- The Kali architecture is based on Debian, right?
And it basically has all the underlying utilities
and facilities of the Debian Linux distribution.
It just has many and many different hacking tools
that you can, you know, of course,
take advantage of for pen testing.
Now we will go over some of the major categories
of these tools later in this lesson.
However, I want to actually cover a few things
about the underlying Kali base install
and the default user (muffled speaking) password.
Now typically, we always suggest that the user, you know,
or any user, use a non-privileged account
when running any operating system, right?
So that includes Linux, Windows, Mac OS X,
instead of actually running root at all the time
or privileged account all the time, use things like sudo.
Definitely use sudo whenever you need the escalation
of privileges and to run, you know,
the commands as root, right?
But typically, you know, it's a very well known security
best practice that, you know, you do not run everything
in root and that you actually run sudo
whenever needed, right?
So that provides an extra layer of protection between
the user and any potential destructive operating system
commands or operation, and of course, from preventing,
you know, any type of malicious activity
forth actually taking place in the system.
Now on the other hand, Kali Linux contain many
tools that can only run with root privileges.
Also it is not typical that you run, you know, as root,
if you have a multi-user environment, right?
But in this case, actually, you know, with Kali Linux,
it is actually very unlikely that you will run Kali Linux
in a multi-user environment, right?
Typically, they're running in your laptop.
If you're actually doing a pen testing for a customer,
or if actually you're doing pen testing internally
in the corporation, you probably will have, I mean,
virtual machines, you know, throughout your environment
and many installations of it.
But typically you're not going to interact with a system
where multiple users do interacting with the system
at the same time, right?
Now if you do have some type of automation for pen testing,
and you have some scripts and everything,
you actually have to, you know, use common sense
and actually use the sudo whenever it's needed, right?
So in those cases, you know, of course, you're not,
you know, you will have to actually attain
to the best practices, excuse the best practice
that I'm actually talking about here.
But in the case that if you actually just running, you know,
Kali Linux on a laptop, in your lab or, you know,
in a pen testing gig, basically you most definitely
are going to run it as root because most of those tools can
only run with root privileges.
Now the default password in Kali is toor, that is, T-O-O-R.
Now you should definitely change it
as soon as you install it, right?
But in a lot of cases, actually running a lot of these tools
actually as root, and, you know, the only user that you may
have in the Linux distribution on your laptop
may be actually the root user.
Now as I mentioned before in this lesson, there are tons of,
you know, tools that are already packaged in Kali,
and depending on the version of Kali that you install,
you may actually have, you know, all of them, or you may
have just a base install, right?
Only includes a few of them, right?
Now the link that I'm actually showing here lists
all the different tools that are available in Kali.
And I always go to this link to find out if there
are any new tools available in the latest version of Kali.
There are definitely a lot of different categories,
you know, the first one is actually information gathering,
and there you're actually going to see tools like acccheck,
you know, tools actually related to Cisco specifically,
like cisco-torch, CaseFile, dnsenum, dnsmap, dnswalk,
and the list just goes on and on,
as you actually see here, right?
So, Nmap, sslstrip, the THC-IPV6 sweep,
Wireshark for, you know, sniffing and many others, right?
Now the other category is vulnerability analysis,
and in there, you actually have a specific analysis tools
for specific vulnerabilities like, you'll see a few here
for Cisco, you'll see Powerfuzzer and sfuzz,
you know, those are actually fuzzer, sqlmap,
which is actually used for database testing as well
as Sqlninja and sqlsus, the THC-IPV6 sweep, I mean,
of course, is also here because you have some utilities
that are aimed for vulnerability analysis.
And of course the list goes on and on.
Throughout this course, of course we're actually going
to be hitting several of these tools, and we're going
to be explaining what, you know, each of these tools
are actually used for and how you can also combine your
attack because, you know, these attacks
are actually not done in isolation, right?
You may start with a passive reconnaissance and then
an active reconnaissance with a scanner, then after
that you actually perhaps identify specific victims
in the network and you launch, you know,
vulnerabilities analysis tools and fuzzers
to actually look for those vulnerabilities
and then go to exploitation tools which is another category
here, and use things like Armitage or Backdoor Factory,
BeEf, you know, sqlmap again, you know, several,
all the tools that are specific for exploitation.
You also have, you know, in case you're doing actually
wireless penetration testing, wireless attack tools,
Aircrack-ng is actually one of the most used out there,
but you may have things like coWPAtty, crackle,
and again we're actually going to go over several
of these tools throughout the whole course, right?
Another category is web applications, you know,
series of tools on here, I'm actually just showing,
you know, the long list.
Stress testing, and also forensics tools, right?
Now we have sniffers and tools for doing spoofing,
password attack tools, also tools to be able
to maintain access and persistency in the system.
So after you actually exploit the system, you have some
tools in here that allows you to actually maintain
that persistency in that system, right?
So we're actually going to be covering
all these throughout the course.
You're going to learn how to actually maintain persistency
after you have compromised a system.
You also have reverse engineering tools, you know,
things like YARA and javasnoop
and some other ones, right, are there.
Hardware hacking tools, we actually have a few,
we don't have a lot, but there's a few in here.
And also even reporting tools, you know, things
like CaseFiles and KeepNote, MagicTree and Nipper-ng and,
you know, several others, right?
So as you can see, the list of tools that are in Kali
are fairly comprehensive, right?
And, you know, previously, I mentioned that there's other,
you know, tools out there like Pen 2 and, you know,
several of them that are available other than Kali.
But Kali, by far, is actually one of the most complete,
are most comprehensive Linux distribution for pen testing,
as you can actually see here.