Out of the box, the only option for installing software on Kali Linux is to use the APT package manager from the command line, or download software directly from a developer's website.

This minimal approach can be appreciated, but sometimes it's just more convenient to use a GUI software mananger application to install programs. In this guide, we'll see how to install two different GUI software managers on Kali Linux, which can then be used to search for other software to install.

In this tutorial you will learn:
  • How to install Software Center on Kali
  • How to install Synaptic Package Manager on Kali
  • How to use Software Center or Synaptic to install software
Software Center and Synaptic running on Kali Linux
Software Center and Synaptic running on Kali Linux

Kali Linux is not your typical Linux distribution. It has a very specific use case, and that is to provide the user with penetration testing and ethical hacking tools. For other most popular Linux distributions please visit our dedicated linux download page.

Under the hood, Kali Linux runs much like Debian, on which it is based. However, Kali should not be used as an ordinary operating system; it has a specific purpose in penetration testing and security auditing and should be used strictly for that.

For years, TrueCrypt was the gold standard in encrypting drives across platforms. TrueCrypt is gone now, but VeraCrypt is carrying on its legacy. It looks and works a lot like TrueCrypt did, and it's compatible with TrueCrypt partitions.

Even though VeraCrypt isn't available in Kali's repositories, but that doesn't mean that it's difficult to install. You can download the VeraCrypt installer right from the developers and use it to get set up on Kali.

In this tutorial you will learn:
  • How to Download and Unpack The Tarball.
  • How to Run the VeraCrypt Install Script.

The objective of this short guide is to explain how to enable autologin on Kali Linux with step by step instructions.

In this tutorial you will learn:
  • How to identify what is your system's default Display Manager.
  • How to edit an appropriate configuration file to enable autologin on Kali Linux.

The following guide will provide the readers with information on how to update/upgrade the Kali Linux system.

In this tutorial you will learn:
  • How to configure Kali Linux repositories
  • How to update Kali Linux
  • How to upgrade kept back packages
  • How to uninstall no longer required packages

Symptoms

Unable to use standard Kali Linux provided repository for updating the Kali Linux system as well for new software installations.

The following error message appears when attempting to run the apt update command:
Err:1 http://http.kali.org/kali kali-rolling InRelease
  403  Forbidden [IP: 192.99.200.113 80]
Reading package lists... Done
E: Failed to fetch http://http.kali.org/kali/dists/kali-rolling/InRelease  403  Forbidden [IP: 192.99.200.113 80]
E: The repository 'http://http.kali.org/kali kali-rolling InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

This guide will provide you with an information on how to reset lost or forgotten root ( administrator ) password on Kali Linux.

In this tutorial you will learn:
  • How to boot Into GRUB menu on Kali Linux
  • How to edit GRUB menu
  • How to check RW permissions on the root partition
  • How to reset Kali root password and reboot the system

Objective

Download and run a Kali Linux VirtualBox image.

Distributions

This will work on any distribution running VirtualBox.

Requirements

A working Linux install with VirtualBox or root access to install VirtualBox

Difficulty

Easy

Conventions

  • # - requires given linux command to be executed with root privileges either directly as a root user or by use of sudo command
  • $ - given linux command to be executed as a regular non-privileged user

Introduction

VirtualBox is an extremely popular option for spinning up virtual machines through a graphical interface with minimal hassle. While you can install Kali Linux from scratch with VirtualBox, there's a much easier solution. Offensive Security, the developers behind Kali, provide official VirtualBox images that are ready to go immediately.

Objective

Create a Kali Linux persistent USB.

Distributions

This will work from any distribution.

Requirements

A working Linux install with root privileges. You'll also need a USB drive with at least 8GB of space.

