人生苦短，我用Kali！——俺

0x00 安装Kali

Kali Linux基于Debian Linux，旨在渗透测试及安全审计。

1. 下载官方镜像
2. 制作USB启动盘
3. LVM安装系统

0x01 LVM分区空间划分

1. 查看当前分区情况

root@kali:~# df -hl

文件系统 容量 已用 可用 已用% 挂载点
rootfs 9.1G 7.0G 1.7G 82% /
udev 10M 0 10M 0% /dev
tmpfs 783M 728K 782M 1% /run
/dev/mapper/kali-root 9.1G 7.0G 1.7G 82% /
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 1.6G 240K 1.6G 1% /run/shm
/dev/sda2 229M 29M 189M 13% /boot
/dev/sda1 487M 128K 486M 1% /boot/efi
/dev/mapper/kali-home 418G 71M 397G 1% /home

2. 卸载/home所在文件系统

root@kali:~# umount /dev/mapper/kali-home

3. 检测/home所在文件系统

root@kali:~# e2fsck -f /dev/mapper/kali-home

e2fsck 1.42.5 (29-Jul-2012)
第一步: 检查inode,块,和大小
第二步: 检查目录结构
第3步: 检查目录连接性
Pass 4: Checking reference counts
第5步: 检查簇概要信息
/dev/mapper/kali-home: 11/27803648 files (0.0% non-contiguous), 1795740/111192064 blocks

4. 重新划分/home分区大小

root@kali:~# resize2fs /dev/mapper/kali-home 222G

resize2fs 1.42.5 (29-Jul-2012)
Resizing the filesystem on /dev/mapper/kali-home to 58195968 (4k) blocks.
The filesystem on /dev/mapper/kali-home is now 58195968 blocks long.

5. 减少/home逻辑分区大小

root@kali:~# lvreduce -L 222G /dev/mapper/kali-home

WARNING: Reducing active and open logical volume to 222.00 GiB
THIS MAY DESTROY YOUR DATA (filesystem etc.)
Do you really want to reduce home? [y/n]: y
Reducing logical volume home to 222.00 GiB
Logical volume home successfully resized

6. 增加/逻辑分区大小

root@kali:~# lvresize -L +200G /dev/mapper/kali-root

Extending logical volume root to 209.86 GiB
Logical volume root successfully resized

7. 重新划分/分区大小

root@kali:~# resize2fs /dev/mapper/kali-root

resize2fs 1.42.5 (29-Jul-2012)
Filesystem at /dev/mapper/kali-root is mounted on /; on-line resizing required
old_desc_blocks = 1, new_desc_blocks = 14
The filesystem on /dev/mapper/kali-root is now 55012352 blocks long.

8. 检测重新分区效果

root@kali:~# df -hl

文件系统 容量 已用 可用 已用% 挂载点
rootfs 207G 7.0G 191G 4% /
udev 10M 0 10M 0% /dev
tmpfs 783M 728K 782M 1% /run
/dev/mapper/kali-root 207G 7.0G 191G 4% /
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 1.6G 244K 1.6G 1% /run/shm
/dev/sda2 229M 29M 189M 13% /boot
/dev/sda1 487M 128K 486M 1% /boot/efi
/dev/mapper/kali-home 219G 60M 208G 1% /home

0x02 添加用户及权限

1. 创建新用户

root@kali:~# adduser yogy

正在添加用户"yogy"...
正在添加新组"yogy" (1002)...
正在添加新用户"yogy" (1001) 到组"yogy"...
创建主目录"/home/yogy"...
正在从"/etc/skel"复制文件...
输入新的 UNIX 密码：
重新输入新的 UNIX 密码：
passwd：已成功更新密码
正在改变 yogy 的用户信息
请输入新值，或直接敲回车键以使用默认值
全名 []:
房间号码 []:
工作电话 []:
家庭电话 []:
其它 []:
这些信息是否正确？ [Y/n] y

2. 赋root权限

root@kali:~# sudo vim /etc/sudoers

# User privilege specification
root ALL=(ALL:ALL) ALL
yogy ALL=(ALL:ALL) ALL
# Allow members of group sudo to execute any command
%sudo ALL=(ALL:ALL) ALL

