liveBook · Manning

Kali Linux

As explained in Grokking Web Application Security

Kali Linux is a Linux distribution that bundles tools for digital forensics, penetration testing, and security assessment.

Kali Linux is a custom Linux distribution that groups widely used digital-forensics and hacking tools. The same automated tools can help a white-hat tester scan a client system for vulnerable access points during an audit, or help an attacker find weaknesses to exploit. Its security value depends on authorized, defensive use and on understanding that attackers can use the same readily available tooling. section 1.1

Use Kali Linux in a security assessment to:

  • Scan authorized systems for vulnerable access points as part of penetration testing. section 1.1
  • Investigate how publicly known vulnerabilities and proof-of-concept exploits may affect software before attackers exploit them. section 1.1
  • Treat discovered weaknesses as inputs to patching and security improvement rather than opportunities for unauthorized access. section 1.1

How Grokking Web Application Security covers it

How deep it goes
Defines Kali Linux by its bundled forensic and hacking tools without detailing installation or individual tools.
Examples
Uses a white-hat audit that scans a client system for vulnerable access points.
What it assumes
Introduces hacker roles and automated vulnerability tools without assuming specialist security knowledge.
What you can do after
Evaluate/understand how shared security tooling serves both authorized testers and attackers.
How it connects
Connects Kali Linux with penetration testing, vulnerability scanning, digital forensics, CVEs, proof-of-concept exploits, and Metasploit.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Grokking Web Application Security. The section links point to the parts of the book it draws on.