Kali Linux is now available on Windows 10 Microsoft App Store

Kali Linux, a very popular, free, and open-source Linux-based operating system widely used for hacking and penetration testing, is now natively available on Windows 10, without requiring dual boot or virtualization.

 Kali Linux is the latest Linux distribution to be made available on the Windows App Store for one-click installation, joining the list of other popular distribution such as Ubuntu, OpenSUSE and SUSE Enterprise Linux.

In Windows 10, Microsoft has provided a feature called "Windows Subsystem for Linux" (WSL) that allows users to run Linux applications directly on Windows.

How to Download and Run Kali Linux on Windows 10

 Installation is similar to Ubuntu Bash on Windows.




Turn ON "Developer Mode" via Settings → Update & security → For developers, as this new feature is specifically meant for developers.

If this is your first time using Windows Subsystem for Linux (WSL), you need to enable this optional Windows feature before getting the Kali Linux app.

 Follow these simple steps to enable WSL:

• Navigate to Control Panel and go to "Apps and features"
• Select "Programs and Features" from the right panel
• Click the "Turn Windows features on or off" from the left menu
• Select the "Windows Subsystem for Linux" and save it
• Reboot your system

You can even do the same by opening PowerShell as Administrator and running the following command and restart your computer.

Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Windows-Subsystem-Linux

Now search for Kali Linux on Windows Store, download it with just a single click. Once you launch the application, it automatically completes Kali installation and will open the console window.


Kali Linux on Windows does not come with any hacking or penetration testing tools pre-installed, but you can easily install them later.

It should be noted that your Antivirus application or Windows defender can trigger false-positive warning for hacking tools and exploits, but you need not worry about it.

Microsoft is following its commitment to the open source community. In 2013, the company launched Visual Studio, and a year later, it open-sourced .NET. In 2015, Microsoft open-sourced the Visual Studio Code Editor, as well.

Read More

WiFiSlax - Best program for WiFi

Best program for WiFi WiFiSlax -These days, it's one of the tools most frequently used to audit WiFi networks, both for the wide variety of tools included to do so as well as the numerous drivers for network cards that come installed in the distribution.   It is very easy to use the tool. It is made for into two major languages that have first in Spanish and other is English. So you can select your own language at the time of Running WiFi Slax on your PC.

Wifislax is prepared to work in a Live CD version or to be installed on a hard drive. That installation can also be done once you've initiated the Live CD version.

I recommend this for beginners who don't understand terminal update because its completely all here..


As always, it's important to keep in mind that this type of distribution should be used to improve your network security, not for any illegal actions like stealing WiFi passwords or intercepting data, which are considered to be serious crimes by the authorities.

The KDE desktop is represented by the "kde-workspace" and "plasma-desktop" packages and the Xfce desktop by the "xfdesktop" package.

The distribution's main claim to fame is the integration of various unofficial network drivers into the Linux kernel ( GPU is powerful) , thus providing out-of-the-box support for a large number of wired and wireless network cards.  

(yung linset kasali nadin dito at completo nadin upadate)

Feature of Slax Wifi full version:

1:- Used for Wifi H$cking password
2:- Used for Web H$cking
3:- It helps us to inject SQL database
4:- Fast and Mouse click to h4cking anything
5:- Hardware testing and detection
6:- very easy and too much secure for Windows


How to Use WiFi Slax
1:- Just download this version from given below method
2:- Need a USB Pin Drive that has just 2Gb space or more if yiu want + persistence
3:- Need Rufus USB Burner
4:- After Downloading of Wifislax and Rufus USB Burner Tool.
5:- Run Rufus as an Administrator and add WifiSlax.iso file then click on start
6:- After burning please restart your system and boot on USB Drive
7:- Select your Language then click on 1st option then next tap select on a 1st option and now you see a wifi Slax desktop.
8:- Now you can use it .

