Kali Linux vs. Metasploit vs. Remote Desktop Services

Kali Linux is especially well suited in environments where high security is needed for your custom developed applications. This is well suited for offensive testing your high security in house developed applications. It is also very good for doing penetration testing on in house developed applications and safe guarding them from external attackers. Kali Linux is tough for use as a day to day Linux operating system as this was never intended to be used by beginners and occasional Linux users.

Incentivized

It is easy to use with sufficient documentation on how to use the tools for end users or newbies. Experienced testers will find it easy to customise and configure the test cases. Just wished that I could have taken up a course on using this tool in my study days so that I could had explored more and improved my familiarity with the tool, unlike when working where access and time to explore the other features of the tool is limited

Incentivized

This is well-suited if you need to log in to a remote machine on occasion to make updates or change configurations. It is also good for a production environment or for environments where people need to log in to use common applications, so you don't need to install the application on each individual client.

Incentivized

• Analyzing SSL certificates
• Analyzing SSL server configurations
• Vulnerability scanning
• Port scanning

Incentivized

• Easy to use.
• Many exploits available.
• Multi-platform.

Incentivized

• When you connect with RDS, everything looks and feels (and is) exactly like you're sitting at that desktop. This is great for us and for users.
• You can sign in with RDS and the desktop will be the same as when you left it (if you choose to set it up that way).
• Although they take some setup, RemoteApps are a very handy way to let users access a program without requiring them to actually connect to a remote desktop on the server.

Incentivized

• Option to deselect tools upon install
• Instructions for all the tools
• Lightweight install option

Incentivized

• More robust menus
• Better plugin inter-operation

Incentivized

• Remote Desktop Services currently does not support multiple monitors on the terminal server. Unlike other applications such as Teamviewer, there's no feature to toggle between multiple screens even if they were connected to the terminal server.
• Remote Desktop Services should provide an option to scale up or down the screen size after a connection is established. Currently you can only adjust the screen size prior to a connection is established. So you'll have to take a best guess at what display screen resolution will fit best on your screen.
• Remote Desktop Services should offer some kind of menu to send special key strokes like Ctrl+Alt+Del to the terminal server. Currently the substitute for that particular combination is Ctrl+Alt+End. But I have yet to discover a replacement for other combination keystrokes such as Alt+PrintScrn.

Incentivized

The initial setup for Remote Desktop Services is complex, and licensing is costly. Each user connects to their virtual desktop hosted by a single server or group of servers, so a change or issue with servers quickly impacts every single user at the same time. Aside from that, users appreciate seeing their same personal desktop from any device or geographical location.

Incentivized

There are some third party tools available that allow you to manage multiple connections.

Incentivized

We don't use it.

Incentivized

As with any Microsoft Server product, support for Remote Desktop Services requires a paid support package. These are license-based and very costly, on top of the already costly product licensing. Microsoft's licensing is complicated to begin with, so setting up licensing alone essentially requires a licensing expert's counsel. There is community documentation and support available on Microsoft websites, as well as community websites.

Incentivized

I will Stack Kali Linux at the top of among to its similar devices.

Incentivized

Metasploit is the most well-known tool in the average pen tester's toolkit. It's hard to compare to its neighbor's due to its size and following.

Incentivized

We selected Remote Desktop Services based upon price alone. Other solutions on the market are significantly more expensive, but if your company can foot the bill you should seriously consider products that have been on the market for longer. The lack of an ability to easily upgrade farm servers has been a challenge for us - although it is still faster than updating an application on 2000+ machines. The lack of a centralized management console in 2008 R2 is also challenging, but you get by with the tools available to you. If you don't have the money to spend on Citrix or VMWare Horizon, Remote Desktop Services is a decent replacement.

Incentivized

• Costs
• Time taken to setup
• Configurations needed for each use

Incentivized

• Positive: Improves efficiency of our network penetration testing operations.
• Positive: Allows for collaboration and information sharing during a penetration test.

Incentivized

• Allowed remote users access from home
• Shared file access for multipolar users from a centralized location
• Cost to add additional users when maxed out
• Purchase multiple licenses for programs to run in virtual machines. Or unable to run on a virtual machine

Incentivized