Kali SANA 2.0 10-Tips ISO Backup


Kali SANA 2.0 10-Tips ISO Backup by Offensive Security

Image Courtesy: Offensive Security


Building updated Kali SANA 2.0 ISO for many readers intrigued and who are using Kali SANA 2.0 will follow guides; as this one here.  This Kali SANA 2.0 post was originally posted by Offensive Security, the personnel of offensive security team worked endlessly hours, days, weeks, months, and into the years creating versions of “Kali SANA 2.0 ” which contains valuable information’s. I am re-sharing this information created by more professional Web-Bloggers than myself and I hope all readers enjoy. Try to follow Kali SANA 2.0 Top 10 post install tips by Offensive Security first before you try my guide as I’ve had just 24 hours to evaluate.

?_____________________?Thanks? Offensive Security?______________________?



How to install katana framework | Find admin panel | sniffing & backdoors in kali SANA 2.0

katana is a framework written in python for making penetration testing, based on a simple and comprehensive structure for anyone to use, modify and share, the goal is to unify tools serve for professional when making a penetration test or simply as a routine tool, The current version is not completely stable, is recommended update ever that you use it(ktf.update -f).
GitHub-LiNK:  “KatanaFramework




Kali SANA 2.0 Top 10 install tips by Offensive Security

Here is the top 10 list:

This Video Below: Enable or Disable the intelligent sidebar option

Add your SSH public key to Kali SANA 2.0

Kali SANA 2.0 takes on the Debian SSH configuration option, default since Jessie, which disallows root logins without a key.

root@kali:~# grep Root /etc/ssh/sshd_config
 PermitRootLogin without-password

The less preferred alternative, is to change the PermitRootLogin parameter to “yes”, and restart the SSH server, which will allow remote password root logins. For safer remote root SSH access, add your public key to the authorized_keys file.

Install Nvidia drivers if you need them

If you have an NVIDIA graphics card, you should follow these instructions to get the NVIDIA drivers installed in Kali SANA 2.0 [Via Doc.Kali.org].


 

Install VMWare or Virtualbox guest tools if you need them

Our instructions on installing virtual guest tools haven’t changed much and work well on the latest version of VMWare (Workstation and Fusion), as well as VirtualBox.


www.VMware.com
VMware A global leader in cloud infrastructure and digital workspace technology, accelerates digital transformation by enabling unprecedented freedom and flexibility in how our customers build and evolve IT environments. With VMware solutions, organizations are improving business agility by modernizing data centers and integrating public clouds, driving innovation with modern apps, creating exceptional experiences by empowering the digital workspace, and safeguarding customer trust by transforming security. VMware is a member of the Dell Technologies family of businesses.



This Video Below: Disable the Screen Lock Gnome feature!

This is the fastest way to disable the screen lock Gnome feature:



If for some reason you chose “no” when asked “use a network mirror” during you Kali installation, you may be missing some entries in your sources.list file. If this is the case, check the official repository list that should be in that file. Despite what many unofficial guides instruct you to do, avoid adding extra repositories to your sources.list files. Don’t add kali-dev, kali-rolling or any other Kali repositories unless you have a specific reason to – which usually, you won’t. If you must add additional repositories, drop a new sources file in /etc/apt/sources.list.d/ instead. Kali SANA 2.0 – Kali Sana details and explanations can be found in adding official Kali SANA 2.0 Repositories page.


Add a non-root user if you’re not comfortable running as root

Kali Linux got only root user by default. While most applications require root access, it’s always a good idea to add a second user. Open terminal and type following to create new user (replace user1 with your desired user name)

useradd -m user1

(Note: -m means create home directory which is usually /home/username)
Kali SANA 10-Tips ISO Backup

Now set password for this user

passwd user1

Enter desired password twice Add user to sudo group (to allow user to install software, allow printing, use privileged mode etc.)

usermod -a -G sudo user1

(Note: -a means append or add and –G mean to specified group/groups) Change default shell of previously created user to bash

chsh -s /bin/bash user1

How To Create Standard User on Kali Linus

>

This guide will walk you through on how to add remove user (standard user or non-root user) in Kali Linux. I’ve tested this in Kali Linux, so any Debian or Debian derivative (such as Ubuntu) should just work.

