26
votes
Accepted
Is Linux spying on its users?
Any time you execute code acquired from someone that you haven't fully reviewed and it runs on an Internet connected system, there is a risk that the person who wrote or deployed that code could ...
- 60.7k
19
votes
Accepted
What is Shikata Ga Nai
Shikata Ga Nai is an encoder included in the Metasploit framework for the x86 architecture. From the available source code:
This encoder implements a polymorphic XOR additive feedback encoder. The ...
- 3,971
12
votes
Accepted
Hashcat with Kali 2 in a VM
You must install some stuff. The same happened to me. But you can work with new hashcat 3.x and CPU in your vm, no problem on that:
apt-get install libhwloc-dev ocl-icd-dev ocl-icd-opencl-dev
And
...
- 5,155
11
votes
Accepted
Why is Kali Linux often used as a VM guest and not as the host?
In typical pentesting, Kali is just another tool, it's insecure by default, and is never recommended to be run as your primary OS without some serious baseline hardening. It's typically launched (as a ...
- 5,105
10
votes
What is Shikata Ga Nai
Shikata Ga Nai isn't a payload, but an encoder. The payload is the reverse shell.
Metasploit offers several encoders, Shikata Ga Nai being one of them. An encoder attempts to overcome detection by AV,...
- 3,006
9
votes
Wordlists on Kali Linux?
One of the better basic wordlists in Kali is /usr/share/wordlists/rockyou.txt.gz. To unzip simply run gzip -d /usr/share/wordlists/rockyou.txt.gz.
Be sure to add "known weak" passwords that are ...
- 201
8
votes
Accepted
No Handshake from Airodump
The process you've described should result in handshake packets, assuming that the deauth packets are successful in forcing the device to re-attach to the network. A couple of suggestions.
I'm ...
- 60.7k
8
votes
service metasploit start failed to start metasploit service
#/etc/init.d/postgresql
service --status-all
service postgresql start
service postgresql status
#/usr/bin/msfconsole
msfdb init
msfconsole
msf > db_status
- 1,649
8
votes
Does aircrack-ng use GPU/CUDA capabilities?
As stated by @RoyceWilliams, it does not seem to use CUDA. For this purpose, you might want to look at Pyrit, since it leverages CPUs and GPUs on the cracking process.
NB: I wanted to leave this as ...
- 261
7
votes
Accepted
No handshake recorded from airodump-ng
Use a wireless sniffer or protocol analyzer (WireShark or airmon-ng) to capture wireless packets. Sniffing this way is similar to how attackers sniff wired networks to eavesdrop and capture ...
- 317
7
votes
Why is Kali Linux often used as a VM guest and not as the host?
As a developer of Kali, I can attest that this answer is very wrong. Kali is not insecure by default, and has the same security standards as Debian in a default installation. Kali is a Linux ...
- 71
7
votes
Why use a USB WiFi adapter with Aircrack-ng?
The main reason is because you need the adapter to support monitoring mode.
This mode allows the adapter to not only sniff all packets coming from the AP to the clients but also from sniff the data ...
- 3,615
7
votes
Accepted
Why is FF in Kali making requests to ocsp.digicert.com?
This is perfectly normal. ocsp.digicert.com is the server used to verify if an SSL certificate issued by DigiCert got revoked. This is done using the OCSP protocol.
For example the certificates for ...
- 181k
6
votes
Software for web hacking?
In short, you don't need SOFTWARE, you need KNOWLEDGE. Seek that first, then the tools can help.
- 123k
6
votes
MSFConsole/Kali Linux - gain root access to unix system
At this point you've achieved the basics of a compromise on the system and you're on to the common phase two of exploitation which is privilege escalation.
Exactly how you can achieve that depends ...
- 60.7k
6
votes
Accepted
Can you exploit an Internet IP adress just like a LAN IP address?
More or less, yes. Some things that might be different:
You will not be able to use layer 2 scans (like ARP scans).
If I would give you my public IP address, that would be the address of my router, ...
- 2,249
6
votes
Accepted
Is using Kali Linux in corporate enviroment safe?
Kali is a community-built distro full of security tools from both organisations and individuals. It is not designed to be used as a day-to-day operating system. It's a quick-start, throw-away distro ...
- 131k
6
votes
Can i increase my keys tested per second using a dictionary attack compared to bruteforce...?
Using a dictionary isn't going to increase your rate of attempted cracking, as the program still has to take the input, apply whatever hashing algorithm is required, and then compare with the password ...
- 60.7k
6
votes
What is the best anti virus for kali linux?
Kali is mainly for pentesting. It is not supposed to be used as "desktop distro". As far as I know, there is no antivirus and because of tons of exploits built-in you would destroy the whole distro by ...
- 1,200
6
votes
Accepted
Does aircrack-ng use GPU/CUDA capabilities?
I don't think so. There's only one mention of OpenCL or CUDA in the source code, and it appears to be a leftover from code copied from John the Ripper.
Edited to answer your implicit question: if you ...
- 9,119
6
votes
Accepted
Is it okay to use Kali Live everyday?
Whether booting from a USB thumb drive might hurt your system is off topic here - (and no).
You should not use Kali as your day to day operating system. That is not what is meant to be. From a ...
- 14.3k
5
votes
Testing Basic Authentication with ncrack
The path option needs to be used in conjunction with the -g (global) or -m (module-specific) option, like so:
ncrack -m http -U users -P adobe25 http://webserver_ip -g path=/~alice/secret/
Please ...
- 11.3k
5
votes
Accepted
How to choose a linux for learning?
For such a beginner and general subject (no offense! everybody has to begin somewhere!) such as iptables, any Linux distribution would be fine.
Choose one with which you feel comfortable, does not ...
- 19k
5
votes
Accepted
How to detect mimikatz usage on LAN
SANS first ran an article on the basics of what you are looking for -- a way to detect mimikatz on the network -- https://isc.sans.edu/diary/Detecting+Mimikatz+Use+On+Your+Network/19311/
However, ...
- 18.9k
5
votes
Accepted
How to prevent your WiFi from getting hacked by Kali Linux?
WPS stands for WiFi Protected Setup. It is a configuration protocol aimed to ease the configuration of (adding) new devices.
WPS is not required for WiFi network to work and the configuration that it ...
- 9,131
5
votes
Accepted
Why use Linux instead of Windows for Pentesting?
Overall, this question is rather broad, and will likely have an issue with opinions obscuring facts, so I'll try to keep this answer purely-factual.
say e.g. am using aircrack in windows what will be ...
- 8,764
5
votes
Can we attack with and target the same computer
Yes, but instead of that use a Virtualisation software like VirtualBox or VMware to install the victim machine or attacker machine (you don't want a vulnerable machine connected to the internet ...
- 281
5
votes
Accepted
Why have distributions default HTTP package sources instead of HTTPS
The packages in Debian-based distributions are cryptographically signed, tampering with them would be very difficult. (In fact, they typically use the same algorithm that is used to authenticate a ...
- 15.8k
5
votes
Accepted
Kali.download website blocked by Kaspersky because of Trojan, is it safe?
Kali has many tools that are legitimately malicious tools. So, it is not surprising that Anti-Virus would detect and block those tools.
Mimikatz (the thing you listed as being blocked) is a tool on ...
- 123k
Only top scored, non community-wiki answers of a minimum length are eligible