Offensive Security's penetration testing Linux distribution.
5
votes
0answers
58 views
Why some routers ask for PIN but can't be cracked using PIN-based attacks?
I've been working with WPS assessment tools like Reaver and Bully for some time and i could successfully crack my router's PIN code and find its password on both QSS PBC and QSS PIN code. when each of ...
0
votes
0answers
3 views
Unable to log into encrypted root drive after running virtual machine [migrated]
I am unable to log into my encrypted hard drive on the host which is Ubuntu 14.04 LTS desktop. This all happened after I did the following.
Ran VirtualBox
Created a VDI drive
Installed Kali Linux ...
0
votes
0answers
30 views
Metasploit Framework console misencodes text
I am running the Metasploit Framework (v4.10.2) on Kali Linux 1.0.7. Some commands return this weird, misencoded (I think) text instead of what it should be returning. What can I do to fix this?
...
2
votes
1answer
36 views
Best way to do security testing for a server behind nginx proxy [closed]
I'm trying to do some security testing for my server(not a web server) which is sitting behind a nginx proxy.
To start with it, I've done some fuzz testing using Sulley. As expected, most of the ...
1
vote
3answers
149 views
ALFA AWUS036NHV - Monitor Mode [closed]
I have recently come into ownership of the above product and was wondering if it is possible to enable monitor mode on said device? I figured this community might have a definite answer, if not a ...
2
votes
0answers
72 views
How can I encrypt Kali Linux after the install? [migrated]
Okay so here is some useful background before we get started. I booted a Windows 7 install disk, split the hard drive into two partitions, installed windows. Rebooted, installed Kali, then booted into ...
0
votes
2answers
47 views
SQLmap over uni wifi [closed]
I don't know if this is the right place to ask this question but I'll give it a shot! I was playing around with Kali and SQLmap. I was just scanning some sites nothing serious. When I was doing this I ...
3
votes
1answer
125 views
Securing my network: unmasking spoofed mac possible?
In Kali you can:
airmon-ng start wlan0
ifconfig mon0 down
macchanger -r mon0 (-r changes mac id to a random number)
ifconfig mon0 up
This attack for example: aireplay-ng -0 2 -a [ap mac #] -c ...
0
votes
0answers
31 views
hydra password penetration test syntax [duplicate]
I am trying to penetrate a password on my own website using hydra.
Let's say that I know login and password and i just put both there like in sample below:
hydra -l admin -p password 123.123.123.123 ...
4
votes
1answer
234 views
SMS Spoofing not available in kali
Has the SMS Spoofing option been removed from the Social Engineering Toolkit ? I run 3.14-kali1-amd64. I get only the options shown below. Tried updating both kali and SET but i still dont get the ...
1
vote
0answers
45 views
SET tool autopwn website type penetration [closed]
I tried to hack my second computer and phone in my local network.
I am not very experienced so instead of picking the particular options and payloads i just pressed autopwn to use them all instantly.
...
0
votes
1answer
100 views
Upgrade my Dell Inspiron laptop for PenTesting [closed]
I have a Dell Inspiron N5110 & wanna upgrade it to start practising pentesing with virtual machines. What do u suggest from specs below to upgrade (I have Kali Linux, Tails OS, XP, Metasploitable ...
1
vote
1answer
308 views
Hydra from Kali Linux + Tamper http post form syntax of the failure login attempt [duplicate]
I had asked this question in the general forum
I think it is more adequate to place it here.
...
0
votes
1answer
186 views
Different between arpspoof command spoof only target and both target and gateway
Is there any different on
case 1
arpspoof -i <interface> -t <target> <default gateway>
case 2
arpspoof -i <interface> -t <target> <default gateway>
arpspoof -i ...
0
votes
1answer
53 views
is it secure to use proxychains+tor while logged in as root
when using proxychains+tor in kali,you should be logged in as root because proxychanis doesnt work when you are not logged in as root but using tor while logged in as root is not secure so what is ...
-2
votes
1answer
139 views
how to use tor in linux kali with other applications
I want to know how to open applications as nmap and recon-ng through tor
first I have kali linux v 1.0.9 and tor
I tried using
proxychains recon-ng
but all I get is that the normal banner of ...
