Anonymous is you.
It's a concept; no kings, no goverments, no coorporations; just people, absolute nobodies, anonymous people without name; so what can a nobody do?...
Hence the slogan: "We are anonymous"
https://www.kali.org/ Here, start learning :D
It is not a general use distro
If you make forum posts asking how to install steam on it or why it's so hard and no one will help you, people will just laugh at you
Stop it. Using Kali does not make you hackerman. It's a specific tool for use in live usb environments by a specific profession or researchers
If you use Kali linux, there is a GUI tool called Fern-Wifi-Cracker and it's literally all point and click. Wifite is an automated version of Reaver.
Kali runs on a livecd/usb just like TAILS, so it's easy to boot up, crack your neighbors password, and reboot into your regular install.
Edit: You can download Kali for free here. The wordlists (needed for Fern) are located in /usr/share/wordlists when you boot into it.
There is a tails subreddit on reddit (should have FAQs).
Tails:
Install video:
Kali is another option:
Boot your computer from the USB and everything you do it confined to the USB. Use PGP (also a subreddit) when sending messages.
Play with some of the stuff on vulnhub for starters. They're virtual machines that are intentionally made vulnerable, so you can practice cybersecurity techniques without risk of doing any real damage. Also, get started playing with Linux. r/findmeadistro can help, but since you're interested in cyber, they'll recommend Kali Linux (Wikipedia page for Kali Linux).
It's not as bad as it used to be, now that it doesn't use root as default user anymore. But Kali simply isn't really made for everyday use. It's even mentioned in their docs: https://www.kali.org/docs/introduction/should-i-use-kali-linux/
>As the distribution’s developers, you might expect us to recommend that everyone should be using Kali Linux. The fact of the matter is, however, that Kali is a Linux distribution specifically geared towards professional penetration testers and security specialists, and given its unique nature, it is NOT a recommended distribution if you’re unfamiliar with Linux or are looking for a general-purpose Linux desktop distribution for development, web design, gaming, etc.
I'd instead recommend trying Debian (which is what Kali is based on) or OpenSUSE, which are more beginner friendly and actually made to be used as a daily driver.
Hi /u/kind_stranger
Nice! Buy a write blocker before connecting the HDD! Download and boot a Kali Linux USB or DVD and choose "Forensics mode". This prevents the OS to mount the HDD. Then use "Guymager" to make a forensics image to an external drive. Choose "E01" as file extension. This makes it possible to work on a forensic copy of the drive instead of working on the drive itself. You can later "carve" unallocated disk space for a wallet.dat file in case it was deleted. You can use "Photorec" for this from the "TestDisk" suite. Links to software: https://www.kali.org/downloads/ https://tools.kali.org/forensics/guymager http://www.cgsecurity.org/wiki/TestDisk_Download
Don't start screwing with the disk without having a plan!
If you need more help with this, PM me.
> Oh god, ask any question about Kali and that lot come out of the woodwork "yOuR nOt sUpPoSeD tO iNStAlL iT, yOu'Re sUpPoSeD tO oNlY rUn iT lIvE".
And we're right. If you're asking basic questions you shouldn't be using Kali. The Kali developers say so themselves.
The main reason not to use Kali as a daily driver is that it makes you root by default. This breaks packages and is extremely dangerous. Kali is meant to be used as a tool for pentesting, generally booted in a VM or off a USB, not installed and used as a desktop OS.
See also: the official "should I use Kali Linux?" page on the main site.
> As the distribution’s developers, you might expect us to recommend that everyone should be using Kali Linux. The fact of the matter is, however, that Kali is a Linux distribution specifically geared towards professional penetration testers and security specialists, and given its unique nature, it is NOT a recommended distribution if you’re unfamiliar with Linux or are looking for a general-purpose Linux desktop distribution for development, web design, gaming, etc.
I am using a wifi pineapple mark V and a usb rubber ducky, the big white thing is a power supply. The raspberry pi replaces the what i usually use this with which is a laptop. I am using kali linux and simple-ducky I am going to be documenting this project at https://github.com/matt-desmarais/PineappleKaliPi
Ok so you're getting started in information security. Everyone tells you that Kali is where it's at and everyone is very opinionated about it. It can be a real pain to use but there are lots of tutorials on YouTube about tools and how to set it up so it can be an amazing place to start.
Check out their website for details on the types of installs and general information. https://www.kali.org/docs/introduction/
The community on there has tons of resources. As far as getting started, you'll need to learn a little about Linux and terminal commands. I suggest looking up "Linux basics" and Linux terminal basics on YouTube before starting with Kali.
I hope this helps.
This is an exception. That's kali for sure. Compare:
https://www.kali.org/wp-content/uploads/2016/01/kali-rolling-screenshot.png
Kali starts with all those apps you can see from the icons on the left and the wing tip of the dragon is visible.
