Hello and welcome to this Cali fundamentals video.
I'm excited to be here with you this evening to get
into the beginning. So when you
go to work for a new company or you're getting
into a new relationship, you always want to have a little history
and backstory that just helps to ensure that you're
you know, moving into a relationship that's going
to be meaningful and you're knowledgeable and etc.
Those kind of things. So when we get to work with
this tool set with Callie Linux, we want to make sure that we've
got some history. So the objectives for this
lesson.
Are to walk away with a brief understanding of the Cali Linux
background. We want to add a high level understand
what Linux is and then we want to know how flexible you
know, Cali is at a high level. So let's jump
into the history lesson real quick. So Kali Linux
was established March of 2013 with
version 1.0 now Callie is based on
the Debian operating system. And
you know, it was there that
they got their start. So since then
there's been a number of iterations with Cali Linux about
22 today it actually 22 on the
dot today at the time of this video. But
the thing that you want to know about
this group and about the community is that they're very very
good at working out bugs. They're very very good
about determining which tools to keep and so the reason
that you want to be cognitive of the iteration of
Kelly that you're using is that there may be tools and
version 1.0 that are definitely not present.
In the current version and there may be some tools that you want to use in
the older versions, but you just need to be aware that through
those iterations the tools have changed and the
layout has changed in the way that the system works has
changed to a degree as well. So you may
be thinking
Well, we've mentioned Callie you've mentioned Debian or
there other Linux variants or Linux flavors
and absolutely with respect to open source operating
systems. The community does a wonderful job of
maintaining several different operating systems and distributions
not all of these are for pin testing. You've got
Ubuntu which can act as you know,
an end user system or as a system that you use at
home. You could load tools that are in the Cali distribution into
a boom 2. You've got meant Linux. You've
got precise puppy you've got Fedora. So there's
a combination of operating systems out
there depending on what you need them to do. They could
be on a multitude of smaller devices
or low-key devices things of that nature small
Computing devices. Linux is everywhere.
So you may be asking yourself. Well, you know, what is
Linux with respect to to how we're defining it
and talking about it here.
So when I talk about Linux, especially within the
relationship of Cali Linux.
Linux is the core of the operating system.
It is the kernel and a few things that the kernel
will control our like CPU memory and
devices. So you may already be familiar with
the concept of what a colonel does but to give you a quick refresher in
this instance, we've got let's just say an app
that communicates with the colonel and then at the
the colonel level we're communicating with the CPU the
kernels communicating with memory. It's communicating with
devices and peripherals. And so it
is going to ensure that the app when
it requests resources and information or input that
it is being provided. So with respect to
this relationship when we say Linux Linux
is really the core of any of the operating system distributions
that we've discussed here. So I've
got a quick surprise for you a check on learning. So when
we were discussing the history of Cali earlier,
what was the original or what is
the base distribution or operating system that
that is
is based off of
alright, so you were probably thinking Debian and
if you put Debbie in there or
thought Debbie and then you were absolutely correct great job.
So let's go ahead and shift gears real quick
and talk about some of the features and things that
Kelly has available to it.
So the first thing you can run Cali as
as your day to day operating system, you can fully install it
and use it for day-to-day activities and functions. There's
some recommendations will make later to talk about
how you can do that securely and safely, you've got
live boot which is going to allow you to just take the
disc or take a thumb drive. That's got
the Cali ISO on it and then from there
boot it and go to work. So you're not fully installing
the Cali operating system
onto a device. You're just kind of live booting you can
take advantage of full disk encryption, which is definitely something
we want to do if we're going to be doing security testing handling
client data potentially pulling data
from systems for the sake of testing things
that nature so we always want to ensure that that information is encrypted and
then we've got easy new Loops,
you know, this is easy new cure essentially
with that allows you to do is you can use that to new concrete
to data. So if you need to erase day to get rid of information you
can
Use Easy nuke to do that and then
we've got a forensic mode here. So if you need to get a copy
of a hard drive that is forensically sound that's not
altered. None of the other states here like a
full installation live food or you know doing any type of encryption
is going to help you in that and really this just ensures that
if you've got a hard drive plugged into a system or whatever
the case may be if you need a copy of a disk and you need to
live food or something of that nature to it and you
don't want to disturb the state of the disc by adding data to
it. You can boot in forensic mode to do that.
So let's jump into a few tool categories here.
So you've got several categories outside
of these these are just some high level areas. I want it to touch on tool
categories under information gathering. I'll
cover things like maybe DNS reconnaissance. If you're trying to
get some information about a potential Target for
a pen test or something of that nature vulnerability analysis.
Tools can be like open Boss. Those are
gonna be important for scanning systems for vulnerabilities to
help you determine how you're going to do an attack
or something of that nature. You've got Wireless attack tools,
which are going to be used for like cracking wireless access
point or trying to crack a key on on, you
know, a Wi-Fi access point web application
tools or things like fuzzers, which you can use
to manipulate the inputs of tools and and kind
of see what you'll get out of the website so that you can then
determine if there may be something you can take advantage of or exploit
there and then we've got some exploitation tools which
will touch on later but those are the tools that once you've
kind of tested the lock and you've worked to see
if
Doors weak and things of that nature you're going to determine? Okay. Can
I kick it in? Can I pick the lock Etc? And right
now, you know we're thinking of Cali is kind of this polyptools
over here. You don't really know what all
you have and you're not maybe 100% sure of what everything
does but we're going to work through that together and kind
of determine what tools are gonna be best for your day to
day and you know in your operations overall.
So I got another surprise for you. It's a check on learning. So
we were discussing some of the the abilities and
features and functions of Cali earlier, which of
those allowed you to get an image
of a hard drive without altering that hard drive state.
All right, so you may have taken a moment to look at these so
remember that live boot just allows us
to kind of boot the system without falling installing it
it really doesn't do anything to keep the state
of the drive or any connected devices the same
as they were so that's not applicable here a full
installation is definitely going to alter the state of
a driver or anything that we're connected to but remember when
we boot to forensic mode or use forensics mode
on the Cali distribution, it should not disturb the
state of any connected devices and would allow
us to work to get a forensic image of a hard
drive or something of that nature.
So with all of that said let's go through a quick summary
of what we covered today. So we talked about some release dates
or the release date for Cali and an overview
of the current number of versions and why that's important
and what we need to look for with respect to the care
and and continued care of this distribution a
high level review of features and functions to get
your brain kind of turning a bit on some of the things Cali can
do and a little bit if it's flexibility there and then
a few tool categories again to get you thinking about
some of the things that you could do with Kelly where you might be focusing
on or where you're hoping that the distribution can be
useful to you and your organization.
So with that said I want to thank you for the opportunity to
work with you today, and I look forward to working with
you again soon. Thank you.