Offensive Security's penetration testing Linux distribution.
0
votes
1answer
21 views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
0
votes
1answer
21 views
Spoofing ip webserver with Ettercap
I have an apache2 server with my test website running on my host machine, which is accessible by the victim. I am using Ettercap to perform an arp poisoning man-in-the-middle attack, and I need to ...
-4
votes
1answer
66 views
Reason behind Chrome not running in root user in kali Linux?
Why does Google Chrome not run as root user by default in Kali Linux? Is it a security issue?
0
votes
1answer
52 views
Slow internet connection after arpspoofing
After practicing arpspoofing on myself my internet connection in unbearably slow on most, but not all of my devices. I have shut everything down and booted back up in an effort to re-arp everything ...
0
votes
0answers
53 views
Why ngrok doesn't retrieve correct public IP address in Kali Linux
I installed the ngrok on Kali and if I run the ./ngrok http 80 command ngrok I got the following output from console screen. If I ping the given link to get my public IP address it returns wrong ...
1
vote
0answers
36 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
0
votes
0answers
5 views
How to create persistence Kali Linux usb on Mac OS X [migrated]
it's strange but I couldn't find any full instructions how make persistence usb, I'm experiencing problems with creating partitions on my usb stick
https://github.com/rajivkanaujia/alphaworks/wiki/...
-4
votes
0answers
53 views
I have a SAM file on KALI linux. How can I extract the hashes from SAM and crack them? [closed]
I have a SAM file on KALI linux. How can I extract the hashes from SAM and crack them?
How can I load the hashes from SAM database and crack
2
votes
1answer
44 views
Nmap --script-args usage?
I'm trying to use multiple Nmap --script-args at the same time.
$ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com
...
0
votes
1answer
50 views
Kali Linux: Run penetration test and generate report for particular site? [closed]
I am new in Kali Linux and recently one of my jobs is to use Kali Linux to scan a newly developed site and see if there are any security issue.
And after going through some courses I found that, in ...
-6
votes
1answer
115 views
How to disconnect a client from my AP in Kali Linux? [closed]
I want to disconnect a client from my Access Point and I am using Kali Linux, Is there any way to do this?
-2
votes
1answer
58 views
Security testing alternatives on MacOS [closed]
Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
3
votes
5answers
192 views
Cloud provider for Penetration Testing
I wish to set up a Kali Linux box on a cloud provider in order to perform same day penetration tests.
The issue I am having is finding a cloud provider such as AWS, Azure etc. for this.
For AWS they ...
0
votes
1answer
132 views
Kali Linux and Cell Phone Security
Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
0
votes
0answers
38 views
Capturing Arp-reply packets from all neighbouring networks
actually I want to capture all the arp-reply packets from all neighboring wireless networks, but when I try to do the same, no arp-reply packets from any networks are visible.
Let me make you the ...
1
vote
0answers
83 views
SQLmap error (what happen if i have no parameters)
I have an error when I use sqlmap. The problem is: I use this dork https://www.exploit-db.com/ghdb/4301/
but I do not know how to use sqlmap with this type of sql injection.
I use the classic:
...
1
vote
0answers
49 views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
0
votes
1answer
40 views
location of msfconsole generated executable in Kali linux [closed]
I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe.
But I cant find the location of the shell.exe ...
0
votes
1answer
153 views
unable to locate package Arpspoof [closed]
Can not find the tool arpspoof by using the apt-get install on Kali.
After checking by typing apt-cache search there is no result either.
Does this mean the tool is not available anymore?
Thanks.
1
vote
0answers
108 views
Connection errors on hack the box and vulnhub (Kali, virtual box) [closed]
Ill start by show my attacking machine network setup:
When trying to do a box on HTB or Vulnhub, I am sometimes able to ping it (nmap -Pn). Once I am able to ping a machine, I do a full nmap scan. ...
1
vote
0answers
171 views
Using Reaver in various UK routers results in stop after 90% progress
I've been trying to make use of the current wifi audition techniques in regards of Router Password retrieval.