Seems more like a "Just because I can" then something overly practical. Kali on android seems like a more practical approach....less suspicious to see someone playing with their phone. https://www.kali.org/tutorials/kali-linux-android-linux-deploy/
Now it gets interesting :). If it was me, I'd download a copy of Kali linux and either write it to a USB drive or burn it to a DVD.
Either way, I'd boot from it and run aeromon-ng, which is part of the aircrack-ng suite. It's a command line tool that lists all of the wireless devices that your card can receive along with their MAC addresses, SSIDs, signal strengths, etc. From the MAC address, you can find out the manufacturer here, and if you put a pie pan or some similar reflector behind your wi-fi antenna and move it around, you can find an approximate direction from which the signal is coming. That should get you started in unraveling the mystery.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
"Kali is a Linux distribution specifically geared towards professional penetration testers and security specialists, and given its unique nature, it is NOT a recommended distribution if you’re unfamiliar with Linux or are looking for a general-purpose Linux desktop distribution"
Kali is a pentest distro... it is NOT a daily use distro. You're new to Linux... do not keep Kali on your short list... please. Go with a mainstream distro like Ubuntu, Pop!_OS, openSUSE, Mint, etc
I use a MacBook for THM and it works fine. You can run Kali inside virtual box and do everything you need to do. Some tasks you can do just fine from macOS as well, but running a virtualized Kali is usually easiest.
There is no best Linux distro.
>I'm new to Linux
>I thought of installing Kali Linux
Don't. Install a desktop distro, any of them will work for your needs.
The download page showed version Kali 1.1.0a
> Kali 2.0 – 11th August, 2015 – Major release, now a rolling distribution, major UI changes.
> Kali 1.1.0a – 13th March, 2015 – No fanfare release fixing kernel ABI inconsistencies in the installers.
https://www.kali.org/kali-linux-releases/
This fits with the date shown on the desktop of his PC as "Wed Aug 6 11:46 PM"
I had this trouble as well, I started personally by setting up Kali Linux in a virtual box which offers a whole host of tools pre-installed. I then primarily looked at Metasploit and downloaded Metasploitable 2 (which is an easily hackable virtual PC) but this has led me down various paths, such as learning to hack databases, hack websites as well as lots of other things.
You can find lots of beginners guides on the Kali website as well, but not legitimate targets that you can practice on. Vulnhub can help with finding free, virtual OS's to download and practice on, without worrying about breaking the law.
Unfortunately, I'm still an utter noob at this so cant help with any technical questions but can try and help with any setup questions you may have.
Kali Linux - https://www.kali.org/ Metasploitable 2 - https://www.vulnhub.com/
Just an FYI I give to all people new to Linux and interested in Kali. Kali, which they agree with, is not meant for daily drive but rather for penetration testing only. Unless your goal is penetration testing and only playing games while waiting for random matters you should change.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
Don't get me wrong, Kali is great but it's a purpose built tool rather than generic OS.
In regards to gaming you are a bit more limited with your hardware than you might expect. I'd focus on native games. The reason being that your CPU doesn't support Vulkan which is needed for DXVK, which in turn Proton/Wine often uses.
Here are some recommendations, unordered: * Creeper World 3 * Crusader Kings 2 * Darwinia/Multiwinia * Tons of point and click games. Daedelic often does Linux ports. * Factorio * FTL: Faster than light * Hexcells * Hotline Miami * Human Resource Machine / 7 Billion Humans * Loop Hero * Mindustry * All Zachtronics games * Osmos * Poly Bridge 1/2 * Rimworld * Space Haven * Super Hexagon * Sword of the Stars: The Pit
And plenty more.
Do you know that the Kali developers recommend against using it as a desktop distro? It's meant to only be a live environment for pentesting work.
I find the temptation to jump straight to Kali is a natural progression for people just starting to research the security fields. They start off on Windows or OS X, probably in school, play around for a bit, then start developing somewhat of an interest in hacking, pentesting, whatever, and start doing some light research.
Everywhere they look starts pointing them towards Linux, but specifically Kali Linux, and without understanding that it's not just another distro, they jump in.... and are immediately lost and disappointed, because as people say, it's just not a great daily driver.
The reasons are many, and could it be? Maybe, with a ton of effort on the users side, but why? From custom repositories, a lot of stuff disabled that would normally be enabled, and so on, it comes with a ton of tools to make it a powerhouse pentest platform, with none of the stuff you would want when booping around the pipes to see the latest cat videos or rock out on Steam with you friends.
It's really just easier to download a distro made for the average user, and if you simply must have your l33t h4xx0r m4ch1n3 be on the same box as your daily driver, and VMing isn't an option, just download the tools you need as you learn about them. I would say it's easier to convert your daily driving distro into a passable pentesting setup than it is to convert kali into a daily driving setup.
