Skip to main content

Questions tagged [kali-linux]

Offensive Security's penetration testing Linux distribution.

51 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2 votes
0 answers
4k views

Problem while using Reaver WPS

I was trying to crack my WiFi Router. I have two laptops an older one(Lenevo 3000 G430) and a newer one(HP Elitebook 840 G3) with their internal adapter. The old one has BCM4312 802.11b/g chipset and ...
Tanmay B's user avatar
2 votes
0 answers
899 views

Deauthentication attack failure

Presently I am trying (and failing) to successfully execute a deauthentication attack using Kali Linux. The process I'm using is: airodump-ng --bssid MAC address here --channel channel # here --write ...
AwfulCoffeeHeartburn's user avatar
2 votes
0 answers
2k views

Apache Web Server ETag Header Information Disclosure Weakness

How this vulnerability allow remote attackers to obtain sensitive information likes inode number and child process though ETag header ? and how to locate path to a file from inode number ?
imadhsissou's user avatar
2 votes
0 answers
2k views

XSSER get and post

I am using xsser for XSS vulnerability testing and I have a doubt about the parameters when it's a POST method. I have tried against DVWA (which uses get) with success like this: xsser -u "http://...
aDoN's user avatar
  • 293
1 vote
0 answers
298 views

Problems in stopping/restoring Aircrack session

I'm running aircrack-ng version 1.6 on Live Kali. I noticed that "recently" a -N option has been added for saving a session, which can be later resumed with the option -R. However this seems ...
kuma's user avatar
  • 119
1 vote
0 answers
1k views

Wireshark how do I see data from a phone on the same network

So I am wondering how can I see the data on wireshark? I have my router setup to where there is no password so I can automatically connect whatever devices on to my network. First I connect my phone ...
Seng's user avatar
  • 11
1 vote
0 answers
1k views

Metasploit always asks me to create MSF web service account

I run QubesOS on my laptop and created a StandaloneVM based on debian-10 template. I installed metasploit and created a database for the MSF web service and I was given a token for the API. I rebooted ...
Quidam Ibidem's user avatar
1 vote
0 answers
202 views

How should I install Kali Linux on my Windows 10?

I'm using Windows 10. I found several ways to install Kali Linux on Win10: Install it on VMWare Install it on Docker Install it on Linux subsystem (WSL) I might need to access some files in my ...
CPS_001's user avatar
  • 11
1 vote
0 answers
886 views

Reverse shell working with kali 2016, but not kali 2019.2, using Metasploit ms08_067_netapi

I have an unpatched Windows XP Home VM, a Kali 2019.2 VM and an old Kali 2016 VM. Using Metasploit's ms08_067_netapi module, I'm able to successfully get a reverse shell but only on the old Kali VM. ...
PenTest's user avatar
  • 11
1 vote
0 answers
363 views

Hydra gives different password each time (DVWA)

I've looked up this issue and everyone's problem was they didn't have the failed login string. I do. Trying to get into DVWA. Here's my command hydra 10.0.250.143 -l admin -P P.txt http-get-form "/...
NerdyKid1101's user avatar
1 vote
0 answers
515 views

How can I get MITM attack using sslstrip to work?

I performed the following steps: I modified iptables to forward to another port: iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 1000 I allowed port forwarding: ...
NonAlcoholicVodka's user avatar
1 vote
0 answers
2k views

Bettercap/ettercap unable to detect HTTP packets

Basically, I am trying to sniff the network traffic from my other computer. So here's the situation: I am in a network, where: 192.168.1.1 - default gateway 192.168.1.24 - "victim" (my other ...
minecraftplayer1234's user avatar
1 vote
0 answers
2k views

crunch password generation with multiple character sets

I'm trying to use crunch to generate a password list. However, if I add all necessary characters into one character set, as in: file: charset_huge.lst complex = [...
JohnyD's user avatar
  • 179
1 vote
0 answers
446 views

Finding phishing sites to certain domain

My work currently involve finding phishing site to a certain domain/ company. I was wondering if there are some tools/ Online services that I can use to find phishing sites. I would like to know; ...
Youbecks003's user avatar
1 vote
0 answers
994 views

Using Reaver in various UK routers results in stop after 90% progress

I've been trying to make use of the current wifi audition techniques in regards of Router Password retrieval. GEAR: I've been through car boot sales and acquired some of the current routers on the ...
FakuVe's user avatar
  • 11
1 vote
0 answers
480 views

