So far, we have downloaded, and installed our Kali Linux virtual machine and we have installed updates and taken some measures to secure our Kali image. We are almost ready to start firing off scans, popping some shells and cracking some passwords. But before we do that, there is one more thing we should go over before we get started. We are going to go over how to install some tools on Kali Linux.
Kali Linux contains several penetration testing tools installed by default as well as some that are pre-installed. However, there are some really good tools that are do not come installed in the image. We are going to install some of them to give you a feel on how to do this when you find a tool you want to use in your Kali Linux image. There are a couple methods we can use to install these tools.
When I attempt to download burp pro it stops at 232 mb. I have Linux 5.7.0-kali1-amd64 #1 SMP Debian 5.7.6-1kali2 (2020-07-01) x8664 GNU/Linux I have burp on my virtualbox with Mac OS but wanted to move everything over Kali linux laptop instead.
Now that we know what we are going to use, let’s startdownloading some tools!
The first tool we are going to install is the Discover script. Discover is a script that automates several passive and active penetration testing tasks. The Discover script was created by Lee Baird. Installation is a simple process. Open a command terminal in Kali Linux and do the following:
The next tool we are going to install isn’t necessarily a tool, it is more of a resource. Cracking passwords and performing fuzzing techniques are very crucial skills to know in penetration testing. However, these skills and tools will never be successful without the proper lists to assist in the process. Kali Linux does come with some wordlists already installed, but there are several more you can find over the internet.
One of the more popular wordlists is Daniel Miessler’s SecLists. We are going to download this wordlist the same way we downloaded the Discover script using the git clone command. However, this time we are going to direct where we want the file to download which will be the wordlist folder. Open a new command terminal or type “clear” in your existing terminal to clear the screen. Then do the following:
Finally, we are going to download and install the OpenVas scanner. OpenVas is an open source vulnerability scanner developed by the team at Greenbone Networks. To install this, we need to do the following steps:
However, once it does, make a note of the password (copy and paste it to a document) and url address given to you to launch and login to the scanner.
We have now installed some tools for our Kali Linux machine. However, these tools barely scratch the surface of what you can install and use in the wild. There are several more tools and resources out there that can be useful on your journey. You can find many of them on Github, other websites or with a good Google search. You can also find them in several books (like the ones I mention here) or you can even write your own scripts and tools!
However, you must be be careful and make sure the sources you are downloading from are trusted. There are some malicious attackers out there who put malware in their apps and tools and trick users into downloading them. Find and create some great, safe tools and Happy Hacking!
To see what will be using these tools against and why, check out my article on my experience with the OSCP.
There are also several books and equipment I recommend to help you on your way learning hacking skills and techniques.
Finally, check out my previous article about how I related the phases of a penetration test to the Infinity Stones from “The Avengers: Endgame”
Enter your email address to subscribe to this blog and receive notifications of new posts by email.