Preparing Kali for Pentest

Install

  • SSH
  • SCP
  • Samba
  • Postgresql
  • Apache2
  • Mysql*
  • Vim
  • Phpmyadmin

Start Services

/etc/init.d/ssh start
/etc/inid.d/mysql start
/etc/inid.d/postgresql start
/etc/inid.d/apache2 start
/etc/inid.d/phpyadmin start
msfdb init

##Configuring mysql

mysqld_safe --skip-grant-tables &
mysql -u root -p
use mysql
update user set password=PASSWORD('') where user="root";
flush privileges;
exit
/etc/inid.d/mysql restart

Install

  • Openvas
  • Abrir setup inicial e baixar vulns
  • Metasploit

Configuring Metasploit

msfconsole
msfdb init
msfconsole

Configuring Openvas

openvasmd --user=admin --new-password=

Access localhost:9392

Run nmap

nmap -sV host
  • Run Openvas
  • Run Maltego