Kali Linux Revealed：渗透测试分布详解

需积分: 9 62 浏览量更新于2024-07-17 收藏 9.87MB PDF 举报

"Kali Linux Revealed - 1st edition.pdf" 本书《Kali Linux Revealed》是关于掌握渗透测试发行版的专业指南，由Raphaël Hertzog、Jim O’Gorman和Mati Aharoni共同撰写。该电子图书是官方在线版本，具有书签功能，提供了一个深入研究Kali Linux的宝贵机会。Kali Linux是一款基于Debian的Linux发行版，专为网络安全专业人士设计，用于安全审计和渗透测试。 Kali Linux Revealed详细介绍了Kali Linux的各个方面，包括其历史、设计哲学、安装过程以及核心工具的使用。书中涵盖了如何配置和定制Kali系统，使其适应各种渗透测试需求。此外，它还深入讲解了网络嗅探、漏洞扫描、密码攻击、Web应用渗透测试等关键技能，帮助读者成为熟练的渗透测试者。书中部分内容借鉴了Raphaël Hertzog和Roland Mas合著的《Debian Administrator's Handbook》的内容，该书是关于Debian Jessie的权威指南。根据Creative Commons Attribution-ShareAlike 3.0 Unported License，本书允许读者自由分享和改编，但需遵守署名-相同方式共享的条款，并确保遵循Kali Linux的商标政策。 Kali Linux Revealed不仅适合网络安全新手，也适合经验丰富的专业人士。它提供了实用的操作指南，同时深入解释了各种安全工具和技术的工作原理。通过学习这本书，读者将能够理解和掌握Kali Linux的强大功能，提升在网络安全领域的专业素养。此书的纸质版由Offsec Press出版，具有特定的ISBN编号，地址位于美国北卡罗来纳州。无论是否对原书进行修改，任何使用或分发此书的行为都必须遵守Kali Linux的商标政策，以保护Offensive Security的知识产权。《Kali Linux Revealed》是一本全面且深入的教程，旨在帮助读者精通渗透测试领域，理解并利用Kali Linux进行有效的安全评估和漏洞检测。通过这本书，读者可以系统地学习到Kali Linux的相关知识，提高自己的网络安全技能。

There was some speculation in the industry. Some thought that BackTrack was getting “bought

out”, selling its soul to a faceless evil corporate overlord for a massive payout. Offensive Secu-

rity was growing into one of the most respected training companies and a thought leader in our

industry, and some speculated that its success had gobbled up and sidelined the key BackTrack

developers. However, nothing could be farther from the truth.

In 2013, Kali Linux 1.0 was released. From the release notes: “After a year of silent development,

Offensive Security is proud to announce the release and public availability of Kali Linux, the most

advanced, robust, and stable penetration-testing distribution to date. Kali is a more mature, se-

cure, and enterprise-ready version of BackTrack.”

Kali Linux was not a mere rebranding of BackTrack. Sporting more than 600 completely repack-

aged tools, it was clearly an amazing toolset, but there was still more to it than that. Kali had been

built, from the ground up, on a Debian core. To the uninformed, this might not seem like a big

deal. But the ripple effects were staggering. Thanks to a massive repackaging effort, Kali users

could download the source for every single tool; they could modify and rebuild a tool as needed,

with only a few keystrokes. Unlike other mainstream operating systems of the day, Kali Linux

synchronized with the Debian repositories four times a day, which meant Kali users could get

wickedly current package updates and security fixes. Kali developers threw themselves into the

fray, packaging and maintaining upstream versions of many tools so that users were constantly

kept on the bleeding edge. Thanks to its Debian roots, Kali’s users could bootstrap an installation

or ISO directly from the repositories, which opened the door for completely customized Kali in-

stallations or massive enterprise deployments, which could be further automated and customized

with preseed files. To complete the customization trifecta, Kali Users could modify the desktop

environment, alter menus, change icons, and even replace windowing environments. A massive

ARM development push opened the door for installation of Kali Linux on a wide range of hardware

platforms including access points, single-board computers (Raspberry Pi, ODROID, BeagleBone,

and CubieBoard, for example), and ARM-based Chromebook computers. And last but certainly

not least, Kali Linux sported seamless minor and major upgrades, which meant devotees would

never have to re-install customized Kali Linux setups.

The community took notice. In the first five days, 90,000 of us downloaded Kali 1.0.

This was just the beginning. In 2015, Kali 2.0 was released, followed by the 2016 rolling releases.

In summary, “If Kali 1.0 was focused on building a solid infrastructure, then Kali 2.0 is focused on

overhauling the user experience and maintaining updated packages and tool repositories.”

The current version of Kali Linux is a rolling distribution, which marks the end of discrete ver-

sions. Now, users are up to date continuously and receive updates and patches as they are created.

Core tools are updated more frequently thanks to an upstream version tagging system, ground-

breaking accessibility improvements for the visually impaired have been implemented, and the

Linux kernels are updated and patched to continue wireless 802.11 injection support. Software De-

fined Radio (SDR) and Near-Field Communication (NFC) tools add support for new fields of security

testing. Full Linux encrypted disk installation and emergency self-destruct options are available,

XIV

Kali Linux Revealed

thanks to LVM and LUKS respectively, USB persistence options have been added, allowing USB-

based Kali installs to maintain changes between reboots, whether the USB drive is encrypted or

not. Finally, the latest revisions of Kali opened the door for NetHunter, an open-source world-class

operating system running on mobile devices based on Kali Linux and Android.

