Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
0
votes
0answers
9 views
Is it possible to only have to install programs once on kali linux persistent usb? [migrated]
I made a bootable encrypted USB with kali linux on it and with persistence. When I save a file and reboot then the file does not disappear but today I installed veracrypt and when I rebooted, it was ...
1
vote
0answers
33 views
aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”
I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
40 views
mitmf doesn't work when disabled ip forward
I have virtual machine windows connected to NAT network.
I also have kali linux virtual machine connected to same NAT network.
I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward
gives ...
-1
votes
0answers
14 views
proper use of 'ip' command to turn on internet access in kali linux [migrated]
I am new to kali linux.
my downloaded version of kali-linux (download filename : kali-linux-light-2018-4-i386-iso), ip command has replaced ifconfig command, hence I can't use ifconfig command.
when ...
0
votes
0answers
21 views
Static IP on Kali over WiFi hotspot [migrated]
I am looking for help with static a IP address on WiFi.
I have this project with Kali on a pi0w. I am using the pi-tail image as this is going to be mobile. I have the pi working great, it boots and ...
1
vote
2answers
42 views
Reverse shell refusing/difficulties to establish connection
I've been trying to reverse shell between different devices, however,
I'm never able to establish a connection or get a shell prompt
.
Let's say I have a Mac OSX as victim and use a raspberry Pi ...
0
votes
0answers
31 views
Unable to join airbase-ng AP
In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following:
Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0
USB Wi-...
0
votes
0answers
36 views
Generate a wordlist with strings that have no repeated characters [duplicate]
I am attempting to do this with crunch, but any method would be fine. I want to generate combinations of 6 characters in which no character is repeated. Note that I don't mean the -d function, as that ...
0
votes
0answers
90 views
Exploit TinyCore Linux 4.2.9 with DirtyCow remote from Kali Linux
Do you know if is possible execute an exploit from Kali Linux for obtain root privileges in a remote machine (that I have exploited before with a local user) with tiny-core Linux version 4.2.9, I've ...
-1
votes
1answer
118 views
wpscan is not show the real version
When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket
Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI)
| Fixed in: 2.10.4
But I when I ...
-1
votes
1answer
172 views
How to switch from Ubuntu 18.04 to kali linux? [closed]
I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0answers
67 views
How can I get MITM attack using sslstrip to work?
I performed the following steps:
I modified iptables to forward to another port:
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000
I allowed port forwarding:
...
1
vote
1answer
134 views
DNS Hijack: Only spoofing sites listed in etter.dns
I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
1answer
755 views
MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter
At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop).
To do this is run Kali Linux in a ...
0
votes
1answer
227 views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
0
votes
2answers
659 views
I couldn't deauth any devices using aireplay-ng command in kali linux
I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade.
I was using aircrack-ng for pentesting my wlan network.
I wanted to deauth any device connected to my ...
2
votes
1answer
102 views
Can't log in dvwa with a simple python program, even though login credentials are good
import requests
target_url = "http://127.0.0.1/dvwa/login.php"
data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"}
...
1
vote
0answers
172 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
1
vote
1answer
1k views
Username and password files in Kali [duplicate]
I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23.
I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
1
vote
1answer
353 views
Kali.download website blocked by Kaspersky because of Trojan, is it safe?
So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website
Do all Kali Linux operating systems try to download from this webpage (http://kali....
0
votes
1answer
100 views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
-4
votes
1answer
101 views
Reason behind Chrome not running in root user in kali Linux?
Why does Google Chrome not run as root user by default in Kali Linux? Is it a security issue?
1
vote
0answers
262 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
2
votes
1answer
165 views
Nmap --script-args usage?
I'm trying to use multiple Nmap --script-args at the same time.
$ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com
...
0
votes
1answer
162 views
Kali Linux: Run penetration test and generate report for particular site? [closed]
I am new in Kali Linux and recently one of my jobs is to use Kali Linux to scan a newly developed site and see if there are any security issue.
And after going through some courses I found that, in ...
-2
votes
1answer
79 views
Security testing alternatives on MacOS [closed]
Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
3
votes
5answers
519 views
Cloud provider for Penetration Testing
I wish to set up a Kali Linux box on a cloud provider in order to perform same day penetration tests.
The issue I am having is finding a cloud provider such as AWS, Azure etc. for this.
For AWS they ...
0
votes
1answer
1k views
Kali Linux and Cell Phone Security
Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
1
vote
0answers
262 views
SQLmap error (what happen if i have no parameters)
I have an error when I use sqlmap. The problem is: I use this dork https://www.exploit-db.com/ghdb/4301/
but I do not know how to use sqlmap with this type of sql injection.
I use the classic:
...
1
vote
0answers
125 views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
0
votes
1answer
100 views
location of msfconsole generated executable in Kali linux [closed]
I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe.
But I cant find the location of the shell.exe ...
