- Kali Linux Revealed: Mastering the Penetration Testing Distribution
- Top positive review
- Top critical review
- There was a problem filtering reviews right now. Please try again later.
- From the United States
- There was a problem loading comments right now. Please try again later.
- There was a problem loading comments right now. Please try again later.
- There was a problem loading comments right now. Please try again later.
- О переводе книги «Kali Linux Revealed»
- Read The Free Book
- Take The Kali Training
- Become a Certified Pentester
- The Ultimate Kali Linux Manual and Course
- Installing Kali Linux on AWS (Amazon Web Services) | Install Kali Linux on Cloud
Kali Linux Revealed: Mastering the Penetration Testing Distribution
Top positive review
I have been using Kali Linux for a while now as I am training towards a career in Cybersecurity. This books covers how to install Kali Linux and how to deploy it in an enterprise environment. I bought it to learn more about the features of the distro itself and I am happy to have gained a good insight from that perspective.
I see however that some users were expecting more from this book i.e penetration testing tools. They are not covered in this book. Consider it an official insightful manual of the distribution and not the tools.
Top critical review
There was a problem filtering reviews right now. Please try again later.
From the United States
I have been using Kali Linux for a while now as I am training towards a career in Cybersecurity. This books covers how to install Kali Linux and how to deploy it in an enterprise environment. I bought it to learn more about the features of the distro itself and I am happy to have gained a good insight from that perspective.
I see however that some users were expecting more from this book i.e penetration testing tools. They are not covered in this book. Consider it an official insightful manual of the distribution and not the tools.
There was a problem loading comments right now. Please try again later.
Right on time and just what I expected.
***ATTENTION***
This is not a hacking book. You won’t learn about pen testing or Metasploit. This is a book to help you get familiar with Kali Linux OS (Which is pretty important if you plan to be using it every day.)
There was a problem loading comments right now. Please try again later.
There was a problem loading comments right now. Please try again later.
As long as you understand what this book is going in, you’ll likely agree that it’s a good book. First of all, it’s not an advanced book. It begins with Linux basics that are pretty much applicable to any Debian based distribution (including Ubuntu). It’s just done through the lens of Kali. Right before I read this, I took and passed the LPI Linux Essentials Exam. To be honest, I kind of wish I read this book first. While I have already been exposed to the both basic and advanced commands, this book actually shows some different uses of even the more common commands. It’s a nice supplement.
This book is not a pentesting book. There is some introduction to certain tools but it mostly revolves around the operating system itself. This means if you have little experience with Linux, but you know you want to get into pen testing and ethical hacking, this is a great first book for you. You’ll get the basics as well as specifics about Kali itself. Keep in mind that you can use Kali as your regular OS too (I’ve known people who have) as pretty much anything that will run on Debian based distributions will run here.
Источник
О переводе книги «Kali Linux Revealed»
Летом 2017-го вышло первое издание книги «Kali Linux Revealed: Mastering the Penetration Testing Distribution». Она посвящена работе в Kali Linux. Книгу, на английском, можно купить на Amazon, её можно читать онлайн или скачать в виде PDF-файла.
Нам книга показалась интересной, появилась идея перевести её на русский. Но проект большой и серьёзный, поэтому прежде чем начать, хочется посоветоваться с сообществом Хабра, вынести на голосование вопрос: «Переводить или нет?».
Пользуясь случаем: по многочисленным просьбам, выпустили PDF-версию нашего перевода цикла статей про Bash-скрипты. Подробности тут.
Kali Linux — это популярный дистрибутив, основанный на Debian, главная задача которого — тестирование систем на проникновение. Он включает в себя множество инструментов, актуальность которых поддерживают благодаря частым обновлениям.
Сразу стоит сказать, что книга, о которой идёт речь, не о том, как исследовать и взламывать системы, а о том, как пользоваться дистрибутивом. По словам авторов, она предназначена для широкого круга читателей. Новичкам она подойдёт как учебник, более опытным пользователям позволит привести в порядок знания, профессионалы смогут найти в ней какие-то полезные детали. Её так же позиционируют как руководство для подготовки к сертификации Kali Linux Certified Professional.
На наш взгляд, основная аудитория книги — новички, которые хотят серьёзно подойди к изучению Debian, и, в частности — Kali Linux. Книга ориентирована на практику, она включает в себя 12 глав, в конце каждой главы есть небольшой раздел, где читателю предлагают выполнить упражнения. Сложность упражнений, по мере продвижения по книге, растёт.
