- [Instructor] The default password root password
in Kali Linux is toor
Or T-O-O-R.
As a security practitioner
you may already know that you should change
the default password before using the system
and definitely before starting any services
such as SSH.
Now we mentioned earlier that if you're running
Kali in your laptop
and nobody else is using it
you may use the root account
when logging in.
However if you are thinking about starting
the SSH service
and then logging you know to the device
remotely, then of course, you know
use common sense and perhaps enable
a less privileged account, right.
And then use that account to then connect via SSH.
Now going back on how to change the root password
it is basically the same as in any other
Linux operating system, right.
So you can use the passwd
as I'm showing here.
Now I mentioned SSH
if you are not familiar with SSH
it actually stands for Secure Shell
and it's a protocol that allows you to
remotely access a computer
using encryption.
Now its not like telnet that its not secure
and it does not use encryption.
So SSH actually uses encryption and is considered to be
more secure than telnet.
So in other words
never use telnet and use SSH.
Now SSH is a based on TCP so you know
it operates on using the TCP protocol
and uses the default port of 22.
Of course you can actually change that port
but the default port is 22.
Now to start SSH, the SSH service in Kali
use the service SSH Start command
as I'm demonstrating here.
Now you can verify that the SSH service is running
and listening on TCP port 22
using the netstat command as I'm showing here.
And of course you can also try a connection
from a remote system
you know of course using SSH.
Now if you want to run the SSH service automatically
at boot time.
You need to enable you know that service
using the update-rc.d script.
This script is actually used to enable or disable
most of the services in Kali Linux at boot time.
Now here I'm showing how to use the update-rc.d script
to enable SSH at boot time.
HTTP services, in other words a web service
can be used during penetration testing.
Right, so
either for hosting a site or providing a platform
for downloading files to a target machine
or many other use cases, right.
HTTP as you probably already know
is also a TCP based service
which by default listens on port 80, right.
And now to start a service like Apache in Kali Linux
you know, you can actually use this service
Apache2 start command.
Now there are several other tools within Kali
that actually can start a web service
and they actually start them in other ports
than TCP port 80.
So as we actually cover those, some of those tools
you will actually learn how, you know those
actually can start a web service
and in specifically other ports.
Right.
Now you can also verify the HTTP service
in this case Apache
by using the netstat command
very similar to what we actually did before
right, so in this case netstat-antp
and in this case actually greping for apache.
Now of course you can start the HTTP service
or Apache at boot time
using the update-rc.d command or script, right.
Now most of the services in Kali operate
the same way that we actually followed in the htsh
and http d examples that I had before, right, so.
Now to get more control of these services
you can actually use tools such as reconf
or systvrc-conf
both designed to simplify and manage
boot persistence of these type of services.
Now there is another utility
that is a graphical base utility called
the Boot-Up Manager or BUM.
Boot-Up Manager is a PERL application
that is used to handle run level configurations
of any Debian derivative operating system.
In this case, actually Kali Linux is actually based
on the Debian Linux distribution.
Now with this program the user will easily
start and stop boot-up scripts
without the necessity to handle
complex links and permissions in the system.
Now you can install boot-up manager
using the pseudo app-get install bum command
as I'm demonstrating here
and then the scripts are actually located
in the common, you know
/etc/inti.d
you know scripts which are part of the
boot up sequence of any Debian like distribution.
Now if you're not familiar with the logic
and boot up architecture of a Debian based system like Kali
you should not play with sim links, permissions,
or any other settings in the system.
You can really mess up your system by doing that
right, so
I'd really invite you to, you know
before you do that
become familiar with the boot up architecture
with Linux, right.
Now this is why boot up manager is actually good for.
It will automate all your configuration
in a nice and clean graphical interface.
Right, so, in that case
that's one of the major benefits
of a boot up manager
as I'm actually demonstrating here.