Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
339
questions
0
votes
0
answers
25
views
Trying to ret2text on 64bit program issues, can't jump to shell
Here is the elf summary of the program:
Arch: amd64-64-little
RELRO: Partial RELRO
Stack: No canary found
NX: NX enabled
PIE: No PIE (0x400000)
This is the ...
- 1
0
votes
0
answers
117
views
Program segfaults when ran with GDB
this is my first time posting a question here, so forgive me if I don't give enough details. I will provide any extra details that are requested.
Basically, I'm practicing a buffer overflow, and I'm ...
0
votes
0
answers
18
views
Nmap scan using default script scan and version detection fail [duplicate]
I am running the following scan using -sC -sV on a target:
sudo nmap -sC -sV XX.XX.XX.XX
PORT STATE SERVICE VERSION
53/tcp open tcpwrapped
80/tcp open tcpwrapped
443/tcp open tcpwrapped
I ...
2
votes
1
answer
2k
views
kali linux encrypting passwords with yescrypt - how to change?
I'm using John The Ripper for password cracking and adding new users/passwords to test it out. When I create a new user and password, the hash starts with $y$ which is from yescrypt. When testing a ...
0
votes
2
answers
545
views
Objectively, what can you do on kali that you can't do on a mac?
What is so special about kali?
Is there some suite that just run on kali and won't on other distros/mac?
Is it just marketed better to the infosec community?
- 1
0
votes
0
answers
133
views
Tp Link Wireless adapter doesn't want to transmit deauth packets after a fresh installation of Kali Linux
I have a TP-Link TL-WN727N wireless adapter that works out of the box with Kali Linux (I'm using a VM) which I have been using for quite some time. This card has worked flawlessly ever since I first ...
0
votes
1
answer
676
views
How to perform MitM against SSL/TLS when certificate owned?
Performing a local network man-in-the-middle (MitM) attack is fairly straightforward, especially when the traffic is unencrypted HTTP. There are other approaches to encrypted SSL/TLS HTTPS connections,...
- 181
0
votes
0
answers
94
views
How to detect a firewall used
I was scanning a network with Nmap.
I'm looking for advanced commands for detecting firewalls.
0
votes
1
answer
202
views
Is it possible to spoof a service running on a port in Ubuntu?
I was looking into the idea of port spoofing, and I came across this
GitHub repository. I'm mainly looking to disguise my computer as something else, whereas this program opens every TCP port and ...
- 61
0
votes
2
answers
312
views
Low-privilege account and sudo permissions
One common security practice is creating a low privilege account to work from, when not installing any tools or making system changes. This question is more towards penetration testing platforms. In ...
- 589
-1
votes
1
answer
956
views
aircrack-ng on Raspberry pi 3 and WiFi adapter
I am just getting into ethical hacking and cybersecurity and would like some advice regarding USB Wi-Fi adapter. I am hacking on Raspberry PI 3 which is running Kali Linux. Furthermore, I have been ...
- 101
1
vote
0
answers
154
views
How to install Java 8 on Kali Nethunter [closed]
Guys I need to install jdk 8 for my programs to work better, many programs do not support the version higher than Java 8 so I want to install Java 8 to run better, I tried to install via apt-get, but ...
- 111
1
vote
0
answers
222
views
Problems in stopping/restoring Aircrack session
I'm running aircrack-ng version 1.6 on Live Kali. I noticed that "recently" a -N option has been added for saving a session, which can be later resumed with the option -R.
However this seems ...
- 119
0
votes
1
answer
1k
views
At times bettercap ARP sniffing works great and at times not at all, what would be the reason?
I like to track the websites my daughter goes to in order to have some control. So I installed bettercap and setup a script to start it to sniff the HTML URLs being accessed (well, the reverse URL ...
- 987
0
votes
1
answer
1k
views
Getting AVAST alert during program update/upgrade in Kali Linux
So i started to use VirtualBox in windows 10 and i would like to know if those alert from my windows 10 security program (avast antivirus), during my installation/upgrading of TheHarvester program at ...
