🤖 AI Prompts Cheatsheet
Daniel Osei — AI-Assisted Security Engineer
What is Kali Linux?
Kali Linux is a Debian-based Linux distribution designed for penetration testing, security research, and digital forensics. It comes pre-installed with numerous tools that security professionals rely on to assess the security of systems.
Installation
Kali Linux can be installed on various platforms, including physical machines, virtual environments, and even in the cloud. To install Kali Linux:
- Download the latest ISO from the Kali Linux downloads page.
- Write the ISO to a USB drive using tools like
ddorRufus. - Boot your computer from the USB drive and follow the installation prompts.
Basic Syntax
Most Kali tools follow a command-line structure of:
tool_name [options] [target]
Discovery
Nmap
Nmap is one of the most popular network scanning tools.
| Flag | Description |
|---|---|
| -sS | TCP SYN scan (stealth scan). |
| -sV | Service version detection. |
| -A | Aggressive scan options. |
Scanning
Nikto
Nikto is a web server scanner that performs comprehensive tests against web servers for multiple vulnerabilities.
Exploitation
Metasploit Framework
Metasploit is an indispensable penetration testing framework that provides information about security vulnerabilities and helps exploit them.
msfconsole
Analysis
Wireshark
Wireshark is a protocol analyzer that allows users to capture and interactively browse traffic on a computer network.
Evasion
Proxychains
Proxychains allows you to force any TCP connection made by a given application to follow through proxy (like Tor).
Reporting
Dradis
Dradis helps security teams to collaborate and report effectively.
Quick Reference Table
| Tool | Description |
|---|---|
| Nmap | Network vulnerability scanner. |
| Nikto | Web server security scanner. |
| Metasploit | Penetration testing framework. |
| Wireshark | Packet analyzer tool. |
| Proxychains | For proxying connections through Tor. |
| Dradis | Collaboration and reporting tool. |
Pro Tips
- Always keep your Kali tools up-to-date using
sudo apt update && sudo apt upgrade. - Leverage scripting to automate tasks within the Metasploit Framework.
- Utilize Nmap scripts for advanced scanning techniques with
-sCfor default scripts.
Real-World Examples
1. To scan a target network with services and OS detection using Nmap:
2. Exploiting a known vulnerability using Metasploit:
msfconsole
use exploit/windows/smb/ms17_010_eternalblue
set RHOST 192.168.1.10
exploit
3. Capturing network packets with Wireshark and analyzing them: