Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2024-10-01 01:25:40 -04:00
Code Issues Packages Projects Releases Wiki Activity

Fix headings

Browse Source
This commit is contained in:
Andrew David Wong 2018-08-12 16:18:35 -05:00
parent dcd95522bf
commit a7a48fb2f7
No known key found for this signature in database
GPG Key ID: 8CE137352A019A17
1 changed files with 24 additions and 33 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

57
managing-os/pentesting/kali.md
View File

@ -6,7 +6,9 @@ redirect_from:
- /doc/kali/
---
**General reminder:**
# How to create a Kali Linux VM
## Warnings
- The installation scripts and provided tools may have bugs, be vulnerable to Man in the Middle (MitM) attacks or other vulnerabilities.
@ -17,11 +19,9 @@ redirect_from:
- Kali Linux distribution is a rolling distribution based constantly on Debian testing release, so it always will have newer software base than available in Qubes OS debian template. Keep in mind that it may result in problems (especially in regard to package dependency) not covered by this tutorial.
Qubes 3.2
=========
## Qubes 3.2
How to Create a Kali Linux VM
-----------------------------
### How to Create a Kali Linux VM
This guide is being created to give guidance on ways in which you could create a [Kali Linux][kali] penetration testing VM (qube) in Qubes OS.
@ -34,8 +34,7 @@ There are multiple ways to create a Kali Linux VM:
- using [katoolin]. Explained [here](#katoolin3_2).
- manually. Explained [here](#templatevm-from-debian3_2).
Kali Linux HVM <a name="hvm3_2"/>
--------------
### Kali Linux HVM <a name="hvm3_2"/>
1. Download the Kali installation DVD
@ -45,8 +44,7 @@ Kali Linux HVM <a name="hvm3_2"/>
[user@dom0 ~]$ qvm-start <hvm-name> --cdrom <vm-name>:/home/user/Downloads/<iso-name>.iso
Debian based Kali Template with Katoolin <a name="katoolin3_2"/>
----------------------------------------
### Debian based Kali Template with Katoolin <a name="katoolin3_2"/>
**Note:** The prompt on each line indicates where each command should be entered (`@dom0`, `@debian-<X>` or `@kali`).
@ -186,8 +184,7 @@ Debian based Kali Template with Katoolin <a name="katoolin3_2"/>
- (Optional) Attach necessary devices
Kali Linux TemplateVM from a Debian template <a name="templatevm-from-debian3_2"/>
--------------------------------------------
### Kali Linux TemplateVM from a Debian template <a name="templatevm-from-debian3_2"/>
This section will explain how to create your own [Kali] Linux TemplateVM based
on a current stable Debian TemplateVM. The basic idea is to personalize the
@ -202,7 +199,7 @@ The steps can be summarised as:
4. Use the template to build AppVM so that you can maintain isolation between
e.g. pentesting jobs
### Get Kali Linux GPG key ###
#### Get Kali Linux GPG key
**CAUTION:** Before proceeding, please carefully read [On Digital Signatures and Key Verification][qubes-verifying-signatures].
This website cannot guarantee that any PGP key you download from the Internet is authentic.
@ -227,7 +224,7 @@ access can change this configuration in firewall settings for the TemplateVM.
3. Make sure the key is the authentic Kali key.
See the [Kali website] for further advice and instructions on verification.
### Create a Kali Linux (rolling) template ###
#### Create a Kali Linux (rolling) template
These instructions will show you how to upgrade a Debian TemplateVM to Kali Linux.
@ -297,7 +294,7 @@ These instructions will show you how to upgrade a Debian TemplateVM to Kali Linu
[user@dom0 ~]$ qvm-run -a kali-rolling gnome-terminal
### Install the Kali tools ###
#### Install the Kali tools
At this point you should have a working template and you can install the tools you need.
@ -309,16 +306,14 @@ At this point you should have a working template and you can install the tools y
3. (Optional) Customise the template's home directory (e.g. install your licensed copy of Burp Suite Professional)
