Search here......

Showing posts with label Kali Linux Tutorials. Show all posts
Showing posts with label Kali Linux Tutorials. Show all posts

Tuesday, 22 August 2017

How to Install Kali Linux on Android using Linux Deploy

   The most important tool for every hacker, programmer and forensics expert is nothing other than-Linux. Linux's distros are used in forensics, checking bug in program, networks or system. Its well used from time before till now. Soo for every hacker needs it.
   Since it is developing OS for Computer especially for laptops , from before some year it begins to develop OS for Android too.. It can now be more usefull and handy because we can take it into our mobile wherever we want..
Soo today's article is all about how to install Kali linux in Android in Linux Deploy..

First of all these conditions are to be checked or fulfilled before proceeding ahead. :

*.A device running Android 2.1 and above, rooted.

*.At least 5 GB free space on internal or external storage.

*.A fast, wireless internet connection.

*.Patience to wait for a distribution to bootstrap from the network.

*.Rooted Android for full funcality

After having this in your hand we need to download Linux Deploy in Android... It acts as VMware for Android where you can install linux safely.

           Download Linux Deploy from Here

Now Installing Linux is pretty easy in Linux Deploy.
Do the setup as above. No any spelling mistakes should be done. By choosing Kali Linux in the “Distribution” tab, you’ve pretty much covered the important stuff. Optionally, you can choose your architecture, verify that the Kali mirror is correct, set your installation type and location on your Android device, etc. Generally speaking, the defaults provided by Linux Deploy are good to begin with.

After hitting the “install” button will start a Kali Linux bootstrap directly from offical repositories. The download depends upon your internet speed (will download kali linux only - no tools) .

Once the installation is complete, you can have Linux Deploy automatically mount and load up your Kali Linux chroot image. Thisalso includes the starting of services such as SSH and VNC for easier remote access. All of this is automagically done by hitting the “start” button. You should see Linux Deploy setting up your image with output similar to the following:
At this stage, Linux Deploy has started a VNC and SSH server insideyour chrooted Kali image. You can connect to the Kali session remotely using the IP address assigned to your Android device (in my case, 10.0.0.10).

Now you can use either a SSH or VNC client to access your Kali instance. The VNC password is “changeme” and the SSH credentials are “android” for the username (configured via Linux Deploy) and “changeme” as the password.

muts@slim:~$sshandroid@10.0.0.10android@10.0.0.10 password:Linux localhost 3.4.5-447845#1 SMP PREEMPT Fri Apr 12 17:22:34 KST 2013 armv7lKali GNU/Linux1.0[running on Android via Linux Deploy]android@localhost:~$sudosuroot@localhost:/home/android# dfFilesystem 1K-blocks Used Available Use%Mounted on/dev/loop34180944667268330401217%/tmpfs952708809526281%/devtmpfs95270809527080%/dev/shmroot@localhost:/home/android#root@localhost:/home/android# apt-get updateHit http://http.kali.org kali Release.gpgHit http://http.kali.org kali ReleaseHit http://http.kali.org kali/main SourcesHit http://http.kali.org kali/contrib SourcesHit http://http.kali.org kali/non-free SourcesHit http://http.kali.org kali/main armel PackagesHit http://http.kali.org kali/contrib armel PackagesHit http://http.kali.org kali/non-free armel PackagesIgn http://http.kali.org kali/contrib Translation-en_USIgn http://http.kali.org kali/contrib Translation-enIgn http://http.kali.org kali/main Translation-en_USIgn http://http.kali.org kali/main Translation-enIgn http://http.kali.org kali/non-free Translation-en_USIgn http://http.kali.org kali/non-free Translation-enReading package lists... Doneroot@localhost:/home/android#

If left unchanged, Linux Deploy will automatically set an image size of around 4 GB, for a “naked” installation of Kali. If you would like to install additional Kali tools down the road, you might want to consider using a larger image size, which is configurable via the settings in Linux Deploy.

We had to try a couple of VNC clients to get one to work properly. Although controlling Kali through a local VNC client isn’t the most convenient of tasks, it certainly is possible. However, we suspect that most people will be SSH’ing into this instance. The picture below was overlayed with a Kali Linux desktop screenshot taken from a Galaxy S4.
 
    Source : Official Site of Kali Linux

 #--   Also read how to hack wifi with kali linux

Note : Hacking is illegal. Any actions performed by reading above tutorial is not our fault. We are extremely  in side of anti hacking. 

Saturday, 22 April 2017

[ Tutorial ] Make a Zip Bomb

   

    Let’s take a look at how to create your very own zip bomb. It’s soo easy :

In WINDOWS 


  • Open up a text editor.
  • Start typing zeros (0).Many times. just keep the button pressed. Nearly keep your button pressed till it reached 1000 times.
  • Now select the whole thing (CTRL+A) and copy (CTRL+C) and paste(CTRL+V). And paste it many times till it reaches millions of Zeros.Do it slowly because some low powered systems may start hanging or lagging because of tooo many Zeros. So be careful and keep going.


Save it and close your text editor.

  • Go to the folder where your text file is stored, make around as many copies as you want ( many copies will make bomb size bigger) copies of the text file in the same folder. 