ARP poisoning command slows down victim internet and victim has no access

im currently enrolled in a CPEH course my 3rd lab was arp poison. command i used is echo -1 > /proc/sys/met/ipv4/ip_forward iptables -t nat -A PREROUTING -p tcp --detination-port 80 -j REDIRECT -...
Ali Jammal's user avatar
1 vote
0 answers
133 views

arp spoofing on ni myrio

I created a traffic light system using NI myRio and LabVIEW, Now I want to arp spoof this system what I did is using arpspoof command on another PC that runs kali linux, The ip address are: 192.168....
S_Flora's user avatar
  • 11
1 vote
0 answers
862 views

reverse_tcp not working with tor

I have the following situation. I have configured proxychain with tor. I collect my IP address (provided by tor) from whaismyip_dot_com and set that ip as LHOST and used my localport as LPORT in ...
al mamun's user avatar
1 vote
0 answers
2k views

Creating a rogue AP with Kali Linux

so i have for the last 2 days going through this task of setting up a Rogue AP on my Kali linux running in my VM.... i am using the 64bit version and the wifi adapter is TP link TL WN722N, so my ...
Mahesh Chandra's user avatar
1 vote
0 answers
226 views

Signature Generate by Honeyd “Honeycomb” is not accept by Snort IPS

I posted this on SO [https://stackoverflow.com/questions/44652014/signature-generate-by-honeyd-honeycomb-is-not-accept-by-snort-ips] is this on topic here? What would I need to do to my question ? I ...
dmxxiang's user avatar
1 vote
0 answers
472 views

Setup a meterpreter session trough a vpn

this is my first post here. I was trying to start a meterpreter session from a mac to my kali Linux machine trough a vpn but it isn't working. I downloaded openVPN config files from vpnbook.com and ...
Cedric's user avatar
  • 111
1 vote
0 answers
647 views

How to launch kali Linux installer inside live version

i need to know how I can launch the kali Linux installer through terminal pleas. Running latest version of kali Linux on LIVE USB. Trouble booting with uefi and so forth so I need to know how to ...
Gabriel Haddad's user avatar
1 vote
0 answers
226 views

Veil-E install issue

I have tried to install this several times, changes sources, and gone through every solution online so far, including the one in this forum and still having issues getting this to install on KALI. Any ...
John's user avatar
  • 11
1 vote
0 answers
120 views

Snort Modules Tweaking

I want to tweak and add new functionalities to snort code(Preprocessor)(v2.9.8). So,i have installed snort using source code,on ubuntu 14.04,however due to unknown problems,functionalities aren't ...
user10012's user avatar
  • 191
1 vote
0 answers
967 views

Linux Priv Escalation Scripts

I am aware of a number of good linux priv escalation scripts out there which i use for my hacking ( legal only, mainly practice for my OSCP ). I like Linux Priv Escalation Scripts . My prefered one ...
rockstar's user avatar
  • 148
1 vote
1 answer
3k views

MITMf arp spoofing inconsistent

using MITMf I'm getting inconsistent results, sometimes it just works, other times it just doesn't... I'm wondering is it like that for others or am I doing something wrong? the command I'm using ...
Reed Jones's user avatar
1 vote
1 answer
3k views

Is there anyway to generate a SAM file?

I was wondering if it is possible to create a windows SAM file. I already tried using chntpw but it seems like it only works under a Redhat based linux, ie I was able to blank/change a Windows 7 ...
Ashkan's user avatar
  • 11
0 votes
0 answers
90 views

John the Ripper not working properly

I am new to JTR and am currently trying to crack some passworts I generated. Because I am new to JTR, I wanted to start by hashing a simple password like "Cat", write it in a file named pw....
darquis's user avatar
0 votes
0 answers
94 views

Trying to ret2text on 64bit program issues, can't jump to shell

Here is the elf summary of the program: Arch: amd64-64-little RELRO: Partial RELRO Stack: No canary found NX: NX enabled PIE: No PIE (0x400000) This is the ...
Nsion's user avatar
  • 1
0 votes
0 answers
350 views

Program segfaults when ran with GDB

this is my first time posting a question here, so forgive me if I don't give enough details. I will provide any extra details that are requested. Basically, I'm practicing a buffer overflow, and I'm ...
Joseph Seed's user avatar
0 votes
0 answers
247 views

Tp Link Wireless adapter doesn't want to transmit deauth packets after a fresh installation of Kali Linux

I have a TP-Link TL-WN727N wireless adapter that works out of the box with Kali Linux (I'm using a VM) which I have been using for quite some time. This card has worked flawlessly ever since I first ...
General Kenobi's user avatar
0 votes
0 answers
182 views

How to detect a firewall used

I was scanning a network with Nmap. I'm looking for advanced commands for detecting firewalls.
Imran Niaz's user avatar
0 votes
0 answers
1k views

Why my card changes from WPA Handshake to PMKID or vice versa just by airodump-ng

I am running Kali linux 2020.3 on VBox on Windows 10. I put my wireless card AWUS036ACH chipset Realtek RTL8812AU in monitor mode using airmon-ng start wlan0. Then i use airodump-ng wlan0 to capture ...
Qasim's user avatar
  • 1
0 votes
0 answers
257 views

