Download the appropriate Kali Linux .iso
- Download site: https://www.kali.org/downloads/
I used a 64 bit .iso image, downloaded via HTTP. I downloaded the amd64 weekly version, as the pool linux headers (needed below for installation of wireless drivers) were ahead of the stable release kernel.
Download the SHA256SUMS and SHA256SUMS.gpg files from the same location.
Check the hash
Check that the hashes were not tampered with. First, get the Kali GPG public key, and verify the fingerprint:
$ wget -q -O - https://www.kali.org/archive-key.asc | gpg --import
$ gpg --fingerprint 7D8D0BF6
pub rsa4096 2012-03-05 [SC] [expires: 2018-02-02]
44C6 513A 8E4F B3D3 0875 F758 ED44 4FF0 7D8D 0BF6
uid [ unknown] Kali Linux Repository <[email protected]>
sub rsa4096 2012-03-05 [E] [expires: 2018-02-02]
$ gpg --verify SHA256SUMS.gpg SHA256SUMS
gpg: Signature made Sun 12 Nov 03:47:29 2017 GMT
gpg: using RSA key 44C6513A8E4FB3D30875F758ED444FF07D8D0BF6
gpg: Good signature from "Kali Linux Repository <[email protected]>" [unknown]Compare the SHA256 hash with that reported in SHASUMS:
$ cat SHA256SUMS
16123b76a6d4fc3ed72aef508bee9542462f2d1d5376acd1fcc3369ad337a505 kali-linux-2017-W46-amd64.iso
$ shasum -a 256 kali-linux-2017-W46-amd64.iso
16123b76a6d4fc3ed72aef508bee9542462f2d1d5376acd1fcc3369ad337a505 kali-linux-2017-W46-amd64.isoCreate the USB disk
Identify your external USB with diskutil - the disk ID (disk2, disk3 etc is represented as <DISK> below):
$ diskutil listIf necessary, prep the external USB with diskutil to get a single partition:
$ diskutil eraseDisk FAT32 KALI /dev/<DISK>Unmount the volume in DIsk Utility, or at the command-line:
$ diskutil unmountDisk /dev/<DISK>Then use dd to make a bootable image on the USB:
$ sudo dd if=<path to downloaded .iso> of=/dev/<DISK> bs=1mBoot into Kali Linux
- Restart the Mac
- Hold down the Option key when you hear the chime
- Select
EFIas the startup disk - Select
Kali Linux (persistence)
Create a new persistent partition
- Start
gpartedfrom the terminal - Select the USB disk
- Select the
Unallocatedpartition - Create a new partition (by default this will fill the free space on the USB)
Partition -> New- Create as:
Primary Partition - File system:
ext3 - Label:
persistence
- Apply the operations
Edit -> Apply All Operations- Confirm this action
- Exit
gparted
Combine the new partition with Kali Linux, persistently
Create a mount point for the persistence particion, and mount it
$ mkdir -p /mnt/my_usb
$ mount <DISK> /mnt/my_usbCreate a partition.conf file. This will enable the persistent storage on USB startup
$ echo "/ union" > /mnt/my_usb/persistence.conf
$ umount <DISK>Check the persistent partition
- Restart the Mac
- Hold down the Option key when you hear the chime
- Select
EFIas the startup disk - Select
Kali Linux (persistence) - At the terminal:
df -hwill bring up a list of mounted drives. There should be a mountpoint/lib/live/mount/persistence/<DISK>pointing to your new persistent partitionls -ltrh /lib/live/mount/persistence/<DISK>should show four entries:lost+found,persistence.conf,rw, andwork. Therwdirectory is a persistent link to/.
Update the OS
Update the installer and acquire the appropriate linux headers
$ apt-get update
$ apt-get install linux-image-$(uname -r|sed 's,[^-]*-[^-]*-,,')
$ apt-get install linux-headers-$(uname -r|sed 's,[^-]*-[^-]*-,,')Install kernel headers
These need to be obtained separately:
$ wget http://http.kali.org/kali/pool/main/l/linux/linux-kbuild-<VERSION>_amd64.deb
$ wget http://http.kali.org/kali/pool/main/l/linux/linux-headers-<VERSION>-common_<VERSION>_amd64.deb
$ wget http://http.kali.org/kali/pool/main/l/linux/linux-headers-<VERSION>-amd64_<VERSION>_amd64.deb
$ dpkg -i linux-kbuild-<VERSION>_amd64.deb
$ dpkg -i linux-headers-<VERSION>-common_<VERSION>_amd64.deb
$ dpkg -i linux-headers-<VERSION>-amd64_<VERSION>_amd64.debInstall the Broadcom drivers
apt-get install broadcom-sta-dkmsEnable and disable modules
$ modprobe -r b44 b43 b43legacy ssb brcmsmac bcma
$ modprobe wlEnable network-manager
nano /etc/NetworkManager/NetworkManager.confSet the value of managed to true,
Keybase proof
I hereby claim:
To claim this, I am signing this object:
{ "body": { "key": { "eldest_kid": "012089cfd009fa2a338d4e8e976d600695471c381f75b744e130cf54065c17e300f30a", "host": "keybase.io", "kid": "012089cfd009fa2a338d4e8e976d600695471c381f75b744e130cf54065c17e300f30a", "uid": "553032745215e849ef977191b3423819", "username": "ghani6155" }, "merkle_root": { "ctime": 1568485415, "hash": "abd22bc555beac00714cb6a0b0fd3d67cc8df449ba1a724ea8962abfead8a1217dc9aa650aa685bed4ab1e1465f01db92a3e4b40bd0ef1334a0b130128729999", "hash_meta": "4b44f489d8803cd75f5429bdc5c3211a56f16e4ff866ef5f24a73e530af04df7", "seqno": 7341160 }, "service": { "entropy": "d7a5IIdDWHPRV7ZtrM2rqi/m", "name": "github", "username": "ghani6155" }, "type": "web_service_binding", "version": 2 }, "client": { "name": "keybase.io go client", "version": "4.4.2" }, "ctime": 1568485458, "expire_in": 504576000, "prev": "28e72aaabc47eb64aa53ec475a9d658cd256543ec0a4dbb46c295fac79885f76", "seqno": 8, "tag": "signature" }with the key ASCJz9AJ-iozjU6Ol21gBpVHHDgfdbdE4TDPVAZcF-MA8wo, yielding the signature:
And finally, I am proving ownership of the github account by posting this as a gist.
My publicly-auditable identity:
https://keybase.io/ghani6155
From the command line:
Consider the keybase command line program.
# look me up keybase id ghani6155