BAB 16 - KALI LINUX

Definisi

Kali Linux adalah distribusi Linux berbasis Debian Testing yang dirancang khusus untuk tugas-tugas keamanan informasi seperti penetration testing, security research, computer forensics, dan reverse engineering. Dikembangkan dan didanai oleh Offensive Security, perusahaan yang juga menyelenggarakan sertifikasi OSCP (Offensive Security Certified Professional) - salah satu sertifikasi penetration testing paling bergengsi di dunia.

Sejarah Kali Linux

Timeline Penting:

Karakteristik Utama Kali Linux

Tujuan Utama Kali Linux

Kali Linux dirancang untuk beberapa tujuan spesifik dalam dunia keamanan informasi:

Kategori Tools di Kali Linux

Keunggulan Kali Linux

Peran Kali dalam Cyber Security

Kali Linux adalah standar industri untuk berbagai peran dalam cyber security:

Workflow Penetration Testing dengan Kali

Contoh Penggunaan Tools

Bash - Common Kali Tools
# 1. Nmap - Network scanning
$ nmap -sV -sC 192.168.1.1
# Scan target with version detection and default scripts

# 2. Nikto - Web vulnerability scanner
$ nikto -h http://target.com
# Scan web server for known vulnerabilities

# 3. SQLMap - SQL injection tool
$ sqlmap -u "http://target.com/page?id=1" --dbs
# Test for SQL injection

# 4. Hydra - Password cracker
$ hydra -l admin -P /usr/share/wordlists/rockyou.txt ssh://192.168.1.1
# Brute force SSH login

# 5. John the Ripper - Password cracker
$ john hash.txt --wordlist=/usr/share/wordlists/rockyou.txt
# Crack password hashes

# 6. Aircrack-ng - Wireless attack
$ aircrack-ng capture.cap
# Crack WPA/WPA2 handshake

# 7. Metasploit - Exploitation framework
$ msfconsole
msf> search exploit
msf> use exploit/unix/ftp/vsftpd_234_backdoor
msf> set RHOSTS 192.168.1.1
msf> exploit

# 8. Wireshark - Packet analyzer
$ wireshark
# GUI packet analyzer
$ tshark -i eth0
# CLI packet capture

# 9. Burp Suite - Web proxy
$ burpsuite
# Web application security testing

# 10. Hashcat - Advanced password recovery
$ hashcat -m 0 hash.txt /usr/share/wordlists/rockyou.txt
# Crack MD5 hashes with GPU acceleration

Struktur Menu Kali Linux

Kali Linux mengorganisir tools dalam menu yang terstruktur berdasarkan kategori:

Metode Instalasi

Kali Linux dapat diinstal dengan berbagai cara sesuai kebutuhan:

Download Kali Linux

Download Kali Linux
# 1. Kunjungi website resmi
https://www.kali.org/get-kali/

# 2. Pilih installer sesuai kebutuhan:
# - Installer Images: untuk install bare metal
# - Live Boot: untuk boot dari USB
# - Virtual Machines: pre-built VM images
# - ARM: untuk ARM devices
# - Cloud: untuk cloud platforms

# 3. Verifikasi checksum (PENTING!)
$ sha256sum kali-linux-2024.1-installer-amd64.iso
# Bandingkan dengan checksum di website

# 4. Download dengan checksum verification
$ wget https://cdimage.kali.org/kali-2024.1/kali-linux-2024.1-installer-amd64.iso
$ wget https://cdimage.kali.org/kali-2024.1/SHA256SUMS
$ sha256sum -c SHA256SUMS --ignore-missing

Instalasi Bare Metal

Langkah-langkah:

1. Buat bootable USB dengan Rufus (Windows) atau Etcher (cross-platform)
2. Boot dari USB - masuk BIOS/UEFI, ubah boot order
3. Pilih "Graphical Install"
4. Pilih bahasa, lokasi, keyboard
5. Konfigurasi jaringan - hostname, domain
6. Setup user - username dan password (bukan root lagi!)
7. Partitioning - pilih "Guided - use entire disk" atau manual
8. Install GRUB bootloader
9. Finish installation dan reboot

Bash - Create Bootable USB (Linux)
# 1. Identify USB device
$ lsblk
# Note the USB device (e.g., /dev/sdb)