GEAR:
I've been through car boot sales and acquired some of the current routers on the ...
1
vote
1answer
147 views
Why is FF in Kali making requests to ocsp.digicert.com?
Warning -> n00b here!
For some time now I am learning the tools for pen-testing but I am still complete n00b. I have installed Metasplitable2 in another computer on local network and I am running ...
7
votes
1answer
280 views
Brute forcing encryption password (self destruct after 4 attempts)
My colleague at work lost the password to his external hard drive (HDD not SSD), a WD Elements. He remembers that his password was simple and 8 characters maximum.
The problem is the encryption ...
1
vote
0answers
59 views
ARP poisoning command slows down victim internet and victim has no access
im currently enrolled in a CPEH course my 3rd lab was arp poison. command i used is
echo -1 > /proc/sys/met/ipv4/ip_forward
iptables -t nat -A PREROUTING -p tcp --detination-port 80 -j REDIRECT -...
4
votes
1answer
468 views
OpenVAS won't generate SCAP Database
To deploy OpenVAS to Virtual machines I've been using Ansible for a while and it worked pretty well. Now today I wanted to deploy it to another machine but the openvas-check-setup script keeps telling ...
0
votes
0answers
19 views
Proxychains DNS Leak [duplicate]
I'm using Kali Linux with tor service running and proxychains in dynamic, when using proxychains to search duckduckgo it displays a new IP however it leaks DNS even though the DNS Leak feature is ...
0
votes
1answer
207 views
Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result
I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network.
Here are my terminal Commands ...
1
vote
0answers
38 views
arp spoofing on ni myrio
I created a traffic light system using NI myRio and LabVIEW,
Now I want to arp spoof this system
what I did is using arpspoof command on another PC that runs kali linux,
The ip address are:
192.168....
1
vote
1answer
213 views
Metasploit: Executables are not working after Reverse Shell
I tried connecting to a windows box and create a reverse shell back to my Kali Linux machine. Reverse shell is created and I get the meterpreter prompt. Commands Used:
Payload: windows/shell/...
0
votes
1answer
422 views
dnsspoof doesn't spoof DNS request with IP-address of local machine
I want to spoof all DNS requests with the IP address of my local machine.
However, running dnsspoof, all clients receive the real IP address and not the fake IP address of my host.
I know I can ...
0
votes
0answers
189 views
Kali Linux 2 DNS spoofing: is there still a bug?
Good evening,
I am trying to set up dns spoofing in kali linux 2.1
I have two kali environments, one on my tablet using linux deploy, and another on an USB stick.
I managed to poison ARP using ...
2
votes
1answer
2k views
Decrypting SAM hive after Windows 10 anniversary update?
After a lot of frustration I've finally cracked my local Windows 10 password using mimikatz to extract the proper NTLM hash.
In particular, samdump2 decrypted the SAM hive into a list of users with "...
0
votes
2answers
851 views
Hydra fails with “[ERROR] target ssh://192.168.16.128:22/ does not support password authentication.”?
I've updated Kali 2.0 to newest version - it is installed using VMWare.
Now, every time I use hydra to brute-force SSH, I get the following error:
[ERROR] target ssh://192.168.16.128:22/ does not ...
-4
votes
1answer
350 views
How to use beef-xss on ports other than default 3000?
I want to use BeEF-XSS Framework over WAN (for educational purposes). The only problem is that my ISP is blocking port 3000. So, after some research, I found this page that says:
However, beef-xss ...
-1
votes
2answers
77 views
Why have distributions default HTTP package sources instead of HTTPS [duplicate]
Many distributions have HTTP links in their sources list for packages.
Proof:
https://docs.parrotsec.org/doku.php/mirrors-list
https://docs.kali.org/general-use/kali-linux-sources-list-repositories
...
-2
votes
1answer
311 views
Sample Capture Files to Test Password Cracking [closed]
I was wondering if there are sample .cap files that can be downloaded to test password cracking with aircrack or or other tools for my homelab.
