Hello and welcome to the official start cop killer Linux Certified Pen Tester Course.
This is the chapter one intro to calling Linux
for going to talk about many different topics here.
This is our table of contents or outline we're going to get into what is Linux.
We'll look at Windows versus the Linux operating system.
We'll look at different components of Linux operating systems.
We'll look at what exactly is a Linux distro.
We'll look at the ethical hacking distribution of Kali Linux.
We'll look at some of the different features and how to choose the right version and download of Kelly
Linux.
We'll also get into the installation of Kelly Linux, whether it's a physical installation on a hard
drive or a virtual installation in VirtualBox software.
So this is the chapter flow.
So what is Linux?
We're in the first part here.
Then we'll get into the differences between Windows and Linux as a whole and why you should choose calling
Linux and then how to download and install it.
So what is Linux?
Just like Windows XP, Windows seven.
Windows eight.
Microsoft Windows ten.
And even Mac OS X.
Linux is an operating system.
It's just all of the software that runs on top of your hardware.
Linux functions much like other operating systems, that it has a toolbar and task bars and can run
programs.
But it's a different underlying architecture.
Linux has been around since the nineties and has since been modified.
Redistributed, retooled and released to where it runs on many, many devices, including your phones,
your car, refrigerators, Roku devices, streaming devices.
It also powers most of the Internet.
Most people don't know that every time you watch Netflix, you're using Linux based servers, most likely
in the cloud.
Linux runs many of the great supercomputers that are making scientific breakthroughs and also the world
stock exchanges.
It's truly an open source operating system.
So how does Windows differ from Linux?
While Linux is a completely open source project?
Linux has various distributions which are highly customizable by the user to suit their needs.
So you can have Linux that runs on really old hardware or really high performing hardware.
Linux is also licensed under the GM new general public license.
So it's free and redistributable as long as it conforms with the terms of the GPL.
Now it is generally considered to be more secure than Windows, as its operating system and components
are not as susceptible to attacks.
It's not that there's not security considerations, but there's just less malware written for Linux.
Linux also supports a wide variety of free software and other benefits to Linux.
Is that the software and the operating system code based?
Because it's open source, it's largely reviewed and vulnerabilities are quickly found and tested amongst
a buzzing community of developers, security practitioners and industry professionals.
Contrasted with Microsoft Windows.
Windows is a closed source software.
It's Microsoft Proprietary.
You either have to purchase a license and they have limited distributions to it went from in the last
iteration of Windows ten, they went down from 5 to 3 different variations of Windows and it cannot
be customized easily.
The windows can do some functionality with respect to Linux.
Windows also requires a license key from Microsoft.
And because Windows is the de facto standard as far as desktop operating systems, it has become a much
bigger target of malware developers because of how easy it is to write malware or to get a reverse shell
from that operating system.
Windows is also very popular amongst gamers.
For example, Valve's Steam platform runs on top of windows, though it does run on Linux.
There are just less games available for it, so it's often a target or more popular choice with respect
to the gaming industry.
So let's talk about some of the components of the Linux OS.
We first have the bootloader.
This is the software that manages the boot process of your computer.
This tells the computer what operating system to boot.
Then we have the kernel.
The kernel is the core of the system, manages the CPU, the memory, and any peripherals that are connected.
The kernel is essentially the lowest level of the operating system.
Then you have the demons or demons.
These are background services, things like printer demons, web servers, scheduling demons, anything
that starts up during boot or once you log in to the desktop and then you have the shell.
This is a command process that allows you to control the computer via the commands typed into the text
interface as a similar to a command prompt on Windows, but it's called the terminal in most Linux distributions.
Then you have the desktop environment.
There are many different desktop environments to interact with.
Some of these are unity, genome, cinnamon, KDE and many others.
So just like Windows and Mac, Linux offers thousands upon thousands of high quality software titles
that can easily be found and installed from various other app stores or repositories.
So Linux has many different versions to suit the different needs.
So whether you're a hardcore user to a new person, you'll find a flavor of Linux that matches your
needs.
These are called distributions or in the short term, distro.
Nearly every version of Linux can be downloaded for free and burned onto a disc.