3
votes
1
answer
475
views
Does Kali installed through WSL respect my privacy?
When installing Kali from Microsoft Store, I wasn't prompted with a user agreement license.
Is Microsoft able to monitor my applications? How safe is it to use WSL in that context? (From privacy ...
0
votes
0
answers
1k
views
Why my card changes from WPA Handshake to PMKID or vice versa just by airodump-ng
I am running Kali linux 2020.3 on VBox on Windows 10. I put my wireless card AWUS036ACH chipset Realtek RTL8812AU in monitor mode using airmon-ng start wlan0.
Then i use airodump-ng wlan0 to capture ...
- 1
1
vote
0
answers
702
views
Wireshark how do I see data from a phone on the same network
So I am wondering how can I see the data on wireshark?
I have my router setup to where there is no password so I can automatically connect whatever devices on to my network.
First I connect my phone ...
- 11
3
votes
1
answer
2k
views
Where to find complete Kali image for docker with all the tools? [closed]
As of now, I am using Windows 10 & I want to run kali Linux on Docker. For that, I took the copy from the kali official site Here
But after running I found it's just a base OS it doesn't contain ...
- 299
0
votes
0
answers
215
views
Empire Autorun Script
I'm tryng to run the following resource file when getting a new agent
usemodule privesc/bypassuac "name of the listener"
execute
y
back
usemodule persistence/elevated/wmi
set Listener "...
3
votes
1
answer
23k
views
Windows Defender found threats in Kali Linux disc image
Last week, I downloaded Kali Linux from the official https://www.kali.org/ website for educational purpose. I left the downloaded disc image (.iso) on my desktop. Yesterday, Windows Defender decided ...
- 191
0
votes
1
answer
1k
views
How to find PHP filename and ID of the URL?
.htaccess is now a very common URL rewrite to make it SEO friendly and cover the database IDs.
What are the ways to explore php file on the server given to URL via .htaccess?
Example :
The URL is ...
- 1
1
vote
0
answers
1k
views
Metasploit always asks me to create MSF web service account
I run QubesOS on my laptop and created a StandaloneVM based on debian-10 template.
I installed metasploit and created a database for the MSF web service and I was given a token for the API.
I rebooted ...
0
votes
1
answer
295
views
PostgreSQL exploit not loading in MSFConsole from ExploitDB
Just trying to get a postgreSQL exploit (32847.txt - Low Cost Function ) from exploitdb to run in msfconsole. After pulling my hair out trying to figure out why it isn't loading, here I am. I'm using ...
- 1
2
votes
0
answers
4k
views
Problem while using Reaver WPS
I was trying to crack my WiFi Router. I have two laptops an older one(Lenevo 3000 G430) and a newer one(HP Elitebook 840 G3) with their internal adapter. The old one has BCM4312 802.11b/g
chipset and ...
- 21
0
votes
3
answers
2k
views
How can Avast detect threats when I install Kali on VirtualBox?
I was installing Kali on VirtualBox on a W7 host, and during the upgrading/installation, Avast detected two threats in the Mimikatz package.
My question is, how can Avast "see" through the VM? Is he ...
- 1
0
votes
2
answers
2k
views
Using Patator ssh_login module how can I get the output to show only on success
I have the following command:
patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist>
I would like to output the success result only and not ...
- 1
1
vote
1
answer
847
views
802.11 data frames missing from Wireless frames capturing
By working on the Wireless QoS (WMM/802.11e), I captured with airmon-ng and airodump-ng on Kali Linux, the 802.11 raw wireless frames, on my BSSID and channel.
I generate some traffic from my ...
- 113
0
votes
2
answers
884
views
Nmap with snmp-brute script freezes at 33.33%
I'm currently undergoing a penetration testing course where I discover the basics and I have a task where I need to perform SNMP enumeration on a target.
