Questions tagged [kali-linux]

Offensive Security's penetration testing Linux distribution.

Filter by
Sorted by
Tagged with
0
votes
0answers
8 views

Problem install OnionSwitch in kali? [migrated]

I am having an issue installing OnionSwitch for Tor on Kali. I downloaded the zip from Git and and tried following the instructions listed at the Url. https://github.com/Ned84/OnionSwitch When I ...
0
votes
0answers
7 views

D-Link DWA-192 won't go on monitoring mode using airmon-ng [migrated]

I have Kali linux running on Oracle Virtual Machine and it has problem with D-Link DWA-192 at first. It doesn't recognize it all. So I decided to investigate for installing a driver of it. github ...
1
vote
0answers
43 views

How to install Java 8 on Kali Nethunter [closed]

Guys I need to install jdk 8 for my programs to work better, many programs do not support the version higher than Java 8 so I want to install Java 8 to run better, I tried to install via apt-get, but ...
0
votes
0answers
38 views

What is the difference between Dual bootable Kali linux and Virtual environment? [duplicate]

I am new to kali linux and to ethical hacking on general.. And i saw alot of people that have downloaded kali linux as dual bootable with windows 10 And some of them just used a vmware or virtual box ...
0
votes
0answers
53 views

Ipsec fragmentation needed attack

I have this configuration |Subnet-1|<-->|GatewayA|<-->|Router|<-->|GatewayB|<-->|Subnet 2| Following this study from inria,for a Uni project, I'm trying to implement a DOS ...
1
vote
0answers
40 views

Problems in stopping/restoring Aircrack session

I'm running aircrack-ng version 1.6 on Live Kali. I noticed that "recently" a -N option has been added for saving a session, which can be later resumed with the option -R. However this seems ...
0
votes
1answer
224 views

At times bettercap ARP sniffing works great and at times not at all, what would be the reason?

I like to track the websites my daughter goes to in order to have some control. So I installed bettercap and setup a script to start it to sniff the HTML URLs being accessed (well, the reverse URL ...
0
votes
0answers
98 views

generating payload whith autorun script

i want to generate payload whith persistence script that automatically setuped when victim install the payload in window . I know that a multi/handler allow to set autorunscript and it works fine. the ...
0
votes
0answers
35 views

How does WPA MIC key protect its PSK variable during 4 way handshake process

Background: I had a hard time finding an answer to a simple question, about the very first communication between an AP and a client. In the 2nd packet delivered during the 4 way handshake process (the ...
0
votes
1answer
231 views

Getting AVAST alert during program update/upgrade in Kali Linux

So i started to use VirtualBox in windows 10 and i would like to know if those alert from my windows 10 security program (avast antivirus), during my installation/upgrading of TheHarvester program at ...
0
votes
0answers
83 views

How to obtain PRGA file using aireplay-ng chopchop or fragmentation attack

I am running Kali linux 2020.3 on VBox on Windows 10. I put my wireless card AWUS036ACH chipset Realtek RTL8812AU in monitor mode using airmon-ng start wlan0 X (by x i mean the number of channel AP is ...
3
votes
1answer
181 views

Does Kali installed through WSL respect my privacy?

When installing Kali from Microsoft Store, I wasn't prompted with a user agreement license. Is Microsoft able to monitor my applications? How safe is it to use WSL in that context? (From privacy ...
0
votes
0answers
248 views

Why my card changes from WPA Handshake to PMKID or vice versa just by airodump-ng

I am running Kali linux 2020.3 on VBox on Windows 10. I put my wireless card AWUS036ACH chipset Realtek RTL8812AU in monitor mode using airmon-ng start wlan0. Then i use airodump-ng wlan0 to capture ...
1
vote
0answers
59 views

Wireshark how do I see data from a phone on the same network

So I am wondering how can I see the data on wireshark? I have my router setup to where there is no password so I can automatically connect whatever devices on to my network. First I connect my phone ...
0
votes
0answers
138 views

Why is reaver not guessing the correct PIN?

I'm learning about network security. This time I'm trying to pen-test my router by exploiting WPS on my router. Here's my router's stats BSSID Ch dBm WPS Lck Vendor ESSID --------...
0
votes
0answers
47 views

ntlmrealyx powershell usage

I would like to know about your experience regarding the use of ntlmrelayx When using ntlmrelayx.py -tf targets.txt -c "Powershell command" does this powershell command need to be an Empire ...
0
votes
1answer
439 views

Where to find complete Kali image for docker with all the tools? [closed]

As of now, I am using window 10 & I want to run kali Linux on Docker. For that, I took the copy from kali official site Here But after running I found it's just a base OS it doesn't contain all ...
0
votes
0answers
91 views

Empire Autorun Script

I'm tryng to run the following resource file when getting a new agent usemodule privesc/bypassuac "name of the listener" execute y back usemodule persistence/elevated/wmi set Listener "...
0
votes
0answers
386 views

Not able to capture 4 way handshake using airodump-ng

I am not able capture 4 way handshake, I also tried manually disconnecting and reconnecting my device to the network in hope that airodump-ng will capture the handshake but no luck. I checked the ...
0
votes
1answer
7k views

Windows Defender found threats in Kali Linux disc image

Last week, I downloaded Kali Linux from the official https://www.kali.org/ website for educational purpose. I left the downloaded disc image (.iso) on my desktop. Yesterday, Windows Defender decided ...
0
votes
1answer
150 views

How to find PHP filename and ID of the URL?

