Shulou(Shulou.com)06/02 Report--

This article mainly introduces "the production method of kali persistent encryption usb". In the daily operation, I believe that many people have doubts about the production method of kali persistent encryption usb. The editor consulted all kinds of data and sorted out simple and easy-to-use operation methods. I hope it will be helpful to answer the doubts of "kali persistent encryption usb production method". Next, please follow the editor to study!

We know that Kali has many startup items, among which the Live startup item is a way to provide users with an operational experience, and because of this, it cannot update or upgrade, nor can it save any changes to the system. But there are two ways to start, which are based on Live mode, but can save the results of system changes, which are Kali Linux Live USB Persistence (USB persistence) and Kali Linux Live USB Encrypted Persistence (USB encryption persistence). Because of the portability of USB devices, Kali also has "mobility", which can be described as "mobile Kali". So today, we choose the Encrypted Persistence mode which has a higher safety factor to install. I have read a foreign technical article about this before, coupled with my own personal practice, I wrote this article.

(1) preliminary preparations:

1. One U disk. Recommend 32GB or more. Choose brands such as Kingston that are of good quality and reputation.

2. Download the latest version of 64-bit system ISO image (currently 201.4) on Kali official website.

3. USB disk Boot tool: USB Installer (it is strongly recommended to download it on the official website)

4. Zoning tool: MinTool Partition Wizard Free (it is strongly recommended to download it on the official website).

2. Start production:

(1) production of boot disk:

1. Plug in the USB flash drive and open the USB Installer

2. Step1 item, select "Kali Linux"

3. Step2, select the system image you downloaded. Here is "Kali-Linux-2018.4-amd64.iso".

4. Step3 item, select your flash drive, and check the "Fat32" item

5. Click the "create" option and wait a few minutes.

The details are as follows:

(2) Division:

1. Open "MinTool Partition Wizard Free" and select your USB flash drive

2. Right-click and select the "Move/Resize" item

Generally speaking, the U disk of 32GB is about 30GB after formatting.

3. Reduce the area to about 4GB, and click OK,USB to complete the boot partition.

4. Right-click the area that has been grayed out, and here we will partition the persistent storage. I use all the partitions here. Of course, if you don't want to do this, you can divide some areas first, and then you need to divide the remaining areas later, but they are basically the same steps: right-click, select "create", then select "Unformatted" on "File system", and click "OK".

5. Click "Apply" in the upper left corner, wait a few minutes, and then the partition is complete (after that, a Windows window will pop up to ask if you want to "format". Be sure to choose "cancel"! ).

(3) restart the computer:

1. Make sure your flash drive is plugged in before rebooting

2. Press the shortcut key to enter BISO mode in the initial boot interface (my notebook is T410i, so it is F1 key, specific computer is different, you can search or query instructions online according to your own situation), set your USB startup item as the first startup item in "Startup"-"Boot" (usually, if the USB disk is plugged in firmly, the startup item will be preceded by a "+" sign, and the first direction key will select this item. Then it is generally adjusted according to F5 or F6, and saved by F10)

3. After that, it will start again, and then there will be the "Boot Menu" interface of Kali. We first select "Live" to enter the system to configure the U disk.

(4) USB disk configuration:

1. Open the terminal and enter the following command to view the current disk partition:

Enter the command: fdisk-l

It is found that the USB flash drive is as follows:

It needs to be explained here that my computer originally has two hard drives, so the U disk displays "/ dev/sdc". The personal situation is different. Pay attention to distinguish between your own system disk and U disk. According to experience, what is generally shown at the end is a mobile U disk, or we know the storage capacity of our U disk. You can use the Gparted disk Partition tool to check it. You need to enter:

Gparted

The zoning is the same as our previous division.

2. Encrypt our previous "Unformatted" partition, which is the "/ dev/sdc2" shown here:

Enter first:

Cryptsetup-verbose-verify-passphrase luksFormat / dev/sdc2

Then type "YES" in uppercase, go on, enter and confirm the password (be sure to remember it), and then the following interface appears:

Then the partition encryption is successful

3. Next, we enter the encrypted area for formatting and file configuration:

Enter the encrypted area and enter:

Cryptsetup luksOpen / dev/sdc2 kali

This command causes the system to generate a USB device file called "kali" under / dev/mapper, which is convenient for us to operate later. You can enter the following command to view:

Ls / dev/mapper/kali

As shown in the figure:

Enter the password you just set, enter the encrypted area, and then format the partition to "ext4". Enter:

Mkfs.ext4 / dev/mapper/kali

After waiting for a few minutes, the operation will be successful if the following interface appears:

After formatting, set the volume label "persistence" to the partition and enter:

E2label / dev/mapper/kali persistence

When you are done, create a folder under the mnt directory (named kali here), mount the partition to that folder, and fill in the configuration file. Unmount when finished and close the encryption zone. Enter:

Mkdir-p / mnt/kali

Mount / dev/mapper/kali / mnt/kali

Echo "/ union" > / mnt/kali/persistence.conf

Umount / dev/mapper/kali

Cryptsetup luksClose / dev/mapper/kali

The details are as follows:

At this point, partition encryption and file configuration are complete, and a persistent encryption USB is complete.

(5) Test:

Finishing the production doesn't mean it's over, and we have to test it to make sure that the persistent encryption USB works.

1. Restart the computer with a flash drive, and then we can select the "Kali Linux Live USB Encrypted Persistence" option to enter the system.

2. When starting, you will be asked to enter a password:

3. After entering the system, create an empty folder in the "Desktop" (that is, the desktop) (this is yeqing), and restart again to see if the file still exists. Existence, congratulations, persistent encryption USB has been made successfully.

At this point, the study on "the production method of kali persistent encryption usb" is over. I hope to be able to solve your doubts. The collocation of theory and practice can better help you learn, go and try it! If you want to continue to learn more related knowledge, please continue to follow the website, the editor will continue to work hard to bring you more practical articles!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.