PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How to Nuke your Encrypted Kali Installation

kali.org | blog | #kali-linux | #luks | #disk-encryption | #opsec | #cryptsetup | #data-protection
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Kali explains the LUKS Nuke patch added to cryptsetup: a special boot passphrase wipes all keyslots, rendering an encrypted disk inaccessible—useful when traveling with sensitive client data.
Published
Collected

Related coverage

blog · kali.org
Emergency Self Destruction of LUKS in Kali
Kali ports an old cryptsetup patch by Juergen Pabel that adds a 'nuke' password: entering it at boot destroys all LUKS keyslots, instantly making the encrypted drive's data unreadable.
blog · kali.org
Secure Kali Pi 2018
An updated guide to building a deniable Raspberry Pi pentest box: LUKS full-disk encryption with remote unlock via Dropbear SSH in initramfs, plus the LUKS Nuke option to destroy data on demand.
blog · kali.org
Kali Linux 1.0.8 Release with EFI Boot Support
Kali 1.0.8 arrives early mainly to add USB EFI boot support to ISO builds, easing installs on modern EFI hardware and Macs, with a Live USB image offering LUKS Nuke encrypted persistence.
blog · kali.org
Kali Linux 1.0.7 Release
Kali 1.0.7 ships kernel 3.14, a wave of tool updates, and LUKS-encrypted Live USB persistence, plus closer collaboration with tool developers like Metasploit, w3af and wpscan.
blog · kali.org
Kali Linux 1.0.6 Release
Kali 1.0.6 is a feature-heavy update: kernel 3.12, the LUKS Nuke self-destruction patch in cryptsetup, new ARM build scripts, and Amazon AMI / Google Compute image generation.
blog · blog.trailofbits.com
Vulnerabilities in LUKS2 disk encryption for confidential VMs
New LUKS2 flaws (CVE-2025-59054, CVE-2025-58356) affect eight confidential VM systems: malleable headers let disk-level attackers trick TEE guests into encrypting secrets with a null cipher.
Back