Interview Questions.

Question 1. What Is Kali Linux?

Answer :

Kali Linux is a Linux distribution for penetration testers that comes preloaded with a variety of open supply penetration checking out equipment. It is introduced to you by way of the identical individuals who made BackTrack, presently the sector’s maximum famous Linux distribution for penetration testing.

In different phrases, Kali Linux is an running device this is optimized for penetration checking out. You can think about it in the same way that Chromium OS is Linux running device that is optimized for web surfing.

The open supply Kali Linux task is managed with the aid of Offensive Security with the assist of community contributors, along with Rapid7.

Question 2. What Is The Difference Between Kali Linux And Backtrack?

Answer :

Kali Linux is the following-technology version of BackTrack and therefore replaces BackTrack. While BackTrack is based totally on Ubuntu, Kali Linux is based on Debian.

Network Security Interview Questions
Question three. What’s New In Kali Linux Compared To Backtrack?

Answer :

BackTrack users will note that Kali Linux is built in a much greater structured way, which ensures a more professional and robust user revel in.

Here is a list of the new blessings:

Debian with an FHS-compliant device: Instead of having to navigate thru the /pentest tree, you may now name any tool from anywhere in Kali Linux.
Streaming safety and package updates from Debian: Kali repositories synchronize with the Debian repositories four times an afternoon, constantly supplying you with the modern day bundle updates and protection fixes to be had.
Debian-compliant packaging of each tool in Kali: This is where the Kali group has been spending maximum of its effort and time: relentlessly packaging dozens of useful equipment, painstakingly making sure all packages are Debian compliant.
Long-time period packaging and renovation of high-profile equipment: Many of the tools in Kali need to be “bleeding aspect”. The Kali group has taken on the assignment of packaging and preserving upstream variations of many tools, so that users are continuously saved up to date where it matters. For example, Metasploit is a highprofile device this is up to date with new exploits every week; it turned into repackaged for Kali Linux with Rapid7’s contribution to make sure a strong consumer enjoy.
Streamlined improvement manner: As all source applications are now also Debian compliant, you could quickly and without difficulty get the specified resources of every tool, then regulate and rebuild them with more than one commands.
Bootstrap builds and ISO customizations: One of the numerous advantages of Kali’s circulate to a Debian-compliant device is the capability to bootstrap a Kali Installation / ISO at once from Kali’s repositories. This method that you may easily construct your very own customizations of Kali, as well as carry out enterprise community installations from a nearby or faraway repository.
Automating Kali installations: Kali Linux installations can now be computerized using pre-seed files. This permits for employer-huge customization and deployment on multiple structures.
Real ARM development: BackTrack 5 delivered aid for ARM hardware. The ARM build-bot turned into a changed Motorola Xoom tablet, which - suffice to mention - didn’t closing for lengthy. To assist remedy this, Offensive Security has donated a Calxeda ARM cluster to the Kali mission, permitting reliable and long time improvement of Kali Linux ARM photos. Note: Metasploit Community and Pro aren't supported on the ARM platform.
Complete desktop environment flexibility: Kali’s new construct and repository environments permit for whole flexibility in generating your own updated Kali ISOs, with any computer surroundings you want, regardless of whether or not you decide upon KDE, LXDE, XFCE, or a custom computing device surroundings. 
Seamless improvements to destiny essential variations: Another benefit derived from the move to a Debian compliant system is the ability to seamlessly upgrade future primary model of Kali. No longer will you have to reinstall your penetration checking out device to upgrade to a brand new Kali version.
Question 4. Why Is Kali Linux No Longer Called Backtrack?

Answer :

Kali Linux is a huge step forward from BackTrack five. Kali Linux has been built from scratch, changing the whole architecture. The new name displays this overhaul.

Network Security Tutorial
Question 5. What Does “kali” Stand For?

Answer :

Is Kali the Hindu Goddess of time and alternate? A Philippine martial artwork? A cool word in Swahili? None of the above. “Kali” is really the call we came up with for the brand new distribution.

Computer Network Security Interview Questions
Question 6. What Is New About Metasploit Support In Kali Linux?