Some of the prominent Linux letters are listed below.
We have a arslan x db in meant to say.
Of course Red Hat is a commercial version of Linux that does require licensing for the technical support.
There's Santo where someone two and even lightweight distributions of Ubuntu.
So what does Kelly Lennox.
Kelly Lennox was released back on March 2013 as a.
Ground up rebuild of the old backtrack clinics, which is completely division based.
What does that mean?
It DB been based on standards and it's aimed at more advanced penetration testing and security auditing.
So it's been based much like other distros like Ubuntu.
That was a get into the package.
Management will see how that is important for us to understand.
So Kali Linux is also specifically tailored to the needs of penetration testing professionals and therefore
all the documentation assumes that you have some familiarity with the Linux operating system in general.
So some of the key features of Kelley Linux or that it's free software, completely free of charge.
It has an open source git tree, which just means that.
The software updates are delivered via open source and anybody can look at the original source code.
It also has wide ranging wireless device support.
So in the past, LTS distributions have had problems supporting certain types of wireless interfaces
and wireless network cards.
That has largely been a thing of the past recently.
It also has what is known as GPG sign packages in repositories.
This is the new privacy guard, which is a pjp pretty good privacy based encryption system, which means
that all the packages and repositories are signed by the developer and the packages that are inside
of them will be signed as well.
So Kiwi Linux does have multi-language support though many of the tools tend to be written in English.
There are more than 400 pen testing tools listed in the operating system.
You can see here the Kelly Lennox website.
You can look at the latest and greatest news if you want to look at the documentation.
You can see introduction, installation.
There's lots of different options.
If you go to the tools that are inside of Kelly, there are many, many different tools that are out
there.
And Kelly Lennox regularly updates the tools and they sort them by various different functionality.
So if they're a tool built for information gathering or vulnerability analysis, they're sorted into
those categories.
Then you have some tools that are specifically for wireless attacks.
Other tools might be for forensics, password cracking, spoofing, and even reverse engineering.
So what's different about Kelly Olynyk?
Well, it's specifically geared to meet the requirements of professional penetration testing and security
auditing.
So because of the nature of security audits, Kelly Lennox is usually designed to be used in a single
route user scenario.
And many of the network services are disabled by default in order to provide a more secure system by
which to do security audits.
Kelly Lennox has a custom kernel, which is also patched for wireless injection.
And there are many flavors of Kelly, which some are more mental minimalistic and have a trusted set
of repositories.
So the main goal is maintaining the integrity of the software in the system that's installed as a whole
and starting from a known secure baseline is particularly important to security professionals.
So how do we download Kelly Lennox?
Well, the only official source of downloading Kelly ISO images are from the downloads section of Kelly
Borg.
So if you click on the.
If you go back to Kelly's homepage and you go to.
The Download section.
You can see a lot of different options here from native installers to live distributions to over the
network installers and then even the virtualized solutions down here.
There's also some even some weekly builds or some experimental builds that are included in this page
as well.
So depending on your hardware, you can download the flavor of Kelli Lennox to support your needs.
Most of the images will be either 32 or 64 bit suitable for most CPU's, though most computers these
days are becoming 64 bit because of the ability of 64 bit operating systems to handle more than four
gigabytes of memory.
There are some versions of Kali that can be installed on smartphones, Chromebooks or other devices
having an ARM processor.
So you have to use the arm images if you're installing on that particular hardware.
So first of all, we can look at some things to verify integrity.
So when we download our Kelly ISO, we want to make sure that we download a copy that has not been tampered
with.
We can see here that using the SHA256 some utility, we can validate that information now.
This could be done a couple of different ways.
Once you download your ISO, it's important to check and make sure that it's the same matches.
What is on the website.
So my case here, I'm going to scroll back up and I'm going to go get the 64 bit installer and I'm going
to highlight this SHA256 sum.
I'm going to go ahead and download this.
To make sure I have the latest and greatest version and put it on my drive.
I'm going to make a new folder called.
Tally ISO.
I'm going to open that folder and click Save.
And so that'll take a little while to download it.
So it's a little bit less than four gigabytes.