Kali Linux has evolved not only into the information security professional’s platform of choice,

but truly into an industrial-grade, world-class, mature, secure, and enterprise-ready operating

system distribution.

Through the decade-long development process, Muts and his team, along with the tireless dedi-

cation of countless volunteers from the hacker community, have taken on the burden of stream-

lining and organizing our work environment, freeing us from much of the drudgery of our work

and providing a secure and reliable foundation, allowing us to concentrate on driving the industry

forward to the end goal of securing our digital world.

And interestingly, but not surprisingly, an amazing community has built up around Kali Linux.

Each and every month, three to four hundred thousand of us download a version of Kali. We come

together on the Kali forums, some forty-thousand strong, and three to four hundred of us at a time

can be found on the Kali IRC channel. We gather at conferences and attend Kali Dojos to learn how

to best leverage Kali from the developers themselves.

Kali Linux has changed the world of information security for the better, and Muts and his team

have saved each of us countless hours of toil and frustration, allowing us to spend more time and

energy driving the industry forward, together.

But despite its amazing acceptance, support, and popularity, Kali has never released an official

manual. Well, now that has changed. I’m thrilled to have come alongside the Kali development

team and specifically Mati Aharoni, Raphaël Hertzog, Devon Kearns, and Jim O’Gorman to offer

this, the first in perhaps a series of official publications focused on Kali Linux. In this book, we

will focus on the Kali Linux platform itself, and help you understand and maximize the usage of

Kali from the ground up. We won’t yet delve into the arsenal of tools contained in Kali Linux, but

whether you’re a veteran or an absolute n00b, this is the best place to start, if you’re ready to dig

in and get serious with Kali Linux. Regardless of how long you’ve been at the game, your decision

to read this book connects you to the growing Kali Linux community, one of the oldest, largest,

most active, and most vibrant in our industry.

On behalf of Muts and the rest of the amazing Kali team, congratulations on taking the first step

to mastering Kali Linux!

Johnny Long

February 2017

Preface

Foreword

The sixteen high-end laptops ordered for your pentesting team just arrived, and you have been

tasked to set them up—for tomorrow’s offsite engagement. You install Kali and boot up one of the

laptops only to find that it is barely usable. Despite Kali’s cutting-edge kernel, the network cards

and mouse aren’t working, and the hefty NVIDIA graphics card and GPU are staring at you blankly,

because they lack properly installed drivers. You sigh.

In Kali Live mode, you quickly type lspci into a console, then squint. You scroll through the

hardware listing: “PCI bridge, USB controller, SATA controller. Aha! Ethernet and Network con-

trollers.” A quick Google search for their respective model numbers, cross referenced with the

Kali kernel version, reveals that these cutting-edge drivers haven’t reached the mainline kernel

yet.

But all is not lost. A plan is slowly formulating in your head, and you thank the heavens for the

Kali Linux Revealed book that you picked up a couple of weeks ago. You could use the Kali Live-

Build system to create a custom Kali ISO, which would have the needed drivers baked into the

installation media. In addition, you could include the NVIDIA graphics drivers as well as the CUDA

libraries needed to get that beast of a GPU to talk nicely to hashcat, and have it purr while cracking

password hashes at blistering speeds. Heck, you could even throw in a custom wallpaper with a

Microsoft Logo on it, to taunt your team at work.

Since the hardware profiles for your installations are identical, you add a preseeded boot option to

the ISO, so that your team can boot off a USB stick and have Kali installed with no user interaction—

the installation takes care of itself, full disk encryption and all.

Perfect! You can now generate an updated version of Kali on demand, specifically designed and

optimized for your hardware. You saved the day. Mission complete!

With the deluge of hardware hitting the market, this scenario is becoming more common for

those of us who venture away from mainstream operating systems, in search of something leaner,

meaner, or more suitable to our work and style.

This is especially applicable to those attracted to the security field, whether it be an alluring hobby,

fascination, or line of work. As newcomers, they often find themselves stumped by the environ-

ment or the operating system. For many newcomers Kali is their first introduction to Linux.

We recognized this shift in our user base a couple of years back, and figured that we could help

our community by creating a structured, introductory book that would guide users into the world

剩余344页未读，继续阅读

河那边的村

粉丝: 2
资源: 37

Kali Linux Revealed：渗透测试分布详解

kali linux 2020.1 设置中文详细教程

Kali Linux 2023.3 安装文件包发布

Kali Linux 2022.2新版本发布，支持多种平台

Kali-Linux-Revealed-1st-edition.

Kali-Linux-Revealed-1st-edition.doc

Kali-Linux-Revealed-1st-edition

Kali-Linux-Revealed-1st-edition英语版

Kali-Linux-Revealed-1st-edition_KaliLinuxRevealed_

Web-Penetration-Testing-with-Kali-Linux-Third-Edition-源码.rar

Kali Linux VMware（kali-linux-2022.2-vmware-i386.part1.rar)

最新资源