Answer :

Recognizing the significance of the BackTrack assignment to the network, Rapid7 joined the Kali Linux project to make a contribution to the packaging and long-term guide of Metasploit on the Kali Linux platform.

Metasploit is a massive and ever evolving mission that is hard to package and assist for any 1/3-birthday party. Although it turned into made to be had in BackTrack, Metasploit on BackTrack suffered from problems that impacted the user enjoy. Symptoms Metasploit users suggested consist of issues with updates, databases, and popular balance.

As a end result of Rapid7’s involvement within the Kali mission, Metasploit users should have a miles extra robust consumer enjoy on Kali Linux.

Question 7. What Is The Relationship Between Kali Linux And Rapid7?

Answer :

Rapid7 is now an authentic contributor of the Kali Linux task with the aim of improving the assist for Metasploit in this essential platform. Starting with the funding into the Metasploit Project in 2009, Rapid7 has persisted to support the security network. Here are a number of the approaches that Rapid7 receives concerned, support and deliver back.

Building: Rapid7 is proud to have grown the Metasploit network to one hundred seventy five,000+ lively users and individuals.
Mentoring: Rapid7 helps fledgling open supply tasks Ghost, Buttinsky and Androguard presenting promotional and strategic enterprise steering, as well as monetary assist to assist them get off the floor.
Backing: Rapid7’s Magnificent7 program supports extra hooked up open supply tasks such as John the Ripper and Cuckoo Sandbox, to assist them achieve their next improvement dreams.
Security Testing Tutorial Security Testing Interview Questions
Question 8. As A Metasploit Pro Customer, Can I Get Full Technical Support On Kali Linux?

Answer :

Yes, Rapid7 absolutely supports Metasploit Pro on Kali Linux, Windows, Ubuntu and Red Hat. 

Question nine. Should I Boot Kali Linux From A Cd Or Use A Persistent Installation?

Answer :

Kali Linux offers a far stepped forward installation enjoy compared to BackTrack. For most users, a continual set up is excellent because it will recall your settings, documents, and product licenses. If you need to revert to a easy image for each new engagement, don't forget reverting to the picture of a clean, pre-set up digital system after each engagement.

Penetration Testing Interview Questions
Question 10. Should I Use Kali Linux As My New Secure Desktop System?

Answer :

No. Kali Linux is meant for use as a platform for penetration trying out, now not as a at ease working gadget for computers. We endorse that you use Kali Linux on a devoted physical or digital machine or boot it from a continual external USB flash pressure or tough disk at some point of your penetration check. As a satisfactory practice, you have to hold your private documents, including e mail and workplace files, on a separate system.

Penetration Testing Tutorial
Question 11. What Version Of Debian Is Kali Based On?

Answer :

Kali is based on Debian Wheezy, with selective programs imported from upstream.

Computer Security Interview Questions
Question 12. Are Wireless Injection Patches Available In Kali?

Answer :

Yes.

Network Security Interview Questions
Question 13. Is My $wireless_card Supported By Kali?

Answer :

This relies upon at the playing cards chipset and drivers. If kernel three.7 supports your drivers, your card is supported.

Computer Security Tutorial
Question 14. Armitage Does Not Display Hosts From The Database?

Answer :

Type hosts inside the Metasploit Framework console. If you notice hosts there, but now not in Armitage, you have got this problem. There are three viable causes:

The first (feasible) purpose is you're the use of the Metasploit Framework's workspaces (the workspace command). Armitage isn't always well matched with the Metasploit Framework's idea of workspaces. You need to leave this at default and not change it.

The 2d potential cause is that Armitage isn't the use of the equal database configuration as the Metasploit Framework. This is pushed via the database.Yml report in your Metasploit Framework environment. Type db_status in a Metasploit Framework console and verify that this is the identical database Armitage uses (visit Armitage -> Preferences and discover the connect.Db_connect.String fee).

The third capacity motive is that Metasploit made two default workspaces for you. Why? I don't know. This messes up things with Armitage though. Type workspace. If you spot two workspaces with the name default, then this bit you. To repair it, kind: workspace -D and restart Armitage.

