pimpmykali VS PEASS-ng

I hated that there were entire debloater software programs that had to be made, in order to get some amount of sanity back over what was installed. The closest thing I can think of like this for Linux is PimpMyKali, but that's not so much about bloat as it is about resolving some common issues or misconfigurations.

I'd recommend installing pimpmykali to fix some of the known issues with the OS. Make sure to run it with the "N" flag.

If you know how to turn off CPU mitigations, you can do that. If you don't know how to do that, you can use pimpmykali and run the "Fix Grub" option, then reboot. Mitigations aren't a big deal for a pentesting VM and significantly speed up the performance.

i remember seeing it in a video that whenever they open a new kali vm they run this script to fix common kali bugs that exist in the VM release. anybody got taughts on this?

Metasploit 6 no longer supports older versions of Windows. If you are using it for some machines, DOWNGRADE it to MSF5. Here's a free tool to help you do so easily

Check out pimpmykali if you are using Kali 2020 or newer it fixes issues and includes the option to downgrade impacket.

The error: unrecognised import path "embed". So I guess it has something to do with the golang binary path?? Golang was installed via the pimp my kali scriptif that helps figure this out

https://github.com/Dewalt-arch/pimpmykali Pimp My Kali! It fixes old pip and preinstalls a lot of dependencies you will need.

Once on a system, something like Linpeas or Winpeas would be useful: https://github.com/carlospolop/PEASS-ng

Reject internet, embrace man. TBH it is not usefull at all, it is just in manual or embedded in kali, like basic webshells for example. It is cool to do such thing as a little free time project to learn about hosting and developing a website, but usefulnes for broader audience is minimal I think. For everyday use https://book.hacktricks.xyz are the best in my opinion.

I'm taking my OSCP exam next Wednesday and was just wondering on what tools are actually prohibited and which are not. I'm specifically referring to linpeas, winpeas, seatbelt. I often times run these tools when I've exausted my enumeration methods for a quick find. Are these tools allowed on the AD set and the individual machines?

Seems like a cart before horse situation. Why not just release the cheat sheet you have now and see how it does? I like Carlos Polop's approach with HackTricks -- https://book.hacktricks.xyz/ -- he offers previews of new content to his patrons.

Hi I don't understand the self.files attribute in this code: https://github.com/carlospolop/PEASS-ng/blob/master/linPEAS/builder/src/fileRecord.py

I'd recommend poking around at github and see what you find. A good starting point is WinPEAS if you're looking for automation. Seatbelt might also be helpful

Using linpeas I found some useful information over the user steven