Questions tagged [kali-linux]

Offensive Security's penetration testing Linux distribution.

Filter by
Sorted by
Tagged with
19 votes
1 answer
5k views

How safe is backtrack to use?

I've always used backtrack for security assessments, it's a great toolbox. The thing is since it's a toolbox to exploit things, have their been any reports of "bundled" spyware in standard backtrack ...
user avatar
4 votes
1 answer
14k views

msfvenom payload problem

This is for educational purposes only! I'm trying to generate android payload using msfconsole payload standalone generator: msfvenom with the command: msfvenom -p android/shell/reverse_tcp LHOST=...
user avatar
  • 2,485
2 votes
2 answers
3k views

Why use Linux instead of Windows for Pentesting? [closed]

Nowadays we can find all sorts of tools i.e. Aircrack Suite, Metasploit, Burpsuite etc. for Windows too! So why use Linux? e.g. I am using aircrack on Windows what will be my disadvantage? My laptop ...
user avatar
20 votes
4 answers
301k views

Wordlists on Kali Linux?

I notice that in /usr/share/wordlists in Kali Linux (former Backtrack) there are some lists. Are they used to bruteforce something? Is there specific list for specific kind of attacks?
user avatar
4 votes
2 answers
44k views

No Handshake from Airodump

I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD. airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
user avatar
4 votes
3 answers
13k views

Setup of Kali Linux for reverse shell connections over the internet

I am running Kali Linux as a VM on my Windows machine which is NAT'd behind my company network, if I wish to pen test a website for a client and believe that a reverse shell is possible, what is a ...
user avatar
3 votes
3 answers
4k views

Sample vulnerable web apps to test Pentesting platforms [closed]

I am looking into a web application vulnerability scanner for my organization. I would like a sample web application that is loaded with vulnerabilities (similar to metasploitable on the application ...
user avatar
9 votes
4 answers
45k views

Hashcat with Kali 2 in a VM

How can I run hashcat using only the cpu in a virtual machine? When I try to run hashcat in my Kali 2 VM I receive the following error: root@kali: hashcat -m 400 -a 0 hash.txt rockyou.txt hashcat (...
user avatar
  • 365
2 votes
1 answer
61k views

No handshake recorded from airodump-ng

I've just started to attempt this by following the guide from lewiscomputerhowto. I've seen other people ask similar questions, but they all seem to be older threads. The steps I've taken are shown ...
user avatar
6 votes
3 answers
8k views

Running Ophcrack against Windows 10

I'm putting together a demo of Ophcrack for my team here. It's been a while since I used it, like 7-10 years. Booting up into either the Ophcrack live CD or using it in Kali, I'm seeing samdump2 and ...
user avatar
  • 161
6 votes
2 answers
4k views

How does IP tracking work?

Excuse the naive question (I'm more of a dev than a web-sec person) In the past I've had webservers hacked and usually i've traced it to some random machines which seem to have been compromised (i ...
user avatar
  • 305
3 votes
1 answer
3k views

Setting up a fake AP - problem with iptables and DNS server

Im trying to set up a fake AP using aircrack-ng suite, DHCP server & iptables. After creating the fake AP: airmon-ng start wlan1 airbase-ng -c 11 -e "freewifi" wlan1mon running iptables ...
user avatar
  • 131
-2 votes
1 answer
1k views

how to use tor in linux kali with other applications

I want to know how to open applications as nmap and recon-ng through tor first I have kali linux v 1.0.9 and tor I tried using proxychains recon-ng but all I get is that the normal banner of ...
user avatar
  • 119
6 votes
1 answer
2k views

Evil twin access point with WPA/WPA2

When I created an evil twin AP with an SSID of someone else's Wi-Fi network e.g. MyWifiNet, I could see two APs on my phone/laptop with the SSID MyWiFiNet, however the legitimate one was secured with ...
user avatar
2 votes
3 answers
9k views

Cracking a wpa2-psk wifi

I'm cracking a wpa2-psk wifi with aircrack-ng. After popullating the *cap file I'll apply brute-force with john. The question is: What time is it recommend to run airodump-ng before killing it's ...
user avatar
  • 501
1 vote
3 answers
3k views

What are the pros and cons of using live CDs vs VMs for malware analysis?

I'm planning on doing some malware research for a research project, and I was wondering what would be a better option for keeping my system safe from viruses accidentally infecting it. I'm only ...
user avatar
1 vote
4 answers
59k views

Exploit failed [unreachable]: Rex::ConnectionTimeout The connection timed out(remote host ip)

I keep getting this when I start to exploit, trying to exploit my xp machine but this keeps happening, I can not find the fix anywhere, I don't believe I am the only one getting this.. I am a ...
user avatar
1 vote
0 answers
312 views

Finding phishing sites to certain domain

My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know; ...
user avatar
0 votes
2 answers
1k views

RaspberryPi3 wont show fake AP created by Airbase-ng

Im using Aircrack-ng suite to apply an evil-twin attack with my RaspberryPi3 operated by Kali-linux on another RspberryPi3 with Raspbian Jessie. The steps are as followed: 1.configuring the apache2 ...
user avatar
  • 131