鉴于 Kali 里面的很多工具集都是偏海外以及是英文版的原因,导致其中有很多工具集我们是很少用的,用的最多的无异于MSF、sqlmap、nmap这些耳熟能详的工具了。本文安装配置主要摘自 @ffffffff0x 团队分享的 “Kali系统基础设施配置” 软文 -> 传送门
为了将现代的多款主流、常用的工具集整合进来,我们需要安装好依赖、环境以及配置好源。需要整合进去的工具如下:
- Volatility
- distorm
- RustScan
- hashcat、7z2hashcat
- unyaffs
- ffuf
- JSFinder
- SecretFinder
- WebAliveScan
- OneForAll
- ksubdomain
- AWV-13
- AWVS-13 + Nessus
0x1 基本配置建设
# /pentest 作为存放渗透工具的文件夹
# /tmp/test 作为存放临时文件的文件夹
mkdir /pentest
mkdir /tmp/test
# apt mirror
tee /etc/apt/sources.list <<-'EOF'
deb https://mirrors.aliyun.com/kali kali-rolling main non-free contrib
deb-src https://mirrors.aliyun.com/kali kali-rolling main non-free contrib
deb http://mirrors.tuna.tsinghua.edu.cn/kali kali-rolling main contrib non-free
deb-src https://mirrors.tuna.tsinghua.edu.cn/kali kali-rolling main contrib non-free
deb http://http.kali.org/kali kali-rolling main non-free contrib
deb-src http://http.kali.org/kali kali-rolling main non-free contrib
EOF
rm -rf /var/cache/apt/archives/lock
rm -rf /var/lib/dpkg/lock-frontend
rm -rf /var/lib/dpkg/lock
rm /var/lib/dpkg/lock
rm /var/lib/apt/lists/lock
apt update
# SSH
echo "PermitRootLogin yes" >> /etc/ssh/sshd_config
echo "PasswordAuthentication yes" >> /etc/ssh/sshd_config
systemctl start ssh
systemctl enable ssh
ssh-keygen -t dsa -f /etc/ssh/ssh_host_dsa_key
ssh-keygen -t dsa -f /etc/ssh/ssh_host_rsa_key
# 安装依赖 (install dependence)
apt install -y gcc g+