はじめに

2024年6月5日、Kali Linux 2024.2 Release (t64, GNOME 46 & Community Packages)の通りにKaliの新しいリリースが公開されています。

今回のリリースでは、2038年問題の対応として、2つの32ビットARMアーキテクチャ（armhfとarmel）のサポートが行われました。なお、Kaliユーザーの大半はamd64を使用しているため、大きな影響はないと思われます。また、デスクトップの変更や新しいツールも追加されています。詳細については、上記公式のブログ記事をご参照ください。

本記事では、今回のアップデート内容の一部について記載しています。

アップデート方法

公式ドキュメントのUpdating Kaliを踏まえて、Kaliのアップデート方法を以下に記載します。

前提として、/etc/apt/sources.listが適切に設定されていることを確認した上で以下のコマンドを実行します。

$ sudo apt update
$ sudo apt full-upgrade -y

上記コマンド実行後、OS再起動を行います。
OS再起動後、/etc/os-releaseファイルを参照してディストリビューションのバージョンが更新されたことを確認します。

$ grep VERSION /etc/os-release

VERSION_ID="2024.2"
VERSION="2024.2"
VERSION_CODENAME=kali-rolling

t64の移行

以下のコマンドを実行すると、t64のサフィックスが付いた多数のパッケージの追加が確認できます。

$ dpkg -l | grep t64

出力例

ii  libafflib0t64:amd64                            3.7.20-2                                   amd64        Advanced Forensics Format Library
ii  libaio1t64:amd64                               0.3.113-8+kali1                            amd64        Linux kernel AIO access library - shared library
ii  libapr1t64:amd64                               1.7.2-3.2                                  amd64        Apache Portable Runtime Library
ii  libaprutil1t64:amd64                           1.6.3-2                                    amd64        Apache Portable Runtime Utility Library
ii  libapt-pkg6.0t64:amd64                         2.9.2+kali1+b1                             amd64        package management runtime library
ii  libarchive13t64:amd64                          3.7.2-2                                    amd64        Multi-format archive and compression library (shared library)
ii  libarpack2t64:amd64                            3.9.1-1.1+b1                               amd64        Fortran77 subroutines to solve large scale eigenvalue problems
ii  libasound2t64:amd64                            1.2.11-1+b1                                amd64        shared library for ALSA applications
ii  libatk-bridge2.0-0t64:amd64                    2.52.0-1                                   amd64        AT-SPI 2 toolkit bridge - shared library
ii  libatk1.0-0t64:amd64                           2.52.0-1                                   amd64        ATK accessibility toolkit
ii  libatrildocument3t64                           1.26.2-3                                   amd64        MATE document rendering library
ii  libatrilview3t64                               1.26.2-3                                   amd64        MATE document viewing library
ii  libatspi2.0-0t64:amd64                         2.52.0-1                                   amd64        Assistive Technology Service Provider Interface - shared library
ii  libbson-1.0-0t64                               1.27.1-1                                   amd64        Library to parse and generate BSON documents - runtime files
ii  libburn4t64:amd64                              1.5.6-1.1                                  amd64        library to provide CD/DVD/BD writing functions
ii  libcdio-cdda2t64:amd64                         10.2+2.0.2-1                               amd64        library to read and control digital audio CDs
ii  libcdio-paranoia2t64:amd64                     10.2+2.0.2-1                               amd64        library to read digital audio CDs with error correction
ii  libcdio19t64:amd64                             2.1.0-4.2                                  amd64        library to read and control CD-ROM
ii  libcfitsio10t64:amd64                          4.3.1-1.1+b1                               amd64        shared library for I/O with FITS format data files
ii  libclamav11t64:amd64                           1.0.6+dfsg-1                               amd64        anti-virus utility for Unix - library
ii  libclang-cpp15t64                              1:15.0.7-14+b1                             amd64        C++ interface to the Clang library
ii  libclang-cpp16t64                              1:16.0.6-27                                amd64        C++ interface to the Clang library
ii  libclang-cpp17t64                              1:17.0.6-12                                amd64        C++ interface to the Clang library
ii  libclang1-15t64                                1:15.0.7-14+b1                             amd64        C interface to the Clang library
ii  libclang1-16t64                                1:16.0.6-27                                amd64        C interface to the Clang library
ii  libclang1-17t64                                1:17.0.6-12                                amd64        C interface to the Clang library
ii  libcli1.10t64:amd64                            1.10.7-1.1                                 amd64        emulates a cisco style telnet command-line interface
ii  libcrypto++8t64:amd64                          8.9.0-1.1                                  amd64        General purpose cryptographic library - shared library
ii  libcups2t64:amd64                              2.4.7-1.2+b1                               amd64        Common UNIX Printing System(tm) - Core library
ii  libcurl3t64-gnutls:amd64                       8.7.1-5                                    amd64        easy-to-use client-side URL transfer library (GnuTLS flavour)
ii  libcurl4t64:amd64                              8.7.1-5                                    amd64        easy-to-use client-side URL transfer library (OpenSSL flavour)
ii  libdb5.3t64:amd64                              5.3.28+dfsg2-7                             amd64        Berkeley v5.3 Database Libraries [runtime]
ii  libdebuginfod1t64:amd64                        0.191-1+b1                                 amd64        library to interact with debuginfod (development files)
ii  libdirectfb-1.7-7t64:amd64                     1.7.7-13                                   amd64        direct frame buffer graphics (shared libraries)
ii  libdv4t64:amd64                                1.0.0-17.1                                 amd64        software library for DV format digital video (runtime lib)
ii  libdvdread8t64:amd64                           6.1.3-1.1                                  amd64        library for reading DVDs
ii  libdw1t64:amd64                                0.191-1+b1                                 amd64        library that provides access to the DWARF debug information
ii  libefiboot1t64:amd64                           38-3.1                                     amd64        Library to manage UEFI variables
ii  libefivar1t64:amd64                            38-3.1                                     amd64        Library to manage UEFI variables
ii  libelf1t64:amd64                               0.191-1+b1                                 amd64        library to read and write ELF files
ii  libev4t64:amd64                                1:4.33-2.1                                 amd64        high-performance event loop library modelled after libevent
ii  libevent-2.1-7t64:amd64                        2.1.12-stable-10                           amd64        Asynchronous event notification library
ii  libevent-core-2.1-7t64:amd64                   2.1.12-stable-10                           amd64        Asynchronous event notification library (core)
ii  libevent-openssl-2.1-7t64:amd64                2.1.12-stable-10                           amd64        Asynchronous event notification library (openssl)
ii  libevent-pthreads-2.1-7t64:amd64               2.1.12-stable-10                           amd64        Asynchronous event notification library (pthreads)
ii  libext2fs2t64:amd64                            1.47.1-1                                   amd64        ext2/ext3/ext4 file system libraries
ii  libfcgi0t64:amd64                              2.4.2-2.1                                  amd64        shared library of FastCGI
ii  libflac12t64:amd64                             1.4.3+ds-2.1                               amd64        Free Lossless Audio Codec - runtime C library
ii  libfreerdp-client2-2t64:amd64                  2.11.5+dfsg1-1                             amd64        Free Remote Desktop Protocol library (client library)
ii  libfreerdp2-2t64:amd64                         2.11.5+dfsg1-1                             amd64        Free Remote Desktop Protocol library (core library)
ii  libfuse2t64:amd64                              2.9.9-8.1                                  amd64        Filesystem in Userspace (library)
ii  libfyba0t64:amd64                              4.1.1-11                                   amd64        FYBA library to read and write Norwegian geodata standard format SOSI
ii  libgail18t64:amd64                             2.24.33-4                                  amd64        GNOME Accessibility Implementation Library -- shared libraries
ii  libgdal34t64:amd64                             3.8.5+dfsg-1+b1                            amd64        Geospatial Data Abstraction Library
ii  libgdbm-compat4t64:amd64                       1.23-5.1+b1                                amd64        GNU dbm database routines (legacy support runtime version) 
ii  libgdbm6t64:amd64                              1.23-5.1+b1                                amd64        GNU dbm database routines (runtime version) 
ii  libgeoip1t64:amd64                             1.6.12-11.1                                amd64        non-DNS IP-to-country resolver library
ii  libgeos-c1t64:amd64                            3.12.1-3                                   amd64        Geometry engine for Geographic Information Systems - C Library
ii  libgeos3.12.1t64:amd64                         3.12.1-3                                   amd64        Geometry engine for Geographic Information Systems - C++ Library
ii  libglib2.0-0t64:amd64                          2.80.2-1                                   amd64        GLib library of C routines
ii  libglibmm-2.4-1t64:amd64                       2.66.7-1                                   amd64        C++ wrapper for the GLib toolkit (shared libraries)
ii  libgnutls-dane0t64:amd64                       3.8.5-2                                    amd64        GNU TLS library - DANE security support
ii  libgnutls30t64:amd64                           3.8.5-2                                    amd64        GNU TLS library - main runtime library
ii  libgpgme11t64:amd64                            1.18.0-4.1+b1                              amd64        GPGME - GnuPG Made Easy (library)
ii  libgphoto2-6t64:amd64                          2.5.31-2.1+b1                              amd64        gphoto2 digital camera library
ii  libgphoto2-port12t64:amd64                     2.5.31-2.1+b1                              amd64        gphoto2 digital camera port library
ii  libgtk-3-0t64:amd64                            3.24.41-4                                  amd64        GTK graphical user interface library
ii  libgtk2.0-0t64:amd64                           2.24.33-4                                  amd64        GTK graphical user interface library - old version
ii  libgtkmm-3.0-1t64:amd64                        3.24.9-1                                   amd64        C++ wrappers for GTK+ (shared libraries)
ii  libgts-0.7-5t64:amd64                          0.7.6+darcs121130-5.2                      amd64        library to deal with 3D computational surface meshes
ii  libguestfs0t64:amd64                           1:1.52.0-6                                 amd64        guest disk image management system - shared library
ii  libgvm22t64:amd64                              22.9.1-1                                   amd64        remote network security auditor - shared libraries
ii  libgxps2t64:amd64                              0.3.2-4+b1                                 amd64        handling and rendering XPS documents (library)
ii  libhashkit2t64:amd64                           1.1.4-1.1+b1                               amd64        libmemcached hashing functions and algorithms
ii  libhdf5-103-1t64:amd64                         1.10.10+repack-3.3                         amd64        HDF5 C runtime files - serial version
ii  libhdf5-hl-100t64:amd64                        1.10.10+repack-3.3                         amd64        HDF5 High Level runtime files - serial version
ii  libhfsp0t64                                    1.0.4-17.1                                 amd64        Shared library to access HFS+ formatted volumes
ii  libhogweed6t64:amd64                           3.9.1-2.2                                  amd64        low level cryptographic library (public-key cryptos)
ii  libhwy1t64:amd64                               1.0.7-8.1                                  amd64        Efficient and performance-portable SIMD wrapper (runtime files)
ii  libical3t64:amd64                              3.0.18-1                                   amd64        iCalendar library implementation in C (runtime)
ii  libieee1284-3t64:amd64                         0.2.11-14.1                                amd64        cross-platform library for parallel port access
ii  libimath-3-1-29t64:amd64                       3.1.9-3.1+b1                               amd64        Utility libraries from ASF used by OpenEXR - runtime
ii  libisofs6t64:amd64                             1.5.6.pl01-1.1                             amd64        library to create ISO 9660 images
ii  libiw30t64:amd64                               30~pre9-17                                 amd64        Wireless tools - library
ii  libjxr0t64:amd64                               1.2~git20170615.f752187-5.2                amd64        JPEG-XR lib - libraries
ii  libkmlbase1t64:amd64                           1.3.0-12                                   amd64        Library to manipulate KML 2.2 OGC standard files - libkmlbase
ii  libkmldom1t64:amd64                            1.3.0-12                                   amd64        Library to manipulate KML 2.2 OGC standard files - libkmldom
ii  libkmlengine1t64:amd64                         1.3.0-12                                   amd64        Library to manipulate KML 2.2 OGC standard files - libkmlengine
ii  libldm-1.0-0t64:amd64                          0.2.5-1.1+b1                               amd64        library for managing Microsoft Windows dynamic disks
ii  libllvm15t64:amd64                             1:15.0.7-14+b1                             amd64        Modular compiler and toolchain technologies, runtime library
ii  libllvm16t64:amd64                             1:16.0.6-27                                amd64        Modular compiler and toolchain technologies, runtime library
ii  libllvm17t64:amd64                             1:17.0.6-12                                amd64        Modular compiler and toolchain technologies, runtime library
ii  libmagic1t64:amd64                             1:5.45-3                                   amd64        Recognize the type of data in a file using "magic" numbers - library
ii  libmagickcore-6.q16-7t64:amd64                 8:6.9.12.98+dfsg1-5.2                      amd64        low-level image manipulation library -- quantum depth Q16
ii  libmagickwand-6.q16-7t64:amd64                 8:6.9.12.98+dfsg1-5.2                      amd64        image manipulation library -- quantum depth Q16
ii  libmbedcrypto7t64:amd64                        2.28.8-1                                   amd64        lightweight crypto and SSL/TLS library - crypto library
