Ethical Hacking and Defence Assignment 2 Assessment Notes: · Kali Linux is available as a virtual machine on the Unit Resources section of Blackboard Task You are to infiltrate the provided system and...

In this assignment we study and analysis kali linux virtual machine .Kali Linux was created by Mati Aharoni and Devon Kearns of Offensive Security also the creators of BackTrack 5 which was the predecesor to Kali Linux. Digital forensics and penetration testing. the making for several years. As a security distribution overall, Kali Linux is the premiere securitydistribution and I recommend it for social engineering purposes.
In short, Kali has a number of security tools that can be leveraged to gather information about yourtarget beyond the tools we will discuss next. At the time of this writing, Kali has over 50 toolsdesigned for information gathering purposes. We will use these tools that depend on the aim of social engineering test. However, there’s a good chance Kali will have the tool you need for the project. SET is specifically designed to perform some of the most advanced social engineering attacks. It is both an information-gathering tool and an exploitation tool. SET wascreated and written by David Kennedy, of TrustedSec fame. It is an open-source, freely available andwritten in Python. Since its inception, it has become an industry standard with heavy support from theinformation security community.Screenshot of the Social Engineering Toolkit main menuSET comes with an a
ay of social engineering capabilities. These range from spear phishing, mediadrop infection to Arduino based attack vector. it consider the SET’s spear phishing attacks, infectious media generator and its mass mailer attack While there are other features of the toolkit that are most valuable, these three features are some of the mostcommonly used
.
Before we go any further, it’s worth mentioning that SET comes integrated with the Metasploit
Framework. This is evident from SET’s main menu of options. The Metasploit Framework is an opensource framework for developing and executing exploit code. We will discuss Metasploit.. The Social Engineering Toolkit comes preinstalled on the Kali Linux distribution.Alternatively, Screenshot of SET’s Social Engineering Attacksub-menuSET features a great set of options all around. What is great about SET is that its modules addcapability for generating payloads and starting listeners with testing. This is in part due to theintegration with Metasploit, which we will get to next. To help get started, SET provides a wizard to assist in thedesign and execution.
Flag 1) Examine the contents of the web server, what username and password might an admin use?
Kali Linux -> Password Attacks -> Offline Attacks -> hashcat
kali >hashcat options hashfilemask|wordfiles|directories
open THC-Hydra from Applications -> Kali Linux -> Password Attacks -> Online Attacks -> hydra.
Step 2
Firstly We Set the Web Form Parameters
We will see that how we able to that hack web form usernames...