Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
0
votes
0answers
10 views
Can't install wine on Kali Linux 4.18.10 [migrated]
I can't install wine. I type
apt-get install wine32
And I have this error
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package wine32 is not available, ...
-2
votes
0answers
27 views
weevely supported backdoor issue [closed]
weevely can create backdown with php script for sure. I tested and worked fine. Now question is, if my target website runs on any other language like python or ruby, does the php backdoor created by ...
0
votes
0answers
36 views
Generate a wordlist with strings that have no repeated characters [duplicate]
I am attempting to do this with crunch, but any method would be fine. I want to generate combinations of 6 characters in which no character is repeated. Note that I don't mean the -d function, as that ...
-2
votes
0answers
32 views
Kali Linux Install VB macbook [migrated]
I downloaded the kali-linux-2018.4-amd64.iso and ran the graphical install on virtualbox on my mac.
After the install I was able to login and I saw all the tools available, but when I poweroff from ...
0
votes
0answers
49 views
Exploit TinyCore Linux 4.2.9 with DirtyCow remote from Kali Linux
Do you know if is possible execute an exploit from Kali Linux for obtain root privileges in a remote machine (that I have exploited before with a local user) with tiny-core Linux version 4.2.9, I've ...
0
votes
1answer
51 views
wpscan is not show the real version
when I scan WordPress site with wpscan I saw in the results that I have version 2.10.3 in WP Rocket
Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI)
| Fixed in: 2.10.4
but I when I ...
-1
votes
1answer
75 views
How to switch from Ubuntu 18.04 to kali linux? [closed]
I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0answers
56 views
How can I get MITM attack using sslstrip to work?
I performed the following steps:
I modified iptables to forward to another port:
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000
I allowed port forwarding:
...
1
vote
1answer
62 views
DNS Hijack: Only spoofing sites listed in etter.dns
I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
1answer
297 views
MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter
At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop).
To do this is run Kali Linux in a ...
0
votes
1answer
111 views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
0
votes
2answers
182 views
I couldn't deauth any devices using aireplay-ng command in kali linux
I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade.
I was using aircrack-ng for pentesting my wlan network.
I wanted to deauth any device connected to my ...
2
votes
1answer
57 views
Can't log in dvwa with a simple python program, even though login credentials are good
import requests
target_url = "http://127.0.0.1/dvwa/login.php"
data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"}
...
1
vote
0answers
96 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
1
vote
1answer
271 views
Username and password files in Kali [duplicate]
I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23.
I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
1
vote
1answer
214 views
Kali.download website blocked by Kaspersky because of Trojan, is it safe?
So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website
Do all Kali Linux operating systems try to download from this webpage (http://kali....
0
votes
1answer
64 views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
-4
votes
1answer
95 views
Reason behind Chrome not running in root user in kali Linux?
Why does Google Chrome not run as root user by default in Kali Linux? Is it a security issue?
1
vote
0answers
159 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
2
votes
1answer
119 views
Nmap --script-args usage?
I'm trying to use multiple Nmap --script-args at the same time.
$ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com
...
0
votes
1answer
90 views
Kali Linux: Run penetration test and generate report for particular site? [closed]
I am new in Kali Linux and recently one of my jobs is to use Kali Linux to scan a newly developed site and see if there are any security issue.
And after going through some courses I found that, in ...
-2
votes
1answer
70 views
Security testing alternatives on MacOS [closed]
Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
3
votes
5answers
353 views
Cloud provider for Penetration Testing
I wish to set up a Kali Linux box on a cloud provider in order to perform same day penetration tests.
The issue I am having is finding a cloud provider such as AWS, Azure etc. for this.
For AWS they ...
0
votes
1answer
594 views
Kali Linux and Cell Phone Security
Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
0
votes
0answers
62 views
Capturing Arp-reply packets from all neighbouring networks
actually I want to capture all the arp-reply packets from all neighboring wireless networks, but when I try to do the same, no arp-reply packets from any networks are visible.
Let me make you the ...
1
vote
0answers
230 views
SQLmap error (what happen if i have no parameters)
I have an error when I use sqlmap. The problem is: I use this dork https://www.exploit-db.com/ghdb/4301/
but I do not know how to use sqlmap with this type of sql injection.
I use the classic:
...
1
vote
0answers
94 views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
0
votes
1answer
86 views
location of msfconsole generated executable in Kali linux [closed]
I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe.
But I cant find the location of the shell.exe ...
1
vote
1answer
918 views
unable to locate package Arpspoof [closed]
Can not find the tool arpspoof by using the apt-get install on Kali.
After checking by typing apt-cache search there is no result either.
Does this mean the tool is not available anymore?
Thanks.
1
vote
0answers
270 views
Connection errors on hack the box and vulnhub (Kali, virtual box) [closed]
Ill start by show my attacking machine network setup:
When trying to do a box on HTB or Vulnhub, I am sometimes able to ping it (nmap -Pn). Once I am able to ping a machine, I do a full nmap scan. ...