Question 15. Armitage Is Slow Or Has Graphical Glitches

Answer :

Switch from OpenJDK to Oracle's Java environment. The OpenJDK implementation of Java has occasional insects that affect the Armitage enjoy negatively. Random artifacts when updating UI components isn't always unusual inside the OpenJDK. As of this FAQ update, there's a bug within the OpenJDK packaged for Debian distributions (Kali Rolling!) that slowly consumes CPU/memory until the utility crashes.

If you revel in graphical or overall performance issues, alternate over to Oracle's Java and spot if that resolves your problem.

Unittest Framework Interview Questions
Question 16. How Do I Run Armitage On Kali Linux?

Answer :

Armitage is not disbursed with Kali Linux. It is within the Kali Linux repository although. To set up it, kind:

apt-get install armitage

Unittest Framework Tutorial
Question 17. I Get A Database Error On Kali Linux. How Do I Fix It?

Answer :

Make positive the database is walking. Use:

service postgresql begin

Next, you can want to ask Kali to recreate the Metasploit framework database:

provider metasploit start 
provider metasploit stop

Sometimes you want to do the above after an msfupdate as well.

Web Security Interview Questions
Question 18. Sometimes Armitage's Menus Stick (or I See Graphic Glitches)--how Do I Fix This?

Answer :

Kali Linux comes with Java 1.6 and 1.7 pre-mounted. Unfortunately, it defaults to Java 1.6 which has a few issues. You'll need to tell Kali Linux to apply Java 1.7 by default. Here's how:

32-bit Kali Linux:

replace-java-options --jre -s java-1.7.Zero-openjdk-i386

sixty four-bit Kali Linx:

update-java-options --jre -s java-1.7.0-openjdk-amd64

Computer Network Security Interview Questions
Question 19. Do Not See A Start Msf Button, What Is Wrong With My Armitage?

Answer :

Nothing. You're the usage of the cutting-edge model of Armitage. The Start MSF button has been taken away. The Connectbutton now intelligently detects whether Metasploit is jogging locally or no longer. If Metasploit isn't strolling, Armitage will ask you if you want it to start Metasploit. I propose pressing Yes.

Question 20. Can Armitage Exploit Windows 7 And Vista Or Is It Windows Xp Only?

Answer :

I get this question, worded in this manner, a lot. First, Armitage is a front-give up that offers a workflow and collaboration gear on top of Metasploit. The accurate question is: does Metasploit have assaults that paintings towards Windows 7 and Windows Vista?

The solution is sure. Remote exploits against modern Windows variations are very uncommon. If you're hoping for this, please put these days behind you. Microsoft has a variety of clever humans and they've placed numerous work into lowering errors that cause exploitable situations. They have also delivered mitigations to their software to make it more difficult to show a programmer's mistake into an attack.

Attackers do what works and they have moved on. Now, to interrupt right into a current machine, you want to assault the packages the consumer is running and now not the operating gadget. Client-facet assaults towards Internet Explorer, Firefox, Adobe Reader, Adobe Flash, Apple QuickTime, and Java are very common. Metasploit is the slicing fringe of what's publicly available on this space.

Once you get a foothold, it is up to you to suppose like an attacker and use your function to advantage get entry to to different systems. There are sources to be had for your learning. I suggest that you pass examine them. If you're virtually severe approximately studying those thoughts then spend money on your self and take a category.

Transport Layer Security Interview Questions
Question 21. Why Can't I Type In Any Of The Tabs?

Answer :

On Windows and MacOS X you need to click in the editbox to awareness the input region and kind. This is a recognized problem. The editbox is at the bottom of the tab. Just click on in it until you spot a blinking cursor.

Question 22. Armitage Picked The Wrong Lhost, How Do I Fix It?

Answer :

Type:

setg LHOST [your IP address]

That's it. Armitage makes use of this fee to tell reverse connect attacks wherein to connect with. You do not want to reset Armitage's listener whilst you convert this fee.

Question 23. I Can't Get Any Exploits To Work. What Am I Doing Wrong?

Answer :

Start with something which you recognize is exploitable. I propose downloading the Metasploitable digital gadget. Hacking this may give you confidence that yes, exploits paintings and sure, you are in all likelihood the usage of Metasploit effectively.