1
vote
1answer
2k views
unable to locate package Arpspoof [closed]
Can not find the tool arpspoof by using the apt-get install on Kali.
After checking by typing apt-cache search there is no result either.
Does this mean the tool is not available anymore?
Thanks.
1
vote
0answers
373 views
Connection errors on hack the box and vulnhub (Kali, virtual box) [closed]
Ill start by show my attacking machine network setup:
When trying to do a box on HTB or Vulnhub, I am sometimes able to ping it (nmap -Pn). Once I am able to ping a machine, I do a full nmap scan. ...
1
vote
0answers
399 views
Using Reaver in various UK routers results in stop after 90% progress
I've been trying to make use of the current wifi audition techniques in regards of Router Password retrieval.
GEAR:
I've been through car boot sales and acquired some of the current routers on the ...
1
vote
1answer
364 views
Why is FF in Kali making requests to ocsp.digicert.com?
Warning -> n00b here!
For some time now I am learning the tools for pen-testing but I am still complete n00b. I have installed Metasplitable2 in another computer on local network and I am running ...
7
votes
1answer
389 views
Brute forcing encryption password (self destruct after 4 attempts)
My colleague at work lost the password to his external hard drive (HDD not SSD), a WD Elements. He remembers that his password was simple and 8 characters maximum.
The problem is the encryption ...
1
vote
0answers
128 views
ARP poisoning command slows down victim internet and victim has no access
im currently enrolled in a CPEH course my 3rd lab was arp poison. command i used is
echo -1 > /proc/sys/met/ipv4/ip_forward
iptables -t nat -A PREROUTING -p tcp --detination-port 80 -j REDIRECT -...
4
votes
2answers
2k views
OpenVAS won't generate SCAP Database
To deploy OpenVAS to Virtual machines I've been using Ansible for a while and it worked pretty well. Now today I wanted to deploy it to another machine but the openvas-check-setup script keeps telling ...
0
votes
0answers
72 views
Proxychains DNS Leak [duplicate]
I'm using Kali Linux with tor service running and proxychains in dynamic, when using proxychains to search duckduckgo it displays a new IP however it leaks DNS even though the DNS Leak feature is ...
0
votes
1answer
584 views
Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result
I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network.
Here are my terminal Commands ...
1
vote
0answers
54 views
arp spoofing on ni myrio
I created a traffic light system using NI myRio and LabVIEW,
Now I want to arp spoof this system
what I did is using arpspoof command on another PC that runs kali linux,
The ip address are:
192.168....
1
vote
1answer
418 views
Metasploit: Executables are not working after Reverse Shell
I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used:
Payload: windows/shell/...
0
votes
1answer
1k views
dnsspoof doesn't spoof DNS request with IP-address of local machine
I want to spoof all DNS requests with the IP address of my local machine.
However, running dnsspoof, all clients receive the real IP address and not the fake IP address of my host.
I know I can ...
0
votes
0answers
289 views
Kali Linux 2 DNS spoofing: is there still a bug?
Good evening,
I am trying to set up dns spoofing in kali linux 2.1
I have two kali environments, one on my tablet using linux deploy, and another on an USB stick.
I managed to poison ARP using ...
3
votes
1answer
6k views
Decrypting SAM hive after Windows 10 anniversary update?
After a lot of frustration I've finally cracked my local Windows 10 password using mimikatz to extract the proper NTLM hash.
In particular, samdump2 decrypted the SAM hive into a list of users with "...
0
votes
2answers
3k views
Hydra fails with “[ERROR] target ssh://192.168.16.128:22/ does not support password authentication.”?
I've updated Kali 2.0 to newest version - it is installed using VMWare.
Now, every time I use hydra to brute-force SSH, I get the following error:
[ERROR] target ssh://192.168.16.128:22/ does not ...
-4
votes
1answer
1k views
How to use beef-xss on ports other than default 3000?
I want to use BeEF-XSS Framework over WAN (for educational purposes). The only problem is that my ISP is blocking port 3000. So, after some research, I found this page that says:
However, beef-xss ...
-1
votes
2answers
102 views
Why have distributions default HTTP package sources instead of HTTPS [duplicate]
Many distributions have HTTP links in their sources list for packages.
Proof:
https://docs.parrotsec.org/doku.php/mirrors-list
https://docs.kali.org/general-use/kali-linux-sources-list-repositories
...
-2
votes
1answer
1k views
Sample Capture Files to Test Password Cracking [closed]
I was wondering if there are sample .cap files that can be downloaded to test password cracking with aircrack or or other tools for my homelab.
Thanks!
0
votes
1answer
1k views
Is it possible to “deauth” wifi direct connections?
I used a Samsung Galaxy s7 as a Wifi Direct device to another android device (I think a Moto G Play) and I was wondering whether aircrack-ng could deauthenticate/disrupt the connection between them.
...