Например, во второй главе в качестве упражнения предлагается скачать готовый образ, проверить его, создать Live-флэшку и загрузиться с неё. В пятой главе можно найти курсовой проект по установке Kali на Rasberry Pi 3 и настройке устройства в качестве беспроводной точки доступа. В девятой главе предлагают создать кастомный Live-ISO, который позволит Анжеле в этой серии Mr. Robot сделать своё дело, не касаясь клавиатуры.
Помимо основного материала, главы содержат небольшие врезки, например о том, почему пентестеры обычно ищут файлы с атрибутом setuid.
Вот краткое описание глав:
- О Kali Linux. Здесь, помимо исторической справки, рассказано о взаимоотношениях дистрибутива Kali Linux с Debian, о том, почему создан этот дистрибутив, о сценариях его использования, о его возможностях и особенностях.
- Начало работы с Kali. Тут речь идёт о том, где можно скачать готовый образ системы, какой образ выбрать, как его проверить, как создать загрузочный DVD или флэшку для работы с системой в Live-режиме.
- Основы Linux. Обзор Linux, командная строка, файловая система, полезные команды.
- Установка Kali Linux. Системные требования, обычная и автоматическая установка, установка на ARM-устройства, решение проблем.
- Настройка Kali Linux. Здесь рассказывают о сетевых настройках, об управлении пользователями и группами, о настройке служб и об управлении ими.
- Получение помощи. Тут пишут о работе с документацией, о сообществе и о подготовке баг-репортов.
- Защита и мониторинг Kali. В этой главе речь идёт о политиках безопасности, о защите системы, о логировании и мониторинге.
- Управление пакетами Debian. Здесь читателя знакомят с менеджером пакетов, репозиториями, рассказывают о том, как работать с пакетами, в том числе — решать различные проблемы, возникающие при их установке и обновлении.
- Расширенное использование системы. Эта глава посвящена модификации пакетов Kali, перекомпиляции ядра Linux, сборке собственных Live-образов.
- Kali Linux в организации. Здесь речь идёт о сетевой установке системы, об управлении конфигурацией, о расширении и настройке Kali.
- Введение в оценку защищённости ПО. Здесь рассказывают модели CIA и о применении Kali при оценке защищённости систем.
- Дальнейшие перспективы. В этой короткой главе авторы говорят о том, на что можно направить внимание после освоения дистрибутива Kali Linux. Например — на изучение Metasploit. В качестве одного из завершающих проектов здесь предлагается развернуть в облаке так называемый Kali Linux ISO of Doom.
Если мы примем решение о целесообразности перевода этой книги на русский, работа будет выполнена до конца текущего года. Полный текст мы разместим на GitHub, избранные вещи будем публиковать здесь.
Уважаемые читатели! Приглашаем вас проголосовать, ответить на вопрос о том, стоит ли, по вашему мнению, делать перевод. Кроме того, будем благодарны, если вы поделитесь своими мыслями о книге «Kali Linux: Revealed» и о дистрибутиве Kali Linux.
Источник
Read The Free Book
Want to get started with Kali Linux, but not sure how? Need to compile a custom kernel or build a custom Kali ISO? We’ve got a free Kali book for you! You can jump in right now and read the book either in online HTML, PDF or in printed form from Amazon.com.
Take The Kali Training
Feeling adventurous? Interested in jumpstarting your infosec career? Looking to improve your command of Linux? Your journey starts here! Read along and test your skills with online training. Sign up for a free account to track your progress and get recognition.
Become a Certified Pentester
Enroll in Penetration Testing with Kali Linux and pass the exam to become an Offensive Security Certified Professional (OSCP). All-new content for 2020. Learn More
The Ultimate Kali Linux Manual and Course
Whether you’re new to Information Security, or a seasoned security veteran, the Kali Linux Revealed Book and our online training exercises have something to teach you. The saying «You can’t build a great building on a weak foundation» rings true in the information security field as well, and if you use (or want to learn to use) Kali Linux in a professional capacity, you should familiarize yourself as best as you can with the internals of the penetration testing distribution. That is what this Kali Linux Revealed book is all about – turning you into a Kali Linux professional user.
Simply stated, learning how to master Kali gives you the freedom to create your own Kali Linux Recipes such as the Kali ISO of Doom, or the Evil Kali AP. After reading the Kali Linux Revealed book, you’ll be able to build optimized and custom Kali Linux kernels, host them on your own deployment repositories, or create your own custom Kali Appliances – and there’s so much more!
