kali 建立應用程式捷徑 (Desktop Entry)

markdown kali linux 是使用 Gnome 桌面環境，如果要自訂應用程式捷徑和分類可以參考 [Desktop Entry Specification](https://developer.gnome.org/desktop-entry-spec/)。 這裡的情境是從網路下載了 burp suite 要直接建立捷徑執行。假設已將程式下載解壓，並儲存在 /opt/burpsuite 資料夾。 ``` root@kali:/opt/burpsuite# ls -l -rw------- 1 root root 7340 Jan 17 22:20 burpsuite.png -rwxrw-rw- 1 root root 28215285 Aug 12 19:55 burpsuite_v1.7.37.jar ``` # 資料夾 ``` /etc/xdg/menus # 主選單設定 /etc/xdg/menus/applications-merged/kali-applications.menu # kali 預設選單層級和 Category 名稱設定 /usr/share/applications # 將 DesktopEntry 檔案放在這資料夾內（副檔名 .desktop） /usr/share/desktop-directories # 應用程式分類資料夾設定（副檔名 .directory） ``` # 執行 burp suite 用 java 執行 burpsuite 確認一下能正常啟動應用程式 ``` root@kali:/opt/burpsuite# java -jar burpsuite_v1.7.37.jar ``` # 建立程式捷徑 1. 在 /usr/share/applications/ 建立 burpsuite.desktop，內容如下： ``` [Desktop Entry] Version=1.0 Type=Application Terminal=false Icon=/opt/burpsuite/burpsuite.png Exec=sh -c java -jar burpsuite_v1.7.37.jar Name=Burp Suite 1.7.37 Path=/opt/burpsuite Categories=03-webapp-analysis;03-06-web-application-proxies; ``` 2. 設定為可執行 ``` root@kali:/usr/share/applications# chmod a+x burpsuite.desktop ``` # 將 Burp Suite 捷徑加到左側 Menu 中 1. 展開 Applications 選單 2. 拖放至左側選單中 # 2019-01-21 補充 當另一個帳號登入時應用程式的 icon 沒顯示，因為 icon 圖示沒有權限，所以再加設權限就可以了 ``` chmod a+rw /opt/burpsuite/burpsuite.png ``` # 參考連結 * [Desktop Entry Specification](https://developer.gnome.org/desktop-entry-spec/) * [Desktop Menu Specification](https://specifications.freedesktop.org/menu-spec/latest/index.html)

kali linux 更換 jdk

markdown 使用 kali linux 的 brup suite 會跳出 JRE 版本 10.0.2 沒有完全測試過，可能會發生問題的訊息。 > Your JRE appears to be version 10.0.2 from Oracle Corporation Burp has not been fully tested on this platform and you may experience problems. # 環境 * Linux kali 4.17.0-kali1-amd64 #1 SMP Debian 4.17.8-1kali1 (2018-07-24) x86_64 GNU/Linux * Burp Suite Community Edition 1.7.35 [查看版本的參考文章](https://workerdigholes.blogspot.com/2019/01/kali.html) # JDK 更換或安裝 1. 查看和更改 kali linux 中的 JDK ``` update-alternatives --config java update-alternatives --config javac ``` 2. 如果要使用的JDK 不存在，安裝 JDK ``` update-alternatives --install /usr/bin/java java /opt/jdk-9.0.1/bin/java 300 update-alternatives --install /usr/bin/javac javac /opt/jdk-9.0.1/bin/javac 300 ``` 注意：/opt/jdk-9.0.1是自己安装的路径。 3. 安裝後再設定成要使用的版本 ``` update-alternatives --config java update-alternatives --config javac ``` 選擇編號，按 Enter 4. 檢查 java 版本 ``` java -version javac -version ```

kali 查看版本

markdown kali 查看版本 * 查看內核版本 ``` uname -a ``` * 查看發行版本 ``` lsb_release -a ``` 執行結果 ``` root@kali:~# uname -a Linux kali 4.17.0-kali1-amd64 #1 SMP Debian 4.17.8-1kali1 (2018-07-24) x86_64 GNU/Linux root@kali:~# lsb_release -a No LSB modules are available. Distributor ID: Kali Description: Kali GNU/Linux Rolling Release: kali-rolling Codename: kali-rolling ```

