Cyber I - Downloading Kali Linux Live and Flashing to USB: Macintosh

[Music] today we're going to be doing something pretty cool we're going to turn this usb drive into almost an entirely new computer we're going to be downloading something called kali linux kali linux is a distribution of linux distribution is kind of like a fancy word for flavor and there are lots of different flavors of linux and i encourage you to go you know learn about them and play with them you know as you see fit but kali linux is specifically designed for security professionals and comes pre-loaded with lots of different tools capabilities and settings to make conducting security assessments pretty easy and fun it is a you know it is a professional grade tool i mean we use it in our day-to-day work um you know almost every day uh so you know you have to be careful with it because you know these aren't hacking tools so we're gonna you know be cautious with how we play around and not point them in anything we're not authorized to point them at but at the same time we're gonna have a ton of fun with kali linux learning how to conduct basic security assessments and getting hands-on with cyber security stuff so through this lab we're going to do a couple things first we're going to download kali linux from an approved repository we are going to you do a technique to validate that we downloaded the code that we think we wanted to download and didn't accidentally download something malicious we're going to be flashing this kali linux file that we download to a usb drive and then we're going to be booting into that usb drive and so when you boot into a usb drive your computer pulls you know the operating system and you know the basic storage stuff from the usb drive but keeps the processing power and memory and all the associated you know computing stuff from your laptop and so it's almost like having a whole new computer and i think it's really really cool so let's go ahead and get started so the first thing we need to do is download kali linux from cali.org now downloading open source security software it can be a little bit dicey you know open source software anybody can mess with it they could you know inject malicious code you could be downloading something you think is legitimate and it turns out to be not so we always want to take a little bit more care when downloading open source software and that's particularly true for kali linux because lots of different people mess around with kali linux create lots of different um you know flavors of kali linux and some of those are are malicious so we want to be careful with how we do this download so we're going to actually go to the cali.org website um you know we could just do something like this like you know google kali linux right and you know um you know cali.org is definitely is the first hit and that's great but you know if you if you scroll on down you know you can see there's lots of different places to download kali linux um and uh you know we don't necessarily know if uh you know those are legitimate or maybe you know maybe they have malicious you know code installed they could do all sorts of nasty things to your computer so we want to make sure that we're going to to cali.org and so the easiest way to do that is obviously to navigate to www.cali.org manually and if you're you know feeling extra cautious you know we can kind of take a look at um their certificate and we're not going to you know it's a beginner's course so i don't you know expect you to know everything that's going on with this certificate information but it's always a good idea just to take a look and see if anything's out of uh out of whack um you know we know everybody's heard of godaddy so we know that that's you know a legitimate certificate authority you can see that the common names cali.org again everything everything looks legit so we can have a high degree of confidence not perfect confidence but a high degree of confidence that this is actually cali.org and so to find kali linux we're going to go to the downloads section and we're going to download kali linux and so you can see lots of different options here there's lots of different you know flavors of kali linux that you can can download and we are going to pick the uh probably the 64-bit live so you know this is uh you know we're on a macintosh and so if you have a macintosh computer that was made after about 2007 i can pretty much guarantee you that you want the 64-bit version there is a 32-bit version if you're running a particularly old computer or if you have a specific type of windows computer and you need that 32-bit bit version but you know the 64-bit will likely work on a 32-bit version anyway and so this is probably a pretty safe download and so um we also want you to pay attention a few things so we are you know downloading the uh the live version meaning that we can run it uh on in our case on a usb drive um this is version 2020.4 and you see this this little code over here so this is called a hash and a hash is pretty cool um it is a unique code that is generated from the software and so if i were to download this um kali linux and i were to modify the software in any way it would change the hash and so by comparing the hash from the modified kai linux to this original hash i could see that it had been tampered with and it's not that's not a version i would want to use and so let's say i were to click on this and start the download process and um you know let's say someone was able to hijack that download process and inject a different