Kali Linux Tool Cheatsheet for Penetration Testing

🤖 AI Prompts Cheatsheet

Daniel Osei — AI-Assisted Security Engineer

What is Kali Linux?

Kali Linux is a specialized Linux distribution designed for penetration testing, security auditing, and ethical hacking. It contains numerous tools aimed at various aspects of cybersecurity, making it a staple for security professionals and enthusiasts.

Installation

Kali Linux can be installed via different methods: as a primary OS, in a Virtual Machine, or on a USB stick. For full installation, download the ISO from the official website and follow the installation prompts. To create a live USB stick, use tools like Rufus or Etcher.

Basic Syntax

Commands in Kali Linux generally follow the format:

$ toolname [options] [target]

Discovery

Network Scanning

Use Nmap for discovering hosts and services.

nmap -sS -sV -O target_ip

This command performs a SYN scan, version detection, and OS detection on the target IP.

Service Discovery

Use the following to discover open ports:

nmap -p- target_ip

Scans all ports (1-65535) on the target IP.

Scanning

Vulnerability Scanning

Use OpenVAS for vulnerability assessments.

openvas-start

This command starts OpenVAS and sets it up for scanning.

Web Application Scanning

Use Nikto for scanning web applications:

nikto -h http://target_website

Scans a web server for vulnerabilities.

Exploitation

Exploiting Services

Use Metasploit for exploitation:

msfconsole

Starts the Metasploit framework, from which you can select and exploit vulnerabilities.

Running a Basic Exploit

Example command to exploit:

use exploit/windows/smb/ms17_010_eternalblue

Analysis

Analyzing Vulnerabilities

Use Burp Suite to analyze web application vulnerabilities.

burpsuite

This command launches Burp Suite for web traffic analysis and penetration testing.

Evasion

Bypassing Firewalls

Use RDP to bypass firewall restrictions:

rdesktop -u username -p password target_ip

Reporting

Generating Reports

Use Metasploit to create reports on findings:

db_export -f xml -a report.xml

Quick Reference Table

Flag	Description
-sS	TCP SYN scan
-p	Specify port range
-O	OS detection

Pro Tips

• Use the -v flag in Nmap for verbose output.
• Leverage -oN to save results in Nmap.

Real-World Examples

Utilize Kali Linux’s extensive toolkit to conduct penetration tests, assess security postures, and train teams through real-world simulations. The flexibility of Kali ensures that security professionals can tailor their responses to various environments and threats.