More details from Kali site: https://www.kali.org/docs/introduction/should-i-use-kali-linux/
Absolutely. It is used everywhere by sysadmins and devops. Even as a developer, it's a great way to install/uninstall software like mysql, postgres, redis, etc, without polluting your own host machine with libs and whatnots. You can set up your entire stack all in docker.
You can install ubuntu or any linux really, on top of your host machine. As long as GUI isn't involved, it's pretty sweet. Want to install Kali Linux on your OSX? I got you fam
1) DO NOT USE KALI seriously. Even Kali themselves tell you better not to.
2) Day to day life is sitting in front of a screen (well, three in my case) and hammering on a keyboard. Also using the mouse. I do not play games and I watch a lot of movies, tv shows and YouTube.
The difference of when I was using Windows is that then there was no YouTube or movies to be watched online. I did not even have a TV card then. That was later with Linux.
It would be better if you tell what you do, so people can elaborate. e.g. if you run Flight Simulator and have build a complete cockpit might get a different answer than if your game is minesweeper.
Are you new to Linux? Why on earth are you using Kali as your main OS? By the sounds of it, you have no real reason to be using Kali at all. It's meant for pentesting, not general use. They have an official document on their website all about this -- I suggest reading it.
You'd be better off using something else based on Debian like Ubuntu, Pop!_OS, etc. Both of those make installing GPU drivers for nvidia a breeze. Not to mention you'll actually get better performance on them, especially for your use case. Can also install the linux-zen kernel for increased performance.
do you 100% need kali? it's pretty hard to use, you'll be constantly running into problems like this & it'll be easy to mess up your system & need a reinstall. Maybe read this: https://www.kali.org/docs/introduction/should-i-use-kali-linux/
Can you name a specific use case for kali that would be too annoying to do in another distro?
A really common option is to boot a normal distro & use kali from a VM
Please don't do this. Kali is not meant as a daily-driver. It's specifically for pen-testing/security work and should be used exclusively for that. I especially wouldn't recommend it to a new Linux user.
For reference, see Kali's own documentation: https://www.kali.org/docs/introduction/should-i-use-kali-linux/
Kali is a poor distro for most things except security testing.
If you want a general desktop system go with something else. Ubuntu and PopOS are good distros to start on.
Because some people actually browse official website
"Hindu Goddess of time and change ? Philippine martial art? Cool word in Swahili ? None of the above. “Kali” is simply the name we came up with for our new distribution. "
Try Kali Nethunter ( https://www.kali.org/kali-linux-nethunter/ ) its better than installing individual apps and the images are available for almost all nexus devices and all the one plus one. Also its free and open source!!
https://www.kali.org/docs/installation/hard-disk-install/ So 20 GB would be fine. If you want more thats up to you, but 250GB is for sure not "too small" for the system.
Hot take: I'm pretty glad this phenomenon happens. It weeds out the people who want to uphack the mainframe through the java html through KidPix Mathblasters in 2.5 seconds with a 12 gigabit GPU USB.
For others, myself included? It's a sobering reminder that you don't get good overnight, and you might need to... Backtrack a little bit before getting swept up by your ambitions. I was definitely using Ubuntu, and later Mint for a couple of years before trying out Backtrack, and then Kali - I can't imagine how people without any experience in Linux tried to navigate it.
That being said, I do hope Offensive Security comes out with with a Kali Novice distro that idiot-proofs it for newcomers and intro courses. https://www.kali.org/blog/kali-default-non-root-user/ I'm happy they've done this as afaik this was one of the chief criticisms of running it as a DD. While easy enough resolve with just a bit of linux understanding, you definitely can't count on a complete newcomer to the ecosystem to know what to do, let alone knowing that it's an issue in the first place.
Dude, we have such a topic nearly every week. I know reddit's search functions sucks, but you can just use Google. Or you simply read what the developer of Kali say about their own OS.
Kali Linux is not meant to be used as a daily driver. See here for details. Some core functions necessary for running regular programs have been removed. You should move to a distribution more tailored for a desktop user.
Probably because the 5/9 hack happened in 2015, and the timeline of the show now is still only about July/August of the same year.
according to https://www.kali.org/kali-linux-releases/, release of Kali 2.0 was 11th August, 2015, so we haven't caught up to that yet in the show. (depending on Elliot's blackout timelines, but the FBI conference call was on July 4th, so I'm guessing late July to early August. Haven't seen s03e02 yet to know if they give a date somewhere).
If you want to play around with penetration testing, Kali is actually designed for penetration testing. However I don't think they've necessarily designed to be a daily driver.
Define "poor answers"...
