Kali Linux tutorials

Test archived L3MON on Kali with Genymotion: start the panel, patch and install a lab APK, verify client behavior, then analyze the APK with aapt, apktool, and JADX.

Install Ghost Framework 8.0.0 on Kali, connect it to a Genymotion Android 10 guest over ADB, enumerate the device, and compare Ghost commands with direct adb shell in an authorized lab.

Test the old ADB Android lock screen bypass claims on rooted Genymotion, see why gesture.key fails on modern Android, and learn which recovery options still apply.

Test DVWA web login brute-force protection on Kali with a small password list, Hydra http-get-form, Burp Intruder, CSRF and rate-limit caveats, and false-positive checks.

Learn how Browser-in-the-Browser (BITB) phishing fakes an SSO login window inside a real page, how to spot painted address bars, and how passkeys and awareness limit the attack.

Build an authorized ThePhish lab on Kali with TheHive 4 and Cortex, submit a sanitized .eml sample, review observables and analyzer verdicts, and see where MISP fits.

Install Andriller CE 3.6.3 on Kali, create known Genymotion artifacts, run an ADB acquisition, and verify SMS, call logs, and SQLite data in the HTML report.

Install Apktool 3.0.3 on Kali, decode InsecureShop into resources and Smali, make a harmless label change, rebuild with apktool b, sign with apksigner, and install on Genymotion while explaining signature mismatch on …

Find InsecureShop cleartext SharedPreferences credentials on rooted Genymotion, then practice SQLite and file inspection with clearly labeled training data and scoped-storage caveats.

Enumerate InsecureShop deep-link intent filters, trigger custom schemes with adb, attack weak URL validation, and check App Links verification state.

Install Drozer 3.1.0 and the matching Agent on Kali and Genymotion, enumerate InsecureShop components, start an exported activity, and inspect a permission-gated content provider with careful result wording.

Find android:exported activities, services, and receivers in InsecureShop, prove reachability with adb and Drozer, and show why export alone is not a vulnerability.

Install Objection 1.12.5 on Kali, attach to InsecureShop through frida-server on rooted Genymotion, enumerate components and storage paths, and try built-in Android jobs for SSL pinning and root detection before writing …

Pin Frida 17.17.0 on Kali, install a matching frida-server on rooted Genymotion, enumerate InsecureShop, and hook Java methods to observe and modify runtime values over ADB.

Prove Burp CA trust first, identify Android certificate pinning, then bypass Network Security Config and OkHttp pins with Objection and targeted Frida scripts on an authorized training APK so HTTPS appears in Burp.

Route an Android emulator or device through Burp Suite on Kali, install the Burp CA for your Android version, verify HTTPS in a browser first, then diagnose proxy and trust issues before testing apps.

Install Genymotion Desktop Pro on the physical host, create a rooted Android 10 device, fix VirtualBox host-only networking, and connect from Kali with adb for MobSF dynamic analysis.

Run MobSF 4.5.2 in Docker on Kali, scan the InsecureShop APK, triage static findings against MASVS, and validate an exported activity on Genymotion with the Dynamic Analyzer.

Build a free Android pentesting lab on Kali with Android Studio AVD, pick a Google APIs image without Play Store, verify adb, and sideload a vulnerable APK for authorized mobile testing.

Use WPScan 4 on Kali to fingerprint WordPress, get an API token for CVE data, enumerate plugins themes and users, read vulnerability results, and validate findings in an authorized Docker lab.

Learn web fuzzing with ffuf on Kali: directory discovery, filters, auto calibration, parameter and POST JSON fuzzing, virtual hosts, recursion, Burp replay, plus a Wfuzz comparison for authorized labs.

Walk from an Nmap finding to a Metasploit module, payload, handler, and Meterpreter session on Kali Linux with msfconsole, msfvenom, and exploit/multi/handler against Metasploitable 2.

Learn how ARP spoofing creates an on-path MITM position on Kali Linux with Bettercap and Ettercap, verify poisoning with victim ARP tables and Wireshark, and see why HTTPS stays encrypted.

Set up ProxyChains on Kali Linux with proxychains4 and the tor daemon, edit proxychains4.conf for Tor SOCKS, verify with check.torproject.org, and run authorized tools through a proxy chain.

CompTIA PenTest+ PT0-003 cheat sheet: domain weights, essential command matrix, and per-domain tool recall for engagement, recon, vulnerability analysis, attacks, and post-exploitation, with three lab-tested Nmap and DNS …

Learn collection vs staging vs exfiltration with ATT&CK IDs, compare HTTPS DNS cloud FTP SFTP email ICMP and physical channels, run a localhost dummy transfer lab, and map detection and reporting for PenTest+.

Compare Sliver, Mythic, Metasploit, and CALDERA for PenTest+ labs: what C2 is, sessions vs beacons, which tool to learn first, and a short localhost hostname check-in demo.

Linux reverse shell cheat sheet for authorized labs: Netcat variants, bash and Python callbacks, socat, bind shells, TTY upgrade, and listener troubleshooting on Kali.

Reach an internal service through a dual-homed jump host using SSH local, remote, and dynamic SOCKS forwards, ProxyChains, sshuttle, and Metasploit route basics — with a namespace pivot practice lab you build on Kali …

Learn how Evilginx-style reverse-proxy phishing relays OTP MFA and captures post-login session cookies in an authorized Contoso lab, why FIDO2 resists AiTM, and how defenders detect it.