Linux?
Why does Google Chrome not run as root user by default in Kali Linux? Is it a security issue?
0
votes
0answers
83 views
Why ngrok doesn't retrieve correct public IP address in Kali Linux
I installed the ngrok on Kali and if I run the ./ngrok http 80 command ngrok I got the following output from console screen. If I ping the given link to get my public IP address it returns wrong ...
1
vote
0answers
56 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
2
votes
1answer
89 views
Nmap --script-args usage?
I'm trying to use multiple Nmap --script-args at the same time.
$ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com
...
0
votes
1answer
61 views
Kali Linux: Run penetration test and generate report for particular site? [closed]
I am new in Kali Linux and recently one of my jobs is to use Kali Linux to scan a newly developed site and see if there are any security issue.
And after going through some courses I found that, in ...
-2
votes
1answer
63 views
Security testing alternatives on MacOS [closed]
Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
3
votes
5answers
235 views
Cloud provider for Penetration Testing
I wish to set up a Kali Linux box on a cloud provider in order to perform same day penetration tests.
The issue I am having is finding a cloud provider such as AWS, Azure etc. for this.
For AWS they ...
0
votes
1answer
286 views
Kali Linux and Cell Phone Security
Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
0
votes
0answers
47 views
Capturing Arp-reply packets from all neighbouring networks
actually I want to capture all the arp-reply packets from all neighboring wireless networks, but when I try to do the same, no arp-reply packets from any networks are visible.
Let me make you the ...
1
vote
0answers
163 views
SQLmap error (what happen if i have no parameters)
I have an error when I use sqlmap. The problem is: I use this dork https://www.exploit-db.com/ghdb/4301/
but I do not know how to use sqlmap with this type of sql injection.
I use the classic:
...
1
vote
0answers
67 views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
0
votes
1answer
61 views
location of msfconsole generated executable in Kali linux [closed]
I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe.
But I cant find the location of the shell.exe ...
1
vote
1answer
382 views
unable to locate package Arpspoof [closed]
Can not find the tool arpspoof by using the apt-get install on Kali.
After checking by typing apt-cache search there is no result either.
Does this mean the tool is not available anymore?
Thanks.
1
vote
0answers
187 views
Connection errors on hack the box and vulnhub (Kali, virtual box) [closed]
Ill start by show my attacking machine network setup:
When trying to do a box on HTB or Vulnhub, I am sometimes able to ping it (nmap -Pn). Once I am able to ping a machine, I do a full nmap scan. ...
1
vote
0answers
268 views
Using Reaver in various UK routers results in stop after 90% progress
I've been trying to make use of the current wifi audition techniques in regards of Router Password retrieval.
GEAR:
I've been through car boot sales and acquired some of the current routers on the ...
1
vote
1answer
225 views
Why is FF in Kali making requests to ocsp.digicert.com?
Warning -> n00b here!
For some time now I am learning the tools for pen-testing but I am still complete n00b. I have installed Metasplitable2 in another computer on local network and I am running ...
7
votes
1answer
307 views
Brute forcing encryption password (self destruct after 4 attempts)
My colleague at work lost the password to his external hard drive (HDD not SSD), a WD Elements. He remembers that his password was simple and 8 characters maximum.
The problem is the encryption ...
1
vote
0answers
68 views
ARP poisoning command slows down victim internet and victim has no access
im currently enrolled in a CPEH course my 3rd lab was arp poison. command i used is
echo -1 > /proc/sys/met/ipv4/ip_forward
iptables -t nat -A PREROUTING -p tcp --detination-port 80 -j REDIRECT -...
4
votes
1answer
718 views
OpenVAS won't generate SCAP Database
To deploy OpenVAS to Virtual machines I've been using Ansible for a while and it worked pretty well. Now today I wanted to deploy it to another machine but the openvas-check-setup script keeps telling ...
0
votes
0answers
33 views
Proxychains DNS Leak [duplicate]
I'm using Kali Linux with tor service running and proxychains in dynamic, when using proxychains to search duckduckgo it displays a new IP however it leaks DNS even though the DNS Leak feature is ...
0
votes
1answer
321 views
Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result
I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network.
Here are my terminal Commands ...
1
vote
0answers
44 views
arp spoofing on ni myrio
I created a traffic light system using NI myRio and LabVIEW,
Now I want to arp spoof this system
what I did is using arpspoof command on another PC that runs kali linux,
The ip address are:
192.168....
