Tools¶

Kali¶

snap package manager¶

Kali uses debian package manager (dpkg) and apt. In order to use snap you need to install it:

sudo apt update
sudo apt install snapd -y
sudo systemctl enable snapd
sudo systemctl start snapd
sudo snap install snap-store
snap run snap-store

Fuzzer¶

medusa¶

Where to get: already included in kali

Usage:

#example:
medusa -h $IP -u kali -P /usr/share/wordlists/rockyou.txt -M $MODULE

Supported modules: cvs, ftp, http, imap, mssql, mysql, nntp, pcanywhere, pop3, postgres, rexec, rlogin, rsh, smbnt, smtp-vrfy, smtp, snmp, ssh, svn, telnet, vmauthd, vnc, web-form, wrapper

crackmapexec¶

Where to get: already included in kali

Usage:

crackmapexec [ldap,ssh,mssql,smb,winrm] $IP ...

Can be used in combination with nmap.xml, nessus.

Content Checker¶

Nuclei - Community Powered Vulnerability Scanner¶

https://nuclei.projectdiscovery.io/

CookieMonster¶

echo "host" | nuclei -t cookie-extractor.yaml  | cut -d "=" -f 2 | cut -d ";" -f 1 > cookies && for cookie in $(cat cookies); do ./cookiemonster -cookie $cookie; done

Remote Desktop tools¶

XVncViewer¶

Where to get: already included in kali

Usage:

xvncviewer -noshare $IP::$PORT

Microsoft RDP¶

Where to get: already included in kali

Usage:

xfreerdp /u:$USER /p:$PASS /v:$IP:$PORT

Remmina¶

Where to get: https://remmina.org/how-to-install-remmina/

How to install:

echo 'deb http://ftp.debian.org/debian stretch-backports main' | sudo tee --append /etc/apt/sources.list.d/stretch-backports.list >> /dev/null
sudo apt update
sudo apt install -t stretch-backports remmina remmina-plugin-rdp remmina-plugin-secret remmina-plugin-spice

Usage:

# opens the ui
remmina