  • Now open up a command prompt where your text file is stored and.     

           type:   copy /b *.txt combined.txt

  • What this does is combine all the copies of the text files into one.  Using the command line, everything happens as a background process without a hiccup.
  •  Combining ten files of 10MB will yield one 100MB file, combine ten copies of that and you have a 1GB text file full of zeros in just a few seconds.Continue the process if you want more bigger size but remember your system will hang on though. 
  • Now, open up your compression app (any if you have WinZip, WinRar, 7-zip etc.) and compress the text file.
  • Hold on to your dropping jaw as you’ll likely see a compression rate of around 99.9% (1000 times reduction in file size), the 1 GB file would be around 1 MB compressed.
  • Now some final step of copy-pasting is left. Make a dozen or so copies of the zip file. Now zip them again. 
  • Make a few copies of this new zip file and zip all the copies.Keep on compressing all the copied folders. Be sure that now your 1 copy of file become 1gb, So if you are a begineer copy only 3-4 times and Compress/zip it.
  • And there we go. 

          In this way you can create a zip bomb of your own sizes. This tutorial is for windows, but you can also make it in Linux through the following steps :

In LINUX

  ▶ Type the following in Terminal of Linux

      dd if=/dev/zero bs=1000 count=1000000 | gzip >test.gz

      Send it to your friends and it will definitely annoy them . Use some creativity and rename the text file into some thing like My first letter for you.jpg and compress it and E-mail  to your friends.

   You must also know about the most famous zip bomb in the internet. Its is named as 42.zip (type password as 42 while extracting it,  as it is locked to prevent from newbie) 
 Here is the link for some famous zip bomb :
  ⏩ 42.zip --------Download here
          (actual size=4.3gb)
       
If you go on extracting all files, you will run out of space.

Note: This article is for educational purpose only.  Any harms or loss occured after learning from here is not our fault 

Thanks for making your time to visit our blog.Keep visiting and please do suscribe our blog for daily updates. Stay in touch with us at our facebook page @ HackOnNepal.
  


Wednesday, 19 April 2017

Hack WPA2 wifi with Kali

                
Lets Learn How to Hack WPA2 Encrypted wifi :
      Today we will learn about 5 Steps of Wifi Hacking – Cracking WPA2 Password. A lot of readers send many request regarding how to crack wireless WPA2 password in our request tutorial page.

      A flaw in a feature added to Wi-Fi, called Wi-Fi Protected Setup (WPS), allows WPA and WPA2 security to be bypassed and effectively broken in many situations. Many access point they have a Wifi Protected Setup enabled by default (even after we hard reset the access point).

Requirements:
       1. Wireless card (support promiscuous mode)In this tutorial I use ALFA AWUS036H from Amazon.
       2. Access point with WPA2 and WPS enabled.

Steps of Wifi Hacking – Cracking WPA2 Password:
1. Open our terminal (CTRL+ALT+T) and type airmon-ng
     this command will lists our wireless card that attached with our system.

2. The next step we need to stop our wireless monitor mode by running airmon-ng stop wlan0

3. Now we ready to capture the wireless traffic around us. By running airodump-ng wlan0 our wireless interface will start capturing the data.
From the picture above, we can see many available access point with all the information. In the green box is our victim access point which is my own access point

Information:
  BSSID (Basic Service Set Identification): the MAC address of access point
  PWR: Signal level reported by the card.Beacons: Number of announcements packets sent by the AP
#Data: Number of captured data packets (if WEP, unique IV count), including data broadcast packets.
 #/s: Number of data packets per second measure over the last 10 seconds.
 CH: Channel number (taken from beacon packets).MB: Maximum speed supported by the AP.
 IfMB= 11, it's 802.11b,    ifMB= 22 it's 802.11b+ and higher rates are 802.11g.
  ENC: Encryption algorithm in use.
  CIPHER: The cipher detected.
  TKIP is typically used with WPA and CCMP is typically used with WPA2.
  AUTH: The authentication protocol used.
  ESSID: Shows the wireless network name. The so-called “SSID”, which can be empty if SSID hiding is activated.

4. From the step 3 above, we can find access point with encryption algorithm WPA2 and note the AP channel number.      Now we will find out whether target AP has WPS enabled or not.
   wash -i wlan0 -c 8 -C -sif the WPS Locked status is No, then we ready to crack and move to step 5.

5. The last step is cracking the WPA2 password using reaver.
   reaver -i <your_interface> -b <wi-fi victim MAC address> –fail-wait=360
          Because we already get the information from step 3 above, so my commandlook like this:reaver -i wlan0 -b E0:05:C5:5A:26:94 –fail-wait=360it took about 4 hours to crack 19 characters WPA2 password from my Kali virtualBox, but it depend with our hardware and wireless card.

Conclusions:
1. WPA and WPA2 security implemented without using the Wi-Fi Protected Setup (WPS) feature are unaffected by the security vulnerability.

2. To prevent this attack, just turn off our WPS/QSS feature on our access point. See picture below (I only have the Chinese version)

Notes: Only practice this tutorial on your own lab and your own device. Hacking can be a crime if you don't know where to put it.This tutorial is only for pentresting on your own lab. Its only for educational purpose. ( for easy contact or visit our facebook page . )