ii  libmemcached11t64:amd64                        1.1.4-1.1+b1                               amd64        C and C++ client library to the memcached server
ii  libminizip1t64:amd64                           1:1.3.dfsg-3.1                             amd64        compression library - minizip library
ii  libmjpegutils-2.1-0t64:amd64                   1:2.1.0+debian-8.1                         amd64        MJPEG capture/editing/replay and MPEG encoding toolset (library)
ii  libmongoc-1.0-0t64                             1.27.1-1                                   amd64        MongoDB C client library - runtime files
ii  libmpeg2encpp-2.1-0t64:amd64                   1:2.1.0+debian-8.1                         amd64        MJPEG capture/editing/replay and MPEG encoding toolset (library)
ii  libmpg123-0t64:amd64                           1.32.6-3                                   amd64        MPEG layer 1/2/3 audio decoder (shared library)
ii  libmplex2-2.1-0t64:amd64                       1:2.1.0+debian-8.1                         amd64        MJPEG capture/editing/replay and MPEG encoding toolset (library)
ii  libmspack0t64:amd64                            0.11-1.1                                   amd64        library for Microsoft compression formats (shared library)
ii  libmtdev1t64:amd64                             1.1.6-1.2                                  amd64        Multitouch Protocol Translation Library - shared library
ii  libmtp9t64:amd64                               1.1.21-3.1                                 amd64        Media Transfer Protocol (MTP) library
ii  libneon27t64:amd64                             0.33.0-1.1+b1                              amd64        HTTP and WebDAV client library
ii  libneon27t64-gnutls:amd64                      0.33.0-1.1+b1                              amd64        HTTP and WebDAV client library (GnuTLS enabled)
ii  libnetcdf19t64:amd64                           1:4.9.2-6                                  amd64        Interface for scientific data access to large binary data
ii  libnetpbm11t64:amd64                           2:11.06.01-2                               amd64        Graphics conversion tools shared libraries
ii  libnettle8t64:amd64                            3.9.1-2.2                                  amd64        low level cryptographic library (symmetric and one-way cryptos)
ii  libnids1.21t64:amd64                           1.26-2.1+b1                                amd64        IP defragmentation TCP segment reassembly library
ii  libnorm1t64:amd64                              1.5.9+dfsg-3.1                             amd64        NACK-Oriented Reliable Multicast (NORM) library
ii  libnpth0t64:amd64                              1.6-3.1                                    amd64        replacement for GNU Pth using system threads
ii  libntfs-3g89t64:amd64                          1:2022.10.3-2                              amd64        read/write NTFS driver for FUSE (runtime library)
ii  libnvme1t64                                    1.9-1                                      amd64        NVMe management library (library)
ii  libopenmpt0t64:amd64                           0.7.7-1                                    amd64        module music library based on OpenMPT -- shared library
ii  liborc-0.4-0t64:amd64                          1:0.4.38-1                                 amd64        Library of Optimized Inner Loops Runtime Compiler
ii  libout123-0t64:amd64                           1.32.6-3                                   amd64        MPEG layer 1/2/3 audio decoder (libout123 shared library)
ii  libparted-fs-resize0t64:amd64                  3.6-4                                      amd64        disk partition manipulator - shared FS resizing library
ii  libparted2t64:amd64                            3.6-4                                      amd64        disk partition manipulator - shared library
ii  libpcap0.8t64:amd64                            1.10.4-5                                   amd64        system interface for user-level packet capture
ii  libperl5.38t64:amd64                           5.38.2-4                                   amd64        shared Perl library
ii  libpgm-5.3-0t64:amd64                          5.3.128~dfsg-2.1                           amd64        OpenPGM shared library
ii  libpipewire-0.3-0t64:amd64                     1.0.6-1+b1                                 amd64        libraries for the PipeWire multimedia server
ii  libpkcs11-helper1t64:amd64                     1.29.0-2.1+b1                              amd64        library that simplifies the interaction with PKCS#11
ii  libpng16-16t64:amd64                           1.6.43-5                                   amd64        PNG library - runtime (version 1.6)
ii  libpocl2t64:amd64                              5.0-4                                      amd64        Portable Computing Language library
ii  libpoppler-glib8t64:amd64                      24.02.0-4                                  amd64        PDF rendering library (GLib-based shared library)
ii  libprotobuf32t64:amd64                         3.21.12-8.2                                amd64        protocol buffers C++ library
ii  libpskc0t64:amd64                              2.6.11-3                                   amd64        OATH Toolkit Libpskc library
ii  libpsl5t64:amd64                               0.21.2-1.1                                 amd64        Library for Public Suffix List (shared libraries)
ii  libpython3.11t64:amd64                         3.11.9-1                                   amd64        Shared Python runtime library (version 3.11)
ii  libpython3.12t64:amd64                         3.12.3-1                                   amd64        Shared Python runtime library (version 3.12)
ii  libqt5core5t64:amd64                           5.15.10+dfsg-7.2+b1                        amd64        Qt 5 core module
ii  libqt5dbus5t64:amd64                           5.15.10+dfsg-7.2+b1                        amd64        Qt 5 D-Bus module
ii  libqt5gui5t64:amd64                            5.15.10+dfsg-7.2+b1                        amd64        Qt 5 GUI module
ii  libqt5network5t64:amd64                        5.15.10+dfsg-7.2+b1                        amd64        Qt 5 network module
ii  libqt5sql5t64:amd64                            5.15.10+dfsg-7.2+b1                        amd64        Qt 5 SQL module
ii  libqt5widgets5t64:amd64                        5.15.10+dfsg-7.2+b1                        amd64        Qt 5 widgets module
ii  libqt6core6t64:amd64                           6.4.2+dfsg-21.1+b1                         amd64        Qt 6 core module
ii  libqt6dbus6t64:amd64                           6.4.2+dfsg-21.1+b1                         amd64        Qt 6 D-Bus module
ii  libqt6gui6t64:amd64                            6.4.2+dfsg-21.1+b1                         amd64        Qt 6 GUI module
ii  libqt6network6t64:amd64                        6.4.2+dfsg-21.1+b1                         amd64        Qt 6 network module
ii  libqt6opengl6t64:amd64                         6.4.2+dfsg-21.1+b1                         amd64        Qt 6 OpenGL module
ii  libqt6openglwidgets6t64:amd64                  6.4.2+dfsg-21.1+b1                         amd64        Qt 6 OpenGL widgets module
ii  libqt6printsupport6t64:amd64                   6.4.2+dfsg-21.1+b1                         amd64        Qt 6 print support module
ii  libqt6sql6t64:amd64                            6.4.2+dfsg-21.1+b1                         amd64        Qt 6 SQL module
ii  libqt6test6t64:amd64                           6.4.2+dfsg-21.1+b1                         amd64        Qt 6 test module