Thanks!
0
votes
1answer
816 views
Is it possible to “deauth” wifi direct connections?
I used a Samsung Galaxy s7 as a Wifi Direct device to another android device (I think a Moto G Play) and I was wondering whether aircrack-ng could deauthenticate/disrupt the connection between them.
...
0
votes
1answer
402 views
How secure is a Kali Linux Live USB [duplicate]
How secure for the host computer is a Kali Linux Live USB installation?
If I get a virus or any other kind of malware on Kali, can it also infect the computer to which it’s plugged into?
Could it ...
2
votes
0answers
45 views
Where I am going wrong with Veil? Cannot get a reverse shell?
This is how I am generating the payload in Veil 3
> use XX
> set LHOST X.X.X.X
> set LPORT 3333
> generate
The payload generates successfully and transferred to victim machine Win7 SP1 ...
0
votes
0answers
146 views
Forward ssh traffic and decrypting it
I have two virtual machines with public ips. One of them acts as a linux server (let's call it Alice) and the other one has kali on it (you guessed, we'll call it Eve) and will act more or less as a ...
4
votes
1answer
213 views
What hashes does responder capture?
I wanted to play with Responder. So I installed Kali onto a virtual mashine and made a bridged connection, so that Kali and the host (Win7) share the same network interface.
I changed the Win7 ...
-1
votes
1answer
324 views
How to brute-force a login that uses passwords of a specific format? [closed]
For example, if a website login that uses password of a specific format containing 3 letters and 3 numbers like abc123, qwr345, yta921...
What tools on Kali Linux can crack this type of password and ...
2
votes
1answer
245 views
Metasploit nmap_run -e hangs with Using code '404' as not found
Background
When I run Metasploit, it hangs at the same place no matter what I do. It stops at this line,
[*] Using code '404' as not found.
Steps to reproduce,
msf > mfsconsole
msf > load ...
0
votes
2answers
418 views
Is it safe and secure to disable sandbox of google chrome in Kali Linux or any distribution of Linux?
I have installed chrome on Kali Linux. But It doesn't run. After searching on the internet I found a solution in which you have to disable sandbox if you wanna run google chrome as a root user. ...
2
votes
1answer
995 views
John the Ripper Brute Force not working (Windows Hash)
I'm pentesting for a class in Kali Linux, cracking a Windows 7 password. I mounted the windows' hard drive in Kali, ran PWDUMP7 and got the hashes saved on the desktop. It's only showing some of the ...
4
votes
1answer
2k views
Bettercap sniff HTTPS login credentials using proxy
I was wondering how I could sniff HTTPS credentials using the Bettercap proxy.
I am using the following command:
bettercap -I wlan0 -T 10.0.0.23 -X --proxy-https
And when I setup the proxy on my ...
0
votes
0answers
281 views
Setting up a channel-based man-in-the-middle for Krack attacks
I've been trying to set up a channel-based man-in-the-middle using Kali Linux tools.
I'm trying to recreate the setup shown in this image:
image source
The problem i'm facing is the Phase 2 shown ...
4
votes
2answers
628 views
Reverse connection Metasploitable 2 -> Kali Linux (Samba 3.x) without Metasploit
I am trying to exploit Metasploitable 2 without the use of Metasploit, with the aim of learning. In this case, I am focusing on Samba 3.x (Port TCP 139, 445)
In this link http://www.rwbnetsec.com/...
2
votes
2answers
1k views
Aireplay deauth having no effect, no handshake and Reaver stuck
So I'm trying to hack my own WiFi using aircrack or reaver but have had no success with either. With aircrack I cannot achieve a successful handshake as the deauth doesn't seem to have any effect on ...
0
votes
1answer
630 views
Getting [ERROR] Invalid target definition! while specifying https://mysitename.com in Hydra Gtk
In Hydra-GTK, I've specified my target name as https://example.com (it's not www) and mentioned protocol as https-post-form and then entered username and password list and then I started.
But I got ...
