Kali linux revealed

[gigiRoman]

https://www.google.ro/url?sa=t&source=web&rct=j&url=https://kali.training/downloads/Kali_Revealed_1st_edition.pdf&ved=0ahUKEwiWwIashMHVAhUmBsAKHQm5AUkQFgg6MAI&usg=AFQjCNH_AFhd01P94GWXFa8emEsn-Ngb-Q

[Nytro]

Oare explica si de ce mai multi utilizatori aveau la MySQL/MariaDB un user cu acces full de la aphrodite.kali.org?

[gigiRoman]

https://bugs.kali.org/view.php?id=4129

[Nytro]

Ar fi interesant sa vedem ca "cineva" a avut acces la serverele lor si a introdus acel backdoor. 

 

Oricum, dat fiind faptul ca distributia e folosita de multi din domeniul IT security, nu ar fi de mirare sa aiba ceva mai bine ascuns, cu sau fara intentie.

 

Acum ca a aparut si cartea, face cineva un kali from scratch sa putem compara cu binarul (iso) lor?

[osirium]

A couple of weeks ago I did a test installing a bare Debian 9 VM. Then I started to add top 50 tools from Kali Linux. To be honest, this VM is working like a charm atm without all the other unnecessary bull shit which is coming by default with Kali Linux.

 

Overall, you have to understand this distro was built mainly by an Israeli dude and that should raise some concerns.  Don't get me wrong, it is an amazing distro but once its popularity grew among security professionals, some interests into have it "backdoored" probably elevated as well.

 

There is also the BlackArch alternative which overall is way more time consuming from tweaking perspective. Also, personally, I found Arch being slightly unfriendly with VMWARE workstation and very sensitive to different kernel changes. But this is just a personal opinion.