domingo, 23 de agosto de 2020

Kali Linux VM Installation And Setup

Preface

From time to time I realize that certain tasks that are trivial for me are not necessarily easy for others, especially if they are just getting started with IT security stuff.

As I am going to be a Facilitator at SANS Munich 2015 on SEC 401, plus we have a few people at work who are just dipping their toe into the wonderful world of Kali Linux, it seemed like a good opportunity to make a short getting started / installation guide on the Kali VMWare VMs that you can download and quickly get started.

On top of that, when I check the statistics of the blog, I always see that the most popular posts are the detailed howtos and tutorials and I assume that it is because there is a need for this kind of posts too, so here it goes! :)


Step -1: Check in your BIOS/UEFI if virtualization is enabled

We are going to use virtualization, so it would be nice to enable it, right?

In BIOS/UEFI menus this is somewhere around "Security" and/or "Virtualization" and it is something like "Intel (R) Virtualization Technology" and "Intel (R) VT-d Feature" that needs to be set to "Enabled".


Step 0: Install VMWare Player or VMWare Workstation

The Kali Linux VMs are VMWare-based, so you need to install VMWare Player (free), VMWare Workstation (paid) or VMWare Fusion (paid, for OS-X).

The more desirable choice is to use VMWare Workstation or VMWare Fusion, as they have a Snapshot feature, while with VMWare Player, you are forced to take a full copy in order to have a sort of rollback feature.


Step 1: Download Kali VM

We need to download the Kali VMs from the "Custom Kali Images" download site, where you can find a 64 bit (amd64) and a 32 bit PAE (i686) too.

There are also Torrent files for the images and based on experience, using Torrent is much more faster and reliable than the HTTP download, so if you can, use that!

Once you have downloaded the VMs, do not forget to check their SHA1 hash!!! On Linux, you can simply use the sha1sum command at a terminal. For Windows, you can use something like the MD5 & SHA Checksum Utility.


Step 2: Change Kali VM default root password

The Kali VM comes with a preset root password, which is "toor" (without the quotes), therefore, it has to be changed.

Here is how you do it:
root@kali:~# passwd
Enter new UNIX password:
Retype new UNIX password:
passwd: password updated successfully


Step 3: Change Kali VM default SSH keys

The Kali VM also comes with SSH preinstalled, so we need to change the SSH keys to avoid SSH MiTM attacks.
Here is how you do it:
root@kali:~# cd /etc/ssh/
root@kali:/etc/ssh# mkdir default_kali_keys
root@kali:/etc/ssh# mv ssh_host_* default_kali_keys/
root@kali:/etc/ssh# dpkg-reconfigure openssh-server
Creating SSH2 RSA key; this may take some time ...
Creating SSH2 DSA key; this may take some time ...
Creating SSH2 ECDSA key; this may take some time ...
insserv: warning: current start runlevel(s) (empty) of script `ssh' overrides LSB defaults (2 3 4 5).
insserv: warning: current stop runlevel(s) (2 3 4 5) of script `ssh' overrides LSB defaults (empty).

Now we can check if the keys are really changed:

root@kali:/etc/ssh# md5sum /etc/ssh/*key*
md5sum: /etc/ssh/default_kali_keys: Is a directory
6abe210732068fa7ca95854c3078dba5 /etc/ssh/ssh_host_dsa_key
1b5f3c1a1b5c48cc3cce31b116e8b6f8 /etc/ssh/ssh_host_dsa_key.pub
8f0f60855e5ab8cac8103d64faab090f /etc/ssh/ssh_host_ecdsa_key
aace49ae9236815c9a1672f8ecb2b1e2 /etc/ssh/ssh_host_ecdsa_key.pub
cf861a9f743fb4584ab246024465ddf1 /etc/ssh/ssh_host_rsa_key
d5d65d8ad023a6cb1418ae05007bc6d3 /etc/ssh/ssh_host_rsa_key.pub
root@kali:/etc/ssh# md5sum /etc/ssh/default_kali_keys/*key*
c8d5b82320a4ddde59d0e2b6d9aad42a /etc/ssh/default_kali_keys/ssh_host_dsa_key
6b12ddecd463677cde8097e23d0f219a /etc/ssh/default_kali_keys/ssh_host_dsa_key.pub
fecf056571a3dfbf3635fc2c50bf23c5 /etc/ssh/default_kali_keys/ssh_host_ecdsa_key
e44b7c50635de42e89b3297414f5047d /etc/ssh/default_kali_keys/ssh_host_ecdsa_key.pub
e9e0267484e020878e00a9360b77d845 /etc/ssh/default_kali_keys/ssh_host_rsa_key
ceee93d7bbc9f9b9706e18f23d4e81f1 /etc/ssh/default_kali_keys/ssh_host_rsa_key.pub