Almost all answers in r/linuxquestions, r/linux4noobs and other linux support related subs link you to the official Kali Linux website. I find the official response is in no way a "poor answer".
The Kali developers on who should use Kali and what it should be used for.
>As the distribution's developers, you might expect us to recommend that everyone should be using Kali Linux. The fact of the matter is, however, that Kali is a Linux distribution specifically geared towards professional penetration testers and security specialists, and given its unique nature, it is NOT a recommended distribution if you're unfamiliar with Linux or are looking for a general-purpose Linux desktop distribution for development, web design, gaming, etc.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
Kali is a specialized tool, it NOT a general purpose operating system.
Your question is a support request and therefore breaks Rule 1 of this subreddit. In future try asking for help in appropriate locations e.g. r/linuxquestions or when appropriate one of the Kali subreddits.
Unfortunately a lot of the repeat questions are not Kali specific but general Linux user questions - there is a sub for that, /r/linux4noobs. The people there are very helpful. But keep in mind one of the oldest Linux addages "free as in beer", meaning you are expected to put in some effort - i.e. read the docs, Google stuff.
When taking on a specialized distro like Kali, one should already be comfortable as a Linux user and on the CLI.
From the Kali Documentation Introduction:
>Kali Linux is specifically tailored to the needs of penetration testing professionals, and therefore all documentation on this site assumes prior knowledge of, and familiarity with, the Linux operating system in general. Please see Should I Use Kali Linux? for more details on what makes Kali unique.
So when someone asks 'wtf are drivers'' we know immediately you didn't do any work for your beer. You didn't even read the introduction to the documentation. So why should anyone here waste their time.
When we tell people this is not a beginner's distro, a lot of people push back that advice and either want to run before they can walk or want to be billy badass because they are using the OS seen on Mr. Roboto - the first is setting yourself up for failure and the second doesn't impress anyone here.
Before you post a question, ask yourself - is this something specific to the pentesting/hacking suite of tools, Kali desktop itself, or am I asking a general Linux question? If you do not know the answer to that, you probably didn't Google first.
One last little bit of advice, sugar, not vinegar.
Right in the first paragraph on the images download page "These images have a default login/password of “<strong><em>kali/kali</em></strong>” and may have pre-generated SSH host keys."
And again under the Kali Linux for ARM Devices section - "These images have a default login/password of “<strong><em>kali/kali</em></strong>” and may have pre-generated SSH host keys."
According to Kali as of March, WSL does not support raw sockets. That doesn't mean that Metasploit isn't useful, however, as there's at least one exploit (NSA Equation Group's EternalRomance) tutorial designed for use within WSL.
Kali has made available a great book that is exactly what you seek (and free) https://www.kali.org/download-kali-linux-revealed-book/
You're going to hear "RTFM" alot when you start researching things so it's a good time to start practicing it now. (Read The Fucking Manual). I've spent countless hours looking things up and more often than not if i just read the manual i can figure it out myself. Kali's book will get you started at square one. And remember, most of the tools provided in Kali, if not used with the explicit permission of the target, can land you a felony. I know you said you were interested in Black hat, but i urge you to go white hat. The good guys need help, and you could actually make a living being a white hat, instead of ending up in federal prison for some computer crime.
Yeah exactly, though Tails is specifically written for anonymity (e.g. memory is flooded with zeroes during shutdown) whereas this is just running in memory.
As for USB vs SSD it depends on what you're going to be using it for I guess. Running from USB with persistence is great for a temporary situation or an on-the-go kali where you need to install (and therefore save to persistence) a few extra tools.
However if this is to be your main pen-testing machine that you'll be using (even as a newbie) you'll probably want a more permanent solution. USB flash drives aren't intended for all the IO that can come with running it with persistence so while it's absolutely fine in the short-mid term, long term there are better options (to which an external HD is a decent solution, but your machine IO will always be limited by the speed of the USB, so try and get USB 3.0!)
Finally and to complicate things further, if you are just looking for an on-the-go solution over a main desktop, there is also kali nethunter should you have a spare android device or be willing to tinker with your main one. I personally have a "spare" oneplus one with it on and it's great for OTG.
Ultimately it's the classic answer "it depends", as in it depends on what it's primary use is and how/where you're going to use it, and what your budget is :). If you just want to tinker then a USB with persistence is a great way to start (even the 16gb) then going forwards and with added familiarity with the distro you can come up with the solution that's best for you.
Edit: Sorry my responses are slow, I don't have the karma to comment so have to get the mods to manually approve each time.
We really need a game development operating system, that's based on Ubuntu/Debian/Linux Mint Long Term Support/Release.
It's extremely frustrating trying to get people into game development, when they lack the tools to be able to explore it. Especially with Unreal Engine, and Unity3D coming out for Linux, they don't have binaries released (UE4), because of how stable they are at the moment. If someone were to release a pretty complete distribution with most standard tools, it would be pretty cool.