This guide accomplishes:
The main reason I wanted to try this to demonstrate the followings!

  1. Add a user with all user directories already in place (thereby avoiding “Could not update .ICEauthority var/lib/gdm3/.ICEauthority” or any error containing .ICEauthority or permission in general.
  2. Add user to sudo group to allow him to use root commands. You can also add user to ‘lpadmin’ group to allow printing for Canon or HP and such.
  3. Change default shell from chsh to bash. Or any shell like Bourne Shell (sh), Bourne-Again Shell (bash), C Shell (csh) or Korn shell (ksh) etc.
  4. Login as that user and demonstrate there were no errors.
  5. Be able to use sudo and show groups affinity.
  6. Delete that user safely.

Benefits of Standard User in Kali:

Few benefits you have as non-root or standard user in Kali

  1. Install and run Google Chrome
  2. Install and run Gnome User and Groups manager (Install gnome-system-tools)
  3. Use Kali as Primary Operating System without worrying about breaking it all the time.

Now let’s move onto actual guide.

Add user in Kali SANA 2.0:

  • First of all let’s confirm which version of Linux and Kernel I’m running.In command prompt type in
    uname –a
    lsb_release –a

  • Now let’s add user. Open terminal and type following to create new user (replace user1 with your desired user name)
    useradd -m user1

    (Note: -m means create home directory which is usually /home/username)

  • Now set password for this user
    passwd user1

    Enter desired password twice

    Kali SANA 10-Tips ISO Backup

  • Add user to sudo group (to allow user to install software, allow printing, use privileged mode etc.)
    usermod -a -G sudo user1

    Kali SANA 10-Tips ISO Backup

    (Note: -a means append or add and –G mean to specified group/groups)

  • Change default shell of previously created user to bash
    chsh -s /bin/bash user1

    Kali SANA 10-Tips ISO Backup

    (Note: chsh mean change login shell, -s is the name of the specified shell you want for the user, in this case /bin/bash)

    Nice, all worked out as expected.
    Let’s logout and login back as our new Standard Non-root user (user1)

 


Avoid installing Flash Player

Why? Evil Security Holes, Do Not Do It.

Keep the Kali SANA 2.0 system up to date

We pull upstream updates from Debian 4 times a day. This ensures that security updates are implemented in Kali on an ongoing basis. You should keep your system up to date by regularly running the following commands:

 apt-get clean && apt-get update && apt-get upgrade -y && apt-get dist-upgrade -y

Avoid manual installations of tools in FSH defined directories

There’s several ways you can use Kali – either as a “throw away penetration testing machine” or as a “long term use OS“. The “throw away” method entails setting up Kali for a one off engagement or short term use, and then killing off the OS when done (this usually happens in virtual environments). The “long term use” use case describes people who want to use Kali on an ongoing basis for day-to-day use. Both methods are perfectly valid, but require different treatment. If you plan to use Kali on a day-to-day basis, you should avoid manual installs of programs in FSH defined directories, as this would conflict with the existing apt package manager.


Return to top of posted page or continue reading?


 Internet How to/Penitration-Tools/Kali SANA 2.0/


Building Kali SANA 2.0

Are you tired of downloading Kali Packages every-time you re-install? Kali Linux 2016.1? I know …

Kali SANA 10-Tips ISO Backup

 

Are you tired of downloading Kali Packages every-time you re-install? Kali Linux 2016.1? Everyone experiences this and no more! The 2.6G ISO file was released back in January 2016 and since then it hasn’t been updated. This is an easy and quick way for building updated Kali SANA 2.0 for Kali 2016.2 and escape downloading same packages over and over and over again.