ii  libqt6widgets6t64:amd64                        6.4.2+dfsg-21.1+b1                         amd64        Qt 6 widgets module
ii  libqt6xml6t64:amd64                            6.4.2+dfsg-21.1+b1                         amd64        Qt 6 XML module
ii  libradare2-5.0.0t64:amd64                      5.9.0+dfsg-2                               amd64        libraries from the radare2 suite
ii  libraw23t64:amd64                              0.21.2-2.1                                 amd64        raw image decoder library
ii  librdmacm1t64:amd64                            50.0-2+b1                                  amd64        Library for managing RDMA connections
ii  libreadline8t64:amd64                          8.2-4                                      amd64        GNU readline and history libraries, run-time libraries
ii  libreiserfscore0t64                            1:3.6.27-7.1+b2                            amd64        ReiserFS core library
ii  libruby3.1t64:amd64                            3.1.2-8.3                                  amd64        Libraries necessary to run Ruby 3.1
ii  libsmi2t64:amd64                               0.4.8+dfsg2-17                             amd64        library to access SMI MIB information
ii  libsnmp40t64:amd64                             5.9.4+dfsg-1.1+b1                          amd64        SNMP (Simple Network Management Protocol) library
ii  libsource-highlight4t64:amd64                  3.1.9-4.3                                  amd64        source highlighting library
ii  libspandsp2t64:amd64                           0.0.6+dfsg-2.1                             amd64        Telephony signal processing library
ii  libspatialite8t64:amd64                        5.1.0-3+b1                                 amd64        Geospatial extension for SQLite - libraries
ii  libsphinxbase3t64:amd64                        0.8+5prealpha+1-17                         amd64        Speech recognition tool - shared library
ii  libssh2-1t64:amd64                             1.11.0-5                                   amd64        SSH2 client-side library
ii  libssl3t64:amd64                               3.2.1-3                                    amd64        Secure Sockets Layer toolkit - shared libraries
ii  libstoken1t64:amd64                            0.92-1.1+b1                                amd64        Software Token for cryptographic authentication - shared library
ii  libsyn123-0t64:amd64                           1.32.6-3                                   amd64        MPEG layer 1/2/3 audio decoder (libsyn123 shared library)
ii  libtevent0t64:amd64                            0.16.1-2                                   amd64        talloc-based event loop library - shared library
ii  libtirpc3t64:amd64                             1.3.4+ds-1.3                               amd64        transport-independent RPC library
ii  libts0t64:amd64                                1.22-1.1                                   amd64        touch screen library
ii  libtsk19t64:amd64                              4.12.1+dfsg-0kali6                         amd64        library for forensics analysis on volume and filesystem data
ii  libtss2-esys-3.0.2-0t64:amd64                  4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-mu-4.0.1-0t64:amd64                    4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-sys1t64:amd64                          4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-tcti-cmd0t64:amd64                     4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-tcti-device0t64:amd64                  4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-tcti-libtpms0t64:amd64                 4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-tcti-mssim0t64:amd64                   4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-tcti-spi-helper0t64:amd64              4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-tcti-swtpm0t64:amd64                   4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtss2-tctildr0t64:amd64                      4.0.1-7.2                                  amd64        TPM2 Software stack library - TSS and TCTI libraries
ii  libtumbler-1-0t64:amd64                        4.18.1-1.1+b1                              amd64        library for tumbler, a D-Bus thumbnailing service
ii  liburcu8t64:amd64                              0.14.0-3.1                                 amd64        userspace RCU (read-copy-update) library
ii  libusbredirparser1t64:amd64                    0.14.0-1                                   amd64        Parser for the usbredir protocol (runtime)
ii  libuv1t64:amd64                                1.48.0-4                                   amd64        asynchronous event notification library - runtime library
ii  libv4l-0t64:amd64                              1.26.1-4+b1                                amd64        Collection of video4linux support libraries
ii  libv4lconvert0t64:amd64                        1.26.1-4+b1                                amd64        Video4linux frame format conversion library
ii  libvdeplug2t64:amd64                           4.0.1-5.1                                  amd64        Virtual Distributed Ethernet - Plug library
ii  libwebsockets19t64:amd64                       4.3.3-1.1                                  amd64        lightweight C websockets library
ii  libwinpr2-2t64:amd64                           2.11.5+dfsg1-1                             amd64        Windows Portable Runtime library
ii  libwireshark17t64:amd64                        4.2.5-1                                    amd64        network packet dissection library -- shared library
ii  libwiretap14t64:amd64                          4.2.5-1                                    amd64        network packet capture library -- shared library
ii  libwsutil15t64:amd64                           4.2.5-1                                    amd64        network packet dissection utilities library -- shared library
ii  libwxbase3.2-1t64:amd64                        3.2.4+dfsg-5                               amd64        wxBase library (runtime) - non-GUI support classes of wxWidgets toolkit
ii  libwxgtk-gl3.2-1t64:amd64                      3.2.4+dfsg-5                               amd64        wxWidgets Cross-platform C++ GUI toolkit (GTK 3 gl library runtime)
ii  libwxgtk3.2-1t64:amd64                         3.2.4+dfsg-5                               amd64        wxWidgets Cross-platform C++ GUI toolkit (GTK 3 runtime)
ii  libxerces-c3.2t64:amd64                        3.2.4+debian-1.3                           amd64        validating XML parser library for C++
ii  libxmlsec1t64:amd64                            1.2.39-5+b1                                amd64        XML security library
ii  libxmlsec1t64-openssl:amd64                    1.2.39-5+b1                                amd64        Openssl engine for the XML security library
ii  libxt6t64:amd64                                1:1.2.1-1.2                                amd64        X11 toolkit intrinsics library
ii  libzbar0t64:amd64                              0.23.93-4+b1                               amd64        QR code / bar code scanner and decoder (library)
ii  libzip4t64:amd64                               1.7.3-1.1+b1                               amd64        library for reading, creating, and modifying zip archives (runtime)
ii  libzvbi0t64:amd64                              0.2.42-2                                   amd64        Vertical Blanking Interval decoder (VBI) - runtime files
ii  libzzip-0-13t64:amd64                          0.13.72+dfsg.1-1.2+b1                      amd64        library providing read access on ZIP-archives - library