# 2. Write ISO to USB
# WARNING: This will erase all data on USB!
$ sudo dd if=kali-linux-2024.1-installer-amd64.iso of=/dev/sdb bs=4M status=progress oflag=sync

# Alternative: Use balenaEtcher (GUI)
# Download from: https://www.balena.io/etcher/

Instalasi di WSL (Windows)

PowerShell - Install Kali on WSL
# 1. Enable WSL (if not already enabled)
PS> wsl --install

# 2. Install Kali Linux from Microsoft Store
PS> wsl --install -d kali-linux

# Or download from Microsoft Store directly

# 3. Launch Kali
PS> wsl -d kali-linux

# 4. Update Kali
$ sudo apt update && sudo apt upgrade -y

# 5. Install Kali tools (optional)
$ sudo apt install -y kali-linux-headless
# Or: kali-linux-default, kali-linux-everything

System Requirements

Mengapa Menggunakan VM?

Virtualization Software

Menggunakan Pre-built VM Images

Setup Kali VM
# 1. Download pre-built VM image
https://www.kali.org/get-kali/#kali-virtual-machines

# Pilih:
# - VirtualBox image (.ova)
# - VMware image (vmwarevm)

# 2. Verify checksum
$ sha256sum kali-linux-2024.1-virtualbox-amd64.ova

# 3. Import ke VirtualBox
# File -> Import Appliance -> Select .ova file

# 4. Configure VM settings:
# - RAM: 2-4 GB
# - CPU: 2 cores
# - Network: NAT or Bridged
# - USB: Enable USB 2.0/3.0

# 5. Start VM

# 6. Default credentials (old versions):
# Username: kali
# Password: kali

# 7. Update system
$ sudo apt update && sudo apt full-upgrade -y

# 8. Install VirtualBox Guest Additions (if needed)
$ sudo apt install -y virtualbox-guest-x11

Network Configuration

Snapshots

VM Snapshots
# Snapshots memungkinkan save state VM
# Berguna untuk:
# - Save state sebelum eksperimen berbahaya
# - Restore ke state sebelumnya
# - Test berbeda skenario

# VirtualBox:
# Machine -> Take Snapshot
# Machine -> Snapshots -> Restore

# VMware:
# VM -> Snapshot -> Take Snapshot
# VM -> Snapshot -> Revert to Snapshot

# Best practice:
# 1. Buat snapshot "Clean Install" setelah install
# 2. Buat snapshot sebelum install tools baru
# 3. Buat snapshot sebelum eksperimen

Apa itu Desktop Environment?

Desktop Environment (DE) adalah kumpulan software yang menyediakan graphical user interface (GUI) untuk Linux. Ini termasuk window manager, file manager, panel, dan aplikasi default.

Desktop Environment di Kali Linux

Switch Desktop Environment

Bash - Switch Desktop Environment
# Install different DE
$ sudo apt update

# Install GNOME
$ sudo apt install -y kali-desktop-gnome

# Install KDE Plasma
$ sudo apt install -y kali-desktop-kde

# Install Xfce (default)
$ sudo apt install -y kali-desktop-xfce

# Switch default DE
$ sudo update-alternatives --config x-session-manager

# Atau pilih di login screen (display manager)
# Klik ikon gear di login screen

Konfigurasi Xfce (Default)

Komponen Utama:

• Panel - taskbar di atas/bawah
• Desktop - area kerja utama
• Window Manager - mengatur window
• File Manager - Thunar
• Terminal - XFCE Terminal
• Application Menu - menu aplikasi

Customization Tips:

Xfce Customization
# 1. Change theme
# Settings -> Appearance -> Style

# 2. Change icons
# Settings -> Appearance -> Icons

# 3. Add panel items
# Right-click panel -> Panel -> Add New Items

# 4. Change wallpaper
# Right-click desktop -> Desktop Settings

# 5. Configure keyboard shortcuts
# Settings -> Keyboard -> Application Shortcuts

# 6. Terminal transparency
# Edit -> Preferences -> Appearance
# Adjust transparency slider

Apa itu Terminal?

Terminal (atau shell) adalah interface berbasis teks untuk berinteraksi dengan sistem operasi. Di Kali Linux, terminal adalah tools paling penting - hampir semua operasi dilakukan melalui command line.