file in there and so i think i'm downloading you know from here but someone's managed to hijack this the hash file would be different if they had modified the software and so this is a really really slick way and i'm going to show you how to check this in a bit it's a really slick way to know that to have confidence that this was that this is the correct version of kali linux from the official repository and so we're going to cop up here to downloads and you can see this is a sizable file so it's going to take a while um and i'm going to you know go ahead and pause the recording now and let this let this file finish downloading i'm also going to point out that this um this is a dot iso and so a dot iso is a special type of file so once we download this it's not the kind of file you're going to be able to click on and open and start on start playing with there's some more steps we need to take to make this iso file usable on our usb drive we're going to actually have to use a technique to write that iso you know from our desktop to our usb and i'm going to show you how to do that but don't be alarmed if you know you go ahead and try to click that dot iso and does it doesn't do anything because that's not how an i iso file works we need to do some manipulation with it to get it to do what we want to do but with that said i'm going to go ahead and pause the recording until this download finishes and we'll pick up after it it wraps up so that took about 20 minutes to download on my admittedly extremely slow internet connection and so um come up here we see that you know that downloaded good i'm going to put this on my desktop because it's some of the things we're going to do next or just easier when that file's on the desktop so the next thing we need to do is we need to take a look at the checksum and so you know i called this a hash earlier and it is it's uh you know the technical purists though will um complain that it is technically a checksum which is a type of hash and like i said this will help us see um you know if this is software that we downloaded is the actual approved software and that it wasn't tampered with um you know mid install because if if anyone tampered with that software it would modify this number and this number would come out different and so i'm going to you know show you now how to check that checksum so we're gonna hop up here to terminal all right now terminal terminal is open and this is uh this is really easy um it is just one simple command and that is s h a s h a sum space hyphen a 2 56 and then we're going to do something um a little shortcut that's actually pretty cool you're going to be doing this a lot in um in this course so i want to watch you i want you to watch and see how this works so we are going to drag and drop this file into the terminal window and what that does is it populates the whole file path for you and so this is a lot easier than trying to figure out what the file path is um you know so that the computer can find the file and then typing it in manually or copying pasting it's just really easy to drag and drop the file into the terminal window to populate that file path and you're going to be doing this a lot through this course because we're going to be working with a lot of files in command line and that's just the easiest way to populate that file path all right and then we hit return and it kind of does its thing it takes a little bit it's not instantaneous but again so this is another thing that's uh interesting about working with command line so a lot of times it will look like your computer is doing nothing that it's just sitting there and in actuality a lot is going on behind the scenes and we're going to know when this is done when the cursor when the command prompt cursor pops back up showing that we are ready to go and so that's how we know that this this worked and so you see that we pulled a hash file we pulled the checksum and we can go and we can check that checksum against what is suppose what it's supposed to be so you can see here this is uh this is the live version that we downloaded and you can see that it is just eyeball test it is the same so we can see that you know this is the file that we expected to download it is the legitimate file it was not uh interfered with in any way on the way to us and you know we have the right file a safe file to work with because again if somebody had modified this software this number here would be different than what is the approved checksum value all right so with that done now that we know that we have the right file i want to go show you what happens when you click on this file so if you try to open this file it will launch this it'll open this but there's nothing you can really do with this with this file here so so a lot of students when they download kali um you know like they think that it's uh you know like a normal file and they want to just hop up and you know start opening and clicking around and there's nothing you can do in this current state with the information that's here so actually we're going to go ahead and eject that so um but yeah this is an iso and so we need to take this iso file um this iso file and make it into something we can actually work with and so to do that we are going to end up writing it's called flashing this iso to this usb drive this right here so it's now time to flash our iso file to our usb drive and so to do this first we're going to keep our usb drive unplugged for the time being and we're going to go up to spotlight search and we're going to relaunch