Kind of like, http://blackarch.org/index.html or https://www.kali.org/ but oriented more towards game development!
Tools, would include standard open source tools, such as GIMP, Blender, Krita, Ardour ( sound tools), a good selection of IDE's that are compatible with game engines, or allow easy integration with existing tools, and etc.
Hmmmm...
I'm a security student, and although I'm not an 100% expert, I can say that almost all the hacks are real.
In the phone matter, he used something called Kali NetHunter which basically consists in a mobile hacking platform for some Android devices. With it, he scan the wireless networks and tried to get access to them by breaking or "guessing" his passwords, but they use an encryption standard that can take days (in the best cases) to break it so he put off that idea.
Still as /u/HUGE_PILE_OF_SHATNER sais I will recommend you to look up for the Forbes articles, they are pretty accurate
>Could you please suggest me the best linux distro
Objectively, such a distribution does not exist.
>I thought of installing Kali Linux.
Kali should only be used for professional penetration testing and security auditing and not to learn SQL commands with it, for example.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
However, almost all "hacker tools" can be installed under normal distributions. Sometimes even via the official package sources. But I recommend to learn how to use Linux first. This will keep you busy for some time.
If you’re looking for a how-to, step-by-step, Kali is really not for you. The manual clearly states what you need to do in order to install it in your device
https://www.kali.org/docs/nethunter/#5-0-installing-nethunter-on-top-of-android
On the project home page it lists the supported devices and links to a generic version of the software
> kali
Kali is not a daily driver or a programming ready OS, Even they say it clearly. Its even targeted for either portable usage or for virtual machines mostly.
They didn't advise against Linux in favor of Windows. They advised against using this particular distribution (Should I Use Kali Linux?).
If you don't know how to solve this, you should not be using Kali on a physical machine. Install it in a virtual machine and learn more about Linux in general first.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
Can you explain why you are trying Kali this way? The Store description says this version has no tools or graphical interface, which means you need Linux experience and a lot of extra effort to get it working.
The standard way to get Kali quickly running on Windows is as a Virtual Machine and there are directions in the docs.
Then don't boot grub, go to your UEFI's boot menu and select the Windows entry.
Provided your hardware is not 10 years or older.
Also, https://www.kali.org/docs/introduction/should-i-use-kali-linux/
CommandoVM is a Windows-centric pentesting toolset that can be installed on Windows 10 (or 7 but 10 is better): https://www.fireeye.com/blog/threat-research/2019/03/commando-vm-windows-offensive-distribution.html
Alternatively (or in addition to that), you can install PowerShell on Kali: https://www.kali.org/tutorials/installing-powershell-on-kali-linux/
If you intend to pentest Windows environments, knowing batch and VBs is not sufficient. Learn PowerShell.
You should begin free learning stuff.
https://www.kali.org/download-kali-linux-revealed-book/
Do not hesitate to read manuals .
Initiate a home lab learning environment.
That ability to search and find and filter correct informations is a really important part of the job.
Learn C, learn Python, learn Linux and tools
And always rtfm.
Ability to create scripts(bash and Python) and being very comfortable on the Linux command line will matter a lot, don't underestimate it.
Hit up vulnhub and start working on being able to break those VMs before you put down money for lab access. OS just released a free training program for learning to use Kali(https://www.kali.org/news/introducing-kali-linux-certified-professional/) the cost of its certification is a lot cheaper than the OSCP. Starting off by going after the OSCP would likely be an expensive (but very educational) experience.
Once you can comfortably attack the vulnhub VMs with Kali somewhat successfully then you should be safe to buy the OSCP lab access/attempt. I would recommend getting the 60 day lab pass as 30 days is likely not going to be enough unless you can devote yourself to it full time everyday. I first bought the 30 day pass then got another 60 for reference.
The other thing that is glossed over a lot when talking about the OSCP is writing ability and note taking discipline. My final write-up was nearing triple digits(lab and exam combined), a well organized and clean write-up can be the point difference to get you into the pass range.
Not many "corporate suits" are using a Linux terminal. If you remember, Elliot was shocked that Tyrell was using Linux the first them that they met. The specific version of Linux used in tonight's episode, Kali Linux, is made for penetration testing. Nobody on Angela's floor has any legitimate reason for using such a tool.
If agent DiPierro saw the terminal and / or the version of Linux, Angela doesn't stand a chance. If she sees Angela pull the thumb drive from the computer and reboot back into the normal system, she would probably be suspicious.