Xfceデスクトップの変更

Xfceデスクトップでは、Kali-UndercoverとHiDPIのアップデートが行われました。

これらのアップデートによって安定性が向上し、いくつかのマイナーなバグ修正や最新のデスクトップの改善に対するサポートが強化されています。

Kali-Undercoveは、Kali LinuxのテーマをWindows 10のようなテーマに変更するスクリプトのセットです。Kali Linux 2019.4でリリースされています。

このツールは、公共な場でKali Linuxを使用しているときに不必要な注目を防ぐという目的で作られています。今まで試したことがなかったため、試してみました。

以下のコマンドを実行することで、簡単にWindows 10のようなテーマに変更できます。

$ kali-undercover

トラブルシューティング

元に戻す方法は、再度kali-undercoverコマンドを実行するだけですが、筆者の環境ではタスクバーの表示がWindowsのままで正常に戻らないという事象が発生しました。

対応として、以下の様なことを試しても改善しませんでした。

Xfceセッションの再起動（xfce4-session-logout --logout）
デスクトップ環境からログアウトして再起動
設定ファイルのリセット（~/.config/xfce4）

結果的にパネル設定の再読み込み（pkill xfconfd）及びXfceパネルの再起動（xfce4-panel --restart）などを試みて解決しましたが、デスクトップ右上のVPNのIPアドレスが表示されないというトラブルも発生しました。VPNのIPアドレスは、xfce4-genmon-plugin¹と呼ばれるxfce4の拡張機能で実現されています。

VPNのIPアドレスは、設定マネージャーを起動して「パネル」の「アイテム」にジェネリックモニターを追加することによって、表示されています。しかし、元々デフォルトで設定されていたスクリプトが分からなくなりました。

対応として、xfce4-genmon-pluginを再インストールして解決しました。

$ sudo apt remove --purge xfce4-genmon-plugin
$ sudo apt install xfce4-genmon-plugin

事象解決後、どの様なスクリプトが設定されたか確認したところ、以下の様なスクリプトが設定されていました。

/usr/share/kali-themes/xfce4-panel-genmon-vpnip.sh

#!/bin/sh

interface="$(ip tuntap show | cut -d : -f1 | head -n 1)"
ip="$(ip a s "${interface}" 2>/dev/null \
        | grep -o -P '(?<=inet )[0-9]{1,3}(\.[0-9]{1,3}){3}')"

if [ "${ip}" != "" ]; then
  printf "<icon>network-vpn-symbolic</icon>"
  printf "<txt>${ip}</txt>"
  if command -v xclip; then
    printf "<iconclick>sh -c 'printf ${ip} | xclip -selection clipboard'</iconclick>"
    printf "<txtclick>sh -c 'printf ${ip} | xclip -selection clipboard'</txtclick>"
    printf "<tool>VPN IP (click to copy)</tool>"
  else
    printf "<tool>VPN IP (install xclip to copy to clipboard)</tool>"
  fi
else
  printf "<txt></txt>"
fi

kali-undercoverコマンドの実行はご注意ください。

参考までにフォーラムの以下スレッドで過去に同様の事象が発生していました。

Thread: Can't get out of kali undercover

New Tools

CTFなどで使えそうなツールについて紹介します。

autorecon

AutoReconは、サービスの自動列挙を実行するマルチスレッドネットワーク偵察ツールです。CTFやその他の侵入テスト環境 (OSCPなど)で使用するための時間節約ツールとして設計されています。

