Sunday 8 December 2013

Kvasir Installation on Kali Linux

Installing Kvasir on Kali Linux

Kvasir is a vulnerability / penetration testing data management system developed by cisco. Kvasir helps Pentesters for effective data management during a Penetration Test. It basically works by integrating following list of tools which were listed below


  • Rapid 7 NeXpose
  • Metasploit / Metasploit Pro
  • Tennable Nessus
  • ShodanHQ
  • Nmap
  • THC-Hydra
  • Medusa
  • John The Ripper


How ever the documentation is provided in the github, if you are a newbie or if you are facing any difficulty during the installtion just follow this video.

Download link : https://github.com/KvasirSecurity/Kvasir

Installation : https://github.com/KvasirSecurity/Kvasir/wiki/Installation

Documentation : https://github.com/KvasirSecurity/Kvasir/wiki

                                                                     Installation Guide



Install following packages

apt-get install python-pip git-core python-lxml python-tornado python-beautifulsoup python-dev
pip install msgpack-python


Now install and upgrade following packages


apt-get install postgresql python-psycopg2 --upgrade

Web2py / PostgreSQL Setup

Download latest web2py code from github:

cd /opt

git clone https://github.com/web2py/web2py.git web2py


Verify postgres configuration to permit 'md5' login for localhost:


vi /etc/postgresql/1.9/pg_hba.conf

Create kvasir postgres account. Use a password you can remember.

sudo -u postgres createuser -SleEPRD kvasir

password is toor


Create the Kvasir postgres database

sudo -u postgres createdb kvasir -O kvasir

CREATE ROLE kvasir ENCRYPTED PASSWORD 'md51c8aff1d5dcb54e991590c3f45645d4d' NOSUPERUSER NOCREATEDB NOCREATEROLE INHERIT LOGIN;




Create a self-signed SSL Certificate to be used for web2py and postgres

openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 1095 -in server.csr -signkey server.key -out server.crt


copy the three files in to /opt/web2py

Start web2py

cd /opt/web2py

python web2py.py -c server.crt -k server.key -p 8443 -i 127.0.0.1 --minthreads=40

Browse to https://localhost:8443/admin/ and enter your web2py administration password.

Kvasir Code Installation

cd /opt
git https://github.com/KvasirSecurity/Kvasir.git


Install Kvasir to web2py

 Git Clone

cd /opt/web2py/applications

git https://github.com/KvasirSecurity/Kvasir.git kvasir


Kvasir Setup

cd /opt/web2py/applications/kvasir/models

cp db.py.sample db.py

mkdir ../databases/