... to be continued
Try an openvas vulnerability scanner: http://www.openvas.org/setup-and-start.html
https://www.kali.org/penetration-testing/openvas-vulnerability-scanning/
http://www.greenbone.net/technology/openvas.html (Windows front end-gui)
Also, one cool thing if you're focused on netsec, is looking at distros that specifically deal with this issue. They come with a set of tools that exploit the usual vulnerabilities.
An example is Kali Linux
[](/sunsetwow)Oh hey, it's Backtrack Linux before it became Kali Linux! I know very little about it except that it's useful for system penetration testing.
Assuming nothing writes to your hard drive overwriting the old files, you shut down, boot a Kali Linux DVD / USB drive, make an image of the disk and play with the digital forensics tools.
If you did not use full system encryption, chances of recovery are pretty high, as rm only deletes the links to the actual data.
Now, if you were to run sudo shred -u *
instead of sudo rm -rf *
, you're effed!
CS is fun, but if you're not into math you're gunna have a bad time. I used to be a CS major but after taking a bunch of math classes I decided I would rather suck start my shotgun than continue on with it.
What OS are you running?
If you want hands on with NetSec tools install Kali Linux, it's based on Debian but comes pre-loaded with just about everything you would need to get into that stuff.
If you do install it, don't use it as your daily driver. It's in perma-root mode and if someone get's into it they can really fuck your life over.
Well yes, but have you tried installing Steam on it? I know you might not need Steam, but as an all-rounder daily driver it should run things out of the box (at least for me).
Try either Kali or parrotOS
Kali: It's debian based, its stable and has a lot of industry support, so its usually recommended for all cyber sec people, whether new or old. It's documentation and stuff is also really well written and there are like gorillions of tutorials for kali.
The full install does come with a lot of tools that a beginner might not need tho. so you could call it a little "bloated".
Although you can also do a plain core install and then install some tool sets that you require.Check this out please.
​
ParrotOS: It's debian based as well, so kali and parrot are really similar, and you can even use most kali linux tutorials and apply them on parrot as well.
Parrot is a little newer and the best part about it is that it is really light weight, and some parts of it are more secure than kali.
you will also be able to get the same tools are kali on parrotOS.
​
Black-arch: honestly I have never used it, so I cant say anything about it.
​
Any other distro:
you can also do a fuck all and go with any other distro and start collecting/learning about the tools you need along the way.
It's a really good way of learning IMO but a little less convenient than having all the tools readily available.
The good thing about these net sec oriented OS is that they come pre loaded with a ton of tools making it convenient, especially when you just want to boot up into a live environment (with a USB stick) and get working ASAP.
​
TLDR: use kali / parrotOS if you are very new (since you will find a lotta support/tutorials). Or just take any OS (I recommend Manjaro) and start building your tool collection, and use linux as a daily driver (will teach you more than any amount of theory could do)
I'm sure it does as the installation requirements are minimal. For speed, start with throwing a SSD into it if you haven't already and then look at memory.
> I'm completely clueless as to what to do as this is my first experience with anything linux related.
Just a heads up, Kali is probably not what you should be using.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
> it is NOT a recommended distribution if you're unfamiliar with Linux
> ...
> If you are unfamiliar with Linux generally, if you do not have at least a basic level of competence in administering a system, if you are looking for a Linux distribution to use as a learning tool to get to know your way around Linux, or if you want a distro that you can use as a general purpose desktop installation, Kali Linux is probably not what you are looking for.
Kali is not beginner friendly. Issues like the one you've encountered are typical if you're not familiar with Linux. You are likely to encounter lots of issues, and difficulty. I would recommend starting off with a distro that is more beginner friendly, and one which is general purpose.
Are you intending to use Kali Linux as your daily driver? If so, please read this statement from the official Kali maintainers and reconsider.
Kali is an advanced distro. The assumption a lot of people make is that this means it can do advanced things, but if you're not advanced yourself, you can still use it, but just won't be able to take full advantage of it.
This is incorrect.
Kali is an advanced distro in the manner that you have to be advanced to use it. If you don't, you will almost certainly break things, and they're not easy to fix.
It is also not meant to be used as your main Linux OS. Rather as a side OS for very special purposes when you need it.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
> Kali is a Linux distribution specifically geared towards professional penetration testers and security specialists, and given its unique nature, it is NOT a recommended distribution if you're unfamiliar with Linux or are looking for a general-purpose Linux desktop distribution for development, web design, gaming, etc.
> If you are unfamiliar with Linux generally, if you do not have at least a basic level of competence in administering a system, if you are looking for a Linux distribution to use as a learning tool to get to know your way around Linux, or if you want a distro that you can use as a general purpose desktop installation, Kali Linux is probably not what you are looking for.
I'll just add this to the discussion: https://www.kali.org/docs/introduction/should-i-use-kali-linux/
>...Kali is a Linux distribution specifically geared towards professional penetration testers and security specialists, and given its unique nature, it is NOT a recommended distribution if you're unfamiliar with Linux or are looking for a general-purpose Linux desktop distribution for development, web design, gaming, etc.
