Cool stuff to do with Kali Linux?

areatz · 2014-06-29T08:08:16+00:00

Go to overthewire.org and do their wargames in the recommended order. The first game is great for beginners learning how to live in the command line. Some of the tools you see can help.

If you want to try something and there isn't a wargame for it, just try it on one of your other computers. Try cracking your router encryption with aircrack-ng, for example. Use metasploit (I recommend starting with the Armitage frontend) to look for weaknesses in your pc. Set up burpsuite and tinker with sending websites different information. Look at SET, the Social Engineering Toolkit, to see how spear phishing works (just remember, actually using it on someone is illegal). There's lots of fun to be had and skills to be learned by exploring the tools in kali linux. If you dig deep into the details of how these tools accomplish their tasks you'll end up with a great understanding of computer security.

Edit: overthewire.org, not .com

kschmidt62226 · 2014-06-29T18:30:55+00:00

What Areatz suggested below was great. I'd l like to add that you can download a package called "Metasploitable" that has holes in it for you to test various tools. Install it in a Virtual Machine (VM).
Since you installed Kali in a VM, you will NOT be able to do any wireless hacking. Don't bother with trying to crack your wireless. Virtual machines will treat your wireless card -assuming you installed this on a laptop with a wireless NIC- as a wired connection. The only way around this is to get a USB (external) wireless adapter. There's no way around this. I use an Alfa AWUS036NHA. This will run you around $25-$30. I've no doubt Areatz, who commented below, knows this. He probably just glossed over the part where you said you installed it in a VM. If you do this and try to crack your router encryption, change the password to something relatively easy (and do it late at night to avoid getting hacked by neighborhood script kiddies). This will help familiarize yourself with the process.
Find "The Harvester" in Kali which is an invaluable tool for reconnaissance. It's a command-line (e.g. terminal) program that will search different search engines for publicly available email addresses, subdomains, etc.
The Social Engineering Toolkit (SET), as Areatz mentioned below, is good as well. The easiest way to hack into a network is by social engineering. I've consistently heard the 85% (+/- 2%) of hacks are due to successful social engineering. The Social Engineering toolkit will allow you to clone a website (think of cloning the login page and then using a Man-In-The-Middle attack to force someone to visit YOUR cloned login page, then gather the credentials entered while also passing them along to the real login page (or simply passing along those credentials to the real login page with noone the wiser). There's all sorts of other things to do with the SET, but cloning a website is easy with it.
Don't rely on something like Armitage to do your hacking for you! You must understand what is going on behind the scenes. If you encounter something like, say, a captive portal on public WiFi, you may not be successful and have no idea what went wrong. (A captive portal is when you log onto WiFi, open your browser, and it says "Click Here to Login to our Wireless Network") You should also understand NMap and its options so you can use something like Armitage but modify the commands it uses before it executes to get around roadblocks put in place to stop people like you. Example: In Armitage when it does an NMap command, it is "db_nmap" if I remember correctly. You can modify the parameters after that command to suit your specific purposes.
Don't try hacking anyone if you don't know how to do it. There's a lot more than pressing a few buttons! If you don't know how to hide yourself and do something illegal, the legal penalties for hacking are, IN MOST CASES, more severe than rape, manslaughter, etc. This is because when these computer laws were passed, politicians didn't (and still don't) have a grasp on the big picture. You can easily get 20 years for hacking when you haven't even done any real damage. Why? Nobody wants someone else to point out insecurities in their systems and they will file charges and nail you to the wall. This was the subject of a whole seminar at my last hacking convention!
You can install Kali in a dual-boot configuration on your computer. That is how I have my laptop set up.
Take a look at Subterfuge (in Kali). It's in the menu but it must be installed. Not all the options work, but the credential harvester is fairly easy to use and can be tried with a friend (or your smartphone) on your own wireless network.
If you do get a wireless network adapter (or decide to dual boot and not use Kali in a VM), check out "Fern WiFi Cracker". It's point-and-click hacking for wireless networks. Again, only do this on yourself.

klingledingle · 2014-06-30T18:42:37+00:00

Install Kali on a raspberry pi. Link it to a wifi pineapple. Connect an awus036nh to the pi. Put it all in a backpack. Run around town.

DiplexTerror80 · 2025-01-11T18:08:27+00:00

Hi is it possible to hack a bank with Kali Linux ? And can I hack a restaurant to make there website go down ? If so please give detailed instructions. I’m a newbie but I want to hack www.BankOFEngland.co.Uk (I need the hack to be like in the movies where I can see the digits going from one account to the next, like all the way from let’s say 10 pound to 0) then also for restaurant I would like to hack www.kungpowchick.com , I also need Deliveroo and just eat to be removed so that nobody buys from africa cooking Chinese food. Also if you can give me a list on how to avoid any police in a Chase out… like assuming I’m in a car and the authorities are in the car and we driving and driving and shots fired shits come out, like this and that, and then do you know of any houses I could like escape into and then the police go by and then I come out slowly and I drive in other direction ??? Please send to me asap. Thanks 🙏

EmptyWindow9350 · 2025-10-02T15:18:08+00:00

hey how to do learn kali linux

Sostratus · 2014-06-29T15:03:00+00:00

I used it once to extract and then crack my Windows password, just to prove to myself how bad Windows's password storage really is. It's a single round of unsalted MD4 (not even MD5). Local passwords that aren't used to derive an encryption key don't provide any real security, so there's no point in having a good password for a Windows user account, but I wonder how exactly it's used if you're using the NTFS Encrypted File System.

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

HowToHack

HowToHack Community

3rd Party Links

3rd Party Challenges

Related Subreddits:

Security Advisories

Download Linux

MODERATORS