Building Custom Kali ISOs Using Live Build

Ohh, yes, in case you missed it, Kali Linux 2016.2 has been in the wild since 2016-07-21, there just wasn’t any official announcement as it seems like an internal build-name/code. This also means, if you were like me who tries way too much and breaks system and keeps re-installing it, you are constantly doing the same apt-get update, upgrade and dist-upgrade to update you old Kali Linux 2016.1 to 2016.2. Here is the version info for Kali 2016.1

root@kali:~# cat /proc/version 
Linux version 4.3.0-kali1-amd64 (debian-kernel@lists.debian.org) (gcc version 5.3.1 20160101 (Debian 5.3.1-5) ) #1 SMP Debian 4.3.3-5kali4 (2016-01-13)
root@kali:~#

and here’s is the version info for Kali 2016.2

root@kali:~# cat /proc/version 
Linux version 4.6.0-kali1-amd64 (devel@kali.org) (gcc version 5.4.0 20160609 (Debian 5.4.0-6) ) #1 SMP Debian 4.6.4-1kali1 (2016-07-21)
root@kali:~#

So, Kernel is updated from 4.3.0 to 4.6.0 and build/release date is changed from (2016-01-13) to (2016-07-21). That’s 6 months worth of updates or i.e. 2 GB of download and no I am not even worried about the download. Personally, I am concerned about the time and effort. This post will also help those with slower Internet and/or download cap limited users. You do this once, keep that ISO and the only packages you will need it from that day ono. Sounds fair? I bet it does. Lets do it!

Building an updated Kali SANA 2.0 is actually very easy and if you read Kali documentations, you probably do it already. If not, here’s some dot points to convince you:

  1. This process creates an ISO with the latest packages, so you don’t need to download any (or too many) in coming weeks.
  2. You can configure various desktop environments (such as KDE, Gnome, E17, I3WM, LXDE, MATE and XFCE) and create multiple ISO’s. Same deal for these ISO’s. They will have the latest and greatest packages already in.
  3. You can control meta-packages in your build and only download the packages you need to build your custom ISO. This fits perfectly for those who work in minimal environment or works using a particular application. Also less download, smaller ISO.
  4. You do use live-build hook scripts in various stages of the Kali SANA 2.0 live build.
  5. You can include additional files or scripts in your build and create ISO with it. This helps when you are building it for a particular organization.

You can configure virtually any aspect of your Kali SANA 2.0 build using the Debian live-build scripts. These scripts allow developers to easily build live system images by providing a framework that uses a configuration set to automate and customize all aspects of building the image. The Kali Linux development team has adopted these scripts and they’re used to produce the official Kali SANA 2.0 releases.

Requirements

Ensure that your system meets the following requirements to avoid issues:

  1. About 20G free disk space.
  2. A decent Internet connection.
  3. Existing Kali environment.

Disk space seems to be the most important of all. This total process used about 17G space (I assume the system will use some swap for slower systems). You need the disk-space as this process will download all the packages, uncompress those and then create an ISO. I had around 55GB dedicated on my Samsung 850 EVO – 500GB SSD drive for Kali, so had absolutely no issues.

Getting Ready — Setting up the live-build system

We first need to prepare the Kali ISO build environment by installing and setting up live-build and its requirements with the following commands:

root@kali:~#  apt-get install curl git live-build cdebootstrap

root@kali:~#  git clone git://git.kali.org/live-build-config.git

Now you can simply build an updated Kali ISO by entering the live-build-config directory and running our build.sh wrapper script, as follows:

root@kali:~# cd live-build-config
root@kali:~/live-build-config# ./build.sh --distribution kali-rolling --verbose

The build.sh script will take a while to complete, as it downloads all of the required packages needed to create your ISO. Good time for a coffee. Yeah nah, go away for a about an hour or two.

and the final result?

root@kali:~/live-build-config# ls -ltrah images/
total 2.8G
-rw-r--r--  1 root root 2.8G Aug  4 23:18 kali-linux-rolling-amd64.iso
-rw-r--r--  1 root root 1.2M Aug  4 23:19 kali-linux-rolling-amd64.log
drwxr-xr-x 12 root root 4.0K Aug  4 23:19 ..
drwxr-xr-x  2 root root 4.0K Aug  4 23:19 .
root@kali:~/live-build-config#

a 2.8G Kali Linux rolling ISO for 64-bit systems. Nice!!!