1
vote
0answers
334 views
Using Reaver in various UK routers results in stop after 90% progress
I've been trying to make use of the current wifi audition techniques in regards of Router Password retrieval.
GEAR:
I've been through car boot sales and acquired some of the current routers on the ...
1
vote
1answer
290 views
Why is FF in Kali making requests to ocsp.digicert.com?
Warning -> n00b here!
For some time now I am learning the tools for pen-testing but I am still complete n00b. I have installed Metasplitable2 in another computer on local network and I am running ...
7
votes
1answer
352 views
Brute forcing encryption password (self destruct after 4 attempts)
My colleague at work lost the password to his external hard drive (HDD not SSD), a WD Elements. He remembers that his password was simple and 8 characters maximum.
The problem is the encryption ...
1
vote
0answers
86 views
ARP poisoning command slows down victim internet and victim has no access
im currently enrolled in a CPEH course my 3rd lab was arp poison. command i used is
echo -1 > /proc/sys/met/ipv4/ip_forward
iptables -t nat -A PREROUTING -p tcp --detination-port 80 -j REDIRECT -...
4
votes
1answer
1k views
OpenVAS won't generate SCAP Database
To deploy OpenVAS to Virtual machines I've been using Ansible for a while and it worked pretty well. Now today I wanted to deploy it to another machine but the openvas-check-setup script keeps telling ...
0
votes
0answers
52 views
Proxychains DNS Leak [duplicate]
I'm using Kali Linux with tor service running and proxychains in dynamic, when using proxychains to search duckduckgo it displays a new IP however it leaks DNS even though the DNS Leak feature is ...
0
votes
1answer
431 views
Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result
I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network.
Here are my terminal Commands ...
1
vote
0answers
48 views
arp spoofing on ni myrio
I created a traffic light system using NI myRio and LabVIEW,
Now I want to arp spoof this system
what I did is using arpspoof command on another PC that runs kali linux,
The ip address are:
192.168....
1
vote
1answer
360 views
Metasploit: Executables are not working after Reverse Shell
I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used:
Payload: windows/shell/...
0
votes
1answer
1k views
dnsspoof doesn't spoof DNS request with IP-address of local machine
I want to spoof all DNS requests with the IP address of my local machine.
However, running dnsspoof, all clients receive the real IP address and not the fake IP address of my host.
I know I can ...
0
votes
0answers
256 views
Kali Linux 2 DNS spoofing: is there still a bug?
Good evening,
I am trying to set up dns spoofing in kali linux 2.1
I have two kali environments, one on my tablet using linux deploy, and another on an USB stick.
I managed to poison ARP using ...
3
votes
1answer
4k views
Decrypting SAM hive after Windows 10 anniversary update?
After a lot of frustration I've finally cracked my local Windows 10 password using mimikatz to extract the proper NTLM hash.
In particular, samdump2 decrypted the SAM hive into a list of users with "...
0
votes
2answers
2k views
Hydra fails with “[ERROR] target ssh://192.168.16.128:22/ does not support password authentication.”?
I've updated Kali 2.0 to newest version - it is installed using VMWare.
Now, every time I use hydra to brute-force SSH, I get the following error:
[ERROR] target ssh://192.168.16.128:22/ does not ...
-4
votes
1answer
766 views
How to use beef-xss on ports other than default 3000?
I want to use BeEF-XSS Framework over WAN (for educational purposes). The only problem is that my ISP is blocking port 3000. So, after some research, I found this page that says:
However, beef-xss ...
-1
votes
2answers
96 views
Why have distributions default HTTP package sources instead of HTTPS [duplicate]
Many distributions have HTTP links in their sources list for packages.
Proof:
https://docs.parrotsec.org/doku.php/mirrors-list
https://docs.kali.org/general-use/kali-linux-sources-list-repositories
...
-2
votes
1answer
819 views
Sample Capture Files to Test Password Cracking [closed]
I was wondering if there are sample .cap files that can be downloaded to test password cracking with aircrack or or other tools for my homelab.
Thanks!
0
votes
1answer
1k views
Is it possible to “deauth” wifi direct connections?
I used a Samsung Galaxy s7 as a Wifi Direct device to another android device (I think a Moto G Play) and I was wondering whether aircrack-ng could deauthenticate/disrupt the connection between them.
...
0
votes
1answer
542 views
How secure is a Kali Linux Live USB [duplicate]
How secure for the host computer is a Kali Linux Live USB installation?
If I get a virus or any other kind of malware on Kali, can it also infect the computer to which it’s plugged into?
Could it ...
3
votes
1answer
98 views
Where I am going wrong with Veil? Cannot get a reverse shell?
This is how I am generating the payload in Veil 3
> use XX
> set LHOST X.X.X.X
> set LPORT 3333
> generate
The payload generates successfully and transferred to victim machine Win7 SP1 ...
0
votes
0answers
187 views
Forward ssh traffic and decrypting it
I have two virtual machines with public ips. One of them acts as a linux server (let's call it Alice) and the other one has kali on it (you guessed, we'll call it Eve) and will act more or less as a ...
