Kali Linux Tools: A Comprehensive Security Tool Cheatsheet

🛠 Security Tool Cheatsheet

Alex Morgan — Senior Penetration Tester

What is Kali Linux?

Kali Linux is a Debian-based Linux distribution designed for advanced penetration testing and security auditing. It comes preloaded with hundreds of security tools and is widely used by cybersecurity professionals around the globe.

Installation

Installation can be performed via a live USB, virtual machine, or directly onto hardware. Follow these steps for the live USB install:

1. Download the Kali Linux ISO from the official website.
2. Create a bootable USB using tools like Etcher or Rufus.
3. Boot from the USB and follow the on-screen instructions to install.

Basic Syntax

Most tools in Kali follow this fundamental syntax structure:

tool_name [options] [target]

Information Gathering

WHOIS Lookup

Gather information about a domain with whois domain.com.

whois -H domain.com

DNS Enumeration

Discover subdomains by using dnsenum domain.com.

dnsenum --enum domain.com

Vulnerability Scanning

Nmap

Nmap is vital for network discovery and security scanning. Use this command to scan a target:

nmap -sS -T4 -p 1-1000 target-ip

OpenVAS

To perform a detailed vulnerability analysis, use OpenVAS:

openvas-start

Then access the web interface at https://localhost:9392.

Exploitation

Metasploit

Launch Metasploit with:

msfconsole

For example, to exploit a specific vulnerability:

use exploit/windows/smb/ms17_010_eternalblue

Analysis

Wireshark

Analyze network traffic using Wireshark:

wireshark

Reporting

Metasploit Report Generation

Generate reports in Metasploit:

db_export -f xml -o report.xml

Quick Reference Table

Pro Tips

• Use nmap -oA output_name to save scan results in multiple formats.
• Explore Metasploit modules with search exploit_name.

Real-World Examples

• Scanning a corporate network for open ports might resemble: nmap -sS -p 80,443 target-ip.
• Leveraging exploitation might look like: msfconsole -r exploit.rc where exploit.rc contains your commands.