Step 4: Update Kali VM

Next you need to update your Kali VM so that everything is patched.

Here is how you do it:

root@kali:~# apt-get update
Get 1 http://http.kali.org kali Release.gpg [836 B]
Get:2 http://security.kali.org kali/updates Release.gpg [836 B]
********************************* SNIP *********************************
Fetched 16.7 MB in 14s (1,190 kB/s)
Reading package lists... Done
root@kali:~# apt-get upgrade
eading package lists... Done
Building dependency tree
Reading state information... Done
The following packages have been kept back:
********************************* SNIP *********************************
The following packages will be upgraded:
********************************* SNIP *********************************
241 upgraded, 0 newly installed, 0 to remove and 16 not upgraded.
Need to get 740 MB of archives.
After this operation, 130 MB disk space will be freed.
Do you want to continue [Y/n]? Y
Get:1 http://security.kali.org/kali-security/ kali/updates/main libc6-i386 amd64 2.13-38+deb7u7 [4,044 kB]
Get:2 http://http.kali.org/kali/ kali/main base-files amd64 1:1.1.0 [77.5 kB]
********************************* SNIP *********************************
root@kali:~#


Step 5: Create a Snapshot/Copy the VM

Once you are done with all the above, you can make a Snapshot in case of VMWare Workstation or copy the files of the VM in case of VMWare Player, so that you can roll back to this clean stat in case you misconfigure something.

Hope this was helpful. Happy hacking!