terminal all right so we've got terminal window open and just like in the last lab we're going to write disk util list and you can see i have my dash dev dash disk 0 and my dash dev dash disk 1 showing up in the terminal window and so now that we see those two we can go ahead and plug in our usb drive and we're going to run disk util list again and so i still have disk 0 and disk 1 but now i also have slash dev slash disk 3. and so we know that just like with the previous lab that disk 3 is my usb drive and yours is probably going to look different than this yours might be slash dev slash disk 2 or maybe disk 7 or disk 9. it could be any number of numbers based on how many disks you have plugged in right now but the key here is to make sure that you know which usb drive or which disk is your usb drive and if you have any doubts at all make sure to get in touch with me because the next series of commands that we're going to run are going to obliterate the usb drive so we have to be really careful about aiming these commands at the correct disk all right so the first command we need to run is disk util unamount capital d disk with a capital d so u n m o u n t capital d that's important for uh isk and then we're going to do slash dev slash disk 3. all right so now we've unmounted the usb drive and so the next command we're going to run is sudo and sudo is a magic word um that essentially gives you sort of instantaneous root privileges to do um you know really advanced things you know low-level impact things on your computer and so we're going to be using that command a lot so we're going to do sudo dd if i f equals and then we're going to drag and drop this file just like i showed you before and then we say of equals slash dev slash r disc three and that's so it's it's the slash dev slash disc three just with an r in front of the disc three and we're gonna say bs equals four m all right and then we're gonna hit return and it's asking us for a password because we're running sudo so i'm trying to do something in root and so it wants my system password so let me go ahead and type that in and so as i type the password you'll see nothing shows up that that but i'm still i am still typing the password it's not like you know normal username and password login which will show little blank characters as you type in your password but type in your your password this is probably the password you use to you know log into the system and you may not be prompted depending on how your system is set up all right and so this is working and this is going to take a long time this is uh you know could take half hour could take 30 minutes you know i do know that it is working because i have a usb drive that sort of flashes when it's doing things and i can see it flashing but otherwise there's going to be no indicator that this is doing anything and that's okay that's perfectly normal just like when we run other commands we'll know that this is done when the command prompt with the little cursor to type in a new command pops up and so you know we're going to pause the recording here and wait for this to do its thing and then we'll pick back up once we uh we have that iso flashed appropriately so all right so that actually went pretty fast uh you can see from um here that it uh only took about nine minutes um to run which actually it's kind of record time usually it takes me closer to a half hour and you'll again you'll know that this is process is done when you see the you know command prompt pop back up you also might see something like this you know the records in records out out indicator there and so now that we have flashed this iso to our usb we can now actually boot into this usb and so if you're on a mac after it's older than say 2018 you may have something called a t2 security chip in your mac in which case you're going to have to disable certain features of that chip in order to be able to do this that's fine it's not going to hurt your computer it's something that we can you know restore back when we're done with kali linux but you are going to have to go ahead and disable certain features in t2 if you see the written instructions that accompany this tutorial you'll see uh you know a tutorial on how to do that i have a really old mac here this is a 2012 and so unfortunately i can't you know screen share for you and show you how to do that but i can walk you through those directions if you have trouble following them in the written instructions but if you you know don't have a 2018 or later mac this process is actually really pretty easy much much much easier than trying to do it on a windows machine so um as if you watch the windows video you'll you'll see and so what we're going to do is we're going to reboot our computer and obviously i can't screen share that since i'm going to be rebooting the computer but you reboot the computer and you hold down the option key and the option key looks something looks like this on a mac it's uh on the lower left hand side and it looks like this all right and so as the computer reboots you're going to hold down that key and you're going to hold it down the entire time the computer reboots and as you do that you're going to see a screen that looks like this now on this screen you need to figure out which one is your usb drive your screen could look differently or different than what is shown here because you know i don't know what how your computer is configured or what you have plugged into in my example it's the one in the far right is my usb drive and so i'm going to arrow over that