Building a Kali Linux ISO for Older i386 Architectures

The Kali Linux i386 ISO has PAE enabled. If you require a default kernel for older hardware with PAE disabled, you will need to rebuild a Kali Linux ISO. The rebuilding process is much the same as described above, except that the 686-pae parameter that needs to be changed to 586 in auto/config as follows. First, install the prerequisites.

apt-get install git live-build cdebootstrap debootstrap
git clone git://git.kali.org/live-build-config.git

Next, make the change in auto/config for the appropriate architecture:

cd live-build-config
sed -i 's/686-pae/586/g' auto/config

Finally, run your build.

./build.sh --distribution kali-rolling --arch i386


An Introduction to Building Your Own Kali ISO

Building a customized Kali ISO is easy, fun, and rewarding. You can configure virtually any aspect of your Kali ISO build using the Debian live-build scripts. These scripts allow developers to easily build live system images by providing a framework that uses a configuration set to automate and customize all aspects of building the image. The Kali Linux development team has adopted these scripts and they’re used to produce the official Kali ISO releases.

Where Should You Build Your ISO?

Ideally, you should build your custom Kali ISO from within a pre-existing Kali environment.

Getting Ready — Setting up the live-build system

We first need to prepare the Kali ISO build environment by installing and setting up live-build and its requirements with the following commands:

apt install curl git live-build cdebootstrap
git clone git://git.kali.org/live-build-config.git

Now you can simply build an updated Kali ISO by entering the “live-build-config” directory and running our build.sh wrapper script, as follows:

cd live-build-config
./build.sh –distribution kali-rolling –verbose

The “build.sh” script will take a while to complete, as it downloads all of the required packages needed to create your ISO. Good time for a coffee.

Configuring the Kali ISO Build (Optional)

If you want to customize your Kali Linux ISO, this section will explain some of the details. Through the kali-config directory, the Kali Linux live build supports a wide range of customization options, which are well-documented on the Debian live-build man page. However, for the impatient, here are some of the highlights.

Building Kali with Different Desktop Environments

Since Kali 2.0, we now support built in configurations for various desktop environments, including KDE, Gnome, E17, I3WM, LXDE, MATE and XFCE. To build any of these, you would use syntax similar to the following:

# These are the different Desktop Environment build options:
#./build.sh –distribution kali-rolling –variant {gnome,kde,xfce,mate,e17,lxde,i3wm} –verbose# To build a KDE ISO:
./build.sh –distribution kali-rolling –variant kde –verbose
# To build a MATE ISO:
./build.sh –distribution kali-rolling –variant mate –verbose#…and so on.

Controlling the Packages Included in Your Build

The list of packages included in your build will be present in the the respective kali-$variant directory. For example, if you’re building a default Gnome ISO, you would use the following package lists file – kali-config/variant-gnome/package-lists/kali.list.chroot. By default, this list includes the “kali-linux-full” metapackage, as well as some others. These can be commented out and replaced with a manual list of packages to include in the ISO for greater granularity.

Build Hooks, Binary, and Chroot

Live-build hooks allows us to hook scripts in various stages of the Kali ISO live build. For more detailed information about hooks and how to use them, refer to the live build manual. As an example, we recommend you check out the existing hooks in kali-config/common/hooks/.

Overlaying files in your build

You have the option to include additional files or scripts in your build by overlaying them on the existing filesystem, inside the includes.{chroot,binary,installer} directories, respectively. For example, if we wanted to include our own custom script into the /root/ directory of the ISO (this would correspond to the “chroot” stage), then we would drop this script file in the kali-config/common/includes.chroot/ directory before building the ISO.

Building a Kali Linux ISO for Older i386 Architectures

The Kali Linux i386 ISO has PAE enabled. If you require a default kernel for older hardware with PAE disabled, you will need to rebuild a Kali Linux ISO. The rebuilding process is much the same as described above, except that the 686-pae parameter that needs to be changed to 586 in auto/config as follows. First, install the prerequisites.

apt install git live-build cdebootstrap debootstrap
git clone git://git.kali.org/live-build-config.git

Next, make the change in auto/config for the appropriate architecture:

cd live-build-config
sed -i ‘s/686-pae/586/g’ auto/config

Finally, run your build.

./build.sh –distribution kali-rolling –arch i386


THE-END


Source:

Leave a Reply

Your email address will not be published.