- Ethical Hacking
- Social Media
- Penetration Testing
-
Trending
.Net Interview Level
Programming
Interview Question
- MetaSploit
- Linux
Linux-based distros are the most preferred platforms for ethical hacking. Specifically, open source operating systems like Kali Linux Tools and Parrot are extremely popular among security researchers. They are available with a long list of hacking tools with Terminal and graphical user interface interfaces.
I will be listing the simplest Kali Linux tools that you simply can use on Linux OS. I have chosen the most common tool for every category of security tools and represented their main highlights.
Wireshark may be a free application you use to capture and look at the data traveling back and forth on your network. It provides the flexibility to drill down and read the contents of every packet and is filtered to satisfy your specific needs. It is usually used to troubleshoot network issues and to develop and test software. This open-source protocol analyser is widely accepted because the industry standard, winning its fair share of awards over the years.
Originally known as Ethereal, Wireshark contains a easy interface that can show information from hundreds of different protocols on all major network types. Information packets is viewed in real time or analyzed offline. Wireshark supports dozens of capture/trace file formats supported together with CAP and ERF. Integrated decryption tools allow you to look at encrypted packets for many popular protocols together with WEP and WPA/WPA2.
You need to know what is normal to find what is abnormal, and Wireshark includes tools to make baseline statistics. While Wireshark may be a network protocol analyzer, and not an intrusion detection system (IDS) , it can even so prove extraordinarily useful to zeroing in on malicious traffic once a red flag has been raised.
Wireshark may also be used to intercept and analyze encrypted TLS traffic. Symmetric session keys are keep within the browser, associated with the appropriate browser setting (and permission and data of the user) an administrator can load those session keys into Wireshark and examine unencrypted internet traffic.
Wireshark comes with graphical tools to check the statistics. This makes it easy to spot general trends, and to present findings to less-technical management.
There are so many hands-on uses for Wireshark that it is easy to overlook what an efficient learning tool it can be. Lifting up the hood of a car is that the best way to understand however an internal combustion engine works, and likewise lifting the lid on network traffic and looking at packets fly by-even drilling all the way down to the computer memory unit level, and examining transmission control protocol headers - may be a powerful thanks to learn, and teach others however the net works.
Demystifying the motor that runs our data economy can only lead to higher-informed business decisions and better government policy, not to mention a better-qualified force. Wireshark is already a staple of classroom curricula in several coaching settings, however the docs are complete enough at now that an eager learner will simply download the network protocol analyzer, sniff their native wifi access point, and start examining traffic.
Nmap is also a free and open source network scanner that you just can use on your Kali Linux-powered hacking rig. Because it falls under the vulnerability analysis category, a security researcher can use Nmap to perform different functions like identifying hosts on a network, grab the list of open ports, list the hardware specs and OS on networking devices, etc.
Users can further add features to this modular hacking tool for Kali with the help of scripts. This cross-platform tool is additionally available for Windows, BSD, and macOS, however, Linux remains the most popular platform.
Nmap is a powerful network security tool written by Gordon lyon. It absolutely was released almost 20 years ago(in 1997) and has since become the de facto standard for network mapping and port scanning , permitting network directors to find hosts and services on a network, and create a map of the network.
Widely used by network admins and penetration testers (but also by malicious hackers!), Nmap is free to use and is free under the GPL license. This license offers you the correct to run, study, share, and modify the software system. You can find the Nmap source code here: https://github.com/nmap/nmap.
When it comes to Wi-Fi hacking tools for Kali linux or other distros in general, Aircrack-ng is that the perfect network software system suite that acts as a detector, sniffer , password cracker , and analysis tool . All you would like could be a device with a network controller that may sniff 802.11a, 802.11b and 802.11g traffic in raw monitoring mode.
The suite consists of tons of terminal-based tools that you simply can run with easy commands. Except being pre-installed in distros like Parrot and Kali, it is also accessible for Windows, macOS, BSD, and linux distros.
Aircrack-ng is a set of tools for auditing wireless networks. The interface is standard and some command use skills will be required in order to operate this application.
Nikto is an Open source internet server scanner that performs comprehensive tests against internet servers for multiple things, including over 6700 probably dangerous files/programs, checks for outdated versions of over 1250 servers, and version specific issues on over 270 servers.
It additionally checks for server configuration things like the presence of multiple index files, http server options, and can attempt to identify installed internet servers and software. Scan items and plugins are frequently updated and might be automatically updated.
Nikto allows pentesters, hackers and developers to examine a web server to find potential problems and security vulnerabilities , including:
There are some items that are "info only" type checks that look for things that may not have a security flaw, but the webmaster or security engineer may not know are present on the server.
These items are usually marked appropriately in the information printed. There are also some checks for unknown items which have been seen scanned for in log files.