.htaccess is now a very common URL rewrite to make it SEO friendly and cover the database IDs. What are the ways to explore php file on the server given to URL via .htaccess? Example : The URL is ...
1
vote
0answers
918 views

Metasploit always asks me to create MSF web service account

I run QubesOS on my laptop and created a StandaloneVM based on debian-10 template. I installed metasploit and created a database for the MSF web service and I was given a token for the API. I rebooted ...
0
votes
1answer
138 views

PostgreSQL exploit not loading in MSFConsole from ExploitDB

Just trying to get a postgreSQL exploit (32847.txt - Low Cost Function ) from exploitdb to run in msfconsole. After pulling my hair out trying to figure out why it isn't loading, here I am. I'm using ...
1
vote
0answers
2k views

Problem while using Reaver WPS

I was trying to crack my WiFi Router. I have two laptops an older one(Lenevo 3000 G430) and a newer one(HP Elitebook 840 G3) with their internal adapter. The old one has BCM4312 802.11b/g chipset and ...
0
votes
3answers
1k views

How can Avast detect threats when I install Kali on VirtualBox?

I was installing Kali on VirtualBox on a W7 host, and during the upgrading/installation, Avast detected two threats in the Mimikatz package. My question is, how can Avast "see" through the VM? Is he ...
0
votes
1answer
394 views

Using Patator ssh_login module how can I get the output to show only on success

I have the following command: patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist> I would like to output the success result only and not ...
1
vote
1answer
233 views

802.11 data frames missing from Wireless frames capturing

By working on the Wireless QoS (WMM/802.11e), I captured with airmon-ng and airodump-ng on Kali Linux, the 802.11 raw wireless frames, on my BSSID and channel. I generate some traffic from my ...
0
votes
2answers
452 views

Nmap with snmp-brute script freezes at 33.33%

I'm currently undergoing a penetration testing course where I discover the basics and I have a task where I need to perform SNMP enumeration on a target. My working environment is as follows : Host : ...
0
votes
1answer
861 views

Generate every alphanumerical combination in crunch within 8-20 characters in length

I want to generate combinations in sequential range of the length 8-20 with the following characters: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890!@#$%^&*()~`";.,/[]-= How ...
1
vote
0answers
118 views

How should I install Kali Linux on my Windows 10?

I'm using Windows 10. I found several ways to install Kali Linux on Win10: Install it on VMWare Install it on Docker Install it on Linux subsystem (WSL) I might need to access some files in my ...
0
votes
1answer
187 views

Monitor mode not sniffing from other devices on the same network

i'm currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices. Pinging from ...
0
votes
0answers
334 views

Kaspersky TS blocking apt-get upgrade and marking files as HEUR:Trojan.Script.Generic

I have just recently downloaded kali linux onto my VM software and i was doing apt-get upgrade in terminal and some files got blocked by my kts and i was wondering whether it was a false positive as ...
-1
votes
1answer
306 views

Kali Linux Firewalls and Endpoint security [closed]

I was asked to explain why Kali Linux does not have any firewalls or endpoint security. I would appreciate any help as I am a complete beginner to Kali Linux.
2
votes
1answer
604 views

why my Metasploit folder does not have wordlists folder (usr/share/)?

I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config. I am not sure how that happened but my msf is updated. Is there any ...
0
votes
1answer
509 views

Aireplay-ng deauth has no effect

I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop. The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
0
votes
1answer
246 views

Extract data from burp response and use in another request

I have a scenario where I need to call /api/login to get a token and then use said token in subsequent calls until it expires. Is there a way to automate the call and token extraction and then to ...
0
votes
0answers
647 views

aireplay-ng --fakeauth issue with deauth packet

I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
0
votes
1answer
158 views

How Dirbuster find the files within a directory? (Differentiating between files and directories) [closed]

I am writing the python code of DIRBUSTER tool in kali linux but I got stuck at finding files that lies within directories. So my question is how can I differentiate between Files and Directories ...
1
vote
0answers
559 views

Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi

I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM. ...
1
vote
0answers
99 views

Hydra gives different password each time (DVWA)

I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA. Here's my command hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
1
vote
1answer
578 views

SSH Timed out problem [closed]

I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin That's how i booted up my ssh ...
2
votes
0answers
337 views

Deauthentication attack failure

Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is: airodump-ng --bssid MAC address here --channel channel # here --write ...
0
votes
1answer
534 views

Limiting the number of duplicate character types in crunch

I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters. I see option -d which allows a set limit of duplicates of ...
0
votes
1answer
3k views

Wireshark - How to see the domain of HTTPS websites visited

How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
0answers
2k views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
-4
votes
1answer
84 views

I just can't use social engeneering tool in kali [closed]

I'm doing an information security course, but one the main tools isn't working, I can't learn how to clone a site like this, look... It keeps asking me to copy all the content inside www directory to ...
1
vote
0answers
854 views

aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”

I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
570 views

mitmf doesn't work when disabled ip forward

I have virtual machine windows connected to NAT network. I also have kali linux virtual machine connected to same NAT network. I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward gives ...
1
vote
2answers
4k views

Reverse shell refusing/difficulties to establish connection

I've been trying to reverse shell between different devices, however, I'm never able to establish a connection or get a shell prompt . Let's say I have a Mac OSX as victim and use a raspberry Pi ...
-1
votes
1answer
394 views

wpscan is not show the real version

When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI) | Fixed in: 2.10.4 But I when I ...

1
2 3 4 5
8