I use Kali Linux for penetration testing, web applications, infrastructure, and cloud. The tool is useful to test the main applications in our company.
Kali Linux
KaliExternal reviews
13 reviews
from
External reviews are not included in the AWS star rating for the product.
Moving on from AWS Kali Linux...
I have been using the Kali Linux AMI for my casual HTB/OSCP/other pentesting endeavors for the last 2 years. The ease of use has been (until now) extremely reliable.
Since upgrading my instance to 2023.4 though, I have experienced several catastrophic issues. My two year old instance after rebooting from the 2023.4 release would no longer pass the Instance Status Check and I was unable to connect to the Instance. I followed all AWS troubleshooting instructions for this topic, but none seemed to resolve the issue. I eventually cut my losses (losing two years of notes mind you) and terminated the instance and spun up a new one. I have now experienced the same Instance status check failure on two separate occasions and am now starting to doubt the reliability of this platform for what I use it with.
Yes - I already confirmed the security groups were configured correctly. This appears to be an issue since upgrading to 2023.4 Kali-rolling.
A highly stable tool useful for penetration testing
What is our primary use case?
What is most valuable?
The most valuable feature of the solution is that the product comes with a lot of useful tools for me, like Nmap, subfinder, and the Metasploit Framework, which is very helpful. The tool also helps with web applications.
What needs improvement?
From an improvement perspective, Kali Linux could include more ML to help with academic literature, as it is one of the areas where there are shortcomings in the solution.
Blockchain and artificial intelligence are areas I would like to see in the future releases of the solution.
For how long have I used the solution?
I have been using Kali Linux for five years. I use the solution's latest version.
What do I think about the stability of the solution?
The solution's stability is very good. Stability-wise, I rate the solution a nine out of ten.
What do I think about the scalability of the solution?
I use the product for penetration testing, and I operate as a freelancer.
Which solution did I use previously and why did I switch?
I use Arch Linux and BlackArch at times.
How was the initial setup?
The product's initial setup phase was very easy with Oracle VM VirtualBox.
The solution is deployed on the cloud, but it is mostly deployed on the Oracle VM VirtualBox.
The solution can be deployed in a few minutes.
What was our ROI?
I have seen some benefits from the use of the solution.
What's my experience with pricing, setup cost, and licensing?
There is no need to make any payments towards the licensing costs since it is a solution that is available for free.
What other advice do I have?
I recommend the solution to those who plan to use it.
I rate the overall tool a nine out of ten.
A highly stable solution that can be used to detect, monitor, and maintain security in an environment
What is our primary use case?
I use Kali Linux to do a simulation attack on another system and show them that the antivirus can protect this system.
What is most valuable?
The most valuable feature of Kali Linux is the attack it performs using a CVE script that's already on the internet. The solution saves a lot of my time because instead of creating a script, I can take the available script and execute it for that machine.
What needs improvement?
I would like to have automation in Kali Linux instead of manually configuring or setting up something in case of an upgrade.
For how long have I used the solution?
I have been using Kali Linux for a couple of months.
What do I think about the stability of the solution?
I rate Kali Linux ten out of ten for stability.
How was the initial setup?
The solution’s initial setup is straightforward.
What about the implementation team?
We implemented the solution through an in-house team. The solution was deployed in 30 minutes. The solution's deployment process is the same as Ubuntu Linux. It depends on the type of Kali Linux you want to install, and then you have to execute it.
What was our ROI?
Each company has an audit, and Kali Linux can be used for vulnerability testing and detecting other system weaknesses in the environment.
What's my experience with pricing, setup cost, and licensing?
Kali Linux is a free product, and you don't have to pay for a license.
What other advice do I have?
Choosing Kali Linux depends on the user's use case. Users who want to have an audit for the network or the endpoint can definitely use Kali Linux. It is a free product, and it has greater capability to detect, monitor, and maintain security in one environment.
Overall, I rate Kali Linux ten out of ten.
Which deployment model are you using for this solution?
On-premises
SSH problem
Please check SSH port, because I cannot ssh to new version of kali. Even if i open port in Security Group, I cannot ssh
Can't connect to the instance
I wasn't able to connect to Kali instance, either by SSH client or AWS console, altough I have followed the steps.
Best OS for pentesting
Nice to see Kali Linux on AWS it helps me a lot for Pentesting. I can recommend everyone this AMI.
What's the catch?
Free you say? 750 hours you say... I'm watching you...
There's only 730 hours in a month. Where's the missing 20 hours?
Broken Resolver?
The last AMI release (PREEMPT_DYNAMIC Debian 5.18.5-1kali6 (2022-07-07) launches with broken DNS resolution.
fatal: unable to access 'https//github.com/******': Could no resolve host: github.com
Great Portable Box
Great OS and I love how mobile/portable it is. I can access from my host machine, VM, and iPad where ever I am. I love the tools it comes with, and how 'light weight' it is at its first occurrence. It's not hardened, however, it is easy to apply protective measures to ensure security. Again, LOVE this and will continue to use in my day-to-day testing.
The Best Operating System for Penetration Testing!
Kali Linux is hands down the Best OS for Cybersecurity Researchers & Penetration Testers while providing the best of tools pre-installed and supporting a wide range of products from Bare Metal to Cloud to Mobile Being the Best OS for Penetration testing
showing 21 - 30