Not all exploits paintings in all conditions. Remember that you're sending code to a gadget that is supposed to cause a flaw. If a firewall is on, then maybe the information is not getting to the provider. Maybe you are jogging a model of the software program that now not has the flaw.

Metasploit isn't a magic key into other systems. Knowing what to use in extraordinary situations is a ability and it comes with enjoy.

Application Security Interview Questions
Question 24. Why Do The Hosts In The Targets Area Move Back After I Move Them?

Answer :

Armitage automatically arranges the hosts in the objectives region by means of default. You can turn this conduct off. Make certain no host is chosen and right-click in the objectives vicinity. Go to Auto Arrange -> None.

Security Testing Interview Questions
Question 25. What Are The Warning Messages In The Console I Launched Armitage From?

Answer :

These are harmless. They're debug output for me to study. I became too lazy to cast off them. They constantly have the form Warning: some message right here at file.Sl:##. The frightening "Warning" text is from the warn characteristic within the language I used to put in writing Armitage. Ignore it.

Question 26. How Do I Use Armitage Against An Internet Address?

Answer :

There are not any restrictions within the software program. I advocate experimenting with digital machines on a private check network. If you pick to apply this tool towards an internet host, make certain you've got a letter of permission from the system's proprietor.

Spring Security Interview Questions
Question 27. What's The Best Way To Learn How To Use Armitage For Metasploit?

Answer :

There are quite a few sources on both Armitage and Metasploit available to you. Here's a recommended order for you:

Armitage Lecture. This is a video from the SecurityTube Metasploit Framework Expert series. This video describes Armitage in a quite succinct way.
Armitage and Metasploit Training. This 2011 path goes thru Armitage and Metasploit, step-by means of-step. It's very old and I do not forget the fabric pretty dated, however it is well worth looking in case you want to get the fundamentals down.
Hacking Linux with Armitage. This article will take you through the entire network attack procedure using Armitage and the freely to be had Metasploitable digital system as a target. I endorse studying this newsletter and reproducing every step in it.
Get in via the backdoor: Post-exploitation with Armitage. Many parents question me the way to hack a modern-day running device (e.G., Windows 7) the use of Armitage. This article in Hakin9 will show you how to do this. You'll want to download the PDF of this trouble to read the thing.
The Armitage Manual. Technically you should examine this primary. But, in case you did not--I'll forgive you. This guide is a reference for Armitage. It would not provide context like these other resources do. Still, you need to examine it to apprehend what Armitage can do and the technical details of setting up distinctive functions. This guide is constantly correct with the modern-day version of Armitage.
Metasploit Unleashed. This is a unfastened course offered by using the Offensive Security parents. To be without a doubt effective with Armitage, you will want to recognize Metasploit. This route takes you thru a whole lot of what Metasploit can do.
As a penetration tester, I locate equipment give me about 15% of what I need. The rest of my work is trouble solving, device management, and success. If you need to learn how to hack, do not neglect these abilties both. Here are a few other encouraged gadgets:

De-ICE Pen Test LiveCD. These CDs are self-contained situations requiring you to use problem solving and Linux information to penetration check a fake organization. Keep in mind, the solutions aren't apparent.
Penetration Testing and Vulnerability Analysis. This is a first-rate course at NYU-Poly that will help you understand hacking from the attitude of the take advantage of developer.
OWASP WebGoat Project. This is a LiveCD environment with several internet utility assault scenarios. It will guide you through the very fundamentals of carrying out a web utility assessment.

If you get thru all the above and you need to take matters to the subsequent degree:

Advanced Threat Tactics (2015). This is a nine-element course with almost six hours of fabric on current red team operations with the Cobalt Strike product. Cobalt Strike started out lifestyles as a by-product of Armitage, however now it's a stand-by myself platform that does not use the Metasploit Framework. If you need to emulate a quiet actor with a long-term presence in a community, Cobalt Strike is the toolset to do it.
Penetration Testing Interview Questions
Question 28. Will You Teach Me To Hack?

Answer :

If you want my perspectives on the hacking manner and how to do it, then ask your corporation to invite me to teach a direction at your region. I even have materials, labs, and an exercise for a danger emulation path. I've given this path several times now and my students have taken loads from it.