1
vote
1answer
305 views
Metasploit: Executables are not working after Reverse Shell
I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used:
Payload: windows/shell/...
0
votes
1answer
737 views
dnsspoof doesn't spoof DNS request with IP-address of local machine
I want to spoof all DNS requests with the IP address of my local machine.
However, running dnsspoof, all clients receive the real IP address and not the fake IP address of my host.
I know I can ...
0
votes
0answers
223 views
Kali Linux 2 DNS spoofing: is there still a bug?
Good evening,
I am trying to set up dns spoofing in kali linux 2.1
I have two kali environments, one on my tablet using linux deploy, and another on an USB stick.
I managed to poison ARP using ...
3
votes
1answer
3k views
Decrypting SAM hive after Windows 10 anniversary update?
After a lot of frustration I've finally cracked my local Windows 10 password using mimikatz to extract the proper NTLM hash.
In particular, samdump2 decrypted the SAM hive into a list of users with "...
0
votes
2answers
1k views
Hydra fails with “[ERROR] target ssh://192.168.16.128:22/ does not support password authentication.”?
I've updated Kali 2.0 to newest version - it is installed using VMWare.
Now, every time I use hydra to brute-force SSH, I get the following error:
[ERROR] target ssh://192.168.16.128:22/ does not ...
-4
votes
1answer
552 views
How to use beef-xss on ports other than default 3000?
I want to use BeEF-XSS Framework over WAN (for educational purposes). The only problem is that my ISP is blocking port 3000. So, after some research, I found this page that says:
However, beef-xss ...
-1
votes
2answers
80 views
Why have distributions default HTTP package sources instead of HTTPS [duplicate]
Many distributions have HTTP links in their sources list for packages.
Proof:
https://docs.parrotsec.org/doku.php/mirrors-list
https://docs.kali.org/general-use/kali-linux-sources-list-repositories
...
-2
votes
1answer
544 views
Sample Capture Files to Test Password Cracking [closed]
I was wondering if there are sample .cap files that can be downloaded to test password cracking with aircrack or or other tools for my homelab.
Thanks!
0
votes
1answer
999 views
Is it possible to “deauth” wifi direct connections?
I used a Samsung Galaxy s7 as a Wifi Direct device to another android device (I think a Moto G Play) and I was wondering whether aircrack-ng could deauthenticate/disrupt the connection between them.
...
0
votes
1answer
469 views
How secure is a Kali Linux Live USB [duplicate]
How secure for the host computer is a Kali Linux Live USB installation?
If I get a virus or any other kind of malware on Kali, can it also infect the computer to which it’s plugged into?
Could it ...
2
votes
0answers
52 views
Where I am going wrong with Veil? Cannot get a reverse shell?
This is how I am generating the payload in Veil 3
> use XX
> set LHOST X.X.X.X
> set LPORT 3333
> generate
The payload generates successfully and transferred to victim machine Win7 SP1 ...
0
votes
0answers
170 views
Forward ssh traffic and decrypting it
I have two virtual machines with public ips. One of them acts as a linux server (let's call it Alice) and the other one has kali on it (you guessed, we'll call it Eve) and will act more or less as a ...
4
votes
1answer
293 views
What hashes does responder capture?
I wanted to play with Responder. So I installed Kali onto a virtual mashine and made a bridged connection, so that Kali and the host (Win7) share the same network interface.
I changed the Win7 ...
-1
votes
1answer
444 views
How to brute-force a login that uses passwords of a specific format? [closed]
For example, if a website login that uses password of a specific format containing 3 letters and 3 numbers like abc123, qwr345, yta921...
What tools on Kali Linux can crack this type of password and ...
2
votes
1answer
310 views
Metasploit nmap_run -e hangs with Using code '404' as not found
Background
When I run Metasploit, it hangs at the same place no matter what I do. It stops at this line,
[*] Using code '404' as not found.
Steps to reproduce,
msf > mfsconsole
msf > load ...
0
votes
2answers
547 views
Is it safe and secure to disable sandbox of google chrome in Kali Linux or any distribution of Linux?
I have installed chrome on Kali Linux. But It doesn't run. After searching on the internet I found a solution in which you have to disable sandbox if you wanna run google chrome as a root user. ...
