qubes-doc/managing-os/pentesting/kali.md

203 lines
6.0 KiB
Markdown
Raw Normal View History

2016-06-13 20:24:23 -04:00
---
layout: doc
title: How to create a Kali Linux VM
2016-06-27 14:53:54 -04:00
permalink: /doc/pentesting/kali/
redirect_from:
- /doc/kali/
2016-06-13 20:24:23 -04:00
---
2016-06-17 12:19:35 -04:00
**General Remainder:**
- The installation scripts and provided tools may have bugs, be vulnerable to Man in the Middle (MitM) attacks or other vulnerabilities.
- Adding additional repositories or tools for installing software extends your trust to those tool provider.
Please keep in mind that using such a VM or VM's based on the template for security and privacy critical tasks is not recommended.
2016-06-13 20:24:23 -04:00
How to Create a Kali Linux VM
=============================
This guide is being created to give guidance on ways in which you could create a [Kali Linux](https://www.kali.org/) penetration testing VM (Qube) in Qubes OS.
Kali Linux is the most widely used penetration testing Linux distribution.
There are multiple ways to create a Kali Linux VM. One way is to create a HVM and use the offical ISO to install the system or convert a [Virtual Image](https://www.offensive-security.com/kali-linux-vmware-virtualbox-image-download/). Another way is to clone the Qubes OS Debian image and turn it into a Kali Linux distribution.
Kali Linux HVM
--------------
1. Download the Kali installation DVD
2016-06-13 20:24:23 -04:00
2. Create a new HVM
2016-06-13 20:24:23 -04:00
3. Start the HVM with attached CD/DVD
2016-06-13 20:24:23 -04:00
qvm-start <hvm-name> --cdrom <vm-name>:/home/user/Downloads/<iso-name>.iso
2016-06-13 20:24:23 -04:00
Create Debian Based Kali Template
---------------------------------
1. *(Optional)* Install `debian-8` template (if not already installed)
2016-06-13 20:24:23 -04:00
2. Update your `debian-8` template
2016-06-13 20:24:23 -04:00
sudo apt-get update
sudo apt-get dist-upgrade
2016-06-13 20:24:23 -04:00
3. Clone `debian-8` template (two options)
2016-06-13 20:24:23 -04:00
1. Via Qubes VM Manager
2016-06-13 20:24:23 -04:00
![Clone Debian Template](/attachment/wiki/Kali/clone-kali.png)
2016-06-13 20:24:23 -04:00
2. Via command line
2016-06-13 20:24:23 -04:00
qvm-clone debian-8 kali
2016-06-13 20:24:23 -04:00
4. Start and upgrade the `kali` Template from Debian 8 to Debian 9
2016-06-13 20:24:23 -04:00
sudo sed -i 's/jessie/stretch/g' /etc/apt/sources.list
sudo sed -i 's/jessie/stretch/g' /etc/apt/sources.list.d/qubes-r3.list
sudo apt-get update
sudo apt-get dist-upgrade
sudo apt-get autoremove
2016-06-13 20:24:23 -04:00
**Note:** From now on there are two possible ways either doing everything manually or automatically with [Katoolin](https://github.com/LionSec/katoolin).
2016-06-13 20:24:23 -04:00
Katoolin is a script (written in Python) which helps you to install Kali tools.