0x03 修改软件源更新

1. 添加Kali源

yogy@kali:~$ sudo vim /etc/apt/sources.list

#阿里源
deb http://mirrors.aliyun.com/kali kali main non-free contrib
deb-src http://mirrors.aliyun.com/kali kali main non-free contrib
deb http://mirrors.aliyun.com/kali-security kali/updates main contrib non-free
deb http://mirror.nus.edu.sg/kali/kali/ kali main non-free contrib
#debain源
deb http://mirrors.163.com/debian/ wheezy main contrib
deb http://mirrors.163.com/debian/ wheezy-proposed-updates main contrib
deb-src http://mirrors.163.com/debian/ wheezy main contrib
deb-src http://mirrors.163.com/debian/ wheezy-proposed-updates main contrib

2. 更新软件

yogy@kali:~$ sudo apt-get update && sudo apt-get upgrade

命中 http://mirrors.aliyun.com kali Release.gpg
命中 http://mirrors.163.com wheezy Release.gpg
...
下载 12.9 kB，耗时 1分 1秒 (210 B/s)
正在读取软件包列表... 完成
正在读取软件包列表... 完成
正在分析软件包的依赖关系树
正在读取状态信息... 完成
升级了 0 个软件包，新安装了 0 个软件包，要卸载 0 个软件包，有 0 个软件包未被升级。

0x04 修改时区UTC

1. 查看当前时间

yogy@kali:~$ date -R

Sat, 10 Jul 2015 22:57:28 -0800

2. 选择时区

yogy@kali:~$ tzselect

Please identify a location so that time zone rules can be set correctly.
Please select a continent or ocean.
...

5. Asia
   ...
6. none - I want to specify the time zone using the Posix TZ format.
   #? 5
   Please select a country.
   ...
7. China 26) Laos 43) Taiwan
   ...
   #? 9
   Please select one of the following time zone regions.
8. Beijing Time
9. Xinjiang Time
   #? 1
   The following information has been given:
   China
   Beijing Time
   Therefore TZ='Asia/Shanghai' will be used.
   Local time is now: Tue Jul 7 04:10:17 CST 2015.
   Universal Time is now: Mon Jul 6 20:10:17 UTC 2015.
   Is the above information OK?
10. Yes
11. No
    #? 1
    You can make this change permanent for yourself by appending the line
    TZ='Asia/Shanghai'; export TZ
    to the file '.profile' in your home directory; then log out and log in again.

3. 修改profile并生效

yogy@kali:~$ echo "TZ='Asia/Shanghai'; export TZ" >> ~/.profile
yogy@kali:~$ source ~/.profile

4. 验证效果

yogy@kali:~$ date -R

Sat, 11 Jul 2015 14:57:28 +0800

0x05 配置GNOME 3

GNOME 3是新一代Linux桌面管理器，简洁优雅。

1. 开启GNOME 3模式

gsettings set org.gnome.desktop.session session-name gnome

2. 更换主题

• 从gnome-look下载GTK 3.x主题，如Gnome-Cupertino
• 解压至目录/usr/share/themes/

yogy@kali:~/Downloads$ tar -zxvf 147061-Gnome-Cupertino-2.1.5.tar.gz -C /usr/share/themes/

• Advanced Settings -- 主题 -- GTK主题&&窗口主题

3. 添加插件

• 从gnome下载插件
• 移至目录~/.local/share/gnome-shell/extensions/
• Advanced Settings -- Shell 扩展
• 在线插件管理

0x06 浏览器安装Flash插件

Kali自带的Iceweasel浏览器，是Mozilla Firefox的Debian再发布版。

1. 在adobe下载flash
2. 解压并移至指定文件夹

yogy@kali:~/Downloads$ tar -zxvf install_flash_player_11_linux.x86_64.tar.gz
yogy@kali:~/Downloads$ sudo cp libflashplayer.so /usr/lib/mozilla/plugins/
yogy@kali:~/Downloads$ cp -r ./usr/* /usr/