See the documentation for a full list of features and how to use them.
During web app scanning, different scenarios might be encountered. Nikto supports a wide variety of options that can be implemented during such situations.
The following is an overview of the included options in Nikto:
-Cgidirs: This option is used to scan specified CGI directories. Users can filter "none" or "all" to scan all CGI directories or none. A literal value for a CGI directory such as "/cgi-test/" may also be specified (note that a trailing slash is required). If this is option is not specified, all CGI directories listed in config.txt will be tested.
-config: This option allows the pentester, hacker, or developer to specify an alternative config file to use instead of the config.txt located in the install directory.
-Display: One can control the output that Nikto shows. Reference numbers are used for specification. Multiple numbers may be used as well. The allowed reference numbers can be seen below:
-evasion: pentesters, hackers and developers are also allowed to specify the Intrusion Detection System evasion technique to use. This option also allows the use of reference numbers to specify the type of technique. Multiple number references may be used:
-Format: One might require output/results to be saved to a file after a scan. This option does exactly that.The -o (-output) option is used; however, if not specified, the default will be taken from the file extension specified in the -output option. Valid formats are:
csv – for a comma-separated lists
htm – for an HTML report
txt – for a text report
xml – for an XML report
-host: This option is used to specify host(s) to target for a scan. It can be an IP address, hostname, or text file of hosts.
-id: For websites that require authentication, this option is used to specify the ID and password to use. The usage format is "id:password".
-list-plugins: This option will list all plugins that Nikto can run against targets and then will exit without performing a scan. These can be tuned for a session using the -plugins option.
Plugin name
full name – description
-no404: This option is used to disable 404 (file not found) checking. This reduces the total number of requests made to the web server and may be preferable when checking a server over a slow internet connection or an embedded device. However, this will generally lead to more false positives being discovered.
-plugins: This option allows one to select the plugins that will be run on the specified targets. A comma-separated list should be provided which lists the names of the plugins. The names can be found by using -list-plugins.
There are two special entries: ALL, which specifies all plugins shall be run and NONE, which specifies no plugins shall be run. The default is ALL.
FunkLoad features as a load tester in our Kali Linux tool list. Built using Python scripts using the PyUnit framework, FunkLoad emulates a single-threaded browser and handles real-world applications. Differing types of testing that you Just can perform using this software system embody regression testing, performance testing,load testing, stress testing etc. You also get an choice to generate differential reports to compare two bench reports to provide an overview of load changes. You can install it on all Linux distros and run different operations from the command line.
Bulk-Extractor hacking program is popular among ethical hackers for abstracting data like internet addresses, mastercard details, email address, etc., for various styles of digital files. By using these tools, one also can build list of words found among the info that may be later used for word cracking using different linux hacking tools. Once Bulk-Extractor processes files, it stores the leads to feature files that are simply parsable and inspectable. It also comes with a interface interface that makes it simple to browse the resultant files. Users can install Bulk-Extractor on Linux-based operating systems as well as Windows.
bulk_extractor now creates an output directory that includes:
For each of the above, two additional files may be created:
The Metaploit Framework needs no introduction as it’s the world’s most used penetration testing platform. It permits you to spot, validate, and exploit completely different loopholes. It is additionally used as a base for several commercial moral hacking frameworks. Being an open source framework, the open source community keeps adding newer modules and Rapid7 also keeps adding new features on its own.
What makes it even additional interesting is that the proven fact that new updates to this tool are pushed each day. You can install Metasploit on Linux, Windows, macOS, and BSD.
Here are some terms that you need to understand if you are using Metasploit:
Term 1 – System exploitation - the root term behind meta ‘sploit’ – i.e. exploitation This term means that you are trying to exploit a vulnerability in a system, machine or network. This means that basically you are trying to look in a network and find a computer that has a hole (backdoor) which could be compromised.
Term 2 – Payload – think of this like a fighter jet unleashing a weapon with a payload ! A big thing about Metasploit is that it not only scans but it also collects information regarding systems that can be exploited – and then – executes code within a compromised system. In summary, this term implies injecting code that is bundled within a payload.
Once a payload has been unleashed then the hacker or penetration tester can run commands and actions. The objective should be to plant a big enough payload that can facilitate the creation of a a shell code. A shell is a command interface which essentially gives the user complete control over a compromised machine.
Since Metasploit is a framework the user can create their own code and scripts but – don’t worry if you don’t know how to code since many modules have already been created. All Metasploit modules are very specific to perform specific tasks , so to run network scanning , ARP poisoning, packet sniffing etc, a module has very likely already been created.
