📱 Mobile Security Tips
Sarah Chen — iOS Security Specialist
What is Kali Linux?
Kali Linux is a Debian-based Linux distribution specifically geared towards penetration testing and security auditing. It comes pre-installed with numerous tools that cater to various information security tasks including penetration testing, security research, computer forensics, and reverse engineering.
Installation
Kali Linux can be installed on a physical machine or run as a virtual machine. You can download the latest version from the official website and follow the installation guide. You can also opt for a live USB option for immediate use without installation.
Basic Syntax
Most commands in Kali Linux are executed from the terminal. The basic syntax typically follows this structure:
COMMAND [options] [arguments]
Discovery
Nmap: Network Scanning
Nmap (Network Mapper) is one of the most versatile network scanning tools.
| Flag | Description |
|---|---|
| -sS | Perform a SYN scan (stealth scan). |
| -sV | Detect service versions. |
| -O | Enable OS detection. |
nmap -sS -sV -O target_ip
Scanning
Netcat: Banner Grabbing
Use Netcat (nc) to grab banners from services running on specific ports.
echo '' | nc target_ip port_number
Exploitation
Metasploit: Exploitation Framework
Metasploit is a versatile framework for developing, testing, and using exploit code.
msfconsole
To use a specific exploit, use:
use exploit/linux/samba/username_map_script
Analysis
Wireshark: Packet Analysis
Wireshark is a network protocol analyzer that lets you capture and interactively browse network traffic.
wireshark
Evasion
Using Proxychains
Proxychains allows you to run any application through a proxy. Edit the configuration file at /etc/proxychains.conf.
proxychains4
Reporting
Creating Reports with Lynis
Lynis is a security auditing tool for Unix-based systems. Generate reports with:
lynis audit system
Quick Reference Table
| Tool | Usage |
|---|---|
| Nmap | Network scanning |
| Metasploit | Exploitation |
| Wireshark | Packet analysis |
| Lynis | System auditing |
Pro Tips
- Use
nmap -A target_ipfor aggressive scanning. - Automate reports with Metasploit using commands in resource files.
- Use filters in Wireshark to analyze specific traffic easily.
Real-World Examples
- Identifying open ports and services with Nmap:
nmap -sV -O -T4 target_ip. - Gaining shell access via Metasploit:
exploit/multi/handler. - Using Wireshark for VoIP analysis with appropriate filters.