L in u X ba sics for h acke rs g e t t I n g s t a r t e d w I t h

partition with a minor number that comes after the drive designation. This 
way, the first partition on the first SATA drive would be sda1. The second 
partition would then be sda2, the third sda3, and so on, as illustrated in 
Table 10-2.

---

104
Chapter 10
Table 10-2: 
Partition-Labeling System
Partition
Description
sda1
The first partition (1) on the first (a) SATA drive
sda2
The second (2) partition on the first (a) drive
sda3
The third (3) partition on the first (a) drive
sda4
The fourth (4) partition on the first (a) drive
At times, you may want to view the partitions on your Linux system to 
see which ones you have and how much capacity is available in each. You 
can do this by using the 
fdisk
utility. Using the 
-l
switch with 
fdisk
lists all 
the partitions of all the drives, as shown in Listing 10-2.
kali >fdisk -l
Disk /dev/sda: 20GiB, 21474836480 bytes, 41943040 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: dos
Disk identifier: 0x7c06cd70
Device Boot Start End Sectors Size Id Type
/dev/sda1 * 2048 39174143 39172096 18.7G 83 Linux
/dev/sda2 39176190 41940991 2764802 1.3G 5 Extended
/dev/sda5 39176192 41940991 2764800 1.3G 82 Linux swap / Solaris
Disk /dev/sdb: 29.8 GiB, 31999393792 bytes, 62498816 sectors
Units: sectors of 1 * 512 = 512 bytes
Sector size (logical/physical): 512 bytes / 512 bytes
I/O size (minimum/optimal): 512 bytes / 512 bytes
Disk label type: dos
Disk identifier: 0xc3072e18
Device Boot Start End Sectors Size Id Type
/dev/sdb1 32 62498815 62498784 29.8G 7 HPFS/NTFS/exFAT
Listing 10-2: Listing partitions with fdisk
As you can see in Listing 10-2, the devices sda1, sda2, and sda5 are 
listed in the first stanza. These three devices make up the virtual disk from 
my virtual machine, which is a 20GB drive with three partitions, including 
the swap partition (sda5), which acts like virtual RAM—similar to page 
files in Windows—when RAM capacity is exceeded.
If you scan down Listing 10-2 to the third stanza, you see a second 
device output designated sdb1—the b label tells us that this drive is sepa-
rate from the first three devices. This is my 64GB flash drive. Note that 
fdisk
indicates that it is an HPFS/NTFS/ExFAT filesystem type. These file 
types—High Performance File System (HPFS), New Technology File System 
(NTFS), and Extended File Allocation Table (exFAT)—are not native to 
Linux systems but rather to macOS and Windows systems. It’s worth being 

---

Filesystem and Storage Device Management
105
able to recognize file types native to different systems when you investigate. 
The filesystem might indicate what kind of machine the drive was format-
ted on, which can be valuable information. Kali is able to utilize USB flash 
drives created on many different operating systems.
As you saw in Chapter 1, the Linux filesystem is structured significantly 
differently than are Windows and other proprietary operating systems. On 
top of this, the way files are stored and managed is different in Linux, too. 
New versions of Windows use an NTFS filesystem, whereas older Windows 
systems use File Allocation Table (FAT) systems. Linux uses a number of 
different types of filesystems, but the most common are ext2, ext3, and 
ext4. These are all iterations of the ext (or extended) filesystem, with ext4 
being the latest.