以下に実行例を記載します。

パッケージのインストール
$　sudo apt install autorecon

THMの環境で試してみた結果は以下の通りです。

$ sudo autorecon <Ip address>

出力例

[[*] Scanning target 10.10.190.192
[*] [10.10.190.192/all-tcp-ports] Discovered open port tcp/22 on 10.10.190.192
[*] [10.10.190.192/all-tcp-ports] Discovered open port tcp/80 on 10.10.190.192
[*] [10.10.190.192/all-tcp-ports] Discovered open port tcp/443 on 10.10.190.192
[*] [10.10.190.192/tcp/80/http/vhost-enum] The target was not a hostname, nor was a hostname provided as an option. Skipping virtual host enumeration.
[*] [10.10.190.192/tcp/443/http/vhost-enum] The target was not a hostname, nor was a hostname provided as an option. Skipping virtual host enumeration.
[*] [10.10.190.192/tcp/1443/http/vhost-enum] The target was not a hostname, nor was a hostname provided as an option. Skipping virtual host enumeration.
[*] [10.10.190.192/tcp/8000/http/vhost-enum] The target was not a hostname, nor was a hostname provided as an option. Skipping virtual host enumeration.
[*] [10.10.190.192/tcp/80/http/known-security] [tcp/80/http/known-security] There did not appear to be a .well-known/security.txt file in the webroot (/).
[*] [10.10.190.192/tcp/80/http/curl-robots] [tcp/80/http/curl-robots] There did not appear to be a robots.txt file in the webroot (/).
[*] [10.10.190.192/tcp/443/http/curl-robots] [tcp/443/http/curl-robots] There did not appear to be a robots.txt file in the webroot (/).
[*] [10.10.190.192/tcp/8000/http/known-security] [tcp/8000/http/known-security] There did not appear to be a .well-known/security.txt file in the webroot (/).
[*] [10.10.190.192/tcp/8000/http/curl-robots] [tcp/8000/http/curl-robots] There did not appear to be a robots.txt file in the webroot (/).
[*] [10.10.190.192/tcp/443/http/known-security] [tcp/443/http/known-security] There did not appear to be a .well-known/security.txt file in the webroot (/).
[*] [10.10.190.192/tcp/1443/http/known-security] [tcp/1443/http/known-security] There did not appear to be a .well-known/security.txt file in the webroot (/).
[*] [10.10.190.192/tcp/1443/http/curl-robots] [tcp/1443/http/curl-robots] There did not appear to be a robots.txt file in the webroot (/).
[*] 18:54:04 - There are 16 scans still running against 10.10.190.192
[*] 18:55:04 - There are 15 scans still running against 10.10.190.192
[*] [10.10.190.192/all-tcp-ports] Discovered open port tcp/1338 on 10.10.190.192
[*] 18:56:04 - There are 13 scans still running against 10.10.190.192
[*] [10.10.190.192/top-100-udp-ports] Discovered open port udp/69 on 10.10.190.192
[*] 18:57:04 - There are 11 scans still running against 10.10.190.192
[*] 18:58:04 - There are 11 scans still running against 10.10.190.192
[*] [10.10.190.192/all-tcp-ports] Discovered open port tcp/8000 on 10.10.190.192
[*] 18:59:04 - There are 11 scans still running against 10.10.190.192
[*] 19:00:04 - There are 11 scans still running against 10.10.190.192
[*] [10.10.190.192/all-tcp-ports] Discovered open port tcp/9007 on 10.10.190.192
[*] 19:01:04 - There are 10 scans still running against 10.10.190.192
[*] 19:02:04 - There are 10 scans still running against 10.10.190.192
[*] 19:03:04 - There are 10 scans still running against 10.10.190.192
[*] [10.10.190.192/all-tcp-ports] Discovered open port tcp/1443 on 10.10.190.192
[*] 19:04:04 - There are 9 scans still running against 10.10.190.192
[*] [10.10.190.192/all-tcp-ports] Discovered open port tcp/1883 on 10.10.190.192
[*] 19:05:04 - There are 9 scans still running against 10.10.190.192
[*] 19:06:04 - There are 9 scans still running against 10.10.190.192
[*] 19:07:05 - There are 9 scans still running against 10.10.190.192
[*] [10.10.190.192/tcp/9007/http/vhost-enum] The target was not a hostname, nor was a hostname provided as an option. Skipping virtual host enumeration.
[*] [10.10.190.192/tcp/9007/http/known-security] [tcp/9007/http/known-security] There did not appear to be a .well-known/security.txt file in the webroot (/).
[*] [10.10.190.192/tcp/9007/http/curl-robots] [tcp/9007/http/curl-robots] There did not appear to be a robots.txt file in the webroot (/).
[*] 19:08:05 - There are 12 scans still running against 10.10.190.192
[*] 19:09:05 - There are 11 scans still running against 10.10.190.192
[*] 19:10:05 - There are 11 scans still running against 10.10.190.192
[*] 19:11:05 - There are 11 scans still running against 10.10.190.192
[*] 19:12:05 - There are 11 scans still running against 10.10.190.192
[*] 19:13:05 - There are 11 scans still running against 10.10.190.192
[*] 19:14:05 - There are 11 scans still running against 10.10.190.192
[*] 19:15:05 - There are 11 scans still running against 10.10.190.192
[*] 19:16:05 - There are 11 scans still running against 10.10.190.192
[*] 19:17:05 - There are 11 scans still running against 10.10.190.192
[*] 19:18:05 - There are 11 scans still running against 10.10.190.192
[*] 19:19:05 - There are 11 scans still running against 10.10.190.192
[*] 19:20:05 - There are 11 scans still running against 10.10.190.192
[*] 19:21:05 - There are 11 scans still running against 10.10.190.192
[*] 19:22:05 - There are 11 scans still running against 10.10.190.192
[*] 19:23:05 - There are 11 scans still running against 10.10.190.192
[*] 19:24:05 - There are 11 scans still running against 10.10.190.192
[*] 19:25:05 - There are 11 scans still running against 10.10.190.192
[*] 19:26:05 - There are 11 scans still running against 10.10.190.192
[*] 19:27:05 - There are 11 scans still running against 10.10.190.192
[*] 19:28:05 - There are 9 scans still running against 10.10.190.192
[*] 19:29:05 - There are 8 scans still running against 10.10.190.192
[*] 19:30:05 - There are 8 scans still running against 10.10.190.192
[*] 19:31:05 - There are 8 scans still running against 10.10.190.192
[*] 19:32:05 - There are 8 scans still running against 10.10.190.192
[*] 19:33:05 - There are 8 scans still running against 10.10.190.192
[*] 19:34:05 - There are 8 scans still running against 10.10.190.192
[*] 19:35:05 - There are 8 scans still running against 10.10.190.192
[*] 19:36:05 - There are 8 scans still running against 10.10.190.192
[*] 19:37:05 - There are 8 scans still running against 10.10.190.192
[*] 19:38:05 - There are 8 scans still running against 10.10.190.192
[*] 19:39:05 - There are 8 scans still running against 10.10.190.192
[*] 19:40:06 - There are 8 scans still running against 10.10.190.192
[*] 19:41:06 - There are 8 scans still running against 10.10.190.192
[*] 19:42:06 - There are 8 scans still running against 10.10.190.192
[*] 19:43:06 - There are 8 scans still running against 10.10.190.192
[*] 19:44:06 - There are 8 scans still running against 10.10.190.192
[*] 19:45:06 - There are 8 scans still running against 10.10.190.192
[*] 19:46:06 - There are 8 scans still running against 10.10.190.192
[*] 19:47:06 - There are 8 scans still running against 10.10.190.192
[*] 19:48:06 - There are 8 scans still running against 10.10.190.192
[*] 19:49:06 - There are 5 scans still running against 10.10.190.192
[*] 19:50:06 - There are 5 scans still running against 10.10.190.192
[*] 19:51:06 - There are 5 scans still running against 10.10.190.192
[*] 19:52:06 - There are 5 scans still running against 10.10.190.192
[*] 19:53:06 - There are 5 scans still running against 10.10.190.192
[*] 19:54:06 - There are 5 scans still running against 10.10.190.192
[*] 19:55:06 - There are 5 scans still running against 10.10.190.192