Источник
Installing Kali Linux on AWS (Amazon Web Services) | Install Kali Linux on Cloud
In today’s tutorial we are going to learn how we can install Kali Linux on AWS (Amazon Web Services). After installing Kali Linux’s latest version 2019.4 in AWS we can easily use it in Windows, Android, Mac, or any other Linux distributions. Previously we have learned how we can install Kali on Windows, Raspberry Pi, Android even in a Pen drive.
Today we are going to install Kali Linux on cloud. Installing on cloud have many benefits like we can use it on any other device and we can save our disk space and hardware resources.
Kali Linux is freely available on AWS marketplace. We can use AWS for first year free. Let’s see how we can install Kali Linux on AWS. By clicking in this link we can reach the AWS marketplace where Kali is located.
In the above screenshot we can see the version of Kali Linux is 2019.4, the latest Kali and this doesn’t need any extra cost. To use it we need to register on Amazon Web Service platform and need to provide our credit/debit card details for verification. AWS is free for first 12 months with limited features. Let’s register on AWS.
After register on AWS we need to navigate to services > EC2, like following screenshot
Then we click on «Launch Instance».
Here we need to click on Launch Instance |
After this we can choose an Amazon Machine Image (AMI). Here we can see lot’s of operating systems like ubuntu server, Windows Server and many more.
From the sidebar, we move into AWS marketplace, then we search for Kali Linux.
Now we select this, then we click on continue. Then our screen looks like following screenshot:
Here we can choose our instance type, that means we can choose how much hardware w can use like CPU, RAM, storage etc. Here we can use get 1 virtual CPU (2.5 GHz) and 1 GB RAM. Kali Linux recommended to use 2 GB RAM but we are using a free service so we go with the t2.micro type. Then we click on «Review and Launch».
Here we can review our instance. We can check the CPU details and other system information. Then we click on «Launch». Then a new popup window comes like following screenshot:
Now we can choose existing key pair or use can create a new key pair. We select a new key pair, then we give any name for our new key pair.
Then we download this key pair from the download options. We can use this key pair too connect our machine through SSH. For now we click on «Launch Instances». Then it will configure our system in some seconds.
Then we scroll down click on «View Instance». Here we can see all the instance we have created.
We can see the all informations here, like status, public DNS, public IP etc. We can scroll down for more informations.
From the «Actions» menu we can manage our instance.
Now we are all set our Kali Linux on AWS is running, we just copy our public DNS, and we can access our Kali Linux AWS from any other device over SSH. We need the downloaded key pair file and the public DNS.
First we use other Linux system to connect with Kali AWS machine . We have the key pair file in our Downloads folder so we use cd commands to go downloads folder.
Then we give the key pair file read-only permission for extra security by applying following command:
Now we connect with our Kali Linux AWS over ssh by using following command:
Here kali-in.pem is our key pair file’s name and ec2-user is default username for everyone, and after @ we paste the copied public DNS and press enter. Then it will asks if we want to continue here we type «yes» and enter.
Here we are in our Kali Linux’s terminal which installed on Amazon Web Services (AWS). We can check the release information here by using following command:
In the above screenshot we can see that our Kali Linux is 2019.4, its the latest version.
Now on a Windows PC we have the key pair file in Desktop. So we open command prompt (CMD) and change our change our directory to Desktop by using following command :
Now we can connect our Kali Linux AWS machine here from Windows by using following command:
The command is same here, and we are in our Kali AWS machine.
Kali AWS Cloud on Windows CMD |
We also can connect it from our Android devices we need Termux app we change our directory where our key pair file is located. In our case it is located in /sdcard/Download. So we move to that location using cd command
Then we use the same same command:
We can see the Kali Linux terminal here also we can use any Kali Linux tool or command here, like we need to open Metasploit, so we type following command:
Metasploit console will load very soon.
Metasploit in Android |
Here it doesn’t use our system’s resources, in this way we can install Kali Linux in cloud and access it on same time from any other devices with using our hardware resources. Main advantage is cloud install, installing Kali Linux on cloud makes it ultra portable. This have lots of benefits and this can be very useful to every penetration testers or cyber security experts. So share our tutorial on social media.
Enjoyed our tutorials, then follow us on blogger by clicking on follow us button, and follow us on Twitter also for regular updates.
Источник