Kennedy Muthii

Learn hashcat on Kali: pick -m hash mode and -a attack mode, run wordlist rules and mask attacks, read Cracked vs Exhausted status, and fix Token length exception and No hashes loaded.

Learn John the Ripper on Kali Jumbo: prepare hashes, fix format detection, run wordlist rules mask and single modes, crack ZIP SSH and PDF with *2john, and read john.pot with --show.

Install GNU flex and bison on Kali Linux as modern Lex and Yacc replacements, verify versions, compile a sample flex scanner, and remove the packages when the lab is done.

Build and install Pyrit 0.5.1 on Kali Linux from the JPaulMora GitHub tree with Python 2.7, fix GCC 14 compile flags, verify with pyrit list_cores and benchmark for authorized WPA lab work.

Install Gophish v0.12.1 on Kali Linux from the official GitHub release, configure config.json, start the admin UI on port 3333, and log in with the first-run password in an authorized phishing lab.

Install the Aircrack-ng suite and airmon-ng on Kali Linux with apt or a source build, verify SIMD support, list wireless interfaces, and enable monitor mode for authorized Wi-Fi labs.

Run Torshammer slow POST DoS tests on Kali Linux against local Apache or DVWA, compare DoS versus DDoS, and read curl timing before and during an authorized lab attack.

Hide and recover secret text inside JPEG and PNG images on Kali Linux with steghide and Stegosuite, compare OpenStego, and read capacity and encryption output in an authorized lab.

Analyze the public Cridex banking trojan memory sample with Volatility 3 and Volatility 2 on Kali Linux—OS profile, process tree, network connections, and reader_sl.exe extraction.

Install Infoooze 1.3.1 on Kali Linux and run OSINT modules for port scanning, user-agent parsing, EXIF extraction, username recon, and HTTP headers in an authorized lab.

Install and run OWASP Nettacker 0.4.0 on Kali Linux with Docker, scan Metasploitable 2 using the port_scan module, and start the optional web UI with --start-api in an authorized lab.

Install Node.js and npm on Kali Linux from the rolling apt repository or per-user nvm, run a test script, switch versions with .nvmrc, and fix path and permission errors without NodeSource scripts.

Install .deb files on Kali Linux with apt install ./package.deb, inspect packages with dpkg-deb, fix broken dependencies, verify architecture, and remove or purge local installs safely.

Configure Kali Linux repositories in deb822 kali.sources, compare rolling and snapshot branches, add third-party repos safely with Signed-By, and fix common apt update errors on Kali Rolling 2026.2.

Install Tor Browser on Kali Linux from the official signed archive when torbrowser-launcher is missing, verify with GPG, launch without root, and troubleshoot connection and clock issues.

Learn PostgreSQL brute force testing on Kali Linux with Hydra, Ncrack, Patator, Metasploit postgres_login, and Nmap pgsql-brute against Metasploitable PostgreSQL 8.3 on port 5432 in an authorized lab.

Practice Metasploitable 2 exploitation on Kali Linux: Nmap service discovery, Metasploit module mapping, and root shells via vsFTPd, VNC, and Samba in your own lab.

Hello learners, we have learnt of how man in the middle attacks can be performed previously. In this article we will use xerosploit to perform attacks.

Step by step instructions to encrypt USB drive using veracrypt software using a strong password and a strong hashing algorithm to ensure maximum security

Mitaka which is an open-source intelligence tool to check and confirm the authenticity of various components we interact with as we use the internet for our daily activities. All the checks have been done from within the …

step by step instructions to track ip address of any computer using an image.

Many devices use PIN to protect privacy of their users. In this guide, we will be using lockphish tool to phish for pin locks for different target operating

In this guide, I will illustrate ways a bad actor may perform a VNC brute force attack to gain access and control a target computer.

Many of the websites on the internet are still prone to a web cache deception attack. In this kind of attack, a bad actor will “fool” a webserver to serve

Step by step instructions to perform snapchat phishing using grayfish. Hack snapchat account using grayfish with examples

A keylogger is a tool mainly used by hackers to collect user input data on a device. An example of a keylogger is the technowlogger. Over the years, hackers

Hello learners, in this guide we will be using socialfish to acquire credentials form our target. In the previous guides we learnt what is social engineering

Hello learners, in this guide I will be showing you how you can install Caine forensic operating system as a virtual machine. The full meaning of the word

Hello learners, in the first part of our android payload guide, we embedded an android payload to a legitimate application. The application is however getting

Step by Step instructions to use metasploit and kali linux to embed a payload on apk file using FatRat.