0
votes
2answers
943 views
Exploit failed [unreachable]: Rex::ConnectionTimeout The connection timed out(remote host ip)
I keep getting this when I start to exploit, trying to exploit my xp machine but this keeps happening, I can not find the fix anywhere, I don't believe I am the only one getting this..
I am a ...
0
votes
1answer
340 views
getting an error in aireplay-ng in kali linux
When I was testing penetration testing on my router using kali linux, I followed all the steps from this link. In the step where you have to enter the router's bssid and client's bssid in aireplay-ng ...
0
votes
0answers
222 views
oclHashcat error messag in Kali Linux
I am in the process of learning oclHashcat syntax. Currently, I am working on breaking a file of md5crypt strings with a dictionary file. The dictionary I am using is rockyou.txt from an installation ...
0
votes
0answers
71 views
XSSER get and post
I am using xsser for XSS vulnerability testing and I have a doubt about the parameters when it's a POST method.
I have tried against DVWA (which uses get) with success like this:
xsser -u ...
1
vote
2answers
1k views
Having Trouble using SET in Kali
I'm trying to setup a website attack vector and I get in error when it tries to load up metasploit. Here's a look at my whole process:
Select from the menu:
1) Spear-Phishing Attack Vectors
...
0
votes
1answer
549 views
WireShark only showing broadcast packets [closed]
So here is my setup
Desktop booting a live version of Kali from a USB drive
The standard distro of wireshark that comes with Kali
A Ralink RT-3070L High gain antenna
My home network as a sandbox.
...
0
votes
1answer
61 views
Olly Debugger Linux not functioning
In Kali Linux whenever i open a binary after compiling the c source file, it gives an error:
"The file is not a valid PE file."
No debugging takes place there after. Is there any workaround for ...
0
votes
1answer
664 views
Network Configurations of Metasploit and Metasploitable
All My Hacker Friends,
I have installed 2 VM's on my Windows 7 machine. Backtrack(kali) and Metasploitable.
When i run nmap scan on metasploitable from metasploitable VM itself, it shows that 3306 ...
1
vote
1answer
130 views
Deauth attack without being able to contact the AP
In my home pentest lab I though it would be interesting to try this scenario and see if it works:
I have 2 computers and 1 AP, computer A is authenticated to the access point with WPA2 and computer B ...
0
votes
1answer
49 views
Throttle network based on OS [closed]
What do I need to learn/know to throttle a clients network based on his/her operating system.
For example:
Someone in my network using Kali Linux... I would like to throttle
their traffic to ...
0
votes
1answer
218 views
Tor, PGP and Tor Entrance Nodes
Imagine alice posts her public PGP key on her website and bob encrypts a widget with that public key then sends it to alice over Tor. If alice's key is widely and publically available and an attacker ...
-1
votes
4answers
230 views
Software for web hacking? [closed]
I want to learn sql injection, xss and other web attacks. I am new to all this, just a beginner. I want to know which software to use. Can I use Windows for these attacks ...
0
votes
0answers
20 views
How do I resolve this error in backtrack 5 v3 (yamas.sh)? [duplicate]
Sslstrip will be listening on port 8080 and outputting log in /tmp/y.txt
chmod: cannot access `/usr/bin/sslstrip/sslstrip.py': No such file or directory
[-] Sslstrip is running.
[+] Activating ARP ...
1
vote
1answer
396 views
Kali linux aircrack
I have AirPort Extreme network card and when I try to use airmong-ng on kali linux in a virtual machine this does not work. I know I need a usb-network card if I wanna make this work but if I boot ...
0
votes
1answer
1k views
Kali Linux /etc/shadow encryption type used by default?
I know that shadow's file hash follows this syntax:
$id$salt$encrypted
Where ID is the algorithm used:
$0 DES $1 MD5 $2a Blowfish $5 Shadw-256 $6 SHA512
My shadow:
...
1
vote
2answers
116 views
Can't successfully do an idle scan
I have kali linux installed in VirtualBox and would like to do an idle scan. For this I need to find a suitable zombie pc. I'm using the ipidseq script to find one. The script finds some ip addresses ...
1
vote
0answers
596 views
GnuTLS ServerHello exploit (CVE-2014-3466) - how to verify?