So depending on your Internet connection, you'll have a quick download or a longer download.
You want to make sure that you have if you're putting it on a thumb drive to install that, you have
at least four gigabytes of space on there.
Ideally, eight gigabytes is better because you may need more room for other things.
All right.
Now we've got our ISO downloaded.
I'm going to go ahead and open up a command prompt in Windows, which I already happen to have a version
of Linux installed on here so I can verify my SHA256 sum to make sure my hash is good.
Course it's going to be different.
If you're doing this on Linux, you can just type in the command SHA256 sum and then the file name and
you'll be good to go.
Are we going to see here?
We do the last command and we can see that we have our Kali Linux installer ISO Downloader, so we're
going to do SHA256 some in the name of the file.
And we're going to make sure that it matches.
Are we going to see here that, in fact, that this is our SHA256, some hash right here, starting
with 89 and ending in 87.
So we can see that we do have a match.
So we know we got a correct download so that first we verified the integrity of our image and now we're
good to go.
So how do we make a calculated executable thumb drive?
Well, of course, you need a verified copy of the ISO, which we just obtained.
If you're running on a windows, you need to download some type of Windows imaging utility.
There are many other options there, and you typically need a thumb drive, at least four gigabytes
or larger.
Now we're going to go ahead and make that bootable USB drive.
All right.
Now that I got my USB drive plugged in, I'm going to go ahead and download this 132 disk imager.
You can also use another program I recommend called Unit Boot.
And it's the nice thing about it is you don't have to actually download the software.
ISO first, you can actually have the program, do the work for you.
So it works on multiple operating systems.
But we'll go ahead and download the 132 disk imager and also download you now boot n so you can see
here this works on Windows, Linux and or Mac as well and it will download any type of distribution
that you want or you can supply the ISO yourself.
So we'll go ahead and.
Double check your you want to double check the thumb drive and make sure that you don't have anything
on it that you care about, or at least make a backup of it first because you're going to be overwriting
this drive when you create a bootable thumb drive.
I know that.
I've already cleared out my thumb drive.
Going to go ahead and click on the 132 Disk Imager program.
And of course, because I'm on windows, it's going to prompt me to.
That I'm installing an application outside of the Microsoft Store.
That's fine.
Go ahead and click on Install.
And in a moment, you'll go through the prompts of the disk imager software.
And this is also under the new GPL license.
So you have to accept the agreement.
Give it a place where you want it to install.
And I'm not just going to follow the prompts through it.
I'm going to let that install and I'm not going to give you the read me for the purposes of this demo,
and we're going to go ahead and run the program.
It's going to make it a little bit bigger so I can actually see what we're doing here.
And we're going to.
Open up the ISO we just downloaded.
We actually generate a SHA256 hash.
So these are the basic steps.
You plug in a USB drive, make sure you remember the drive letter, which it was connected to, and
choose the ISO file.
And once you click on that, you'll click on the right button.
And once you've burned your image, you want to go ahead and safely eject the USB drive.
I'm going to do mine and you not burden because I just want to show some variety here.
Go ahead and install that.
Right click.
Yes.
And we're going to click on the right place.
We have the disk image.
Which in my case is on the drive.
Just make sure you wherever you save it out, you remember where it is and click open.
And then I'm going to.
Burn that to the USB drive.
That I connected.
Keep in mind, if you're using a USB hub, you may have some issues with the drive.
So make sure that your.
Burning to the right drive.
See you.
Avoid messing up your workstation.
Now we've got our image selected and the correct drive letter selected will select.
Okay, and it will go through some process of downloading the files if it needed to.
Or in this case, it's just going to extract and copy the files.
It's going to install the bootloader, and we'll come back when it's complete.
Keep in mind, the installation to a thumb drive will take some time.
You can also install it to a CD or DVD if needed, but the thumb drive will be the much faster option
and is the recommended option as well by the Coward Linux team.
So if you want to do the same thing on Linux, you'll have to go into the D d command and you'll have
to be running as route to be able to execute that command with sudo.
You can do this from.
Mac OS or another one X distribution.
You'll have to use the disk command to figure out which disks you have available to make sure that you
pick the correct partition so you'll get an output similar to the one below.
So once you're going to do it with Kali Linux or any other Linux distribution, you can do the.
You plug in the drive and you'll have to enter the pseudo AV disk command one more time.
Because it doesn't update in real time.
And this is the command below that you'll type.
If you want to create a bootable thumb drive, you'll use the DVD.
The DVD command.
I asked, is the input file, which equals the name of the file that you downloaded or the ISO OS is
the output file and this is the path the slash DV slash SDB two.
Or it might be something different in your case.
And then BZ stands for the block size that you wanted to write to.
You can leave it to 512 K and that should be just fine.
So once you're going to start booting your system or your Kelly Linux system on a hard drive, you'll
either have to have a bootable DVD or a USB and you have to go into the BIOS while booting.
Or you might also have it called the UFC and it may be depending on the type of machine you're working
on your press, either the F2 or the an F9 key to go into the bios.
So the BIOS or the EFI on the newer machines handles all the boot process and it can be configured through
the setup software so you can change which version you want to boot into.
You'll notice some different options in the menu here.
It can be either live mode or live USB with persistence, even encrypted persistence.
You could also do the install or the graphical install options as well.
All right.
Now let's talk about another way to install Kali Linux, which is done through something called VirtualBox.
VirtualBox software is from Oracle and it also requires something called Intel virtualization software
or Intel VHD.
If you have an Intel based machine or CPU, you can typically install VirtualBox without any problems
and be able to virtualize your Kali Linux installation.
So let's go over to the virtual box website.
And we can see we're redirected to.
Oracle.
And there are some prebuilt virtual machines.
If you're working in other areas or one X, you want to click on the blue button here and you want to
click Download.
VirtualBox 6.1.
Now you'll want to choose the particular distribution or the particular download for your type of architecture.
Now, if you're running on Windows, you'll click on Windows, OSX, obviously, or OSX, and then you'll
have your Linux distributions.
And they also include SHA256 check sums as well.
Now one more thing.
Depending on your hardware, you may need this VirtualBox extension pack.
So if you have if you want to be able to add USB devices to your virtual machines as well as have newer
machines such as that have nvme drives the nonvolatile disks.
So you want to make sure that you have whatever you need and they also have the user manual as well.
So I'm going to go ahead and click on the download.
And we'll go ahead and save this virtual box.
6.1.1, though, once you have it installed, you'll be able to update it just fine.
I happen to have it already installed.
We're going to go ahead and start menu.
And once you're installed, you can type in VirtualBox.
In the search for.
And you'll get something like this, your main screen.
If you've not installed it before, you won't have any virtual machines.
You'll have a blank screen.
In my case, I have several other virtual machines already installed,
so I have many more things here than you will at the start.
So we'll notice I have clients already running, but if I want to
look at some things like the Help File there's about Virtual Box, I can see what version I have installed.
So I have 6.1.8.
So you might want to update depending on the type of virtual machine or Linux that you're trying to
run.
You can do file check for updates and it will tell me that I'm already running in the most recent version
of VirtualBox.
So once I've installed it, then the main screen is going to like look like this.
I'm going to click on the new option.
Another machine, and I'm going to say new and I'm going to give it a name.
I'm going to call it Kali Linux.
We'll call it 2020 and you give it a path to the virtual machine.
So in my case, I'm going to change something other than the default because I want to make sure that
I have plenty of space on my system or the virtual machine.
And I'm going to use this folder right here.
And you want to pick the you can also pick your version of one X that you're running.
My case.
I want to get the latest kernel.
So I'm going to go with the 2.6 and I hit next.
So you can select the version as in 64 bit.
It doesn't really matter at this point.
You're going to load the ISO anyway, so the recommended amount of RAM is four gigabytes, of course.
VirtualBox may say, you know, 768 or one gig is fine.
So I'm going to.
It gives me by default 1024 so I'm going to give it a little bit more RAM.
So I'll bump it up to four gigs here.
I'm moving the slider.
Or you can alternatively type it in in the box on the right hand side.
So four gigs are am.
And then after that.
I'm going to create a virtual hard disk because the space that carry Linux is actually going to consume
on the system.
And I'm going to create.
And recommended size is eight gigabytes.
I would say give it a little bit more, but I'll leave it the default version.
And the nice thing about a virtual machine is they can dynamically allocate space as your hard drive
fills up.
So VDI is the default virtual box.
If you're using VMware, it's VMD, K or Curium you if you're doing it on Linux or planning on moving
it to a Linux.
So we want it to be dynamic because we don't want to waste space.
So it'll scale up and scale down the storage as needed.
So then once we've created the virtual machine, you'll see this type of image.
Let's go ahead and finish out the tutorial here and we'll leave it at eight gigabytes and we'll click
Create and there we go.
Now this, our newly created VM is right here.
So now we've got our Kelly one X virtual box set up and we have our thumb drive selected.
We're going to go ahead and go back to virtual box and we're going to click on.
The Settings menu and we're going to go down to the storage tab and the storage tab.
We're going to have to pick the file that we just created.
So we're going to click Choose Virtual Optical, this file.
When I click on the system tab and we want to make sure that the optical drive boots up first if we're
doing it on a
from the ISO.
Go to settings.
Go down to storage and we're going to in this case, going to choose or create the optical this file
or to add a new one from the call we just downloaded.
And there's the ISO and we're going to choose it and hit.
Okay.
And we want to make sure that we have the obstacle to boot first.
So we'll go over to set back to settings.
It is system and the optical is first after the floppy which you can disable the floppy if you want
to.
Really does not matter.
Most of the rest of these options you can leave out the fault processor.
We can give it more cores if you want it to run a little bit snappier depending on your hardware.
So once we're going to install it, we can pick the.
We can configure a lot of different parameters like network card.
We're not going to do that here because we just want to go ahead and power it on.
We're going to click Normal Start.
And it's going to take a little bit of time.
And then our live.
Our boot menu should be coming up.
It says session spawning.
I'm going to go ahead and maximize the screen here.
So starting a virtual machine.
And this is the bias mode.
You can do a graphical install or install.
And there's even some advanced options.
So we'll go ahead and do the graphical install in this case.
I want to go ahead and make this a little bigger so it's a little bit easier to see.
We can see our menu and we get to our first pop up for the installation.
If you want to exit the virtual environment, you have to hit the right control button.
And in the case of VirtualBox.
So California's the only place that it is official to download the ISO for Kelly.
Don't download it from anywhere else because these sites could contain malware.
You always want to validate the SHA256 some of your download to make sure that you have confirmed the
integrity of your ISO.
If this doesn't match, try downloading again or use a different source.
Because sometimes.
You might just have a bad download and so your your SHA256, some may not match up.
So if you're going to boot from a physical drive, you'll, you'll configure the bios to boot to the
correct device.
In some cases, it may just boot to that thumb drive once you plug it in.
But if a thumb drive is disabled or its some other device is set to boot first like a CD or DVD, you
may have to change it.
So now we have our Kelly Lennox running.
Okay.
Now that we've got our image running notice down here, we have Kelly Linux and it'll ask us some different
options for the installation process.
So we'll click on English in my case, or whatever language you need.
I'm in the U.S., so you'll pick whatever country is appropriate for your installation and what language
that you want for the keyboard.
And it's looking for the installation media.
And it's going to go through some loading of some different components.
And that is we have a menu at the bottom here because I'm in a virtual machine, so I can actually change
preferences from here as well.
But I'm not going to worry about it.
As I hover over this, I can see any external devices, anything I plug into it.
If I want the clipboard to be enabled for things like drag and drop the generally you can just let this
go and everything will work just fine.
I wanted that to be scaled mode so you know, which will make it a little bit better for a viewing angle.
So that's important to understand.
So first thing.
Give it a hostname.
You can you can leave it as a default.
That's fine.
Or you can call it something else.
On if you're part of a domain name.
That's great, but you don't need to do that for the the installation.
So then you want to set up the some other account other than route.
And that's one of the things that has changed in the new version of the next 2020.
So this could be administrator or, you know, admin or anything you want.
In this case, we'll just.
We'll call this admin.
And we'll continue to keep the username ad.
