在 Raspberry Pi 上試玩 Kali Linux

Kali Linux 是一套 base Debian 的 Linux,被設計用於數位取證和滲透測試,對於 Kali Linux 大家可能比較陌生,但它的前身可是大大有名的 BackTrack。
Kali Linux 官方網站:http://www.kali.org/
Kali Linux 的 Raspberry Pi Image 下載:http://www.offensive-security.com/kali-linux-vmware-arm-image-download/
[@more@]啟動 Raspberry Pi 後畫面

輸入登入的帳號/密碼:root/toor

執行 startx 進入桌面環境

選擇 Use default config 設定

Kali Linux 桌面

是採用 xfce 為預設的桌面環境

做一些簡單的使用上調整
安裝套件
# apt-get install vim mlocate

修改 .bashrc 設定
# vim $HOME/.bashrc
# You may uncomment the following lines if you want `ls’ to be colorized:
 export LS_OPTIONS=’–color=auto’
 eval “`dircolors`”
 alias ls=’ls $LS_OPTIONS’
# alias ll=’ls $LS_OPTIONS -l’
# alias l=’ls $LS_OPTIONS -lA’
#
# Some more alias to avoid making mistakes:
 alias rm=’rm -i’
 alias cp=’cp -i’
 alias mv=’mv -i’
 alias cls=’clear’

時區設定
# dpkg-reconfigure tzdata


之前有在 BackTrack 上使用過 metasploit,現在大概都忘光了!不過我發現這個版本似乎沒有把一些工具都放在功能表中。

# apt-cache search metasploit
armitage – Cyber attack management for Metasploit
framework2 – Metasploit Framework 2
hexorbase – Multiple database management and audit application
metasploit-framework – Framework for exploit development and vulnerability research
recon-ng – Web Reconnaissance framework written in Python
ruby-msfrpc-client – Ruby API for the Rapid7 Metasploit Pro RPC service
sandi – Exploit search engine
sqlninja – SQL server injection and takeover tool
teamsploit – Tools for group based penetration testing
w3af – framework to find and exploit web application vulnerabilities
w3af-console – framework to find and exploit web application vulnerabilities (CLI only)
metasploit – Penetration testing and exploit development tool with web-based interface