Making WiFi Slax with Persistence is easy just open a terminal
type:
Changes [space] "Amount or space available for writing"
sample: Changes 1024 (equal to 1GB)

You can download ISO @  http://www.wifislax.com/

Read More

After 5 Years Hacker Who Hacked Official Linux Kernel Website Arrested While Breaking Traffic Rules

Around five years after unknown hackers gained unauthorized access to multiple kernel.org servers used to maintain and distribute the Linux operating system kernel, police have arrested police have arrested a South Florida computer programmer.

Donald Ryan Austin, a 27-year-old programmer from of El Portal, Florida, was charged Thursday with hacking servers belonging to the Linux Kernel Organization (kernel.org) and the Linux Foundation in 2011, the Department of Justice announced on Thursday. 

Austin managed to steal login credentials of one of the Linux Kernel Organization system administrators in 2011 and used them to install a hard-to-detect malware backdoor, dubbed Phalanx, on servers belonging to the organization.

Using the Phalanx malware, Austin allegedly installed Ebury – a Trojan designed for Linux, FreeBSD or Solaris hacking – on a number of servers run by the Linux groups, which helped him gain access to the login credentials of people using the servers.

Austin allegedly infected Linux servers, including "Odin1," "Zeus1," and "Pub3," which were leased by the Linux Foundation for operating kernel.org. He also hacked the personal email server of Linux Kernel Organization’s founder Peter Anvin.

Austin is also accused of allegedly using his unauthorized admin privileges to insert messages into the system that would display when the servers restarted.

According to prosecutors, Austin's motive for the intrusion was to gain early access to Linux software builds distributed through the www.kernel.org website.

This security breach forced the Linux Foundation to shut down kernel.org completely while a malware infection was cleared up, and rebuild several of its servers. Miami Shores Police stopped Austin while breaking traffic rules on August 28 and then arrested after identified as a suspect in 2011 case.

Austin is charged with 4 counts of "intentional transmission causing damage to a protected computer." He was released from jail on a bond of $50,000 provided by the family of his girlfriend.

Judge has ordered Austin to stay away from the Internet, computers, and every type of social media or e-mail services, due to his "substance abuse history."

Austin is scheduled to appear in San Francisco federal court on September 21 before the Honorable Sallie Kim United States Magistrate Judge.

An indictment merely alleges that crimes have been committed, and all defendants are presumed innocent until proven guilty beyond a reasonable doubt. If convicted, the defendant faces a maximum sentence of ten years of imprisonment, and a fine of $250,000, plus restitution, for each violation of 18 U.S.C. § 1030(a)(5)(A).  However, any sentence following conviction would be imposed by the court after consideration of the U.S. Sentencing Guidelines and the federal statute governing the imposition of a sentence, 18 U.S.C. § 3553.

source: Justice.gov

Read More

Offensive Security has finally released updated Kali Linux 2016.2 Live ISO

From the Black Hat and DEF CON Vegas conferences and as promised Offensive Security has finally released the much awaited Kali Linux 2016.2.

Kali Linux is an open-source Debian-based Linux distribution designed to help ethical hackers and security professionals with a wide range of tools for penetration testing, forensics, hacking and reverse engineering together into a single package. (Earlier the Kali Linux distribution was known as BackTrack)

Kali Linux 2016.2 is an updated Live ISO image of the popular GNU/Linux distribution that includes the latest software versions and enhancements for those who want to deploy the operating system on new systems. 

The updated Live ISOs of Kali Linux, the Kali Linux team brings multiple variants of the GNU/Linux distribution with various Desktop Environments, specifically KDE, Xfce, MATE, LXDE, and Enlightenment – all available only for 64-bit platforms.
What's even more exciting is that, from Kali Linux 2016.2 onwards, the team promises to release updated Live ISO images of Kali with new software versions and the latest security patches every week.

Kali Linux has been the most advanced and widely used distro for penetration testing and forensics, this weekly update has come up as exciting news for those involved in various hacking and security-related projects. Kali has been featured on the hit USA network series Mr Robot and the Official Kali Linux Twitter account becoming a verified account.

It's been several months since the last update to the official Kali Linux Live ISOs, and there are a few hundred new or updated packages pushed to the Kali repositories.
This means that the packages incorporated in the previous Kali Linux ISOs need bug fixes and OS improvements, which are implemented in the most recent versions of the Linux distro.

