7MS #610: DIY Pentest Dropbox Tips – Part 9

Feb 9, 2024

Hey friends, today we cover a funstrating (that's fun + frustrating) issue we had with our DIY pentest dropboxes. TLDL:

 

• The preseed file got jacked because I had a bad Kali metapackage in it.
• While I was tinkering around with preseed files, I decided it would be more efficient to have the Kali ISO call that preseed file directly over HTTP (rather than make a new ISO every time I made a preseed change).  To accomplish that:
  • Mount the Kali ISO
  • Explore to isolinux > txt.cfg
  • Modify the txt.cfg to include a custom boot option that calls your preseed over HTTP.  For example:

 label install menu label ^Install Yermaum kernel /install.amd/vmlinuz append net.ifnames=0 preseed/url=https://somewebsite/kali.preseed locale=en_US keymap=us hostname=kali777 domain=7min.sec simple-cdd/profiles=kali desktop=xfce vga=788 initrd=/install.amd/initrd.gz --- quiet