No one reads the docs... far too many people think Kali is an appropriate distro to install as a day-to-day use distro. It's not... it's best suited to a USB-stick boot, or a VM where the tools can be used in a clan environment.. do their job.. and then you exit back to your daily driver OS (whatever that may be).
Well then install a distribution that's suitable for games and stuff. Kali isn't. It's a toolkit for infosec professionals, not a general purpose OS. You probably couldn't run games on it even if you had a lot of experience with Linux. It's very different from other distributions.
Read this: Should I Use Kali Linux?
No one will help you if you repeatedly ask how to hammer in nails with a microscope.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
Kali is a toolbelt specifically to be used by people that already know how to use linux and the tools, in a live environment.
It's not special. You can use the same tools on any other system.
Kali-undercover is visual only. No user agent details or other OS fingerprint. When I run it on my Kali laptop it changes my background, desktop icons, taskbar (moves taskbar to bottom), and even adds a somewhat clunky Windows-like start menu. Rerunning the script returns my desktop to normal.
If you havent seen it yet there is a GIF on this page: https://www.kali.org/news/kali-linux-2019-4-release/
I think the Kali Docker Image is the best solution. You can run multiple instances performing different tasks, and you won't use anymore CPU than you need so you can still operate on your main OS in the meantime. Better get good at that command line though.
short answer: yes you can try to find a Kali Nethunter build for your device and flash it, but it's not sure that everything will work "out of the box" or you can install the app linux deploy from the store and follow this tutorial https://www.kali.org/tutorials/kali-linux-android-linux-deploy/ in both cases you'll need a rooted device and a basic knowledge of what kali linux is and how it works
Disclaimer: I'm not a security expert or up to speed on it. I don't know any tweak that do self-destruction in the way you want, but you can nuke your LUKS storage header by the predefined password. see: https://www.kali.org/tutorials/emergency-self-destruction-luks-kali/ , https://aur.archlinux.org/packages/cryptsetup-nuke-keys/
I think it is possible to put such functionality in cryptsetup just like cryptsetup-nuke-keys did, especially for the plausible deniability, but I don't know why it doesn't exist yet as far as I know.
Well goodbye to the C:EH.
Between this and the OffSec Kali Linux Cert. Pro (launching in July) it looks like C|EH is done for.
https://www.kali.org/news/introducing-kali-linux-certified-professional/
Damn, color me impressed. You really went all-out with this setup. I know this wouldn't be as concealable, but if you're able to bring along a phone with you or have one with you anyway, NetHunter should be something you take a look at. If you've gotten used to Kali, you should feel mostly at home here. Anyway, fantastic work!
https://www.kali.org/blog/emergency-self-destruction-luks-kali/
I'm assuming you want something along the lines of this. If you are running a debian based environment you should be able to set this up.
Please look at the advice of the people who develop Kali.
>As the distribution’s developers, you might expect us to recommend that
everyone should be using Kali Linux. The fact of the matter is, however,
that Kali is a Linux distribution specifically geared towards
professional penetration testers and security specialists, and given its
unique nature, it is NOT a recommended distribution if
you’re unfamiliar with Linux or are looking for a general-purpose Linux
desktop distribution for development, web design, gaming, etc.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
> I have add all of debian bullseye repositories in the sources list file.
Kali’s own documentation says not to do this:
There is an ARM version as well as a version for mobile use just down the page linked. I would agree it is not a daily driver by any means and I would even recommend other alternatives like ParrotOS, Black Arch, or Pentoo if you are looking for a SecOps distro.
You can change the boot order in the firmware settings, if you are using UEFI.
However, you shouldn't use Kali. You'd be better off with an actual distro.
The documentation for Kali (last I read it) literally tells you not to try to do this and that you cannot install Kali directly to machines.
If you think you know better than the people who made Kali, by all means have fun but there is no step-by-step manual for what you are trying to do, because you really shouldn't do it.
All Kali is is a collection of tools. You can install those tools onto any linux distro.
https://www.kali.org/docs/introduction/should-i-use-kali-linux/
> As the distribution’s developers, you might expect us to recommend that everyone should be using Kali Linux. The fact of the matter is, however, that Kali is a Linux distribution specifically geared towards professional penetration testers and security specialists, and given its unique nature, it is NOT a recommended distribution if you’re unfamiliar with Linux
For Security+ I would suggest setting up Hyper-V with the Kali Linux build on it. It will allow you to play with the Security tools covered by the course and Linux syntax if you are Windows user.
By default, you get “kali-linux-default” for the default installation of kali. But they’ve documented a number of other metapackages as well.
https://www.kali.org/docs/general-use/metapackages/
There are a number of tools that aren’t installed because they aren’t used often or simply to decrease the amount of time spent doing the installation.