実行中のプロセスの動きです。

$ ps aux | grep 'USER\|autorecon' | grep -v grep

USER         PID %CPU %MEM    VSZ   RSS TTY      STAT START   TIME COMMAND
root        3265  0.0  0.0  15976  7152 pts/2    S+   18:53   0:00 sudo autorecon 10.10.190.192
root        3282  0.0  0.0  15976  2452 pts/5    Ss   18:53   0:00 sudo autorecon 10.10.190.192
root        3283  0.5  0.2 2657708 39144 pts/5   Sl+  18:53   0:00 /usr/bin/python3 /usr/bin/autorecon 10.10.190.192

$ pstree -p 3283

出力例

autorecon(3283) ─┬─ sh(3286) ─── nmap(3290) ─┬─ {nmap}(3293)
                 │                       ├─ {nmap}(3296)
                 │                       ├─ {nmap}(3299)
                 │                       ├─ {nmap}(3302)
                 │                       ├─ {nmap}(3306)
                 │                       ├─ {nmap}(3309)
                 │                       ├─ {nmap}(3311)
                 │                       ├─ {nmap}(3315)
                 │                       ├─ {nmap}(3319)
                 │                       ├─ {nmap}(3322)
                 │                       └─ {nmap}(3325)
                 ├─ sh(3289) ─── nmap(3292) ─┬─ {nmap}(3294)
                 │                       ├─ {nmap}(3297)
                 │                       ├─ {nmap}(3300)
                 │                       ├─ {nmap}(3303)
                 │                       ├─ {nmap}(3305)
                 │                       ├─ {nmap}(3308)
                 │                       ├─ {nmap}(3312)
                 │                       ├─ {nmap}(3316)
                 │                       ├─ {nmap}(3317)
                 │                       ├─ {nmap}(3321)
                 │                       └─ {nmap}(3324)
                 ├─ sh(3694) ─── feroxbuster(3696) ─┬─ {feroxbuster}(3777)
                 │                               ├─ {feroxbuster}(3778)
                 │                               ├─ {feroxbuster}(3779)
                 │                               ├─ {feroxbuster}(3780)
                 │                               ├─ {feroxbuster}(3781)
                 │                               ├─ {feroxbuster}(3782)
                 │                               ├─ {feroxbuster}(3783)
                 │                               ├─ {feroxbuster}(3784)
                 │                               ├─ {feroxbuster}(3785)
                 │                               ├─ {feroxbuster}(3786)
                 │                               ├─ {feroxbuster}(3787)
                 │                               ├─ {feroxbuster}(3788)
                 │                               ├─ {feroxbuster}(3789)
                 │                               └─ {feroxbuster}(3810)
                 ├─ sh(3706) ─┬─ nikto.pl(3709)
                 │           └─ tee(3711)
                 ├─ sh(3708) ─── nmap(3712) ─┬─ {nmap}(3746)
                 │                       ├─ {nmap}(3747)
                 │                       ├─ {nmap}(3748)
                 │                       ├─ {nmap}(3749)
                 │                       ├─ {nmap}(3750)
                 │                       ├─ {nmap}(3751)
                 │                       ├─ {nmap}(3752)
                 │                       ├─ {nmap}(3753)
                 │                       ├─ {nmap}(3754)
                 │                       ├─ {nmap}(3755)
                 │                       └─ {nmap}(3756)
                 ├─ sh(3719) ─── feroxbuster(3721) ─┬─ {feroxbuster}(3790)
                 │                               ├─ {feroxbuster}(3791)
                 │                               ├─ {feroxbuster}(3792)
                 │                               ├─ {feroxbuster}(3793)
                 │                               ├─ {feroxbuster}(3794)
                 │                               ├─ {feroxbuster}(3795)
                 │                               ├─ {feroxbuster}(3796)
                 │                               ├─ {feroxbuster}(3797)
                 │                               ├─ {feroxbuster}(3798)
                 │                               ├─ {feroxbuster}(3799)
                 │                               ├─ {feroxbuster}(3800)
                 │                               ├─ {feroxbuster}(3801)
                 │                               ├─ {feroxbuster}(3802)
                 │                               └─ {feroxbuster}(3816)
                 ├─ sh(3731) ─┬─ nikto.pl(3737)
                 │           └─ tee(3740)
                 ├─ sh(3757) ─── nmap(3758) ─┬─ {nmap}(3761)
                 │                       ├─ {nmap}(3762)
                 │                       ├─ {nmap}(3763)
                 │                       ├─ {nmap}(3764)
                 │                       ├─ {nmap}(3765)
                 │                       ├─ {nmap}(3766)
                 │                       ├─ {nmap}(3767)
                 │                       ├─ {nmap}(3770)
                 │                       ├─ {nmap}(3771)
                 │                       ├─ {nmap}(3772)
                 │                       └─ {nmap}(3773)
                 ├─ sh(3760) ─── sslscan(3768)
                 ├─ sh(3806) ─── feroxbuster(3808) ─┬─ {feroxbuster}(3853)
                 │                               ├─ {feroxbuster}(3854)
                 │                               ├─ {feroxbuster}(3855)
                 │                               ├─ {feroxbuster}(3856)
                 │                               ├─ {feroxbuster}(3857)
                 │                               ├─ {feroxbuster}(3858)
                 │                               ├─ {feroxbuster}(3859)
                 │                               ├─ {feroxbuster}(3860)
                 │                               ├─ {feroxbuster}(3861)
                 │                               ├─ {feroxbuster}(3862)
                 │                               ├─ {feroxbuster}(3863)
                 │                               ├─ {feroxbuster}(3864)
                 │                               ├─ {feroxbuster}(3871)
                 │                               └─ {feroxbuster}(3872)
                 ├─ sh(3820) ─┬─ nikto.pl(3821)
                 │           └─ tee(3822)
                 ├─ sh(3824) ─── nmap(3825) ─┬─ {nmap}(3839)
                 │                       ├─ {nmap}(3840)
                 │                       ├─ {nmap}(3841)
                 │                       ├─ {nmap}(3842)
                 │                       ├─ {nmap}(3843)
                 │                       ├─ {nmap}(3844)
                 │                       ├─ {nmap}(3845)
                 │                       ├─ {nmap}(3846)
                 │                       ├─ {nmap}(3847)
                 │                       ├─ {nmap}(3848)
                 │                       └─ {nmap}(3849)
                 ├─ sh(3827) ─── sslscan(3829)
                 ├─ sh(3836) ─── feroxbuster(3837) ─┬─ {feroxbuster}(3888)
                 │                               ├─ {feroxbuster}(3889)
                 │                               ├─ {feroxbuster}(3890)
                 │                               ├─ {feroxbuster}(3891)
                 │                               ├─ {feroxbuster}(3892)
                 │                               ├─ {feroxbuster}(3893)
                 │                               ├─ {feroxbuster}(3894)
                 │                               ├─ {feroxbuster}(3895)
                 │                               ├─ {feroxbuster}(3896)
                 │                               ├─ {feroxbuster}(3897)
                 │                               ├─ {feroxbuster}(3898)
                 │                               ├─ {feroxbuster}(3899)
                 │                               ├─ {feroxbuster}(3900)
                 │                               └─ {feroxbuster}(3919)
                 ├─ sh(3880) ─┬─ nikto.pl(3882)
                 │           └─ tee(3883)
                 ├─ sh(3884) ─── nmap(3885) ─┬─ {nmap}(3906)
                 │                       ├─ {nmap}(3907)
                 │                       ├─ {nmap}(3908)
                 │                       ├─ {nmap}(3909)
                 │                       ├─ {nmap}(3910)
                 │                       ├─ {nmap}(3911)
                 │                       ├─ {nmap}(3912)
                 │                       ├─ {nmap}(3913)
                 │                       ├─ {nmap}(3914)
                 │                       ├─ {nmap}(3915)
                 │                       └─ {nmap}(3916)
                 ├─ {autorecon}(3288)
                 ├─ {autorecon}(3291)
                 ├─ {autorecon}(3695)
                 ├─ {autorecon}(3707)
                 ├─ {autorecon}(3710)
                 ├─ {autorecon}(3720)
                 ├─ {autorecon}(3735)
                 ├─ {autorecon}(3759)
                 ├─ {autorecon}(3769)
                 ├─ {autorecon}(3807)
                 ├─ {autorecon}(3823)
                 ├─ {autorecon}(3826)
                 ├─ {autorecon}(3828)
                 ├─ {autorecon}(3838)
                 ├─ {autorecon}(3881)
                 └─ {autorecon}(3886)