3. 管理插件
   重启浏览器，在插件管理中启动Shockwave Flash

0x07 安装SCIM输入法

安装SCIM，实现汉语、日语、英语的三语输入。

1. 安装主程序

yogy@kali:~$ sudo apt-get install scim scim-gtk-immodule scim-modules-socket scim-modules-talbe

2. 添加汉语输入

• 下载scim-googlepinyin
• 解压并安装

yogy@kali:~/Downloads$ tar xzfv scim-googlepinyin.tar.gz
yogy@kali:~/Downloads$ cd scim-googlepinyin.tar.gz
yogy@kali:~/Downloads$ PKG_CONFIG_PATH=/usr/lib/pkgconfig
yogy@kali:~/Downloads$ ./autogen.sh
yogy@kali:~/Downloads$ make
yogy@kali:~/Downloads$ sudo make install

3. 添加日语输入

yogy@kali:~$ sudo apt-get install scim-tables-ja

0x08 清理USB启动盘

1. 清理fstab

yogy@kali:~$ sudo gedit /etc/fstab

# 使用USB安装系统时生成，需将其注释以正常挂载
# /dev/sdc1 /media/usb0 auto rw,user,noauto 0 0
# /dev/sdc2 /media/usb1 auto rw,user,noauto 0 0

2. 格式化U盘

• 卸载挂载点

yogy@kali:~$ sudo umount /dev/sdd1
yogy@kali:~$ sudo umount /dev/sdd2

• 完全格式化

yogy@kali:~$ sudo mkfs.vfat /dev/sdd1
yogy@kali:~$ sudo mkfs.vfat -I /dev/sdd

0x09 调节开机亮度

1. 安装laptop-mode-tools

yogy@kali:~$ apt-get install laptop-mode-tools

2. 查看亮度极值

yogy@kali:~$ sudo gedit /sys/class/backlight/intel_backlight/max_brightness

4437

3. 配置LCD亮度控制

yogy@kali:~$ sudo gedit /etc/laptop-mode/conf.d/lcd-brightness.conf

CONTROL_BRIGHTNESS=1
BATT_BRIGHTNESS_COMMAND="echo 2555"
LM_AC_BRIGHTNESS_COMMAND="echo 2555"
NOLM_AC_BRIGHTNESS_COMMAND="echo 2555"
#BRIGHTNESS_OUTPUT="/proc/acpi/video/VID/LCD/brightness"
BRIGHTNESS_OUTPUT="/sys/class/backlight/intel_backlight/brightness"

0x0a 手动配置静态网络

1. 配置IP和DNS

yogy@kali:~$ sudo vim /etc/network/interfaces

auto lo
iface lo inet loopback
auto eth0
iface eth0 inet static
address 10.21.5.67
netmask 255.255.0.0
gateway 10.21.0.254
dns-nameservers 159.226.8.6 159.226.39.1 4.4.4.4

2. 托管设备

yogy@kali:~$ sudo sed -i "s/managed=false/managed=true/" /etc/NetworkManager/NetworkManager.conf

3. 重启网络

yogy@kali:~$ sudo /etc/init.d/networking restart

0x0b 系统备份与还原

1. 备份

• 直接备份

yogy@kali:~$ sudo tar cvpfz backup-kali.tgz --exclude=/backup-kali.tgz --exclude=/proc --exclude=/lost+found --exclude=/mnt --exclude=/tmp --exclude=/sys /

• bzip2压缩备份

yogy@kali:~$ sudo tar cvpfj backup-kali.tar.bz2 --exclude=/backup-kali.tar.bz2 --exclude=/proc --exclude=/lost+found --exclude=/mnt --exclude=/tmp --exclude=/sys /

2. 还原

• 直接还原

yogy@kali:~$ sudo tar xvpfz backup-kali.tgz -C /

• bzip2压缩还原

yogy@kali:~$ sudo tar xvpfj backup-kali.tar.bz2 -C /

3. 补齐目录

yogy@kali:~$ sudo mkdir /proc /lost+found /mnt /tmp /sys

0x0c 结束语

Kali系统基础配置完毕，可满足日常使用需求。常用开发软件的安装及配置将另开新篇，内容包括但不限于IDE，虚拟机，VPN，ns-3。

Kali Linux

转载请注明出处