Since weeks I’m trying to set up Kioptrix on Kali. It runs and it probably gets an IP but I can’t find that IP with netdiscover. For testing purposes I installed Debian as a second VM. It also isn’t discoverable but I can look up the IP within the machine and ping it from the Kali host. All instructions and videos about this topic just run the vmx file, set the network adapter to NAT and then they can just use netdiscover to find their VMs. This is not working on my system. I was trying this in 2 public networks as I was traveling and I thought that maybe that was the issue. But then I tried it in my home network and here it is exactly the same. netdiscover doesn’t seem to be able to access the ARP packages in the VLAN created by the VMware Player. But because it works for everyone else I think there is something else to this problem.
Can someone here please install the latest VMware Player on a Kali system, use NAT and try to access the IP? Or is someone here that could fix that issue on their system?
My NAT config:
ip addr on Debian guest:
dun@debian:~$ ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens33: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000
link/ether 00:0c:29:d1:e2:c2 brd ff:ff:ff:ff:ff:ff
inet 192.168.12.128/24 brd 192.168.12.255 scope global dynamic noprefixroute ens33
valid_lft 1766sec preferred_lft 1766sec
inet6 fe80::20c:29ff:fed1:e2c2/64 scope link noprefixroute
valid_lft forever preferred_lft forever
I can ping the guest machine from the host:
dun@kali ~ ping -c 2 192.168.12.128
PING 192.168.12.128 (192.168.12.128) 56(84) bytes of data.
64 bytes from 192.168.12.128: icmp_seq=1 ttl=64 time=0.454 ms
64 bytes from 192.168.12.128: icmp_seq=2 ttl=64 time=0.502 ms
--- 192.168.12.128 ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1026ms
rtt min/avg/max/mdev = 0.454/0.478/0.502/0.024 ms
The output of sudo netdiscover -r 192.168.12.0/24. I left it open for several minutes.
Currently scanning: Finished! | Screen View: Unique Hosts
0 Captured ARP Req/Rep packets, from 0 hosts. Total size: 0
_____________________________________________________________________________
IP At MAC Address Count Len MAC Vendor / Hostname
-----------------------------------------------------------------------------