Results 1 to 4 of 4

Thread: Missing packages in Kali.org**/Or Possible hacked sources? while updating linux?

  1. #1
    Junior Member
    Join Date
    Mar 2017
    Posts
    2

    Question Missing packages in Kali.org**/Or Possible hacked sources? while updating linux?

    Greetings,

    Sorry i am new to using Kali OS, i am taking some help from a friend who suggested that it could be a possible hack.

    I had a concern regarding my Kali Installation which was input into my mind by the same friend of mine who has been helping me use this to some extent. Sorry i am naive in this OS. The concern is to validate if my OS is hacked or not. I do have reasons to believe that because I am having this problem of a sticky mouse on the browser windows for the past few days. which led me to update the setup a couple of times.

    The command "sudo apt-get update" was run. This update seems to be using some of the sources which does not seem to be from the original source files in the configuration ( as per what i understand from my friend). IN particular the source of http://ftp.yzu.edu.tw/Linux/kali


    In my understanding all the sources should be *kali.org. Not sure why is this listed while updates. Not to mention that there are some events which does make me believe that this could be a possible hacked source. Please do suggest as to if there needs to be done something to rectify this? If any more info is needed then please advise.


    Some of the references are stated below. sI will check back again tomorrow appreciate your input. Thank you

    Sources
    ==========
    Hit:2 http://ftp.yzu.edu.tw/Linux/kali kali-rolling InRelease
    Hit:9 http://ftp.yzu.edu.tw/Linux/kali kali-dev InRelease


    Get:1 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 bash amd64 4.4-4+b1 [1,427 kB]
    Get:2 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 coreutils amd64 8.26-3 [2,870 kB]
    Get:3 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 cron amd64 3.0pl1-128+b1 [95.5 kB]
    Get:4 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 dpkg amd64 1.18.23kali1 [2,094 kB]
    Get:5 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 gzip amd64 1.6-5+b1 [114 kB]
    Get:6 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 hostname amd64 3.18+b1 [14.9 kB]
    Get:7 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 login amd64 1:4.4-4 [790 kB]
    Get:8 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 sysvinit-utils amd64 2.88dsf-59.9 [68.4 kB]
    Get:9 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 liblz4-1 amd64 0.0~r131-2+b1 [33.3 kB]
    Get:10 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 liblzma5 amd64 5.2.2-1.2+b1 [234 kB]
    Get:11 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 libapt-pkg5.0 amd64 1.4~rc2 [915 kB]
    Get:12 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 libapt-inst2.0 amd64 1.4~rc2 [191 kB]
    Get:13 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 apt amd64 1.4~rc2 [1,230 kB]
    Get:14 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 apt-utils amd64 1.4~rc2 [409 kB]
    Get:15 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 gpgv amd64 2.1.18-6 [480 kB]
    Get:16 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 libpcre3 amd64 2:8.39-2.1 [337 kB]
    Get:17 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 mawk amd64 1.3.3-17+b3 [84.6 kB]
    Get:18 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 systemd-sysv amd64 232-19 [78.0 kB]
    Get:19 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 python2.7-dev amd64 2.7.13-2 [281 kB]
    Get:20 http://ftp.yzu.edu.tw/Linux/kali kali-rolling/main amd64 libpython2.7-dev amd64 2.7.13-2 [28.2 MB]




    Thank You,

  2. #2
    Senior Member
    Join Date
    Oct 2016
    Location
    /dev/sda
    Posts
    621
    Everything looks fine to me. Those are legitimate links for File Transfer protocol. Can you show the output of cat /etc/apt/sources.list?

  3. #3
    Junior Member
    Join Date
    Mar 2017
    Posts
    2
    Thanks for reverting back. I doubt as my Sourcelist does not have the above sources. So why is it downloading from those sites. Pls refer to below from my source list as pr your request. ...

    deb http://http.kali.org/kali kali-rolling main contrib non-free
    deb http://security.kali.org/kali-security kali/updates main contrib non-free

    # deb cdrom:[Debian GNU/Linux 2016.1 _Kali-rolling_ - Official Snapshot amd64 LIVE/INSTALL Binary 20160830-11:29]/ kali-rolling contrib main non-free

    #deb cdrom:[Debian GNU/Linux 2016.1 _Kali-rolling_ - Official Snapshot amd64 LIVE/INSTALL Binary 20160830-11:29]/ kali-rolling contrib main non-free


    ## Security updates
    deb http://http.kali.org/ /kali main contrib non-free
    deb http://http.kali.org/ /wheezy main contrib non-free
    deb http://http.kali.org/kali kali-dev main contrib non-free
    deb http://http.kali.org/kali kali-dev main/debian-installer
    deb-src http://http.kali.org/kali kali-dev main contrib non-free
    deb http://http.kali.org/kali kali main contrib non-free
    deb http://http.kali.org/kali kali main/debian-installer
    deb-src http://http.kali.org/kali kali main contrib non-free
    deb http://security.kali.org/kali-security kali/updates main contrib non-free
    deb-src http://security.kali.org/kali-security kali/updates main contrib non-fr$

  4. #4
    Senior Member
    Join Date
    Oct 2016
    Location
    /dev/sda
    Posts
    621
    There is no repository in your sources.list which I can say is correct.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •