Use JoomScan to scan Joomla for vulnerabilities on Kali

When installing a content management system for your website, it’s easy to get lazy and assume that it’s going to do all the work for you. A CMS like Joomla certainly does make things more convenient, and lets you publish a polished website very quickly, but that doesn’t mean you shouldn’t take some extra time to secure it.

If your website is running Joomla, you can use the JoomScan utility against your site to uncover vulnerabilities or just general information that can assist in an attack against your site. Once you’re aware of the the site’s weak spots, you can take the proper steps to secure it. JoomScan works similarly to WPScan, which is used for scanning WordPress sites for vulnerabilities.

In this guide, we’ll see how to use JoomScan on Kali Linux. JoomScan itself is not a tool that can be used maliciously while performing simple scans against a site, unless you consider the extra traffic itself to be malicious. But the information it reveals about a site can be leveraged by attackers to launch an attack. Therefore, make sure you have permission to scan a website when using this tool.

In this tutorial you will learn:

  • How to use JoomScan
Using JoomScan on Kali Linux

Using JoomScan on Kali Linux

Read more

How to install VMware Tools on Kali Linux

If you’re running Kali Linux inside a VMware virtual machine, installing the VMware Tools software will help you get the most out of the system. VMware Tools will give the machine more capabilities, such as a shared clipboard with the host system, drag and drop file transfer, and automatic window resizing.

This makes copying data to and from a host system much more convenient. It also changes the VM’s resolution automatically when its window is resized, so you don’t need to change it manually. VMware Tools will work with just about any Linux distribution, but instructions can differ because of dependencies and package managers. Normally, Kali will automatically detect what platform the operating system has been installed on, and will include VMware Tools (if applicable) by default. If yours isn’t working or you just need to know how to use the features, we’ve got you covered in this guide.

In this guide, we’ll be going over the step by step instructions to get VMware Tools installed on Kali Linux. With these instructions, it doesn’t matter what host system you’re using, as long as the virtual machine is running Kali. This guide assumes that you’ve already installed Kali in the VM correctly.

In this tutorial you will learn:

  • How to install VMware Tools on Kali Linux

Read more

How to provide user with root privileges on Kali Linux

Many of the hacking tools on Kali Linux require root privileges to execute, not to mention all the ordinary Linux commands that require it. If you’re sick of having to preface commands with sudo and typing in the root password often, we have a couple of solutions for you.

You can login to the root user in terminal with the sudo -i command, as we explain in our guide on Kali Linux default password. Alternatively, you can see our guide on enabling root login in Kali in order to login to the GUI with the root account.

The last option is to provide a normal user account with root privileges. In this guide, we’ll go through the step by step instructions to grant root privileges to a normal user account on Kali Linux.

In this tutorial you will learn:

  • How to provide user with root privileges on Kali Linux

Read more

How to install Java on Kali Linux

The objective of this guide is to show how to install the Java Development Kit (JDK) on Kali Linux. This is needed by Java developers and programmers in order to compile and run Java applications. It’s also required for security tools that are built in Java.

In this tutorial you will learn:

  • How to install Java JDK in Kali Linux

Read more

Kali Linux keyboard shortcuts cheat sheet

Kali Linux users have a lot of typing ahead of them. The process of gathering reconnaisance information before launching an attack, and finally using penetration testing tools against a target system, usually involves a lot of keystrokes and maybe a few command line terminals.

To maximize your productivity in Kali and save yourself some time, you can learn some keyboard shortcuts. In this guide, we’ve compiled a bunch of useful keyboard shortcuts into a cheat sheet, so you can refer back to it any time you need. We’ll also show you how to create your own keyboard shortcuts.

In this tutorial you will learn:

  • Kali Linux keyboard shortcuts cheat sheet
  • How to create custom keyboard shortcuts

Read more

How to take a screenshot on Kali Linux

In this guide, we’ll be showing you how to take screenshots in Kali Linux. There are a few different utilities we can use to accomplish this task, and this article will ensure that you’re familiar with them.

In this tutorial you will learn:

  • How to take a screenshot with Kali’s screenshot utilities
  • How to use Flameshot for screenshots and annotations
  • How to use Kazam to take screenshots and screencasts

Read more

How to install GNOME desktop on Kali Linux

Most Linux distributions have a “main” desktop environment they use – the one that comes installed by default in the distro’s most popular download. For Kali Linux, it’s Xfce.

If you prefer GNOME over Xfce or are just looking for a change of scenery, it’s quite simple to switch desktop environments on Kali. In this guide, we’ll walk you through the steps to install the GNOME desktop environment on Kali Linux.

In this tutorial you will learn:

  • How to install GNOME desktop on Kali Linux

Read more

How to install and use telnet on Kali Linux

The telnet utility, a once common protocol that graced the terminal of every system administrator and power user, was a precursor for SSH. These days, it’s a forgotten relic that isn’t installed by default on most Linux distros.

Despite the other protocols that have come to replace it, telnet remains an ideal utility to test the connection to a certain port of a device. In this guide, we’ll see how to install telnet on Kali Linux, along with some usage examples.

In this tutorial you will learn:

  • How to install telnet
  • Command usage examples for telnet

Read more

How to install VirtualBox guest additions on Kali Linux

If you’re running Kali Linux inside a VirtualBox virtual machine, installing the Guest Additions software will help you get the most out of the system. VirtualBox Guest Additions will give the machine more capabilities, such as a shared clipboard with the host system, drag and drop file transfer, and automatic window resizing.

This makes copying data to and from a host system much more convenient. It also changes the VM’s resolution automatically when its window is resized, so you don’t need to change it manually. Guest Additions will work with just about any Linux distribution, but instructions can differ because of dependencies and package managers. Normally, Kali will automatically detect what platform the operating system has been installed on, and will include Guest Additions (if applicable) by default. If yours isn’t working or you just need to know how to use the features, we’ve got you covered in this guide.

In this guide, we’ll be going over the step by step instructions to get VirtualBox Guest Additions installed on Kali Linux. With these instructions, it doesn’t matter what host system you’re using, as long as the virtual machine is running Kali. This guide assumes that you’ve already installed Kali in the VM correctly.

In this tutorial you will learn:

  • How to install VirtualBox Guest Addition on Kali Linux

Read more

How to install KDE dekstop on Kali Linux

Most Linux distributions have a “main” desktop environment they use – the one that comes installed by default in the distro’s most popular download. For Kali Linux, it’s Xfce.

If you prefer KDE Plasma over Xfce or are just looking for a change of scenery, it’s quite simple to switch desktop environments on Kali. In this guide, we’ll walk you through the steps to install the KDE desktop environment on Kali Linux.

In this tutorial you will learn:

  • How to install KDE Plasma dekstop on Kali Linux

Read more

How to use traceroute on Kali Linux

When performing digital reconnaissance or penetrating testing, it’s important to fingerprint a network by understanding what servers or devices sit between your system and a target. For example, security professionals can’t go straight to attacking a web server without first taking the time to see if there’s a firewall in front of it.

This is where the traceroute utility comes in. It can send a packet from your system to the target machine, and list out its entire route for the journey there. This will reveal how many devices your network data is passing through, as well as the IP address of each device.

Kali Linux has another similar reconnaissance utility called mtr, which mostly functions the same as traceroute. In this guide, we’ll see how to use traceroute and mtr, along with their various command options, on Kali.

In this tutorial you will learn:

  • How to use traceroute
  • How to use mtr

Read more