Kali Linux Intrusion and Exploitation Cookbook

上QQ阅读APP看书，第一时间看更新

Configuring remote connectivity services - HTTP, TFTP, and SSH

During penetration testing and auditing, we will be required to deliver payload on target machines from our Kali Linux. For that purpose, we will leverage basic network services such as HTTP, FTP, and SSH. Services such as HTTP and SSH are installed by default in Kali Linux but Kali does not enable any network services to minimize detection.

In this recipe, we will show you how to configure and start running services securely:

Getting ready

For this recipe, you will need a connection to the Internet with a valid IP address.

How to do it...

Perform the following steps for this recipe:

Let's begin with starting an Apache webserver. To start the Apache service, use the following command:
```
 service apache2 start
```
You can verify that the service is running by browsing to the localhost using a browser as shown in the following screenshot:
To start the SSH service, SSH keys needs to be generated. Back in Backtrack r5, you used to generate SSH keys using the sshd-generate command, which is not available in Kali Linux. Using default SSH keys is a security risk and therefore a new SSH key should be generated. To generate SSH keys, you can either delete or backup your default keys generated by Kali Linux:
```
 # cd /etc/ssh
 # mkdir default_kali_keys
 # mv ssh_host_* default_kali_keys/
 # cd /root/
```
First, we need remove run levels for SSH by issuing the following command:
```
 # update-rc.d -f ssh remove
```
Now we need to load the default SSH run level by issuing the following command:
```
 # update-rc.d -f ssh defaults
```

Regenerate the keys:

 # dpkg-reconfigure openssh-server 
 Creating SSH2 RSA key; this may take some time ...
 Creating SSH2 DSA key; this may take some time ...
 Creating SSH2 ECDSA key; this may take some time ...
 insserv: warning: current start runlevel(s) (empty) of script `ssh' overrides LSB defaults (2 3 4 5).
 insserv: warning: current stop runlevel(s) (2 3 4 5) of script `ssh' overrides LSB defaults (empty).

You can check whether the SSH key hashes are different now:
Start the SSH service using the following command:
```
 service ssh start
```
You can verify that the service is running using the netstat command:
```
 netstat - antp | grep ssh
```
Start the FTP server using the following command:
```
 service pure-ftpd start
```
To verify that the service is running, use the following command:
```
 netstat -ant | grep ftp
```
To stop any service, you can use the following command:
```
 service <servicename> stop
```
Here, <servicename> is the name of service required to terminate:
```
 service ssh stop
```

How it works...

In this recipe, we have configured and started basic network services, which we will be using to deliver payloads to our victim machines depending on the scenario. We have started HTTP service, FTP service, and we have backed up default SSH keys and generated new SSH keys, and started the SSH service.

本周热推：

工业互联网安全隐私计算：推进数据“可用不可见”的关键技术移动终端安全架构及关键技术 Kali Linux Network Scanning Cookbook（Second Edition）计算机病毒原理与防范（第2版）