So pretty much all of the GNUTLS world is worrying about CVE-2014-3466. I checked my Kali and it responds with this -
# apt-cache rdepends libgnutls26 | grep -v lib
Reverse Depends:
...
1
vote
1answer
257 views
Is there anyway to generate a SAM file?
I was wondering if it is possible to create a windows SAM file. I already tried using chntpw but it seems like it only works under a Redhat based linux, ie I was able to blank/change a Windows 7 ...
0
votes
3answers
266 views
How to set iptables to drop packets that I'm not listening on?
I've got a Kali Linux box I use for pen testing.
I would like to configure my machine to DROP incoming packets, but only when I'm not listening on them.
e.g. if I run a netcat listener on port 80, I ...
0
votes
1answer
486 views
Testing Basic Authentication with ncrack
I'm conducting some basic pen testing against a page protected with Basic Authentication. I've sucessfully tested with Medusa and Hydra but am struggling to get the syntax correct for ncrack.
The ...
0
votes
1answer
202 views
How to set correctly set Local Host on a payload for a user outside subnet?
I'm training with labs and metasploit and there's some payloads I can send to my target and exploit it(in my subnet). If I have to exploit a payload I sent to a target outside my network which options ...
2
votes
1answer
5k views
No Handshake from Airodump
I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD.
airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
1
vote
2answers
424 views
Msfpayload: Exe within an exe?
So you can use msfpayload or msfvenom to add a payload to an existing exe, most people online seem to use reverse shell. But I was wondering if you could include a custom exe of your own design as a ...
3
votes
1answer
2k views
Setup of Kali Linux for reverse shell connections over the internet
I am running Kali Linux as a VM on my Windows machine which is NAT'd behind my company network, if I wish to pen test a website for a client and believe that a reverse shell is possible, what is a ...
0
votes
3answers
274 views
What are the pros and cons of using live CDs vs VMs for malware analysis?
I'm planning on doing some malware research for a research project, and I was wondering what would be a better option for keeping my system safe from viruses accidentally infecting it. I'm only ...
2
votes
2answers
1k views
Major differences between Kali and SecurityOnion
Curious about the major differences between Kali Linux and SecurityOnion. Do you think it would be easy or useful to replicate what has been done with SecurityOnion on Kali? Why is there such a ...
-7
votes
1answer
776 views
Can kali linux be hacked [duplicate]
I'm just curious if new version of backtrack Kali be hacked like back-doored or crack user password like the windows or mac
1
vote
1answer
3k views
Use Metasploit to exploit SMB through Conficker
I've got an SP0/unpatched Windows XP which is vulnerable to the Conficker worm.
I'm using metasploit to use the Conficker exploit with the purpose of opening a remote shell/command line.
My ...
3
votes
3answers
54k views
Wordlists on Kali Linux?
I notice that in /usr/share/wordlists in Kali Linux (former Backtrack) there are some lists. Are they used to bruteforce something? Is there specific list for specific kind of attacks?
-2
votes
2answers
28k views
backtrack or kali linux ??? Which is best for a beginner pen tester ? [closed]
I am using backtrack right now but i also wish to switch to kali linux if its more interactive. Because i am just a beginner pen tester. I tried with both bt4 and bt5, but novice in kali linux.
0
votes
5answers
4k views
Can I use Kali Linux when I learn Backtrack well?
I'm new to security issues and I'm almost buying a course at ELearningSec(begginners course,of course), I will in a company and want to learn about offensive and defensive skills to improve the ...
2
votes
2answers
3k views
Is it practically possible to spoof a WLAN access point?
I want to try something out, but I wanted to see other opinions from you guys.
What I have:
WLAN Access point, with WPA2, ESSID: testing. Home router, I can change the configuration and everything ...
25
votes
6answers
4k views
Most secure way to partition linux?
I recently acquired a netbook to play with, and I want to install Kali Linux so I can start learning about network security and exploit development. I want to use this to learn as much about security ...
0
votes
1answer
900 views
What's the best route to watch network traffic on our networks?
We have a single switch that routes all our different offices around the country using Meraki VPN. We have a VM on the switch (to the extent it can see all subdomains and different IP addresses in our ...