Question 29. Why Does Armitage Exist?

Answer :

I've met too many security professionals who do not know how to use Metasploit. Sadly, I become one among them. I've continually felt Metasploit could use a non-industrial GUI organized across the hacking system. So, I made Armitage

Armitage exists to assist protection experts higher understand the hacking process and respect what's feasible with the effective Metasploit framework. Security professionals who recognize hacking will make higher selections to guard you and your facts.

Information Security Analyst Interview Questions
Question 30. What’s Significantly New In The three.Zero Series Of The Msf?

Answer :

Version three.Zero is nearly an intensive departure from model 2.0 in phrases of the underlying era and function set. While the ability to broaden and execute exploits has been more suitable, the new modules and plugins provide greater flexibility in managing multiple make the most periods, automating the penetration trying out cycle, storing outcomes in a database, or even growing new equipment constructed across the APIs exposed by using the framework.

Significant IDS/IPS evasion capabilities have also been introduced, and the Web interface has been overhauled. Besides this, the framework has been coded in Ruby in place of in Perl.

Question 31. What About All The Cool Meterpreter And Vnc Dll Stuff?

Answer :

All of the effective payloads—Meterpreter, VNC DLL, PassiveX—are gift with the brand new release, and have been stronger even further.The framework additionally allows specifying a class of payloads instead of a selected payload. However, little-used functions along with Impurity ELF injection and InlineEgg have been eliminated. Eventually, all non-Windows exploitation strategies might be moved to Meterpreter.

Question 32. What Is The Auxiliary Module System?

Answer :

The Auxiliary module gadget is essentially a set of exploits and modules that add to the core capability of the framework. Exploits that don’t have payloads, such as Microsoft SRV.SYS Mailslot Write Corruption and Microsoft RRAS InterfaceAdjustVLSPointers NULL Dereference, are a part of this gadget. More importantly, recon modules that allow scanning of faraway systems and fingerprinting them also are gift as auxiliary modules. For example, one of the auxiliary modules scans quite a number systems for the presence of UDP ports, and decodes six protocols and shows them at the console.Another module performs fingerprinting of Windows structures the usage of the SMB protocol.

Cloud Security Interview Questions
Question 33. What’s The Best Way To Remain On The Cutting Edge Of The Msf?

Answer :

The framework supply code is now available thru the Subversion CVS. Once you’ve downloaded the three.0 release from the Metasploit Web website, you want to also down load the Subversion consumer.Then navigate to the framework installation folder and run the svn checkout command. Once the code and different documents have been downloaded, you can run the svn replace command to preserve your self proper on the bleeding edge of the framework.

Computer Security Interview Questions
Question 34. What Is Metasploit Intended For And What Does It Compete With?

Answer :

The MSF is an open-supply tool, which presents a framework for security researchers to broaden exploits, payloads, payload encoders, and equipment for reconnaissance and other safety testing purposes.Although, it initially started off as a group of exploits and furnished the ability for huge chunks of code to be re-used throughout exclusive exploits, in its current form it provides massive abilties for the design and development of reconnaissance, exploitation, and submit-exploitation protection gear.

The MSF turned into firstly written within the Perl scripting language and protected diverse components written in C, assembler, and Python.The project center become twin-certified under the GPLv2 and Perl Artistic Licenses, allowing it for use in both open-supply and industrial initiatives. However, the three.0 version of the product is now absolutely re-written in Ruby and is derived with a wide style of APIs. It is also now certified below the MSF License, that's towards a industrial software End User License Agreement (EULA) than a widespread open-supply license.The simple rationale is to:

Allow the MSF to stay open-supply, loose to use, and loose to distribute.
Allow module and plugin developers to select their very own licensing phrases.
Prevent the MSF from being sold in any shape or bundled with a business product (software, equipment, or otherwise).
Ensure that any patches made to the MSF by way of a third birthday party are made available to all customers.
Provide prison assist and indemnification for MSF individuals.
The MSF competes immediately with commercial products consisting of Immunity’s CANVAS and Core Security Technology’s IMPACT. However, there's a chief distinction between the MSF and those business merchandise in phrases of its goals.The commercial merchandise come with user-friendly graphical person interfaces (GUIs) and huge reporting capabilities in addition to the exploit modules, while the MSF is first and principal a platform to broaden new exploits, payloads, encoders, No Operator (NOP) generators, and reconnaissance equipment. Moreover, it's also a platform to layout tools and utilities that permit safety research and the development of latest security checking out strategies.