Related links


  1. Pentest Tools For Windows
  2. Hacker Tools Hardware
  3. Hacking Tools Hardware
  4. Hack Rom Tools
  5. Hack Tools For Ubuntu
  6. Pentest Tools Windows
  7. Hacker Tool Kit
  8. Hacking Tools For Mac
  9. Hacking Tools Free Download
  10. Hack Tools Pc
  11. Ethical Hacker Tools
  12. Nsa Hacker Tools
  13. Growth Hacker Tools
  14. Tools Used For Hacking
  15. Termux Hacking Tools 2019
  16. Ethical Hacker Tools
  17. Pentest Tools
  18. Hacking Tools For Windows
  19. Hacking Tools Online
  20. Easy Hack Tools
  21. Pentest Tools Linux
  22. Hack Tools Download
  23. Pentest Tools List
  24. Pentest Tools Linux
  25. Pentest Tools Linux
  26. Hacker Tools Free
  27. Nsa Hack Tools Download
  28. How To Hack
  29. Best Hacking Tools 2019
  30. Hack Tools Github
  31. Best Hacking Tools 2020
  32. Hacker Tools Online
  33. Hacker Tools Hardware
  34. How To Make Hacking Tools
  35. Pentest Tools Review
  36. Hackrf Tools
  37. Hacking Tools For Pc
  38. Hacker Tools 2019
  39. Hacking Tools Windows 10
  40. Wifi Hacker Tools For Windows
  41. Pentest Box Tools Download
  42. Ethical Hacker Tools
  43. Top Pentest Tools
  44. Hackrf Tools
  45. Hacker Tools For Ios
  46. Wifi Hacker Tools For Windows
  47. New Hacker Tools
  48. Pentest Recon Tools
  49. Hacker Tools Software
  50. Hacking Tools Pc
  51. Pentest Tools Subdomain
  52. Hacking Tools Download
  53. Wifi Hacker Tools For Windows
  54. Pentest Tools Download
  55. Hacking Tools Github
  56. Physical Pentest Tools
  57. Pentest Tools Url Fuzzer
  58. Pentest Tools Subdomain
  59. Hacking Tools Hardware
  60. Hacker Tools 2020
  61. Hacking Tools Usb
  62. Github Hacking Tools
  63. Kik Hack Tools
  64. What Are Hacking Tools
  65. Pentest Tools Find Subdomains
  66. Pentest Tools Alternative
  67. World No 1 Hacker Software
  68. Hack Website Online Tool
  69. Pentest Tools Open Source
  70. Pentest Recon Tools
  71. Pentest Tools Bluekeep
  72. How To Hack
  73. Hacker Search Tools
  74. Hacker Tools Linux
  75. Pentest Tools
  76. Hack Tools Pc
  77. Nsa Hack Tools
  78. Nsa Hack Tools
  79. Termux Hacking Tools 2019
  80. Hack Tools Download
  81. Physical Pentest Tools
  82. Termux Hacking Tools 2019
  83. Pentest Reporting Tools
  84. Hacker Tools Linux
  85. Hacking Tools Mac
  86. Computer Hacker
  87. Pentest Tools Free
  88. Hacking Tools For Kali Linux
  89. Pentest Tools Port Scanner
  90. Pentest Tools Website
  91. Hack Tools Online
  92. Pentest Tools Android
  93. World No 1 Hacker Software
  94. Hacker Tools Mac
  95. Hacking Tools Kit
  96. Pentest Tools Alternative
  97. Hack Tools
  98. Pentest Tools Subdomain
  99. Hacker Tools
  100. Hacker Tools Linux
  101. Hacker Tools Mac
  102. Hack Rom Tools
  103. Pentest Tools Find Subdomains
  104. New Hack Tools
  105. Termux Hacking Tools 2019
  106. Github Hacking Tools
  107. Hack Tools For Mac
  108. Pentest Tools Open Source
  109. Hacker Tools Free
  110. Pentest Automation Tools
  111. Pentest Tools Tcp Port Scanner
  112. Pentest Tools Apk
  113. Hacker Tools For Mac
  114. Easy Hack Tools
  115. Android Hack Tools Github
  116. Physical Pentest Tools
  117. Hacking Tools Software
  118. Pentest Tools Apk
  119. Hacker Tools Mac
  120. Hack Tools For Ubuntu
  121. Hacking Tools Windows 10
  122. What Are Hacking Tools
  123. Pentest Tools For Android
  124. Hackers Toolbox
  125. Pentest Tools Website Vulnerability
  126. Hacker Tools Free Download
  127. Hack Tools Download
  128. Hack Tool Apk
  129. Pentest Tools Bluekeep
  130. Hacker Tools List
  131. What Are Hacking Tools
  132. Hacker Tools
  133. Hacker
  134. Pentest Tools For Ubuntu
  135. Hacking Tools Usb
  136. Pentest Tools Free
  137. Pentest Tools Url Fuzzer
  138. Pentest Reporting Tools
  139. Hacker Tools Apk Download
  140. Pentest Tools For Ubuntu
  141. Hacker Tools Free
  142. Hacker Tools 2019
  143. Pentest Box Tools Download
  144. Pentest Tools Download
  145. Underground Hacker Sites
  146. Hacker Tools List
  147. Pentest Tools Online
  148. Hacker Tools For Windows
  149. Hack Tools
  150. Hack Rom Tools
  151. Pentest Tools Download
  152. Hacker Tools Hardware
  153. Hacker Techniques Tools And Incident Handling
  154. Hacker Tools For Ios
  155. Hacking Tools Kit
  156. Android Hack Tools Github
  157. Hack Tools For Mac
  158. Pentest Tools Subdomain
  159. Hacker Tools Online
  160. Hack Tools Github
  161. Hack Apps
  162. Hacker Tools Linux
  163. Hacking Tools 2020
  164. Hack Tool Apk
  165. Hacker Hardware Tools
  166. Hackers Toolbox
  167. Computer Hacker
  168. Wifi Hacker Tools For Windows
  169. Hack Tools Pc

No hay comentarios:

Publicar un comentario