Anyone downloading an ISO even 3 months old has somewhat of a long 'apt-get dist-upgrade' ahead of them.

You can download the latest Kali Linux 2016.2 ISOs from its official website now. 

source: Kali.org

Read More

The Ubuntu online forums have been hacked

The Ubuntu online forums have been hacked, and data belonging to over 2 Million users have been compromised, Canonical just announced.

The compromised users’ data include their IP addresses, usernames, and email addresses, according to the company, who failed to apply a patch to secure its users' data.

"There has been a security breach on the Ubuntu Forums site," Jane Silber, Chief Executive Officer at Canonical wrote in a blog post. "We take information security and user privacy very seriously, follow a strict set of security practices and this incident has triggered a thorough investigation."

"Corrective action has been taken, and full service of the Forums has been restored. In the interest of transparency, we’d like to share the details of the breach and what steps have been taken. We apologize for the breach and ensuing inconvenience."

After deeply investigating the incident, the company came to know that it left a known SQLi (SQL injection) vulnerability unpatched in the Forumrunner add-on in its Forums that exposed its users data.

The SQL injection (SQLi) attack is an attack used to inject malicious SQL commands (malicious payloads) through the input data from the client to the application in order to breach the database and get access to the user's personal data.
 
The vulnerability is one of the oldest, but most powerful and most dangerous flaw that could affect any website or web application that uses an SQL-based database.

According to Silber, here’s what the attackers were able to access:

1. The attackers were able to inject formatted SQL to the Forums database on the Forums database servers, which gave them access to read from any table.
2. The attackers then used the above access to download portions of the ‘user’ table containing usernames, email addresses, and IP addresses for 2 Million users.

Since the passwords stored in this table were random strings (which were Hashed and Salted) as the Ubuntu Forums rely on Ubuntu Single Sign On for logins, the company said that no active passwords were accessed by the attackers.

Cleanup

• We backed up the servers running vBulletin, and then wiped them clean and rebuilt them from the ground up.
• We brought vBulletin up to the latest patch level.
• We reset all system and database passwords.

Hardening

• We’ve installed ModSecurity, a Web Application Firewall, to help prevent similar attacks in the future.
• We’ve improved our monitoring of vBulletin to ensure that security patches are applied promptly.

However, users should keep in mind that the hack did not affect the Ubuntu operating system, or it was not due to a vulnerability or weakness in the OS.


source: insights.ubuntu.com

Read More

Ubuntu Bash on Windows 10

Microsoft is reaching out to Linux developers in a way that the company never has before. "The Bash shell is coming to Windows. Yes, the real Bash is coming to Windows," said Microsoft's Kevin Gallo on stage at today's Build 2016 keynote. The announcement received an uproarious applause from the crowd. The new functionality will be enabled as part of this summer's Anniversary Update to Windows 10.

"This is not a VM. This is not cross-compiled tools. This is native," he said. "We've partnered with Canonical to offer this great experience, which you'll be able to download right from the Windows Store." Third-party tools have enabled this sort of thing for years, but a direct partnership between Microsoft and Canonical should offer even more flexibility and convenience for developers who prefer using these binaries and tools.

More importantly, it represents Microsoft's refreshing stance on open-source development. VP Terry Myerson teased "more coming soon" in regards to other possibilities signaling a modernized and extremely open Windows 10. This blog post by Microsoft's Scott Hanselman offers a deeper explanation of the move. "This is brilliant for developers that use a diverse set of tools like me," he said. "This is a genuine Ubuntu image on top of Windows with all the Linux tools I use."

 How to Run Bash on Windows?

Users just have to follow these simple steps to run Bash on Windows 10 OS:

1. Open the Windows Start menu
2. Type "bash"
3. Hit 'Enter'

This will open a command line console (cmd.exe) running Ubuntu's /bin/bash, Dustin Kirkland, Canonical's Ubuntu Product and Strategy team member, explains in a blog post.
The system features a full Ubuntu user space complete with support for tools including ssh, apt, rsync, find, grep, awk, sed, sort, xargs, md5sum, gpg, curl, wget, apache, mysql, python, perl, ruby, php, vim, emacs and more.