Shell di Kali Linux

Basic Commands

Bash - Essential Commands
# === NAVIGATION ===
$ pwd                    # Print working directory
$ ls                     # List files
$ ls -la                 # List all files with details
$ cd /path/to/dir        # Change directory
$ cd ~                   # Go to home directory
$ cd -                   # Go to previous directory

# === FILE OPERATIONS ===
$ touch file.txt         # Create empty file
$ mkdir directory        # Create directory
$ mkdir -p dir1/dir2     # Create nested directories
$ cp file.txt backup.txt # Copy file
$ cp -r dir1 dir2        # Copy directory recursively
$ mv old.txt new.txt     # Move/rename file
$ rm file.txt            # Remove file
$ rm -r directory        # Remove directory recursively
# WARNING: rm -rf / akan menghapus semua!

# === VIEWING FILES ===
$ cat file.txt           # Display file content
$ less file.txt          # View file page by page
$ head file.txt          # Show first 10 lines
$ tail file.txt          # Show last 10 lines
$ tail -f log.txt        # Follow log file in real-time

# === SEARCH ===
$ grep "pattern" file    # Search for pattern in file
$ find /path -name "*.txt" # Find files by name
$ locate file.txt        # Quick file search
$ which command          # Find command location

# === SYSTEM INFO ===
$ whoami                 # Current user
$ id                     # User ID and groups
$ uname -a               # System information
$ hostname               # Hostname
$ uptime                 # System uptime
$ df -h                  # Disk usage
$ free -h                # Memory usage
$ ps aux                 # List processes
$ top                    # Real-time process monitor
$ kill PID               # Kill process

# === NETWORK ===
$ ip addr                # Show IP addresses
$ ip route               # Show routing table
$ ping google.com        # Test connectivity
$ netstat -tulpn         # Show listening ports
$ ss -tulpn              # Modern netstat alternative

# === PERMISSIONS ===
$ chmod 755 file         # Change permissions
$ chown user:group file  # Change owner

# === SUPERUSER ===
$ sudo command           # Run command as root
$ sudo -i                # Switch to root shell
$ su - username          # Switch to user

Keyboard Shortcuts

File System Hierarchy

Linux File System
/
├── bin          # Essential user binaries
├── boot         # Boot loader files
├── dev          # Device files
├── etc          # Configuration files
├── home         # User home directories
│   └── kali     # Default user home
├── lib          # Essential shared libraries
├── media        # Mount point for removable media
├── mnt          # Temporary mount point
├── opt          # Optional software
├── proc         # Process information (virtual)
├── root         # Root user home
├── sbin         # System binaries
├── srv          # Service data
├── sys          # System devices (virtual)
├── tmp          # Temporary files
├── usr          # User programs
│   ├── bin      # User binaries
│   ├── lib      # User libraries
│   └── share    # Shared data
└── var          # Variable data (logs, spool)

Package Manager di Kali Linux

Kali Linux menggunakan APT (Advanced Package Tool) sebagai package manager, warisan dari Debian. APT memudahkan instalasi, update, dan removal software.

APT Commands

Bash - APT Package Management
# === UPDATE ===
$ sudo apt update           # Update package list
$ sudo apt upgrade          # Upgrade installed packages
$ sudo apt full-upgrade     # Full upgrade (may remove packages)
$ sudo apt dist-upgrade     # Distribution upgrade

# === INSTALL ===
$ sudo apt install package-name
$ sudo apt install -y package-name    # Auto-confirm

# Install Kali meta-packages
$ sudo apt install kali-linux-default      # Default tools
$ sudo apt install kali-linux-large        # More tools
$ sudo apt install kali-linux-everything   # All tools

# Install tool categories
$ sudo apt install kali-tools-web           # Web tools
$ sudo apt install kali-tools-wireless      # Wireless tools
$ sudo apt install kali-tools-forensics     # Forensics tools

# === REMOVE ===
$ sudo apt remove package-name
$ sudo apt purge package-name      # Remove with config
$ sudo apt autoremove              # Remove unused dependencies

# === SEARCH ===
$ apt search keyword
$ apt show package-name
$ apt list --installed

# === CLEAN ===
$ sudo apt clean                   # Remove cached packages
$ sudo apt autoclean               # Remove old cached packages

DPKG (Debian Package)

