πŸ“± Mobile Security Tips

Sarah Chen — iOS Security Specialist

{
“title”: “Kali Linux Cheatsheet for Penetration Testing”,
“content”: “

What is Kali Linux?

Kali Linux is a Debian-based Linux distribution specifically designed for penetration testing and ethical hacking. It comes pre-installed with numerous tools for various security tasks, including network analysis, vulnerability assessment, and exploitation.

Installation

To install Kali Linux, download the ISO from the official website. You can create a bootable USB or run it in a virtual machine like VirtualBox or VMware.

Basic Syntax

Most Kali tools can be run from the command line, with the general syntax being:

$ tool_name [options] [targets]

Discovery

Nmap

Nmap is a powerful network scanning tool. Here are some useful commands:

# Basic Scan\nnmap \n\n# Scan multiple IPs\nnmap  \n\n# Scan a range\nnmap /24\n\n# OS detection\nnmap -O \n\n# Aggressive scan (detailed info)\nnmap -A 

Scanning

Masscan

Masscan is incredibly fast for network scanning. Here’s how to use it:

# Basic usage\nmasscan  -p

Exploitation

Metasploit

Metasploit is a powerful exploitation framework. Here are common commands:

# Start Metasploit\nmsfconsole\n\n# Search for exploits\nsearch \n\n# Use an exploit\nuse \n\n# Set target IP\nset RHOST \n\n# Execute the exploit\nexploit

Analysis

Burp Suite

Burp Suite is an integrated platform for testing web applications. Here are key instructions:

# Start Burp\nburpsuite\n\n# Set up a proxy in your browser\nlocalhost:8080 (default)\n\n# Scan the target\ntarget > Scan

Evasion

Veil-Evasion

Veil-Evasion is a tool for generating payloads that evade detection:

# Generating a payload\nveil\n\n# Choose a payload\nuse \n\n# Set options\nset LHOST \nset LPORT \n\n# Generate the payload\ngenerate

Reporting

Dradis

Dradis is a tool for managing information during assessments:

# Start Dradis\ndradis\n\n# Create a new project\ncreate_project \n\n# Add notes and results\nadd_note 

Quick Reference Table

Flag Description
-p Specify port(s) to scan
-O Enable OS detection
-A Enable aggressive scan

Pro Tips

  • Use