Questions tagged [kali-linux]
Offensive Security's penetration testing Linux distribution.
19
questions
19
votes
1
answer
5k
views
How safe is backtrack to use?
I've always used backtrack for security assessments, it's a great toolbox. The thing is since it's a toolbox to exploit things, have their been any reports of "bundled" spyware in standard backtrack ...
- 54.1k
4
votes
1
answer
14k
views
msfvenom payload problem
This is for educational purposes only!
I'm trying to generate android payload using msfconsole payload standalone generator: msfvenom with the command:
msfvenom -p android/shell/reverse_tcp LHOST=...
- 2,485
2
votes
2
answers
3k
views
Why use Linux instead of Windows for Pentesting? [closed]
Nowadays we can find all sorts of tools i.e. Aircrack Suite, Metasploit, Burpsuite etc. for Windows too!
So why use Linux?
e.g. I am using aircrack on Windows what will be my disadvantage?
My laptop ...
20
votes
4
answers
301k
views
Wordlists on Kali Linux?
I notice that in /usr/share/wordlists in Kali Linux (former Backtrack) there are some lists. Are they used to bruteforce something? Is there specific list for specific kind of attacks?
- 383
4
votes
2
answers
44k
views
No Handshake from Airodump
I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD.
airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
- 163
4
votes
3
answers
13k
views
Setup of Kali Linux for reverse shell connections over the internet
I am running Kali Linux as a VM on my Windows machine which is NAT'd behind my company network, if I wish to pen test a website for a client and believe that a reverse shell is possible, what is a ...
- 33.2k
3
votes
3
answers
4k
views
Sample vulnerable web apps to test Pentesting platforms [closed]
I am looking into a web application vulnerability scanner for my organization. I would like a sample web application that is loaded with vulnerabilities (similar to metasploitable on the application ...
- 317
9
votes
4
answers
45k
views
Hashcat with Kali 2 in a VM
How can I run hashcat using only the cpu in a virtual machine?
When I try to run hashcat in my Kali 2 VM I receive the following error:
root@kali: hashcat -m 400 -a 0 hash.txt rockyou.txt
hashcat (...
- 365
2
votes
1
answer
61k
views
No handshake recorded from airodump-ng
I've just started to attempt this by following the guide from lewiscomputerhowto. I've seen other people ask similar questions, but they all seem to be older threads. The steps I've taken are shown ...
- 45
6
votes
3
answers
8k
views
Running Ophcrack against Windows 10
I'm putting together a demo of Ophcrack for my team here. It's been a while since I used it, like 7-10 years. Booting up into either the Ophcrack live CD or using it in Kali, I'm seeing samdump2 and ...
- 161
6
votes
2
answers
4k
views
How does IP tracking work?
Excuse the naive question (I'm more of a dev than a web-sec person)
In the past I've had webservers hacked and usually i've traced it to some random machines which seem to have been compromised (i ...
- 305
3
votes
1
answer
3k
views
Setting up a fake AP - problem with iptables and DNS server
Im trying to set up a fake AP using aircrack-ng suite, DHCP server & iptables.
After creating the fake AP:
airmon-ng start wlan1
airbase-ng -c 11 -e "freewifi" wlan1mon
running iptables ...
- 131
-2
votes
1
answer
1k
views
how to use tor in linux kali with other applications
I want to know how to open applications as nmap and recon-ng through tor
first I have kali linux v 1.0.9 and tor
I tried using
proxychains recon-ng
but all I get is that the normal banner of ...
- 119
6
votes
1
answer
2k
views
Evil twin access point with WPA/WPA2
When I created an evil twin AP with an SSID of someone else's Wi-Fi network e.g. MyWifiNet, I could see two APs on my phone/laptop with the SSID MyWiFiNet, however the legitimate one was secured with ...
- 71
2
votes
3
answers
9k
views
Cracking a wpa2-psk wifi
I'm cracking a wpa2-psk wifi with aircrack-ng. After popullating the *cap file I'll apply brute-force with john.
The question is:
What time is it recommend to run airodump-ng before killing it's ...
- 501
1
vote
3
answers
3k
views
What are the pros and cons of using live CDs vs VMs for malware analysis?
I'm planning on doing some malware research for a research project, and I was wondering what would be a better option for keeping my system safe from viruses accidentally infecting it. I'm only ...
- 163
1
vote
4
answers
59k
views
Exploit failed [unreachable]: Rex::ConnectionTimeout The connection timed out(remote host ip)
I keep getting this when I start to exploit, trying to exploit my xp machine but this keeps happening, I can not find the fix anywhere, I don't believe I am the only one getting this..
I am a ...
1
vote
0
answers
312
views
Finding phishing sites to certain domain
My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know;
...
- 175
0
votes
2
answers
1k
views
RaspberryPi3 wont show fake AP created by Airbase-ng
Im using Aircrack-ng suite to apply an evil-twin attack with my RaspberryPi3 operated by Kali-linux on another RspberryPi3 with Raspbian Jessie.
The steps are as followed:
1.configuring the apache2 ...
- 131