Bash - DPKG Commands
# Install .deb file directly
$ sudo dpkg -i package.deb

# Fix broken dependencies
$ sudo apt --fix-broken install

# List installed packages
$ dpkg -l

# Show package info
$ dpkg -s package-name

# List files in package
$ dpkg -L package-name

# Find which package owns a file
$ dpkg -S /path/to/file

Common Tasks

Bash - Common Package Tasks
# Update system completely
$ sudo apt update && sudo apt full-upgrade -y
$ sudo apt autoremove -y
$ sudo apt autoclean

# Install specific tool
$ sudo apt install nmap
$ sudo apt install wireshark
$ sudo apt install metasploit-framework

# Check tool version
$ nmap --version
$ msfconsole --version

# Install from source (if not in repo)
$ git clone https://github.com/tool/repo.git
$ cd repo
$ sudo apt install build-essential
$ ./configure
$ make
$ sudo make install

Troubleshooting

Bash - Package Troubleshooting
# Fix broken packages
$ sudo apt --fix-broken install

# Reconfigure packages
$ sudo dpkg --configure -a

# Clean package cache
$ sudo apt clean
$ sudo apt autoclean

# Update package lists
$ sudo apt update

# Check for held packages
$ apt-mark showhold

# Unhold package
$ sudo apt-mark unhold package-name

Apa itu Repository?

Repository (repo) adalah server yang menyimpan package software. APT menggunakan repository untuk download dan install software.

Repository Kali Linux

Konfigurasi Repository

Bash - Repository Configuration
# View current repositories
$ cat /etc/apt/sources.list

# Default Kali Rolling repository:
# deb http://http.kali.org/kali kali-rolling main contrib non-free
# deb-src http://http.kali.org/kali kali-rolling main contrib non-free

# Edit sources list
$ sudo nano /etc/apt/sources.list

# Add custom repository
# deb http://example.com/repo kali main

# Add repository with GPG key
$ wget -O - https://example.com/key.gpg | sudo apt-key add -
$ echo "deb http://example.com/repo kali main" | sudo tee /etc/apt/sources.list.d/example.list

# Update after adding repository
$ sudo apt update

GPG Keys

Bash - GPG Key Management
# List installed keys
$ apt-key list

# Add Kali archive key (if missing)
$ wget -q -O - https://archive.kali.org/archive-key.asc | sudo apt-key add -

# Modern method (apt-key deprecated)
$ wget -O /usr/share/keyrings/kali-archive-keyring.asc https://archive.kali.org/archive-key.asc
$ echo "deb [signed-by=/usr/share/keyrings/kali-archive-keyring.asc] http://http.kali.org/kali kali-rolling main" | sudo tee /etc/apt/sources.list.d/kali.list

Mirror Selection

Bash - Use Mirror
# Use nearest mirror for faster downloads
# Edit /etc/apt/sources.list:
# deb http://http.kali.org/kali kali-rolling main contrib non-free

# Or use specific mirror:
# deb http://kali.mirror.Indonesia kali-rolling main

# List of mirrors:
# https://www.kali.org/docs/general-use/kali-linux-mirrors/

Meta-packages

Legalitas Penggunaan Kali Linux

Kali Linux adalah tools yang netral - legal atau tidaknya tergantung pada bagaimana Anda menggunakannya. Seperti pisau - bisa untuk memasak (legal) atau melukai seseorang (ilegal).

Hukum di Indonesia

Penggunaan yang Legal

Etika Ethical Hacking

Rules of Engagement

Rules of Engagement Template
# ============================================
# RULES OF ENGAGEMENT
# Penetration Testing Authorization
# ============================================

Client: [Nama Perusahaan]
Tester: [Nama Anda]
Date: [Tanggal]

Scope:
  - IP Range: 192.168.1.0/24
  - Domain: example.com
  - Applications: web.example.com

Out of Scope:
  - Production database
  - Third-party services
  - Social engineering

Testing Window:
  - Start: 2026-09-10 09:00
  - End: 2026-09-15 18:00

Restrictions:
  - No DoS attacks
  - No data exfiltration
  - No social engineering
  - Testing hours: 09:00 - 18:00 WIB

Emergency Contact:
  - Name: [Contact Person]
  - Phone: [Phone Number]
  - Email: [Email]

Authorization:
  Client Signature: _______________
  Date: _______________

  Tester Signature: _______________
  Date: _______________

Responsible Disclosure

White Hat vs Black Hat

Uji pemahaman Anda tentang Bab 16! Target minimal: 70% untuk melanjutkan ke Bab 17.