π± Mobile Security Tips
Sarah Chen — iOS Security Specialist
{
“title”: “Kali Linux Cheatsheet for Penetration Testing”,
“content”: “
What is Kali Linux?
Kali Linux is a Debian-based Linux distribution specifically designed for penetration testing and ethical hacking. It comes pre-installed with numerous tools for various security tasks, including network analysis, vulnerability assessment, and exploitation.
Installation
To install Kali Linux, download the ISO from the official website. You can create a bootable USB or run it in a virtual machine like VirtualBox or VMware.
Basic Syntax
Most Kali tools can be run from the command line, with the general syntax being:
$ tool_name [options] [targets]
Discovery
Nmap
Nmap is a powerful network scanning tool. Here are some useful commands:
# Basic Scan\nnmap\n\n# Scan multiple IPs\nnmap\n\n# Scan a range\nnmap\n\n# OS detection\n/24 nmap -O\n\n# Aggressive scan (detailed info)\nnmap -A
Scanning
Masscan
Masscan is incredibly fast for network scanning. Here’s how to use it:
# Basic usage\nmasscan -p
Exploitation
Metasploit
Metasploit is a powerful exploitation framework. Here are common commands:
# Start Metasploit\nmsfconsole\n\n# Search for exploits\nsearch\n\n# Use an exploit\nuse\n\n# Set target IP\nset RHOST\n\n# Execute the exploit\nexploit
Analysis
Burp Suite
Burp Suite is an integrated platform for testing web applications. Here are key instructions:
# Start Burp\nburpsuite\n\n# Set up a proxy in your browser\nlocalhost:8080(default)\n\n# Scan the target\ntarget > Scan
Evasion
Veil-Evasion
Veil-Evasion is a tool for generating payloads that evade detection:
# Generating a payload\nveil\n\n# Choose a payload\nuse\n\n# Set options\nset LHOST\nset LPORT\n\n# Generate the payload\ngenerate
Reporting
Dradis
Dradis is a tool for managing information during assessments:
# Start Dradis\ndradis\n\n# Create a new project\ncreate_project\n\n# Add notes and results\nadd_note
Quick Reference Table
| Flag | Description |
|---|---|
| -p | Specify port(s) to scan |
| -O | Enable OS detection |
| -A | Enable aggressive scan |
Pro Tips
- Use