Then you can you can put your full name if you want.
See, notice that this is a one of the things you can't actually do admin because admins reserved for
the system.
So all will go back and will change this to sysadmin.
You can always set up the account later.
That's not a problem.
You can create different settings.
But notice this is the Debian installer or Debian depending on how you say it.
It's just walking through step by step by step.
So going to click on Continue and we'll change the name to let's say sysadmin.
That sounds reasonable, right?
I'll say sysadmin and you want to change a password.
You want to make sure that you don't use an easily accessible password.
The OS will allow you to use special characters and things like that.
So make sure if you're concerned about security, that you want to use a strong password.
My case, I'm just using it for demonstration purposes.
You can click on the checkbox to show the password in the clear.
If you want to be able to see that, but you have to enter the same password twice, otherwise it won't
get past this stage.
Your time zone that you're in.
And then it'll set up the clock because timing is very important.
And when extended, this can be a consideration.
So it's going to go through.
It's going to partition the disks.
And you can tell it.
Okay.
I want to use the entire disk now.
Of course, you wouldn't have to go through all of this if you download the VirtualBox image, which
we'll do in another video.
But I'm just showing you the steps that you would go through if you were doing a bare metal install.
So we're going to use up the whole disk.
In this case, just it says at a virtual box, hard disk.
It's an SD is is the numbering scheme.
So you want to make sure that if you're doing this on a live system and not a virtual machine, be careful
of the the drive that you select.
So I'm going to say, okay, so you can do all files in the partition or you can do you can customize
if you want.
So you'll have notice in this case we have in the T for partition.
When we get into a partitioning, this will all make sense right now.
You can just leave it as the default and then you click continue and it's going to.
But I would.
Allow you to choose some more options.
I'm going to just say, okay, I want the x-t4.
That's fine.
I'm going to confirm.
I want you made your partition selections.
You're going to tell it to write the partition to discuss, and it's going to start installing the system.
So that'll take a little while and we'll come back when it's complete.
All right.
A couple more things that Kelly Wallace will ask you if you want to use a proxy to access the outside
world.
Of course, if you're using maybe this at work on an actual engagement, you might have to set up a
proxy.
We're just going to leave this blank.
And it's going to set up the app package manager, which is what most Debian based Linux distributions
will use.
And then it's kind of select and install different software and we'll come back when this is done.
Okay.
In the next part of the software installation, you can pick out what default desktop environment you
want.
You can pick gundam, KDE, light weight distribution.
What tools do you want?
There's the large default selection plus additional to.
Also keep in mind that will be more different space.
Of course, in this case we'll just pick on x, f, c, which is Kelly's default desktop environment.
You might prefer some other type of environment in context, and that's perfectly fine.
Okay, so we'll let that go and then we'll come back when that's done.
I want you're done with Kelly Linux installing in VirtualBox.
You'll be able to boot into it like you will a regular operating system.
And we'll come back in the next lesson and we'll look at Linux fundamentals.
Now, there's one other option I wanted to cover briefly before we get into.
The next topic and that is calling Linux virtual machine images.
So if you don't want to go through all the setup and you just want to get up and running with Kali Linux
very quickly, you can go back to the Kelly Lennox homepage and you can go to downloads, download common
accents for all the way to the bottom down here where it says VMware and Virtual Boxes.
Since we're running a virtual box, we're going to go ahead and pick the 64 bit.
You notice the link says available on the offensive security theme download page.
So to click on this link and notice it redirects you to the offensive security download option.
So you can click on download prebuilt virtual box images.
You can do it, of course, with the torrent.
It also has Hyper-V for if you want to run it through Microsoft, but in this case will click on a virtual
box and you click on the 64 bit download.
Notice that it downloads it as a ova file and and be 64 over a file otherwise known as the Open Virtualization
Format Archive.
So this can be downloaded if you just want to download an already pre-built Kelly Linux image and you
don't want to have to mess with any of the installation.
This is only for in a virtual machine.
If you want to do it through a physical machine that you install on, you'll do that with the thumb
drive or the DVD drive or whatever have you.
So that's it for this first chapter and we'll see you in the next one.