Question 35. Why Ruby?

Answer :

The following motives illustrate the rationale at the back of this choice:

After studying a number of programming languages and significantly thinking about Python in addition to C/C++, the Metasploit team found that Ruby presented a easy and powerful approach to an interpreted language.
The degree of introspection and the item-oriented aspects of Ruby fulfilled the necessities of the framework pretty nicely.
The framework needed computerized elegance construction for code re-use, and Ruby is well appropriate for this, compared with Perl, which turned into the primary programming language used inside the 2.X collection.
Ruby also offers platform-impartial support for threading.This has resulted in a great performance development over the two.X collection.
When the framework became advanced on Perl, the team had to conflict to get it to paintings with ActiveState Perl, and ended up settling with Cygwin, even though both resulted in usability troubles.The natively compiled Ruby interpreter for Windows extensively improves overall performance and value.
For these and different motives, the Metasploit group enjoyed working high-quality with Ruby, and determined to port the entire framework for the 3.X collection.
Question 36. Which Is The Better Platform For Metasploit, Linux Or Windows?

Answer :

The choice of platform is more or much less personal, because the framework works almost the equal on each working systems. However, most of the people of Metasploit downloads for its earlier versions had been for the Windows platform. For version 3, Windows is most effective partially supported. My private desire is Linux, due to the fact that some of the bleeding-edge functions such as database help and wi-fi exploits first came out for Linux, and then for Windows.

Unittest Framework Interview Questions
Question 37. What Is The Difference In Environment Variables Between Versions 3.Zero And 2.Zero?

Answer :

In model three.0, a number of the variable names had been modified, and the way in which values with areas are treated has changed.

Question 38. Of The Various Payload Options Available, Which One Should I Use?

Answer :

Chances are that you will typically get most effective one shot at launching and correctly executing your make the most, so the selection of a payload may be very vital.Your goal have to be to get maximum mileage, while at the identical time averting detection as an awful lot as viable.

In this regard, the Meterpreter is probably your first-rate bet. It executes within the context of the susceptible manner, and encrypts conversation among patron and server.

Moreover, when you have a programming historical past, you may code your selected mission and bring together it as a DLL.You ought to then add and execute this DLL or any binary thru Meterpreter.The VNC DLL will open up a GUI, which increases the rate at which you can pivot onto different systems. It also increases the possibilities of being detected, when you consider that any mouse or keyboard motion you execute on the far off gadget may even display up on the console of the far flung system.

If you're very certain that no person would be tracking the gadget console, or would be connected to VNC on the equal time, you may pass beforehand and use this payload. If your objective is handiest evidence of concept, you'll be exceptional suitable through the usage of a payload so that it will definitely run a command (windows/exec, /bsd/x86/exec, cmd/unix/normal or /linux/x86/exec).To depart your mark on the gadget, you may create a nearby report in a selected area.

Question 39. How Easily Can I Customize The Meterpreter And Passivex Payloads?

Answer :

The Meterpreter supports any language that can collect code right into a DLL. Once you apprehend the simple Type-Length-Value protocol specification required with the aid of the Meterpreter, you can without problems create extensions.These can then be uploaded and finished on the fly on the far flung system.

For PassiveX payloads, you can write your very own ActiveX manipulate and feature that loaded by the Internet Explorer of the remote gadget.

Question forty. What Is Pivoting?

Answer :

Pivoting is a way that Metasploit uses to direction the traffic from a hacked pc towards different networks that aren't available with the aid of a hacker system.

Let’s take a scenario to apprehend how Pivoting works. Assume we have two networks:

A community with the range 192.168.1.Zero/24 wherein the hacker machine has access, and
Another community with the variety 10.10.10.Zero/24. It is an internal network and the hacker doesn’t have get entry to to it.
The hacker will try to hack the second one community this machine that has get admission to in both networks to make the most and hack other inner machines.

Web Security Interview Questions