UDPスキャンはroot権限が必要です。

[!] [10.10.190.192/top-100-udp-ports] UDP scan requires AutoRecon be run with root privileges.

pspy

pspyは、ルート権限を必要とせずにプロセスをスヌープするように設計されたコマンドラインツールです。他のユーザーや cronジョブなどが実行中に実行するコマンドを表示できます。

以下に実行例を記載します。

パッケージのインストール
$　sudo apt install pspy

以下のコマンドを実行すると、プロセスを標準出力できます。

$ pspy

pspy - version: 1.2.1 - Commit SHA: kali


     ██▓███    ██████  ██▓███ ▓██   ██▓
    ▓██░  ██▒▒██    ▒ ▓██░  ██▒▒██  ██▒
    ▓██░ ██▓▒░ ▓██▄   ▓██░ ██▓▒ ▒██ ██░
    ▒██▄█▓▒ ▒  ▒   ██▒▒██▄█▓▒ ▒ ░ ▐██▓░
    ▒██▒ ░  ░▒██████▒▒▒██▒ ░  ░ ░ ██▒▓░
    ▒▓▒░ ░  ░▒ ▒▓▒ ▒ ░▒▓▒░ ░  ░  ██▒▒▒ 
    ░▒ ░     ░ ░▒  ░ ░░▒ ░     ▓██ ░▒░ 
    ░░       ░  ░  ░  ░░       ▒ ▒ ░░  
                   ░           ░ ░     
                               ░ ░

Config: Printing events (colored=true): processes=true | file-system-events=false ||| Scanning for processes every 100ms and on inotify events ||| Watching directories: [/usr /tmp /etc /home /var /opt] (recursive) | [] (non-recursive)
Draining file system events due to startup...
done
2024/06/09 20:17:21 CMD: UID=1000  PID=44595  | pspy 
2024/06/09 20:17:21 CMD: UID=0     PID=44514  | 
2024/06/09 20:17:21 CMD: UID=0     PID=43384  | 
2024/06/09 20:17:21 CMD: UID=0     PID=43211  | 
2024/06/09 20:17:21 CMD: UID=0     PID=43096  | 
2024/06/09 20:17:21 CMD: UID=1000  PID=41239  | bash

おわりに

今回も魅力的なツールがたくさん追加されていました。

kali-undercoverの挙動については予想外だったため、新しいことを試す場合は気を付けたいと思います。

スクリプト/プログラムが定期的に実行されるこその出力結果をパネルに表示する ↩