7MS #610: DIY Pentest Dropbox Tips – Part 9

7 Minute Security

Content provided by Brian Johnson. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Brian Johnson or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

7M ago 20:25

MP3•Episode home

Hey friends, today we cover a funstrating (that's fun + frustrating) issue we had with our DIY pentest dropboxes. TLDL:

The preseed file got jacked because I had a bad Kali metapackage in it.
While I was tinkering around with preseed files, I decided it would be more efficient to have the Kali ISO call that preseed file directly over HTTP (rather than make a new ISO every time I made a preseed change). To accomplish that:
- Mount the Kali ISO
- Explore to isolinux > txt.cfg
- Modify the txt.cfg to include a custom boot option that calls your preseed over HTTP. For example:

label install menu label ^Install Yermaum kernel /install.amd/vmlinuz append net.ifnames=0 preseed/url=https://somewebsite/kali.preseed locale=en_US keymap=us hostname=kali777 domain=7min.sec simple-cdd/profiles=kali desktop=xfce vga=788 initrd=/install.amd/initrd.gz --- quiet

638 episodes

#Security #Software Development #Tech News #Information Security #Brian Johnson #Tech #News