Kali Linux
You have no idea how good you have it.
In 1998, I was an up-and-coming hacker, co-founding one of the earliest professional white hat
hacking teams. We were kids, really, with dream jobs, paid to break into some of the most secure
computer systems, networks, and buildings on the planet.
It sounds pretty sexy, but in reality, we spent most of our time hovering over a keyboard, armed
with the digital tools of our trade. We wielded a sordid collection of programs, designed to map
networks and locate targets; then scan, exploit, and pivot through them. In some cases, one of
us (often Jim Chapple) would write custom tools to do wicked things like scan a Class A network
(something no other tool could do, at the time), but most often we would use or modify tools
written by the hacker community. In those pre-Google days, we frequented BugTraq, AstaLaVista,
Packet Storm, w00w00, SecurityFocus, X-Force, and other resources to conduct research and build
our arsenal.
Since we had limited time on each gig, we had to move quickly. That meant we couldn’t spend a
lot of time fiddling with tools. It meant we had to learn the core tools inside and out, and keep the
ancillary ones on tap, just in case. It meant we had to have our tools well-organized, documented,
and tested so there would be few surprises in the field. After all, if we didn’t get in, we lost face
with our clients and they would take our recommendations far less seriously.
Because of this, I spent a lot of time cataloging tools. When a tool was released or updated, I’d go
through a routine. I had to figure out if it would run on the attack platform (some didn’t), and
whether it was worthwhile (some weren’t); I had to update any scripts that relied on it, document
it, and test it, including carrying over any changes made to the previous version.
Then, I would shake out all the tools and put them in directories based on their purpose during an
assessment. I’d write wrapper scripts for certain tools, chain some tools together, and correlate
all that into a separate CD that we could take into sensitive areas, when customers wouldn’t let us
take in attack machines or remove media from their labs.