My working environment is as follows :
Host : ...
- 123
1
vote
0
answers
173
views
How should I install Kali Linux on my Windows 10?
I'm using Windows 10. I found several ways to install Kali Linux on Win10:
Install it on VMWare
Install it on Docker
Install it on Linux subsystem (WSL)
I might need to access some files in my ...
- 11
0
votes
1
answer
459
views
Monitor mode not sniffing from other devices on the same network
i'm currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices.
Pinging from ...
0
votes
0
answers
899
views
Kaspersky TS blocking apt-get upgrade and marking files as HEUR:Trojan.Script.Generic
I have just recently downloaded kali linux onto my VM software and i was doing apt-get upgrade in terminal and some files got blocked by my kts and i was wondering whether it was a false positive as ...
- 1
-1
votes
1
answer
660
views
Kali Linux Firewalls and Endpoint security [closed]
I was asked to explain why Kali Linux does not have any firewalls or endpoint security. I would appreciate any help as I am a complete beginner to Kali Linux.
- 17
2
votes
1
answer
2k
views
why my Metasploit folder does not have wordlists folder (usr/share/)?
I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config.
I am not sure how that happened but my msf is updated.
Is there any ...
- 121
0
votes
1
answer
925
views
Extract data from burp response and use in another request
I have a scenario where I need to call /api/login to get a token and then use said token in subsequent calls until it expires.
Is there a way to automate the call and token extraction and then to ...
- 123
0
votes
0
answers
1k
views
aireplay-ng --fakeauth issue with deauth packet
I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
- 1
0
votes
1
answer
283
views
How Dirbuster find the files within a directory? (Differentiating between files and directories) [closed]
I am writing the python code of DIRBUSTER tool in kali linux but I got stuck at finding files that lies within directories. So my question is how can I differentiate between Files and Directories ...
1
vote
0
answers
819
views
Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi
I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM.
...
- 11
1
vote
0
answers
277
views
Hydra gives different password each time (DVWA)
I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA.
Here's my command
hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
- 11
1
vote
1
answer
1k
views
SSH Timed out problem [closed]
I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin
That's how i booted up my ssh ...
- 31
2
votes
0
answers
758
views
Deauthentication attack failure
Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is:
airodump-ng --bssid MAC address here --channel channel # here --write ...
0
votes
1
answer
1k
views
Limiting the number of duplicate character types in crunch
I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters.
I see option -d which allows a set limit of duplicates of ...
- 3
3
votes
1
answer
14k
views
Wireshark - How to see the domain of HTTPS websites visited
How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
- 31
-4
votes
1
answer
135
views
I just can't use social engeneering tool in kali [closed]
I'm doing an information security course, but one the main tools isn't working, I can't learn how to clone a site like this, look...
It keeps asking me to copy all the content inside www directory to ...
- 3
2
votes
2
answers
4k
views
aircrack-ng issue: No mon0 when run "airmon-ng start wlan0" and "No such BSSID available"
I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
- 131
0
votes
1
answer
868
views
mitmf doesn't work when disabled ip forward
I have virtual machine windows connected to NAT network.
I also have kali linux virtual machine connected to same NAT network.
I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward
gives ...
- 105
1
vote
2
answers
11k
views
Reverse shell refusing/difficulties to establish connection
I've been trying to reverse shell between different devices, however,
I'm never able to establish a connection or get a shell prompt
.
Let's say I have a Mac OSX as victim and use a raspberry Pi ...
- 167
-1
votes
1
answer
691
views
wpscan is not show the real version
When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket
Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI)
| Fixed in: 2.10.4
But I when I ...
-1
votes
1
answer
4k
views
How to switch from Ubuntu 18.04 to kali linux? [closed]
I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0
answers
453
views
How can I get MITM attack using sslstrip to work?
I performed the following steps:
I modified iptables to forward to another port:
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000
I allowed port forwarding:
...