Don’t get confused, as Microsoft is not enabling all Linux applications to run on top of Windows nor this is "Microsoft Linux." The company is just providing support for Bash on Windows 10 as an expansion of its command-line tool family.

So, the company is working on integrating Ubuntu User Space in Windows 10, as a hacker has already spotted a Linux subsystem in preview build (build 14251) of the Windows 10 code in late January.

How you can get it

This feature isn’t out yet, but it’s on its way. It will be part of the stable version of Windows when Windows 10’s Anniversary Update is released this summer. Until then, you’ll need to be on the Insider Preview track to get the latest unstable version of Windows 10 “Redstone.”

An Ubuntu 14.04 LTS-based Bash application will shortly be added to the Windows Store, followed by a Ubuntu 16.04 LTS-based application once Ubuntu 16.04 LTS launches on April 21.

Want to learn more? There’s a lot of information out there now. Microsoft’s announcement covers the basics and Microsoft’s Scott Hanselman provides some background. Canonical’s Dustin Kirkland provides an explanation targeted at readers familiar with Linux. You can also watch an informative 17-minute video who worked on the project.

You might also like :
How to Run Ubuntu Bash on latest Windows 10 Insider Preview Build 14316

Read More

How to make a bootable Kali Linux 2.0 USB with persistence that save files

So, you want to change the settings, update, and save some files in Kali Linux Live USB without losing your work.

How to make a bootable Kali Linux 2.0 USB with persistence. Persistence means that all the data changes that take place while you are using the system, they will be saved on the usb / pendrive that you Linux is in.

Reasons for using Live USB with Persistence are:

• · You use all of your system resources eg. CPU, RAM, GPU, etc
• · You take no space of your Hard Drive for it.
• · You can take your OS to any PC you use.

Requirements:

1. Universal USB Installer : www.pendrivelinux.com/universal-usb-inst­aller-easy-as-1-2-3/

or Rufus Faster bootable maker : https://rufus.akeo.ie/


2. Kali Linux Image : https://www.kali.org/downloads/

3. MiniTool Partition Wizard : www.partitionwizard.com  
OR http://download.cnet.com/MiniTool-Partition-Wizard-Free-Edition/3000-2094_4-10962200.html

 OK  LET'S START...


1. DOWNLOAD KALI LINUX ISO AND MAKE A BOOTABLE LIVE KALI

 3. CREATE 2 PARTITION WITH MINI TOOL

1. Select your USB drive with Kali Linux  right click  and choose  Move/Resize
  I resize mind 3.2 gig

 
2. Click the Unallocated rigth click to create new partition.

3. Name the partition label  "persistence" , create as "primary" , file system "Ext4" , cluster size "default" .

4. Click "Apply"  check .. and then click Yes.

Wait 10 minutes or more...

4. BOOT FROM YOUR NEW KALI LINUX LIVE USB PERSISTENCE
OPEN THE TERMINAL (CMD LIKE)

Commands Used In Kali :

UUI is the drive name change with your own drive name label

1. fdisk -l : To List Your Drives

2. mkdir -p /mnt/UUI : Make a directory on the filesystem to mount your USB

3. mount /dev/sdb2 /mnt/UUI : Mount the partition on the directory you made

4. echo "/ union"> /mnt/UUI/persistence.conf : Adds a configuration file to enable persistence.

5. umount /dev/sdb2 && reboot : Unmount the partition and reboot.

OK DONE!!..

When Kali as password type : toor
user name is : root



You might also like :

• Top 10 Wifi Hacking Tools
• How to Fix Kali Linux "Unable to locate package"

Read More

How to Fix Kali Linux "Unable to locate package"

How to Fix Kali Linux "Unable to locate package"

May be you encounter this when updating or installing apps in Kali Linux  apt-get install "your apps".