A lot of people would choose to install “kali-linux-everything” and then complain because it would take forever when some of the packages that it’s downloading are around 6GB in size.
Yes!
Kali even provide some documentation on how to approach this - https://www.kali.org/docs/usb/live-usb-install-with-windows/
You could also get a cloud machine running Kali, they even detail for you how this would be possible with DigitalOcean here, handy if you don't have a PC up to spec but can afford $10/mo - https://www.kali.org/docs/cloud/digitalocean/
This is because network services are disabled by default in Kali. If you’re not already comfortable enabling this service without consulting a guide, you are probably still learning linux and Kali recommends switching to a general purpose distro such as Ubuntu or Mint.
>Can't Kali be used as a general purpose distro?
r/technicallythetruth
You can technically use Kali as a daily driver, but the same could be said about Linux From Scratch or Windows.
You SHOULDN'T do it.
>security and pen-testing is not my subject domain.
In that case Kali is not for you.
Shit, even if that was your bread and butter, Kali should not be used as your daily driver.
>I wonder if someone with experience working with Kali could share their opinion on this distro as a general purpose environment.
This is an article everyone should read before trying Kali: Should I Use Kali Linux?
It's a very specialized distribution meant to be run live from a USB for pentesting and advanced network diagnostics. It's not suited for anything else. If someone tells you to install Kali, they're a /r/masterhacker.
Most of the tools that are available on Kali are available on other distros as well, such as the Metasploit server. Others are (to my knowledge) exclusively for Kali, like Hashcat. For that reason, I like having access to a Kali system, but I don't really understand why people run it as their main OS or even in dual boot. They have a Docker Image which is awesome. There's a lot of reasons to use this solution as opposed to the more common VM option: multiple simultaneous instances performing unique tasks, flexible memory usage, unhindered access to your primary OS, sidestepping the typical danger of accidentally performing a fatal operation because you're root as a noob (no offense). The catch is that when you're working from the container, you'll be almost exclusively using the command line so some experience there is helpful.
With Windows 10 Pro, you can install the Windows Subsystem for Linux and open a terminal window right in Windows that will give you a Linux interface to use ssh, BASH, learn scripting and other Linux things. It is part of the Windows 10 Pro Feature set. You can even install Kali Linux.
https://www.kali.org/tutorials/kali-on-the-windows-subsystem-for-linux/
Arch Linux is bleeding edge (meaning they apply security patches really quickly). For security specifically though, use Tails or (if you want counter-strike capabilities) Kali.
https://www.archlinux.org/ https://tails.boum.org/ https://www.kali.org/
Didn't someone port Kali Linux (distro for network penetration testing) to Nexus 5? I'd have to find it. Maybe it could make use of that functionality.
EDIT: https://www.kali.org/kali-linux-nethunter/
Looks like it already supports frame injection though.
https://www.kali.org/kali-linux-nethunter/
and
https://www.pwnieexpress.com/community/
Pwnie Express offers the pwnphone and pwnpad community editions, which are great, however do not support power-y cables
nethunter does support power-y cables however it has a few bugs that still need worked out but otherwise GREAT!
Download the official version from GitHub: https://github.com/rapid7/metasploit-framework
or get it as a part of Kali Linux: https://www.kali.org/downloads/
Community edition is free, if they try to revoke that in the future then someone will probably just fork it and Rapid7s offering will wither and die.
Dang you must have done a lot of research before asking this. By googling "kali 2.0" I managed to find https://www.kali.org/news/kali-linux-2-release-day-scheduled/ (it was the first link)
On this page, we see 1 paragraph of text above a video. In this paragraph, there is the sentences "There’s a lot of new features and interesting new aspects to this updated version, however we’ll keep our mouths shut until we’re done with the release. We won’t leave you completely hanging though…here’s a small teaser of things to come!"
And then you can watch a video with some of the features.
That new Pi has hardware limitations (RAM) that makes it questionable to install the minimal Kali. The page you linked is very descriptive about what images work on which devices, and doesn't include the new Pi. Based on those two observations, I'm guessing Kali on the Zero 2 W is a "probably not."
OffSec's newer VM images make it simple to get a Kali running on most machines. Considering the light version of Kali that might be possible on that Pi, you can likely run a similar VM on your current PC/laptop (if available).
This *might* be recoverable, since you appear to at least have a working package manager, if you can get online (or add your installation media to /etc/sources.list), you could install the metapackage of your choice:
https://www.kali.org/docs/general-use/metapackages/
That's not really beginner stuff, though, you might just be better off re--installing from scratch. If you aren't in a hurry, it might prove to be an educational journey (and who cares if you screw it up?)