Difficulty

Easy

Conventions

  • # - requires given linux command to be executed with root privileges either directly as a root user or by use of sudo command
  • $ - given linux command to be executed as a regular non-privileged user

Introduction

Objective

Install Kali Linux

Distributions

You'll just need a working install of something to make the install USB

Requirements

A free hard drive to install Kali

Difficulty

Easy

Conventions

  • # - requires given linux command to be executed with root privileges either directly as a root user or by use of sudo command
  • $ - given linux command to be executed as a regular non-privileged user

Introduction

Kali Linux is a powerful toolkit for security testing. In most cases, you can simply run it temporarily from a USB drive, but there are occasions when you want a dedicated Kali install for longer term testing. Please keep in mind that Kali is not a general purpose Linux distribution. It is not intended for daily use and may(ironically) prove insecure.

When it comes to testing the security of web applications, you'd have a hard time finding a set of tools better than Burp Suite from Portswigger web security. It allows you to intercept and monitor web traffic along with detailed information about the requests and responses to and from a server.

This tutorial covers setting up Burp Suite and using it as a proxy for Firefox, how to gather information and use the Burp Suite proxy, a realistic testing scenario using information gathered through the Burp Suite proxy and many of the other features that Burp Suite has to offer.

Objective

Use Fluxion to create a evil twin access point to steal WiFi login credentials, demonstrating the need for user education.

Distributions

Kali Linux is preferred, but this can be done with any Linux distribution.

Requirements

A working Linux install with root privileges and two wireless network adapters.

Difficulty

Easy

Conventions

  • # - requires given linux commands to be executed with root privileges either directly as a root user or by use of sudo command
  • $ - requires given linux commands to be executed as a regular non-privileged user

Introduction

Users are always the least secure part of a network. Anyone who has any experience as an admin will tell you that most users know absolutely nothing about security. That's why they're by far the easiest way for an attacker to gain access to your network.

Objective

Test the security of your WiFi password by attacking it

Distributions

This will work with any Linux distribution, but it's recommended that you use Kali.

Requirements

A working Linux distribution with a WiFi adapter and root privileges.

Difficulty

Easy

Conventions

  • # - requires given linux commands to be executed with root privileges either directly as a root user or by use of sudo command
  • $ - requires given linux commands to be executed as a regular non-privileged user

Introduction

Most people have terrible passwords, and WiFi is no exception. Your WiFi password is your primary line of defense against unwanted access to your network. That access can result in a whole host of other nasty things because an attacker can monitor the traffic on your network and even gain direct access to your computers.

The best way to prevent such an intrusion is to use the same tools an attacker would to test the security of your WiFi password.

burp web penetration testing guide

Introduction

It's important to remember that Burp Suite is a software suite, and that's why a whole series was needed to cover even just the basics. Because it is a suite, there are also more tools bundled in that work in conjunction with one another and the proxy that you're already familiar with. These tools can make testing any number of aspects of a web application much simpler.

This guide isn't going to go into every tool, and it isn't going into too much depth. Some of the tools in Burp Suite are only available with the paid version of the suite. Others generally aren't used as frequently. As a result, some of the more commonly used ones were selected to give you the best practical overview possible.

All of these tools can be found on the top row of tabs in Burp Suite. Like the proxy, many of them has sub-tabs and sub-menus. Feel free to explore before getting into the individual tools.

brute force test penetration web kali burp

Introduction

In this third part of the Burp Suite series, you will learn how to actually collect proxied traffic with Burp Suite and use it launch and actual brute force attack. It will run somewhat parallel to our guide on Testing WordPress Logins with Hydra. In this case, though, you will use Burp Suite to gather information on WordPress.

The purpose of this guide is to illustrate how the information gathered by Burp Suite's proxy can be used to conduct a penetration test. Do Not use this on any machines or networks that you do not own.

For this guide, you will also need Hydra installed. It's not going to go into depth on how to use Hydra, you can check out our Hydra SSH guide for that. Kali Linux already has Hydra installed by default, so if you're using Kali, don't worry. Otherwise, Hydra should be in your distro's repositories.

FIND LATEST LINUX JOBS on LinuxCareers.com
Submit your RESUME, create a JOB ALERT or subscribe to RSS feed.
LINUX CAREER NEWSLETTER
Subscribe to NEWSLETTER and receive latest news, jobs, career advice and tutorials.
DO YOU NEED ADDITIONAL HELP?
Get extra help by visiting our LINUX FORUM or simply use comments below.

You may also be interested in: