7MS #610: DIY Pentest Dropbox Tips – Part 9 - 7 Minute Security

Hey friends, today we cover a funstrating (that's fun + frustrating) issue we had with our DIY pentest dropboxes. TLDL:

The preseed file got jacked because I had a bad Kali metapackage in it.
While I was tinkering around with preseed files, I decided it would be more efficient to have the Kali ISO call that preseed file directly over HTTP (rather than make a new ISO every time I made a preseed change). To accomplish that:
- Mount the Kali ISO
- Explore to isolinux > txt.cfg
- Modify the txt.cfg to include a custom boot option that calls your preseed over HTTP. For example:

label install menu label ^Install Yermaum kernel /install.amd/vmlinuz append net.ifnames=0 preseed/url=https://somewebsite/kali.preseed locale=en_US keymap=us hostname=kali777 domain=7min.sec simple-cdd/profiles=kali desktop=xfce vga=788 initrd=/install.amd/initrd.gz --- quiet