searchsploit with two variables

Aquatone - inspecting websites across a large number of hosts

Aquatone is a tool for visually inspecting websites across a large number of hosts and is convenient for quickly gaining an overview of an HTTP-based attack
surface. Aquatone has four major modules: discover, scanner, gather, and takeover. Each of these can be used to perform in-depth enumeration of a target:

1. We will use a simple command to install aquatone :

gem install aquatone
The following screenshot shows the output of the preceding command:

2. Next, we create a directory in /root/folder using the following command:

mkdir /root/aquatone/

3. As aquatone uses different modules to hunt for subdomains, we will have to configure aquatone's discovery module before running it.

4. For example, to configure the shodan, we can use the following command:

aquatone-discover --set-key shodan XXXXXXXXXXX


The following screenshot shows the output of the preceding command:

5. Similarly, we can set keys for other services too, such as Censys and PassiveTotal.
6. Once it is all set, we can start our subdomain hunting. We can do this using the following command:

aquatone-discover -d domain.com

The following screenshot shows the output of the preceding command:

7. Aquatone also allows us to set a custom wordlist by using the -w flag, and we can also set the threads by using the -t flag.

8. By default, aquatone stores the output in TXT as well as JSON format in the /root/aquatone/ directory.

9. After we find the subdomains, we can use the aquatone scanner to scan for open ports on the discovered hosts. Let's look at an example:




aquatone-scan --ports 80 -d packtpub.com
The following screenshot shows the output of the preceding command:

10. This will look for the domain's hosts.json file in the aquatone directory.



Aquatone by default has four inbuilt port scanning flags (small, medium, large, and huge). These flags will decide the number of ports being scanned on the
hosts, or we can define custom ports by using the -ports flag.

aquatone-gather : This tool makes a connection to the web services found using the discover and scanner modules of aquatone and takes
screenshots of discovered web pages for later analysis.

aquatone-takeover : This module is used to find subdomains that are vulnerable to the subdomain takeover vulnerability.

aquatone-takeover -d DNS

Configuring the MATE environment

The complete list of features can be viewed here: https://mate-desktop.org/blog/2018-02-07-mate-1-20-released/.


apt-get install desktop-base mate-desktop-environment

update-alternatives --config x-session-manager

Log out and log in again, and we will see the MATE environment:

Configuring the Xfce environment

apt-get install kali-defaults kali-root-login desktop-base xfce4 xfce4-places-plugin xfce4-goodies

update-alternatives --config x-session-manager

Choose the xfce-session option (in our case, 3) and press Enter.

Log out and log in again, and we will see the Xfce environment

Now let's have a look at the configuration of MATE environment.

Scanning SSL Kali Linux

sslscan website

heartbeat vulnerability


Another tool that performs a thorough sweep and analyzes the SSL/TLS configurations of a target service is SSLyze. To perform the majority of the basic tests in SSLyze, arguments should include the target server and the --regular argument. This includes tests for SSLv2, SSLv3, TLSv1, renegotiation, resumption, certificate information, HTTP GET response status codes, and compression support as follows:

root@KaliLinux:~# sslyze google.com --regular

wafw00f website - web application firewall attack commands

wafw00f website

WafW00f is a very useful Python script, capable of detecting the web application firewall (WAF). This tool is particularly useful when a penetration tester wants to inspect the target application server, and might get a fallback with certain vulnerability assessment techniques, for which the web application is actively protected by a firewall. Therefore, detecting the firewall sitting in between the application server and the Internet traffic not only improves a testing strategy, but also presents exceptional challenges for the penetration tester to develop advanced evasion techniques.

chkrootkit - finding rootkits on your Kali Linux

chkrootkit

checking if Kali Linux is clean

Activate tor and proxychains on your Kali Linux

apt-get install tor

leafpad /etc/proxychains.conf


disable strict_chain adding a pound sign

Enable the Dynamic_chain - deleting the pound before the concept

Add the socks5 at the end

socks4  127.0.0.1 9050
socks5  127.0.0.1 9050



service tor start
to verify - service tor status

iceweasel ww.whatismyip.com

Activating Proxychains
proxychains iceweasel ww.whatismyip.com

Configuring SSH on Kali Linux

cd /etc/ssh

mkdir keys_backup_ssh
mv ssh_host_* keys_backup_ssh
dpkg-reconfigure openssh-server


service ssh start
service ssh stop

netstat -antp
liste where?

Essential programs on Kali Linux - Penetration test - kit

apt-get install preload
Using preload to Speed up Linux

apt-get install bleachbit
total privacy cleaner
advance - wiping free space

apt-get install bum
system performance
disable unnecessary services

apt-get install gnome-do
execute key app using keyboard

apt-get install apt-file
command search apt - allow reading apt file

apt-get install scrub
security deleting program - complain

apt-get install shutter
captures images from your desktop

apt-get install figlet
console looks professianal

leafpad /root/.bashrc
write your personal message at the end

apt-get dist-upgrade -y - general commands

leafpad kali_update.sh #sh is a shell script

             apt-get update && apt-get upgrade -y && apt-get dist-upgrade -y

chmod +x kali_update.sh  #giving permition to the root


---
dpkg -l | grep zip 

apt- cache show zip


apt-get remove (package name)

leafpad /etc/

----

Install VMtools on Kali Linux - fixing an error

Install VMtools on Kali Linux

delete no auto

insert exec