Preview Mode Links will not work in preview mode

7 Minute Security


Feb 9, 2024

Hey friends, today we cover a funstrating (that's fun + frustrating) issue we had with our DIY pentest dropboxes. TLDL:

 

  • The preseed file got jacked because I had a bad Kali metapackage in it.
  • While I was tinkering around with preseed files, I decided it would be more efficient to have the Kali ISO call that preseed file directly over HTTP (rather than make a new ISO every time I made a preseed change).  To accomplish that:
    • Mount the Kali ISO
    • Explore to isolinux > txt.cfg
    • Modify the txt.cfg to include a custom boot option that calls your preseed over HTTP.  For example:
 label install menu label ^Install Yermaum kernel /install.amd/vmlinuz append net.ifnames=0 preseed/url=https://somewebsite/kali.preseed locale=en_US keymap=us hostname=kali777 domain=7min.sec simple-cdd/profiles=kali desktop=xfce vga=788 initrd=/install.amd/initrd.gz --- quiet