Hello and welcome to this. Cali fundamentals lesson.
I'm very excited to be here with you today. So we've
gone through a lot of different things and you may be wondering when
am I going to get to work with the tools? What am
I going to get to see these things in action? What am
I going to start learning about the different types of tools within the
distribution great questions to have and today
is that day we're going to go through a high level
introduction of the Cali tools listing where to find
that at and where to start looking into what each
of these things does as it changes through the versions. Just
keep in mind that some tools may you know disappear over
time. So all these revisit what we're about to do here so
that you can be current on the tools that are available to you
for testing or any other types of purposes. So
let's go ahead and Jump Right In I'm gonna pull over a web
browser.
And what we're going to do is let's go to tools dot
Cali dot org, so
you'll see here that they have a tools listing.
So we'll go ahead and click into that. Now the thing that
I love about this site is that they lay the tools out and a
very nice orderly fashion. So if you're familiar with
pen testing or security testing, you know information gathering vulnerability
analysis exploitation maintaining
access things of that nature are all
going to be a part of doing penetration testing security
testing Etc. Now you may not be a
pentester. Maybe you're into forensics. They've got
forensics tools. Maybe you need to do stress testing. Maybe you're going to do
wireless testing or you know something of that nature so
they have a tool in this distribution that
could help you to meet those needs and do those things. So we
don't want to limit ourselves to just pin testing because you may be
seeking out the distribution for other reasons. So let's go
ahead and jump into a few things that you may want to
be aware of here. So they do a good job of again breaking this
down by category. But what you can do is let's say
that you want to look at let's just
start from the top information gathering tools and
And let's just say you won't know what DNS
map does. So when you click into the link they do
a really awesome job of giving you a description. So as
you can see here, they've described what the tool does and
what it is and then they give you some examples of
what's included in the package what the tool does how to
use it and that's consistent across every tool
that you see here. So if you go over into
the vulnerability analysis area here, you'll see
they have in map now you may or may not have heard of in map, but
when you click into it
It gives you this very verbose description of what endmap is
how to use it. What are some things that are included in the package? And
so really if you've not worked with a lot of security testing
tools or if this is your really, you know, your Baseline
jump into security testing spend some
time on this page learning about the different tools and what
they do and and what's available you will always find, you
know, some industry favorites and things of that nature. I love
in map and map is one of my go-to's when it comes to information gathering
vulnerability analysis doing things of
that nature. I also have used in like that
cone, which is great for trying to do and discover
directory traversals and things of that nature. It's an awesome
tool. So they've really got a lot going on here
Wireless attacks. I'm sure you may have heard of aircraft in
G here.
And so each of these things is just
in itself, you know, a wonderful resource with
respect to the tools and learning these things is going to be Top Notch.
And so, you know, one of the things that I also want to point out
that you may have heard of is the Metasploit framework if you're
going to do any type of pin testing maybe, you
know, some in-depth security testing. This is
definitely a tool that you're going to want to work with. There is a paid version
of this tool offered by rapid 7, but
the framework is available to use
in Cali so, you know, you're going
to want to learn how to use Metasploit if you're going
to be a pin tester and do things in that
nature and it has some introductory information here. I know
that they offer a course for free on this as well, but definitely
want to jump into looking at
Metasploit if that's something that you plan on doing with respect
to penetration testing and then let's
just say you're going to work and forensics and do forensic analysis
or something of that nature. They also have
The number of forensic tools here. And so really
the sky is the limit with respect to what you
can do with Cali you can do a lot of customization with
the distribution and things that nature but really when it
comes to learning tools and pointing out tools
I can teach you things about in map. I can show you things about
not that pone in crack Johnny John the
Ripper all of those things, but at the
end of the day it's what's going to be beneficial to you moving
forward. What are you trying to achieve if it's you know,
mobile phone pin testing if you're into stress
testing again, if you're wanting to do forensics, if
you're just wanting to do vulnerability analysis, but nothing deeper than
that really it's what is going to interest you.
What is going to to be your passion and drive. This is
a good starting point after the fundamentals course and kind
of digging into this stuff and really starting to
figure out you know, what's available to you in this distribution.
So let's go ahead back to our slides here. So in
in brief today, we really just wanted
to talk about those tools. We really want it to know where there's resources
are and where you can start doing more research. I could
spend all of the time in the world probably teaching
you about each of those tools. But again,
it's about what's beneficial to you. It's about what you
want to take away from this course what you want to
do with the distribution and how you start from this
point, you know moving into learning about those
tools and really focusing on the areas that are going
to bring you the greatest return with your time. So with that
in mind, I want to thank you for your time today and I look forward
to seeing you again soon.