EvilZone

This is what worries me a bit, because my main intent of using Archlinux is to set up my computer for Anonymity. Then try to follow some tutorials on how to hack, I will most likely experiment from something simple like my own network. But i really need to get the anonymity step right otherwise by first try could by my last.

You're choosing the wrong distro. Arch linux is only a good foundation if you know how to build the system you want already.


Using arch to build a secure, anonymous, stable platform is certainly doable if you know what you're doing. But if you don't, it's like having all the right tools to build a house and never having used any of the tools first.


Inevitably you may build something that can stand up and keep out most of the rain. but it will hardly be stable or secure.


A better option would be setting up a virtual pen test environment. Learning with a prefab kit like Kali and going from there. If you do try to have something illegally over the net... you're probably gonna fuck yourself over... don't do illegal shit, there're plenty of legit ways to learn.

haha, you misunderstand me.
What i am saying is that it is a psychological feeling of unease whenever i use Tor no matter how illogical it may be.

Oooh... Gotcha... I feel that way too when I do things I shouldn't be doing, it's called guilt. But I don't do anything shady on tor... infact the only time I don't use tor is when I'm doing something shady (or i need the speed bump).

So, I've targeted a site, and have penetrated it using an error based SQLI.The admin username and password have been obtained, although the password seems to be encrypted in some weird hash like form that I have not seen before.

The hash is this - qw7mmXe2w/qkIpdX.9Gxe/

Thanks in advance (and sorry in advance is this is the noobiest shit you've ever seen),
@nonytan

Here's the thing about context...

There is no such thing as "kali tool". Kali Linux is one of many linux distributions. A distribution is simply a collaboration of various programs that can run on the Linux kernel. The programs that make up "Kali" are all open source tools that have been combined for simplicity.


So if you want to know what tools Kali has pulled into its distro go here:
http://tools.kali.org/tools-listing


If you want to download a specific tool then you use whatever method your operating system implements for that task. In your case you would typically use apt-get. However not all of the tools for kali are in the default apt repository so you will need to find the kali repository as suggested by HTH you fucking moron.


So your next step is to find the kali repos and add them to your system. This may help:
http://blog.romaingre.net/2014/05/add-kali-repository-on-debian/

BTW, adding a repo doesn't add the tool, it just gives you access to easily download the tool using apt-get.


All that said, if you want to build your own distro you need to understand a very simple piece of information. All programs available on pretty much any open linux distrobution are open source. This means that somewhere in some git repo or source forge repo. The source-code for your programs are available to be compiled by you.


For example: https://github.com/rapid7/metasploit-framework
The site above hosts the source code for the git-version (read latest version) of the metasploit framework. That site is complete with detailed instructions on how to download and add it to your machine.

Now man the fuck up and learn to google your own answers without needing to be spoon fed them.


Lastly:
*Throws Giraffe shit in your soup and dumps soup on your head*
You're welcome!

Hi,
       i just install the lastest linux mint debian edition betsy . Well i'am Planning to customized it to be able to use it as my Daily use distro and also i'am Planning to installing Pentest tool on it so that i can build out a personal set in my laptop


And i wonder any good website where i could download these set Manually ? i mean Pentesting tool

I've been reading about how it was recently discovered that your true IP/location can be discerned by a server using the "STUN" request in browsers and apps which can open up browser windows. If this is true than VPNs are essentially useless now, right? Could anyone educate me on this please?

thanks

This will break it down pretty nicely for you:
https://github.com/diafygi/webrtc-ips


and this will show you how to take proper precautions against it:
http://lifehacker.com/how-to-see-if-your-vpn-is-leaking-your-ip-address-and-1685180082


Just using a VPN alone isn't a failproof method. You should think of security in depth. There should be multiple stages of security in case one or two of them are violated. But again this should be in line with what you hope to accomplish. You don't need a VPN, hopping through TOR, hooked up to a random open wifi miles away from your home, spoofing your mac address on a throw away computer using TAILS OS just to hide porn from your mother.


This is where proper RISK analysis comes in. The tools you use should be in line with the risk you're taking.

Hello i was wondering what programming langauge is best for coding exploits.

I know this is probably asked alot but people say one thing then another all the time

I know that python is great for coding hacking tools but for 0day exploits its all right was just wondering
if there was another thanks and sorry for the short thread.

For general scripting python is awesome, easy to use and expand on. But it's a higher level language.



For writing 0-day exploits I'd say go with C, since memory management is left mostly to the programmer which means it's usually the one most prone to memory exploits (ie: buffer and stack overflows, etc).

So this is a thing: Virtual Humint link

I'm not sure how many of you (but I'm assuming a few of you do) follow the Intel arena. This seems to be a growing trend in the Intel world: Virtual Humint

Virtual HUMINT™ is a unique methodology pioneered by Terrogence for use over virtual web-platforms to gain trust, form connections and ultimately collect valuable intelligence from entities of interest in virtual cyberspace.
Much like a traditional intelligence agency might recruit and operate live human assets in physical spaces in order to obtain information, Terrogence specializes in cultivating and operating virtual identities in online spaces, that act and access social media platforms like a natural netizen – a citizen of the internet.

Trust no-one.