and i'm going to hit enter and then you will eventually see some activity and you will see a screen that looks like this and on this screen we're just going to go ahead in this instance and hit enter or we're going to launch the the live usb version we're only on this screen you can see a lot of different options but we're actually only going to be ever using two of these options in this class we're going to be using that top one on this live usb and then we're going to if you scroll down you can see one that has persistence not encrypted persistence but just the persistence one above that we're going to be using that one a lot um too but those are the only two we're going to use so if you know we say just a boot in the live we want that top one if we're saying boot into persistence we're talking about uh that that lower one that just says persistence there so in this instance let's just go ahead and uh um hit live and you should see this and we just booted in to kali linux off the usb drive plugged into your computer and i got to tell you no matter how many times i do this this never gets old for me i think it's really cool that we can load an operating system onto a usb drive and boot into that usb drive essentially turning your computer into a whole new device and i think that's really neat so we got the hard drive in some basic storage on the usb and we're pulling the processor memory and all the associated computing hardware stuff from your original computer and i just think it's the neatest thing um and so now that we're in kali linux there's a few things i just want to point out um so first of all there are a whole lot of really powerful tools loaded on kali linux so if you go up over to the top left corner this little cali dragon icon up at the top and you click down you can see all the different tools and attacks that you have access to and um you know don't don't go playing with these willy nilly i mean feel free to explore but be very careful about you know pointing these tools that anything that you're not authorized to put them at because you can get yourself in a lot of trouble i mean this is a full fed fledged uh you know hacking suite of tools um and you can do a lot of damage you can get a lot of trouble so so you know be cautious but at the same time feel free to play around and explore um just be an adult about it um some other things to point out you know we have a web browser down here um it is uh you know it's gonna look just like firefox so it's gonna be something you're really used to using you have your access to terminal right here you can also find that up in the you know top top bar left there's a little black window for terminal and we're going to be using this text editor a lot so there's a basic text editor it works the same way as any text editor does on your your usual machine it's no different you know you can save yada yada do all your stuff some other things to point out you know so some hardware doesn't always play nice with kali linux so like you know make sure your trackpad works make sure you know pop open the text editor and just you know test to make sure that your keyboard works um and uh the other big one is that sometimes wireless cards don't work so up in the again top bar this time on the right side you'll see something that looks like a computer screen with a little x in the bottom right this is your network connection and so you know you can click on this and you can find your wi-fi network and you know mine appears to have disappeared so i can't get on it for you but um oh there it is there's one of them so we will use this guy type in a password and then there you go so you can see again up that that little computer screen with the x uh is turned into you know good little wireless indicator and i am online um and so make sure that works for you sometimes it doesn't um and if it doesn't let me know and we can try to troubleshoot it alternatively almost it almost always works if you just plug in direct you know unplug your ethernet cable from your wireless modem and plug it directly into your computer that almost always works um and i think the last thing i ordered one more one more other thing before we go to the last thing so up in the again top top bar on the left side you'll see um a little like computer screen with a it looks like a red bubble in the lower right i think that's supposed to be a camera this is kazam and it is uh a great screen cast uh screenshot recording tool um so you know you can take screencasts which is actually what i'm doing right now you can do screen shots um you know when when i ask for screenshots for labs like this is probably the best way to do it um again it's really really easy way um you know tool to work with so again feel free to play around just be be careful with the tools and when you're ready to shut down you know you scroll over here to terminal and um you do sudo reboot that'll restart your computer and you will your computer will just restart normally or you can do sudo power off and that'll just shut down your device entirely but i won't do that now because i don't want to lose the screen share but for now have fun and we're going to be getting into kali linux a lot throughout this course so have uh have fun and uh just be safe this tutorial was prepared by the center for cyber security and privacy protection at cleveland marshall college of law cleveland state university [Music]

Channel: CSU College of Law

Views: 13,709

Keywords:

Id: CsqWa6FZ15Y

Length: 22min 45sec (1365 seconds)

Published: Mon Dec 14 2020