### Use the template ###
#### Use the template
The template is ready to be used. You can now spin up AppVMs based on the `kali-rolling` template.
Qubes 4.0
=========
## Qubes 4.0
How to Create a Kali Linux VM
-----------------------------
### How to Create a Kali Linux VM
This guide is being created to give guidance on ways in which you could create a [Kali Linux][kali] penetration testing VM (qube) in Qubes OS.
@ -331,8 +326,7 @@ There are multiple ways to create a Kali Linux VM:
- using [katoolin]. Explained [here](#katoolin4_0).
- manually. Explained [here](#templatevm-from-debian4_0).
Kali Linux HVM <a name="hvm4_0"/>
--------------
### Kali Linux HVM <a name="hvm4_0"/>
1. Download the Kali installation DVD
@ -342,8 +336,7 @@ Kali Linux HVM <a name="hvm4_0"/>
[user@dom0 ~]$ qvm-start <hvm-name> --cdrom <vm-name>:/home/user/Downloads/<iso-name>.iso
Debian based Kali Template with Katoolin <a name="katoolin4_0"/>
----------------------------------------
### Debian based Kali Template with Katoolin <a name="katoolin4_0"/>
**Note:** The prompt on each line indicates where each command should be entered (`@dom0`, `@debian-<X>` or `@kali`).
@ -469,8 +462,7 @@ Debian based Kali Template with Katoolin <a name="katoolin4_0"/>
- (Optional) Attach necessary devices
Kali Linux TemplateVM from a Debian template <a name="templatevm-from-debian4_0"/>
--------------------------------------------
### Kali Linux TemplateVM from a Debian template <a name="templatevm-from-debian4_0"/>
This section will explain how to create your own [Kali] Linux TemplateVM based
on a current stable Debian TemplateVM. The basic idea is to personalize the
@ -485,7 +477,7 @@ The steps can be summarised as:
4. Use the template to build AppVM so that you can maintain isolation between
e.g. pentesting jobs
### Get Kali Linux GPG key ###
#### Get Kali Linux GPG key
**CAUTION:** Before proceeding, please carefully read [On Digital Signatures and Key Verification][qubes-verifying-signatures].
This website cannot guarantee that any PGP key you download from the Internet is authentic.
@ -510,7 +502,7 @@ access can change this configuration in firewall settings for the TemplateVM.
3. Make sure the key is the authentic Kali key.
See the [Kali website] for further advice and instructions on verification.
### Create a Kali Linux (rolling) template ###
#### Create a Kali Linux (rolling) template
These instructions will show you how to upgrade a Debian TemplateVM to Kali Linux.
@ -575,7 +567,7 @@ These instructions will show you how to upgrade a Debian TemplateVM to Kali Linu
[user@dom0 ~]$ qvm-run -a kali-rolling gnome-terminal
### Install the Kali tools ###
#### Install the Kali tools
At this point you should have a working template and you can install the tools you need.
@ -587,13 +579,12 @@ At this point you should have a working template and you can install the tools y
3. (Optional) Customise the template's home directory (e.g. install your licensed copy of Burp Suite Professional)
### Use the template ###
#### Use the template
The template is ready to be used. You can now spin up AppVMs based on the `kali-rolling` template.
Alternative Options to Kali Linux
---------------------------------
### Alternative Options to Kali Linux
* [PenTester Framework][PTF], with [PTF Qubes OS guide][qubes-ptf]
* BlackArch Linux, with [BA Qubes OS guide][qubes-blackarch]
@ -601,8 +592,7 @@ Alternative Options to Kali Linux
* more on the [Penetration Testing page][qubes-pentesting]
Notes
-----
## Notes
Thanks to the people in [the discussion thread](https://github.com/QubesOS/qubes-issues/issues/1981).
@ -623,3 +613,4 @@ Thanks to the people in [the discussion thread](https://github.com/QubesOS/qubes
[katoolin-howto]: http://www.tecmint.com/install-kali-linux-tools-using-katoolin-on-ubuntu-debian/
[Debian-releases]: https://www.debian.org/releases/