2022 Developer Survey is open! Take survey.
26 votes
Accepted

Is Linux spying on its users?

Any time you execute code acquired from someone that you haven't fully reviewed and it runs on an Internet connected system, there is a risk that the person who wrote or deployed that code could ...
user avatar
  • 60.7k
19 votes
Accepted

What is Shikata Ga Nai

Shikata Ga Nai is an encoder included in the Metasploit framework for the x86 architecture. From the available source code: This encoder implements a polymorphic XOR additive feedback encoder. The ...
user avatar
  • 3,971
12 votes
Accepted

Hashcat with Kali 2 in a VM

You must install some stuff. The same happened to me. But you can work with new hashcat 3.x and CPU in your vm, no problem on that: apt-get install libhwloc-dev ocl-icd-dev ocl-icd-opencl-dev And ...
user avatar
11 votes
Accepted

Why is Kali Linux often used as a VM guest and not as the host?

In typical pentesting, Kali is just another tool, it's insecure by default, and is never recommended to be run as your primary OS without some serious baseline hardening. It's typically launched (as a ...
user avatar
  • 5,105
10 votes

What is Shikata Ga Nai

Shikata Ga Nai isn't a payload, but an encoder. The payload is the reverse shell. Metasploit offers several encoders, Shikata Ga Nai being one of them. An encoder attempts to overcome detection by AV,...
user avatar
  • 3,006
9 votes

Wordlists on Kali Linux?

One of the better basic wordlists in Kali is /usr/share/wordlists/rockyou.txt.gz. To unzip simply run gzip -d /usr/share/wordlists/rockyou.txt.gz. Be sure to add "known weak" passwords that are ...
user avatar
  • 201
8 votes
Accepted

No Handshake from Airodump

The process you've described should result in handshake packets, assuming that the deauth packets are successful in forcing the device to re-attach to the network. A couple of suggestions. I'm ...
user avatar
  • 60.7k
8 votes

service metasploit start failed to start metasploit service

#/etc/init.d/postgresql service --status-all service postgresql start service postgresql status #/usr/bin/msfconsole msfdb init msfconsole msf > db_status
user avatar
  • 1,649
8 votes

Does aircrack-ng use GPU/CUDA capabilities?

As stated by @RoyceWilliams, it does not seem to use CUDA. For this purpose, you might want to look at Pyrit, since it leverages CPUs and GPUs on the cracking process. NB: I wanted to leave this as ...
user avatar
  • 261
7 votes
Accepted

No handshake recorded from airodump-ng

Use a wireless sniffer or protocol analyzer (WireShark or airmon-ng) to capture wireless packets. Sniffing this way is similar to how attackers sniff wired networks to eavesdrop and capture ...
user avatar
7 votes

Why is Kali Linux often used as a VM guest and not as the host?

As a developer of Kali, I can attest that this answer is very wrong. Kali is not insecure by default, and has the same security standards as Debian in a default installation. Kali is a Linux ...
user avatar
7 votes

Why use a USB WiFi adapter with Aircrack-ng?

The main reason is because you need the adapter to support monitoring mode. This mode allows the adapter to not only sniff all packets coming from the AP to the clients but also from sniff the data ...
user avatar
7 votes
Accepted

Why is FF in Kali making requests to ocsp.digicert.com?

This is perfectly normal. ocsp.digicert.com is the server used to verify if an SSL certificate issued by DigiCert got revoked. This is done using the OCSP protocol. For example the certificates for ...
user avatar
6 votes

Software for web hacking?

In short, you don't need SOFTWARE, you need KNOWLEDGE. Seek that first, then the tools can help.
user avatar
  • 123k
6 votes

MSFConsole/Kali Linux - gain root access to unix system

At this point you've achieved the basics of a compromise on the system and you're on to the common phase two of exploitation which is privilege escalation. Exactly how you can achieve that depends ...
user avatar
  • 60.7k
6 votes
Accepted

Can you exploit an Internet IP adress just like a LAN IP address?

More or less, yes. Some things that might be different: You will not be able to use layer 2 scans (like ARP scans). If I would give you my public IP address, that would be the address of my router, ...
user avatar
  • 2,249
6 votes
Accepted

Is using Kali Linux in corporate enviroment safe?

Kali is a community-built distro full of security tools from both organisations and individuals. It is not designed to be used as a day-to-day operating system. It's a quick-start, throw-away distro ...
user avatar
  • 131k
6 votes

Can i increase my keys tested per second using a dictionary attack compared to bruteforce...?

Using a dictionary isn't going to increase your rate of attempted cracking, as the program still has to take the input, apply whatever hashing algorithm is required, and then compare with the password ...
user avatar
  • 60.7k
6 votes

What is the best anti virus for kali linux?

Kali is mainly for pentesting. It is not supposed to be used as "desktop distro". As far as I know, there is no antivirus and because of tons of exploits built-in you would destroy the whole distro by ...
user avatar
  • 1,200
6 votes
Accepted

Does aircrack-ng use GPU/CUDA capabilities?

I don't think so. There's only one mention of OpenCL or CUDA in the source code, and it appears to be a leftover from code copied from John the Ripper. Edited to answer your implicit question: if you ...
user avatar
6 votes
Accepted

Is it okay to use Kali Live everyday?

Whether booting from a USB thumb drive might hurt your system is off topic here - (and no). You should not use Kali as your day to day operating system. That is not what is meant to be. From a ...
user avatar
  • 14.3k
5 votes

Testing Basic Authentication with ncrack

The path option needs to be used in conjunction with the -g (global) or -m (module-specific) option, like so: ncrack -m http -U users -P adobe25 http://webserver_ip -g path=/~alice/secret/ Please ...
user avatar
  • 11.3k
5 votes
Accepted

How to choose a linux for learning?

For such a beginner and general subject (no offense! everybody has to begin somewhere!) such as iptables, any Linux distribution would be fine. Choose one with which you feel comfortable, does not ...
user avatar
5 votes
Accepted

How to detect mimikatz usage on LAN

SANS first ran an article on the basics of what you are looking for -- a way to detect mimikatz on the network -- https://isc.sans.edu/diary/Detecting+Mimikatz+Use+On+Your+Network/19311/ However, ...
user avatar
  • 18.9k
5 votes
Accepted

How to prevent your WiFi from getting hacked by Kali Linux?

WPS stands for WiFi Protected Setup. It is a configuration protocol aimed to ease the configuration of (adding) new devices. WPS is not required for WiFi network to work and the configuration that it ...
user avatar
  • 9,131
5 votes
Accepted

Why use Linux instead of Windows for Pentesting?

Overall, this question is rather broad, and will likely have an issue with opinions obscuring facts, so I'll try to keep this answer purely-factual. say e.g. am using aircrack in windows what will be ...
user avatar
5 votes

Can we attack with and target the same computer

Yes, but instead of that use a Virtualisation software like VirtualBox or VMware to install the victim machine or attacker machine (you don't want a vulnerable machine connected to the internet ...
user avatar
5 votes
Accepted

Why have distributions default HTTP package sources instead of HTTPS

The packages in Debian-based distributions are cryptographically signed, tampering with them would be very difficult. (In fact, they typically use the same algorithm that is used to authenticate a ...
user avatar
  • 15.8k
5 votes
Accepted

Kali.download website blocked by Kaspersky because of Trojan, is it safe?

Kali has many tools that are legitimately malicious tools. So, it is not surprising that Anti-Virus would detect and block those tools. Mimikatz (the thing you listed as being blocked) is a tool on ...
user avatar
  • 123k

Only top scored, non community-wiki answers of a minimum length are eligible