Openvas 忘記密碼重設

markdown 重設 admin 密碼 ``` # openvasmd --user=admin --new-password=new_password ``` 建立新帳號 ``` openvasmd --create-user new_user ``` 刪除帳號 ``` openvasmd --delete-user=new_user ```

kali 安裝 openvas

markdown ## 更新套件 ``` # apt-get update # apt-get dist-upgrade ``` ``` # apt-get install openvas Reading package lists... Done Building dependency tree Reading state information... Done The following packages were automatically installed and are no longer required: ... # openvas-setup [>] Updating OpenVAS feeds [*] [1/3] Updating: NVT --2018-09-27 23:44:12-- http://dl.greenbone.net/community-nvt-feed-current.tar.bz2 Resolving dl.greenbone.net (dl.greenbone.net)... 89.146.224.58, 2a01:130:2000:127::d1 Connecting to dl.greenbone.net (dl.greenbone.net)|89.146.224.58|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 31010829 (30M) [application/octet-stream] Saving to: ‘/tmp/greenbone-nvt-sync.spbmXIvZMn/openvas-feed-2018-09-27-84150.tar.bz2’ /tmp/greenbone-nvt-syn 100%[=========================>] 29.57M 1.97MB/s in 32s 2018-09-27 23:44:46 (933 KB/s) - ‘/tmp/greenbone-nvt-sync.spbmXIvZMn/openvas-feed-2018-09-27-84150.tar.bz2’ saved [31010829/31010829] 2008/ 2008/secpod_ms08-054_900045.nasl ... Sep 28 00:08:54 kali systemd[1]: Starting Open Vulnerability Assessment System Manager Daemon... Sep 28 00:08:54 kali systemd[1]: openvas-manager.service: Can't open PID file /var/run/openvasmd.pid (yet?) after start: No such file or directory Sep 28 00:08:54 kali systemd[1]: Started Open Vulnerability Assessment System Manager Daemon. [*] Opening Web UI (https://127.0.0.1:9392) in: 5... 4... 3... 2... 1... [>] Checking for admin user [*] Creating admin user User created with password '32f486b6-5791-46e2-ad9a-0a00b0573a4a'. [+] Done ``` ## Services 監聽 當 __openvas-setup__ 完成， OpenVAS manager, scanner, 和 GSAD 服務應該都會啟動 ``` # netstat -antp Active Internet connections (servers and established) Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:9390 0.0.0.0:* LISTEN 85440/openvasmd tcp 0 0 127.0.0.1:80 0.0.0.0:* LISTEN 85444/gsad tcp 0 0 127.0.0.1:9392 0.0.0.0:* LISTEN 85437/gsad ``` 如果沒有啟動成功，可以單獨執行 ``` # sudo systemctl start openvas-scanner # sudo systemctl start openvas-manager # sudo systemctl start openvas-gsa # openvas-stop # openvas-start ```

markdown 編寫

markdown #安裝步驟 * 到blogger「版面配置」新增小工具 * 選擇「HTML/JavaScript」 * 勾選 顯示「 HTML/JavaScript 」 * 填入以下程式碼(需將全型 ＜ 取代為 <，將全型 ＞ 取代為 >) ```js ＜script src="https://cdnjs.cloudflare.com/ajax/libs/showdown/1.6.4/showdown.min.js"＞＜/script＞ ＜script＞ var converter = new showdown.Converter(); var posts = document.querySelectorAll(".post-body,.snippet-item"); Array.prototype.forEach.call(posts, function(el, i){ if(el.innerHTML.indexOf("markdown") <= 1){ el.innerHTML = converter.makeHtml(el.innerHTML.replace("markdown","")); } }); var pres = document.querySelectorAll("pre"); Array.prototype.forEach.call(pres, function(el, i){ el.classList.add("prettyprint"); }); ＜/script＞ ＜script src="https://cdn.rawgit.com/google/code-prettify/master/loader/run_prettify.js?skin=sunburst"＞＜/script＞ ::decode ``` * 儲存 撰寫時要在文章中有 markdown 例如： ``` markdown # 文章標題 文章內容 ``` 參考來源： [卡卡米的記憶體: 在 blogger 貼漂亮 code 的方法（使用 markdown 和 prettyprint）](http://etrex.blogspot.com/2017/03/blogger-code-markdown-prettyprint.html)