2016-06-13 20:24:23 -04:00
5. *manually* - Add Kali Linux repositories
2016-06-13 20:24:23 -04:00
1. Add Kali Linux repositories to `/etc/apt/sources.list`
2016-06-13 20:24:23 -04:00
deb http://http.kali.org/kali kali-rolling main contrib non-free
deb http://repo.kali.org/kali kali-bleeding-edge main
2016-06-13 20:24:23 -04:00
2. Add kali signing key
2016-06-13 20:24:23 -04:00
- The signing key can be found here [Download Kali Linux Images Securely](https://www.kali.org/downloads/)
2016-06-13 20:24:23 -04:00
sudo apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
sudo apt-get update
2016-06-13 20:24:23 -04:00
6. *katoolin* - Install Katoolin and add Kali Linux repositories
2016-06-13 20:24:23 -04:00
1. Install Katoolin
2016-06-13 20:24:23 -04:00
sudo apt-get install git
git clone https://github.com/LionSec/katoolin.git
sudo cp katoolin/katoolin.py /usr/bin/katoolin
sudo chmod +x /usr/bin/katoolin
rm -rf katoolin
2016-06-13 20:24:23 -04:00
2. Add Kali Linux repositories
2016-06-13 20:24:23 -04:00
- start katoolin
2016-06-13 20:24:23 -04:00
sudo katoolin
2016-06-13 20:24:23 -04:00
- select 'Add Kali repositories & Update'
2016-06-13 20:24:23 -04:00
1) Add Kali repositories & Update
2) View Categories
3) Install classicmenu indicator
4) Install Kali menu
5) Help
2016-06-13 20:24:23 -04:00
kat > 1
2016-06-13 20:24:23 -04:00
![Add Kali repositories and Update menu](/attachment/wiki/Kali/katoolin-add-update-repo-menu.png)
2016-06-13 20:24:23 -04:00
- select 'Add kali linux repositories'
2016-06-13 20:24:23 -04:00
1) Add kali linux repositories
2) Update
3) Remove all kali linux repositories
4) View the contents of sources.list file
2016-06-13 20:24:23 -04:00
What do you want to do ?> 1
2016-06-13 20:24:23 -04:00
![Add Kali repositories](/attachment/wiki/Kali/katoolin-add-repos-menu.png)
2016-06-13 20:24:23 -04:00
- update Kali repositories
2016-06-13 20:24:23 -04:00
1) Add kali linux repositories
2) Update
3) Remove all kali linux repositories
4) View the contents of sources.list file
2016-06-13 20:24:23 -04:00
What do you want to do ?> 2
2016-06-13 20:24:23 -04:00
- quit katoolin by pressing `CRTL` + `c` keys
2016-06-13 20:24:23 -04:00
What do you want to do ?> ^CShutdown requested...Goodbye...
2016-06-13 20:24:23 -04:00
7. Cleanup and update `kali` template
2016-06-13 20:24:23 -04:00
sudo apt-get dist-upgrade
sudo apt-get autoremove
2016-06-13 20:24:23 -04:00
8. Shutdown and trim `kali` template
2016-06-13 20:24:23 -04:00
- Shutdown `kali` template
2016-06-13 20:24:23 -04:00
sudo shutdown -h now
2016-06-13 20:24:23 -04:00
- In `dom0` console:
2016-06-13 20:24:23 -04:00
qvm-trim-template kali
2016-06-13 20:24:23 -04:00
9. Start image
2016-06-13 20:24:23 -04:00
10. *manually* - Install tools
2016-06-13 20:24:23 -04:00
**Warning:** `kali-linux` and `kali-linux-full` does currently not work properly. Please use `Katoolin` or `PTF`.
1. List available packages
2016-06-13 20:24:23 -04:00
sudo apt-cache search kali-linux
2016-06-13 20:24:23 -04:00
2. Select and install tools
2016-06-13 20:24:23 -04:00
- install base system
2016-06-13 20:24:23 -04:00
sudo apt-get install kali-linux
2016-06-13 20:24:23 -04:00
- or install all tools
2016-06-13 20:24:23 -04:00
sudo apt-get install kali-linux-full
2016-06-13 20:24:23 -04:00
- or select specific (example):
2016-06-13 20:24:23 -04:00
sudo apt-get install kali-linux-top10 kali-linux-web
11. *katoolin* - Install tools
2016-06-13 20:24:23 -04:00
1. View Categories
2016-06-13 20:24:23 -04:00
- start katoolin
2016-06-13 20:24:23 -04:00
sudo katoolin
2016-06-13 20:24:23 -04:00
- select `2) View Categories`
2016-06-13 20:24:23 -04:00
2. Select the categories/tools you want to install
2016-06-13 20:24:23 -04:00
- For more information on how to use Katoolin see [How to Auto Install All Kali Linux Tools Using “Katoolin” on Debian/Ubuntu](http://www.tecmint.com/install-kali-linux-tools-using-katoolin-on-ubuntu-debian/)
2016-06-13 20:24:23 -04:00
- **Note:** The `all` option does not work for `Information Gathering`, `Web Apps`, `Forensic Tools`, `Reverse Engineering` and `Extra`.
2016-06-13 20:24:23 -04:00
12. Create a AppVMs based on the `kali` template
2016-06-13 20:24:23 -04:00
- (Optional) Attach necessary devices
2016-06-13 20:24:23 -04:00
Alternative Options to Kali
---------------------------
- [BlackArch](/doc/pentesting/blackarch/)
- [PenTester Framework (PTF)](/doc/pentesting/ptf/)
- [Pentesting](/doc/pentesting/)