Offensive Security, the creator of the famous BackTrack Linux operating system, has announced on January 9 that a new maintenance release for its Kali Linux distribution is now available for download. 

Kali Linux 1.0.6 is the first release to introduce an amazing feature called "emergency self-destruction of LUKS," which allows users to quickly nuke the entire installation in case of an emergency.

root@kali:~# apt-get update
root@kali:~# apt-get dist-upgrade

Hace ya algún tiempo se anunciaba en el blog oficial de  Offensive Security (creadores de Backtrack) que saldría una nueva Distribución GNU/linux de Pentesting que se llamaría Kali, esta es descrita por sus mismo creadores como la más avanzada, robusta y estable distribución para Pentesting a la fecha.

Kali Linux ya está disponible para su descarga y trae consigo más de 300 herramientas de pentesting, han cambiado el entorno de Bactrack basado en Ubuntu 10.04 LTS por un sistema Debian y ahora trae soporte para ARM.

Android Network Toolkit also known as zANTI is the most comprehensive and refined pentest tool for android by Zimperium. Zimperium is founded by white hat hacker Itzhack ‘Zuk’ Avraham and also have Kevin Mitnick on there team! They also had recently held the Pentester’s WorldCup.

zAnti still comes with a token type credit system that allows you to access the more advanced features, but you can still see the power of zAnti with the free version. They also maintain a zScore system of points.

When you login into zANTI, it maps your entire network. When I selected my PC to sniff out of the list, it showed all websites being visited and also there cookies. Definitely ARP (Address Resolution Protocol) cache poisoning was going on here.

A quick look at my PCs client’s ARP Table showed that zAnti was successful at MITM attack! Also it switched its MAC address for the client gateway. This effectively put the phone in between my router and the wired PC Client so it could sniff out all the network traffic!

It also has a Nmap menu where you can run several levels of Nmap based scanning to attempt to detect OS version and service identification.

These various pentest options include:

The tool is really refined and we did some major penetration testing (also can detect Java vulnerability) with it and didn’t find any bugs in it even with a low specs Samsung Galaxy Y(Will soon test it on the Nexus 7)! This tool is clearly the best ROOT tool for android hackers. 

 Get zANTI : http://zantiapp.com/anti.html (Root needed; Android 2.1+) Also private beta testing is going to begin for the apps iOS version!

[Source]

Dnswalk is a DNS debugger. It performs zone transfers of specifieddomains, and checks the database in numerous ways for internalconsistency, as well as accuracy. dnswalk is not for the faint of heart. It should NOT be used without a firm knowledge of the DNS RFC's. The warnings and errors must be interpreted within the context they are being used. Something may be flagged as a warning, but in reality it is a really bad error. Conversely dnswalk will flag things as warnings and possibly even errors, but they may actually be perfectly "legal" or normal in your specific situation. dnswalk is not an AI engine. It just provides useful information which you need to interpret. If you use this tool for cracking or otherwise evil purposes, the author hereby considers you a slime-ball.


Enjoy