Best os to pentest on?

[Idontknowwhattoputhere]

I'm on kali linux
Whats the best os to use tools like metasploit on?

 

[Deleted member 460564]

About any other linux distro or even windows can be used, but kali

which you are running right now

I'm on kali linux

is the best as it has almost every tool you need preloaded with a debian base or you can also use a distro called blackarch which is the same as kali, but has an Arch linux base instead of debian

 

[Idontknowwhattoputhere]

About any other linux distro or even windows can be used, but kali

which you are running right now


is the best as it has almost every tool you need preloaded with a debian base or you can also use a distro called blackarch which is the same as kali, but has an Arch linux base instead of debian

not what i meant
I meant whats the best os to use the exploits on?

 

[Deleted member 460564]

not what i meant
I meant whats the best os to use the exploits on?

As in the 'victim' OS? Or the OS that you want to pentest against?

 

[Idontknowwhattoputhere]

As in the 'victim' OS? Or the OS that you want to pentest against?

Yeah the victim

 

[Deleted member 460564]

Yeah the victim

Any OS with security issues or a vulnerability then Windows, Linux, Mac OSX, even cisco IOS

 

[Idontknowwhattoputhere]

Any OS with security issues then Windows, Linux, Mac OSX, even cisco IOS

I mainly want to test windows
But i cant find a good insecure version

 

[Deleted member 460564]

I mainly want to test windows
But i cant find a good insecure version

Don't know what sort of exploit you are wanting to do since there are a good lot, but I don't think there needs to be an 'insecure version' since making a .exe via msfvenom and sending it over to the victim machine would do just as well. If you want to test metasploit, just doing a fresh install of windows 10 off of a USB drive should be fine. Also depending on what results you are going after, you can even pentest against windows 7 rather than 10(Businesses can still be on Windows 7/Windows Server 2008).

 

[Idontknowwhattoputhere]

Don't know what sort of exploit you are wanting to do since there are a good lot, but I don't think there needs to be an 'insecure version' since making a .exe via msfvenom and sending it over to the victim machine would do just as well. If you want to test metasploit, just doing a fresh install of windows 10 off of a USB drive should be fine. Also depending on what results you are going after, you can even pentest against windows 7 rather than 10(Businesses can still be on Windows 7/Windows Server 2008).

Mainly hoping to test remote pc code exec
Using big exploits like eternal blue
Double pulsar
If im going win7 should i go with a no service pack version?

 

[Deleted member 460564]

Mainly hoping to test remote pc code exec
Using big exploits like eternal blue
Double pulsar

Would suggest anything before March 14, 2017 if you have it as MS issued the update for the SMB protocol then

Or you should be able to uninstall updates from the current version of the ISO that MS has out there to be able to get a base version or older version of windows. Haven't tested it with those versions however I have uninstalled updates before on Win10, 7, and 8, but seeing as the ISOs come out with the 2018 updates already installed then you should be able to just uninstall them.

 

[Idontknowwhattoputhere]

Would suggest anything before March 14, 2017 if you have it as MS issued the update for the SMB protocol then

Or you should be able to uninstall updates from the current version of the ISO that MS has out there to be able to get a base version of windows. Haven't tested it with those versions however I have uninstalled updates before on Win10, 7, and 8, but seeing as the ISOs come out with the 2018 updates already installed then you should be able to just uninstall them.

Thanks
I'm gonna try getting a untouched win7 iso
Last question
I Like testing on xp
But i cant find a 64 bit version of xp that works with the ms08_067 netapi exploit
Is there a version of 64 bit xp that works with dis sploit?
I also use armitage alot of the time

 

[Deleted member 460564]

Thanks
I'm gonna try getting a untouched win7 iso
Last question
I Like testing on xp
But i cant find a 64 bit version of xp that works with the ms08_067 netapi exploit
Is there a version of 64 bit xp that works with dis sploit?
I also use armitage alot of the time

I don't know what version MS is pushing out for XP or any other sites that provide it such as the first link when you google '64 bit xp download', but kb958644 is the package that patches the netapi exploit. Uninstall that(Method of uninstalling the package should be similar to Win7, Win8, or Win10)

 

[Idontknowwhattoputhere]

I don't know what version MS is pushing out for XP or any other sites that provide it such as the first link when you google '64 bit xp download', but kb958644 is the package that patches the netapi exploit. Uninstall that(Method of uninstalling the package should be similar to Win7, Win8, or Win10)

Thanks!
You've been a great help

 

[Deleted User]

use Firefox OS

 

[Ericthegreat]

Kali is best, but only because everything is ready to use, you can compile most tools for most distros.

 

[Idontknowwhattoputhere]

use Firefox OS

Look if you have nothing helpful to say
just don't post

--------------------- MERGED ---------------------------

Kali is best, but only because everything is ready to use, you can compile most tools for most distros.

Might try blackarch

 

[Deleted User]

Look if you have nothing helpful to say
just don't post

;(

 

[Idontknowwhattoputhere]

;(

This isnt a satire thread
This is proper hacking

 

[FAST6191]

There were super insecure distros and OSes made over the years, sometimes as honeypots, sometimes as test beds for training people on, but I have not kept up recently here (or indeed since flash and java were relevant).
Don't know if people made XP or 7 installs like that but I would not be surprised to see some of the boot XP from CD crowd have some fun there -- my interest in booting windows from disc is for using it to fix machines so I tend not to pay attention, however when I was looking for said recovery stuff once I did take a look to see what goes and they had a lot of interesting stuff. Similarly I don't know if any of the "you hack it, you win it" type contests share their builds or installers these days but that might also be a place to look.

 

[Hayato213]

I'm on kali linux
Whats the best os to use tools like metasploit on?

Probably on Windows XP or Windows 7 without any service pack, It was fun for me to learn how to use Backtrack Linux when I was in school. If you gonna do hacking, do it for educational purpose by the way or you will get into a lot of legal problems.