Skip to content
/ diamonds Public

Kali Linux, built from initial Debian Jessie, using Vagrant, for deployment to Amazon

17 stars 6 forks Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

apolloclark/diamonds

BranchesTags

Repository files navigation

Diamonds

"Kali in the cloud with Diamonds!"

Would you like to build Kali Linux 2016.2 from source, run it on Amazon, make it easy for your dev team to run your attacks, and see it on your iPad over VNC? I sure would, so I made it happen! :)

Kali Linux is an open-source Linux distribution, intended for security penetration testing and audits. It is based on Debian Jessie 64-bit, using Gnome 3.14 desktop (available in other flavors), with a wealth of security tools.

http://tools.kali.org/kali-metapackages

https://www.kali.org/news/kali-linux-metapackages/

Name Size Description
kali-linux 1.5 GB Default
kali-linux-top10 3.5 GB Top 10 tools
kali-linux-full 9.0 GB ISO Default
kali-linux-all 15.0 GB Kitchen sink
kali-linux-forensic 3.1 GB Data recovery and analysis
kali-linux-gpu 4.8 GB GPU accelerated hash cracking
kali-linux-pwtools 6.0 GB Password cracking utilities
kali-linux-rfid 1.5 GB RFID tools
kali-linux-sdr 2.4 GB Software Defined Radio tools
kali-linux-voip 1.8 GB VOIP tools
kali-linux-web 4.9 GB Web app testing
kali-linux-wireless 6.6 GB Wireless tools

Installation

Do the "Platform Specific Install" steps, then do the "General Install" steps.

Windows:

setx /M PATH "C:\cygwin\bin\;%PATH%;"

Mac / Linux:

  • install vnc viewer

General Install:

vagrant plugin install vagrant-aws
vagrant plugin install vagrant-vbguest
  • add Vagrant dummy box:
vagrant box add dummy https://github.com/mitchellh/vagrant-aws/raw/master/dummy.box
  • git clone this repo
git clone https://github.com/apolloclark/diamonds
  • choose which version of Kali you want (Command Line / cli vs. Desktop / gui)
  • choose which meta-package you want
  • rename "aws-config-example.yml" to "aws-config.yml"
  • update the "aws-config.yml" with your AWS credentials and settings
  • cd into the folder server-type you want, ex:
cd ./diamonds/gui/kali-linux-web
  • start vagrant, for a local instance, using Virtualbox:
vagrant up
  • start vagrant, for a remote instance, on Amazon:
vagrant up --provider=aws
  • sit back (for like 30+ min sometimes...)
  • restart the server
  • Enjoy!




Can I VNC into this?

Yes you can! It has Vino VNC server installed, but you'll need to use an SSH tunnel. I normally would have gone with TightVNC, but Vino is the only VNC server that supports Gnome 3.14. However, Vino only supports a new version of TLS, which very few VNC clients support. So, I disabled Vino encryption (I know!), but set it up to only listen to local connections on the "lo network" / localhost / loopback interface. This means it's not exposed to the internet. To access it, you'll need to SSH into the Kali instance. Luckily, a lot of the better quality VNC clients support this. Security of SSH, convenience of VNC, BOOM!

Windows:

Mac / Linx:

  • ssh into the Kali instance, setting up an SSH tunnel, ex:
# create SSH port forwarding tunnel
ssh -L 5900:127.0.0.1:5900 admin@<ec2-dns> -i <aws_key_file>

# create SSH port forwarding tunnel without a Terminal
ssh -nNT -L 5900:127.0.0.1:5900 admin@<ec2-dns> -i <aws_key_file>
  • login to the VNC instnace, at 127.0.0.1:5900

Dependencies

Vagrant

https://www.vagrantup.com/

Vagrant is an open-source DevOps tool for deployment automation, supporting: local deploys to Virtualbox, VMWare, vSphere, and many others; cloud services such as AWS, Rackspace, and Azure; and Linux Containers such as Docker. It includes support for a variety of build tools: raw Bash, Chef, Puppet, Ansible, Salt, etc.

