[kali-like] is there a package to load all the pentest suite?

thomasbb · 2020-06-14 15:49:21

It could be possible to install Kali on a VM, but maybe there is a package ready for Arch?

heywoodlh · 2020-06-15 19:11:51

This isn’t really stock Arch at this point (and not as relevant to this forum) but you can use Black Arch.

Or you could find each of the packages in the stock Arch repositories and install all of them.

eschwartz · 2020-06-16 01:25:06

heywoodlh wrote:

This isn’t really stock Arch at this point (and not as relevant to this forum)

Blackarch is more than just not "stock arch". It isn't arch at all.

Moreover, as far as derivative distros that aren't arch go, blackarch is... definitely on the questionable side of things in terms of sheer engineering. They have worse QA than Manjaro, but they don't tend to break the core system like Manjaro does... I'm not sure which one is worse.

I would strongly recommend finding relevant packages in the official arch repos, or expanding the AUR.

Trilby · 2020-06-16 01:42:15

All the relevant packages are in the AUR. If you don't know which packages you want, you could just check the list of packages included in Kali (or blackarch if you must) then install them from the AUR. Of course, if you don't know which packages you want, there are bigger fish to fry. Don't install a bunch of pentesting packages 'cause it's l33t or cool, figure out what you want to learn, then get the packages you need to support that learning.

I'm not into the pentesting world, but there are other aspects of computing I am engaged with. So if / when I install a new system, I know what packages I want to install or look for as I know what tools I need. I know what tools I need because I know how they work and interact with each other. Having a system install everything someone else thought I might need would be silly as I'd 1) not really know what was installed 2) not know how what was installed worked, and 3) not know how the different installed tools interacted with each other.

Now, if there are a whole bunch of tools that you already understand pretty well and you just want an efficient way to install all of them as a group, then just make a meta package depending on them (or just go with the simpler approach of keeping a text file with the list of package names, then `pacman -S - < /path/to/package_list`.

Last edited by Trilby (2020-06-16 01:46:29)

cerberusec · 2020-06-16 17:32:08

eschwartz wrote:

Blackarch is more than just not "stock arch". It isn't arch at all.

BlackArch is just a package repo that can simply be added to an existing ArchLinux install:
https://www.blackarch.org/downloads.html#install-repo

This is actually how I run BlackArch and it is very convenient rather than going one by one installing stuff from aur. Also, the BlackArch repo already has 'category' sets for tool groups - exploitation, reversing, sniffer, etc...

Last edited by cerberusec (2020-06-16 17:37:02)

jasonwryan · 2020-06-16 17:37:18

cerberusec wrote:

eschwartz wrote:
Blackarch is more than just not "stock arch". It isn't arch at all.
BlackArch is just a package repo that can simply be added to an existing ArchLinux install:
https://www.blackarch.org/downloads.html#install-repo
This is actually how I run BlackArch and it is very convenient rather than going one by one installing stuff from aur.

Don't post here if you have no clue what you are talking about. Adding that repo means you are no longer running Arch and you will not get any support here.

eschwartz · 2020-06-16 17:48:00

It doesn't matter where you get unofficial packages from, they're still unofficial. Arch Linux supports exactly three package sources:

the official repos
packages which are downloaded and installed directly from the AUR (but the support request will be moved to the AUR issues subforum)
packages which you have *personally* created (but the support request will be moved to the Creating and Modifying Packages subforum)

All unofficial user repositories are the responsibility of their maintainers to support, and this community will not support them. This includes the blackarch addon repository.
(In some cases, the unofficial user repository is provided by a forum member. I *personally* provide support for my unofficial user repository, for example, but I don't expect the forum as a whole to do so.)

Blackarch has the *additional* problem that they provide derivative distro installers which automatically add this repository. (Also the problem where they have terrible QA.) So if you use blackarch, it is unclear whether you're eligible for support for the rest of your system, even if your problems don't come from the [blackarch] repository at all. Often, the forum staff will simply assume that blackarch users are blackarch distro users, not blackarch repository users, since they most often are...

heywoodlh · 2020-06-17 02:27:57

Good points have been made. I shouldn't have brought up Black Arch, especially since I don't use it.

You should probably just install the packages manually. If you don't know which packages you need, you probably shouldn't be installing security tools on your daily driver anyway. Just run Kali in a VM if you want an easy solution. For my pen testing toolset I use Docker to conveniently access the security tools I need but still have them separate from my base install.

Again, sorry for bringing up Black Arch in the first place, guys -- I shouldn't have

Arch Linux

#1 2020-06-14 15:49:21

[kali-like] is there a package to load all the pentest suite?

#2 2020-06-15 19:11:51

Re: [kali-like] is there a package to load all the pentest suite?

#3 2020-06-16 01:25:06

Re: [kali-like] is there a package to load all the pentest suite?

#4 2020-06-16 01:42:15

Re: [kali-like] is there a package to load all the pentest suite?

#5 2020-06-16 17:32:08

Re: [kali-like] is there a package to load all the pentest suite?

#6 2020-06-16 17:37:18

Re: [kali-like] is there a package to load all the pentest suite?

#7 2020-06-16 17:48:00

Re: [kali-like] is there a package to load all the pentest suite?

#8 2020-06-17 02:27:57

Re: [kali-like] is there a package to load all the pentest suite?

Board footer