Term 3 – Listening – get in touch with your female side and be a good listener! Metasploit is patient and a great listener. Metasploit , like Wireshark in fact, is very good at listening to incoming connections. Worth noting that in the hacking world, things don’t move very fast, a dedicated hacker can spend months working out their best strategy and attack vectors. Research is obviously vital to any attack. PunkSPIDER and SHODAN would be two examples of services that a penetration tester could use prior to opening up Metasploit. Both PunkSPIDER and SHODAN act almost like search engines with the difference in that these engines look for server information and vulnerabilities. Metasploit could be deployed to open any half closed doors.
There are a couple of interfaces that can be used. The first option is the the MSFconsole which is the hackers preferred method or most puritanical way of using Metasploit. The other more friendly approach to using Metasploit is to use Armitage.
Metasploit Database – specific to the user’s requirements One of the things that makes Metasploit unique, and a must for anyone interested in learning the skills of pentesting or hacking, is that the program/ framework can record data in its’ own internal database, i.e. on your system. Why is this good? Simply said it just organizes your work flow. You can set up the system so that tasks are spread as thin as possible to minimize the chances of being detected.
Ophcrack is one of the most acknowledged password cracking tools available for ethical hacking purposes. Being an easy-to-use tool with an easy graphical interface, this free and open source tool is preferred to crack passwords in minutes. Ophcrack is additionally known for one of the best implementations of rainbow tables for cracking. As it’s a cross-platform tool, you can use it on Linux and Windows with ease. It also comes within the type of a live Linux CD supported the SliTax distro for cracking of passwords of a Windows machine.
Before you use Ophcrack, you need to have more knowledge about what Ophcrack can or can not do, so that you can choose according to your practical situation. The following lists the pros and cons of Ophcrack.
Cracking a Windows password with Ophcrack with the use of rainbow tables is comparatively simple, if you are taking the proper steps and if the pc can boot from a disc. in the main four steps are required to walk you through the complete method of using Ophcrack LiveCD to recover your password, together with getting the software on a disc or flash drive.
Many Ophcrack users feedback that Ophcrack has several issues, for instance, it often crashes suddenly. Some others report that Ophcrack Window seven no tables found. Even if Ophcrack claims to have a recovery rate of 90th, it additionally has the possibility of unable to find password. For these problems, you had higher turn to an Ophcrack alternative for help.
Netcat is a simple but useful tool used for TCP, UDP, Unix-domain sockets. Netcat can listen or connect specified sockets easily. Netcat is a platform independent command supported by Linux, Unix, Windows, BSD, MacOS etc.
Common use cases for netcat are;
Apart from these, Netcat offers functions like:
The netstat command displays TCP services waiting for local station connections. We notice that the netcat program listens on port 4444. The options of the netstat command are:
In construction display 0.0.0.0:4444 in the Local Address column means that the service listens to connections on all IP addresses/system interfaces available on port 4444.
Snort is an open source Network Intrusion Detection System (NIDS) that is available free of cost. NIDS is that the type of Intrusion Detection System (IDS) that is used for scanning information flowing on the network. There are host-based intrusion detection systems, that are put in on a selected host and detect attacks targeted thereto host only. Though all intrusion detection strategies are still new, Snort is ranked among the top quality systems out there today.
Snort is an open source network intrusion detection system (NIDS) created by Martin Roesch. Snort could be a packet person that monitors network traffic in real time, scrutinizing every packet closely to observe a dangerous payload or suspicious anomalies.
Snort rules provide that detect attacks and malicious activities. You can write specific rules such as alert, log, drop the connection, etc. Rules have a simple syntax. Also, you can write all the rules in a config file, and you can edit that what do you want another system.
Snort has three different mods. These mods are;
Snort is built to detect various types of hacking and uses a flexible rules language to determine the types of network traffic that should be collected.
For Snort to work correctly, users must identify directories for use and perform calibrations to specify how the program should work in any of its three basic modes.
Note :
With these Kali linux Tools, you simply can’t go wrong. All of them are sure to satisfy most of your networking needs. However, if we miss any necessary Kali Linux tool then hit us up within the comments and we’ll update our list as shortly as possible. Until then, do provide these Kali Linux tools a try to allow us to know your experiences and favourites.Keep reading, keep learning.
Akash is a co-founder and an aspiring entrepreneur who keeps a close eye on open source, tech giants, and security. Get in touch with him by sending an email (akashchugh1994@gmail.com).
how to
Hmm is anyone else having problems with the pictures on this
blog loading? I'm trying to find out if its a problem on my end or if it's
the blog. Any suggestions would be greatly appreciated.
03-Jul-2019
pure
Its ?u?h as you learn my mind! You ap?ear to understand a lot ?bout this, like you wrote
the guide in it or something. I feel that you just can do ?ith a few p.c.
t? power the message hous? a little bit, but other than that, that is fantastic blog.
A great read. I'll certainly be back.
24-Jul-2019