Gauntlt

https://github.com/gauntlt/gauntlt

Gauntlt is a security scan automation tool. It's written in Ruby (Golang rewrite in progress!), uses a standard Cucumber format script to let you write QA style tests with pre-conditions, tests, and assertions. The tests call down to the command-line. If you can run a security tool on the command line, you can call it with Gauntlt, and do assertions against the output to verify the results. The test results are output in Cucumber format, which can be seen in Jenkins using a plugin.

Jenkins

https://jenkins-ci.org/

https://wiki.jenkins-ci.org/display/JENKINS/Cucumber+Test+Result+Plugin

Jenkins is a build automation tool, originally developed for creating Java apps. It has expanded to support many languages, and give easy reporting. Jenkins Build Jobs can be run manually, or on a schedule, and supports a wide range of plugins to enable: code quality checks (linting, cyclometric complexity, unit testing, code coverage), performance testing, stress testing, alerts (email, sms, IRC, HipChat, etc.), and reporting.

Summary

Kali is great for running security tests (but lacks automation and reporting), Gauntlt is great for running tests (but lacks a full tool suite and reporting), Jenkins is great for automation and reporting (but lacks test running, and security tools). None of them deal with deployment to centralized servers in the cloud, making collaboration amongst a team diffcult. I originally built this Vagrant + Kali + Gauntlt + Jenkins setup locally, but only recently was able to deploy it to AWS (with much difficulty).

What is this thing doing?

Under the covers, this thing is just creating a virtual machine, spinning up a fresh Debian Jessie instance, and running some Bash scripts. In more detail: Vagrant sets up a virtual machine with resources (CPU, memory, harddrive, networking, fileshares, etc.), downloads a Debian Jessie basebox image, runs some Bash scripts, pulls down meta-packages from the Kali repo, installs everything, and you got a fresh Kali instance.

Scripts run, in order:

  • bootstrap_base.sh
  • bootstrap.sh (within the metapackage folder, ex: "gui / kali-linux-web / provision")
  • gui / bootstrap_vino.sh (for gui version)
  • bootstrap_cleanup.sh

FAQ

This is awesome!

Not a question, but thanks! :)

Yo shit broke!

Again, not a question, but let me know. Best place is here on Github, open a ticket, and be VERY detailed with your exact setup, send me screenshots. If I can't reproduce your problem, I won't be able to fix it. Run these commands and include the results in your ticket:

Windows:

systeminfo | findstr /B /C:"OS Name" /C:"OS Version"
powershell $PSVersionTable

Mac:

sw_vers
xcode-select -p
gcc --version
echo $SHELL
echo $BASH
bash --version

Linux:

uname -a
echo $SHELL
echo $BASH
bash --version

All Systems:

vagrant version
vagrant plugin list
vboxmanage --version
ssh -v localhost
aws --version
aws ec2 describe-tags
vagrant up <other_options> --debug
  • Which VNC client are you using, version?
  • How are you establishing the SSH tunnel, program, version?

If you do ALL of this, I may be able to help you, no guarantees. It may take a few weeks, unless you want to hire me as a consultant.

Can you remove the SSH tunnel for VNC?

You can, but I chose not to, because it would be insecure. You could use a different VNC server, but would lose access to the Kali default Gnome 3.14 desktop.

Why did you call it "Diamonds"?

I chose that name purely so I can go up to people at Defcon and ask them:

"Have you ever used Kali in the cloud with Diamonds?"

Do you work for Offensive Security?

Not yet. I'm still waiting on that owl to deliver my letter...

Can you build this for Digital Ocean / Rackspace /Azure?

It's not at the top of my list, but I'll think about it.

Do you do consulting?

Yessir! You can email me: [email protected]

About

Kali Linux, built from initial Debian Jessie, using Vagrant, for deployment to Amazon

Resources

Readme
Activity

Stars

17 stars

Watchers

2 watching

Forks

6 forks
Report repository

Releases 1

Support for Kali Linux 2016.2 Latest
Oct 17, 2016

Packages

No packages published

Languages