The single most common causes of a broken Kali Linux installation are following unofficial advice, and particularly arbitrarily populating the system’s sources.list file with unofficial repositories. The following post aims to clarify what repositories should exist in sources.list, and when they should be used.
 

Here is the solution, update  your source.list from doc.kali.org

1.The Kali Rolling Repository
kali-rolling is our current active repository since the release of Kali 2016.1. Kali Rolling users are expected to have the following entries in their sources.list:

2.Retired Kali sana (2.0) Repositories
For access to the retired sana repositories, have the following entries in your sources.list:

3.Retired Kali moto (1.0) Repositories
For access to the retired moto repositories, have the following entries in your sources.list:

Copy this on your source.list

deb http://http.kali.org/kali kali-rolling main contrib non-free # For source package access, uncomment the following line # deb-src http://http.kali.org/kali kali-rolling main contrib non-free deb http://http.kali.org/kali sana main non-free contrib deb http://security.kali.org/kali-security sana/updates main contrib non-free # For source package access, uncomment the following line # deb-src http://http.kali.org/kali sana main non-free contrib # deb-src http://security.kali.org/kali-security sana/updates main contrib non-free deb http://old.kali.org/kali moto main non-free contrib # For source package access, uncomment the following line # deb-src http://old.kali.org/kali moto main non-free contrib

NOTE: Any additional repositories added to the Kali sources.list file will most likely BREAK YOUR KALI LINUX INSTALL.

For beginner who don't know how to place the source list here is a step by step.

1. Click Places the choose Computer.

2. Find "etc" folder.

3. Find "apt" folder.

4. Find source.list  open with gpedit  (notepad in linux).

5. Now  copy paste  the repository on this post above then save.

6. Open your Terminal (cmd like)  type the fallowing command then press enter

apt-get update && apt-get install -f 

Now you will get updated  list... wait it to finish.

7. Now Done try to install your app now

Sample apt-get install hostapd

*******************************************************************************
additional if you want to get all sofware update just enter this command

apt-get update

BLOGMYTUTS TIPS: If you still have this error after updating source list check your LETTER use all small letter sometimes CAPSLOCK matters!!

You Can Check More About Kali Repositories Here:
http://docs.kali.org/general-use/kali-linux-sources-list-repositories

You might also like :

• Top 10 Wifi Hacking Tools
• How to make a bootable Kali Linux 2.0 USB with persistence that save files

Read More

Linux.Encoder.1 First Ramsomeware Targets Linux Powered Website and Server

Linux.Encoder.1 by Russian antivirus firm Dr.Web, the new strain of ransomware targets Linux-powered websites and servers by encrypting MySQL, Apache, and home/root folders associated with the target site and asking for 1 Bitcoin (~ $300) to decrypt the files.

Until security researchers create a decryption program, they recommend webmasters to backup all important data and keep all their files in place in case they are targeted.

Once infected, the Linux.Encoder.1 malware encrypts all files in the Home directories on the system as well as Backup directories and the System Folders associated with Web site files, pages, images, code libraries and scripts.

Ransomware Uses AES Encryption
According to the security researchers, the ransomware in question needs root privileges to work. Additionally, when it launches, the malware starts downloading:

1. The Ransom Message containing the demands of fraudsters
2. A file containing the public RSA key

After that, the Ransomware starts as a daemon and deletes all of the original files. The RSA key is then used to store AES keys that are used by the ransomware to encrypt the local files on the infected computer.

The ransomware also adds the .encrypt extension to each file it encrypts and writes a ransom text message in every folder.

The malware specifically encrypts files in folders that are typically found in Linux Web server setups, including directories like home, root, MySQL, Apache, and any directory that includes terms such as git, svn, webapp, www, public_html, or backup.

Moreover, the ransomware looks for files that have extensions specific to Web development environments including .js, .css, .properties, .xml, .ruby, .php, .html, .gz, and .asp, as well as other file extensions like .rar, .7z, .xls, .pdf, .doc, .avi, .mov, .png, and .jpg.
Once the victim pays the ransom amount 1 Bitcoin (~ $300), the system receives a signal to pass over the directories again to decrypt the files.

Read More