Empire Autorun Script

I'm tryng to run the following resource file when getting a new agent usemodule privesc/bypassuac "name of the listener" execute y back usemodule persistence/elevated/wmi set Listener "...
stack20security's user avatar
0 votes
2 answers
2k views

Using Patator ssh_login module how can I get the output to show only on success

I have the following command: patator ssh_login host=<ip> port=<port> user=<user> password=FILE0 0=<path to pwdlist> I would like to output the success result only and not ...
Zora's user avatar
  • 1
0 votes
1 answer
594 views

Monitor mode not sniffing from other devices on the same network

i'm currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices. Pinging from ...
user223481's user avatar
0 votes
0 answers
1k views

Kaspersky TS blocking apt-get upgrade and marking files as HEUR:Trojan.Script.Generic

I have just recently downloaded kali linux onto my VM software and i was doing apt-get upgrade in terminal and some files got blocked by my kts and i was wondering whether it was a false positive as ...
Will's user avatar
  • 1
0 votes
0 answers
1k views

aireplay-ng --fakeauth issue with deauth packet

I am new to Kali Linux and I want to check if ethical hacking and pentesting is my cup of tea. I'm trying to associate my wireless adapter with an AP via aireplay-ng --fakeauth, but every time I use ...
aFku's user avatar
  • 1
0 votes
0 answers
223 views

Open ports are not shown on screen and not stored in db

I am new to Kali Linux. After running few commands on metasploit , the commands are running perfectly but display is not as shown in book. I am running this in Virtual box in windows 7 My screen ...
coder's user avatar
  • 111
0 votes
0 answers
860 views

"SMTP AUTH extension not supported by server" with setoolkit

In order to test pishing attacks with setoolkit (Social Engineering Toolkit), I installed iRedMail in my local network. I created two account: [email protected] hackme@hackme....
salt's user avatar
  • 259
0 votes
0 answers
987 views

Browser Autopwn2 Unable to exploit Firefox 47.0.1

Virtual Appliance: VMWare Workstation 12 Player Local VM: Kali Linux 2 Remote (Victim) VM: Windows XP Browsers on Remote VM: Firefox 47.0.1, IE 6 This article explains Browser Autopwn2 exploit. I ...
Rhonda's user avatar
  • 143
0 votes
0 answers
451 views

deliver a malicious payload via a cloned website

I've been tasked with conducting an internal pentest, I'm relatively new to this so please bare with me. Some time ago, I used setoolkit and I would have the option to clone a website and attach a ...
Wandering Morg's user avatar
0 votes
0 answers
285 views

Metasploit Framework console misencodes text

I am running the Metasploit Framework (v4.10.2) on Kali Linux 1.0.7. Some commands return this weird, misencoded (I think) text instead of what it should be returning. What can I do to fix this? ...
captainGeech's user avatar
-1 votes
1 answer
1k views

aircrack-ng on Raspberry pi 3 and WiFi adapter

I am just getting into ethical hacking and cybersecurity and would like some advice regarding USB Wi-Fi adapter. I am hacking on Raspberry PI 3 which is running Kali Linux. Furthermore, I have been ...
TheBestPlayer's user avatar
-1 votes
1 answer
830 views

wpscan is not show the real version

When I scan WordPress site with wpscan I see in the results that I have version 2.10.3 in WP Rocket Title: WP Rocket <= 2.10.3 - Local File Inclusion (LFI) | Fixed in: 2.10.4 But I when I ...
Ahron Moshe's user avatar
-1 votes
2 answers
1k views

How do I use driftnet without hacking?

I want to see which images are being sent through the air using my wifi and foreign wifi. How do I do that without cracking WPA(2) but just filtering out the unencrypted packages using windows or kali ...
Vitalis Hommel's user avatar
-1 votes
1 answer
2k views

How to connect reverse_tcp with my remote server(not in the same machine where i have metasploit)?

This is my question: How to connect reverse_tcp meterpreter with my remote server(NOT in the same machine where i have installed metasploit)? It's possible? I need this because i haven't a public ip ...
dalvik's user avatar
  • 1
-1 votes
2 answers
8k views

Kali Linux/Metasploit in VirtualBox - Issue with ports

I've been attempting to get port 4444 to open these past couple of days. I finally figured I'd try to get it working on my Windows machine first and I finally got it. Now, no matter what I do in the ...
Jake Rieger's user avatar
-1 votes
1 answer
217 views

Strange behavior of Nmap

I do port scanning with Nmap when HotSpot Shield VPN is running; and I am receiving strange result - when HotSpot Shield is running, Nmap tells me that all of the ports are open and when HotSpot is ...
Farid Abdi's user avatar
-1 votes
1 answer
999 views

Kali password attack

I am new to kali pentesting and am working on a password attack for an assignment. The target has SSH and apache running so I go to the website apache is hosting and see a login. If I go to 'Create a ...
Nick's user avatar
  • 127