Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/jeremylaratro/pentest_scripts
scripts designed for automation and streamlining of simple tasks centered around discovery and enumeration.
https://github.com/jeremylaratro/pentest_scripts
Last synced: 4 days ago
JSON representation
scripts designed for automation and streamlining of simple tasks centered around discovery and enumeration.
- Host: GitHub
- URL: https://github.com/jeremylaratro/pentest_scripts
- Owner: jeremylaratro
- Created: 2022-12-08T00:10:09.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2024-08-20T01:27:59.000Z (5 months ago)
- Last Synced: 2024-08-20T04:52:03.698Z (5 months ago)
- Language: Shell
- Homepage:
- Size: 110 KB
- Stars: 0
- Watchers: 2
- Forks: 1
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# pentest_scripts
> Deployment, enumeration, and other offensive security scripts.
# Usage:
```
git clone https://github.com/jeremylaratro/pentest_scripts.git
```
```
cd pentest_scripts && chmod +x *.sh
```
Add scripts to path for easy access:
```
echo 'alias enum="sh [INSERT PATH]/pentest_scripts/enum.sh"' | tee -a ~/.zshrc
```
## Deployment Script
```
./deploy.sh [OPTIONS]
```
- The primary purpose of this script is to easily bring environment to operational readiness across various categories of security. Secondary purpose is to convert any Debian-based distribution into an offensive-ready state.
```
$ ./deploy -h
-------------------------------------------------
--------------------Switches---------------------
-------------------------------------------------
all: -a
web tools: -i
network tools: -n
windows tools: -w
post-exploitation tools: -p
wordlists: -l
reverse engineering tools: -r
cloud: -c
rf-sdr: -s
-------------------------------------------------
-----------------Function Calls------------------
-------------------------------------------------
--------------------Required---------------------
-------------------------------------------------
-- setup
-- file_struct
-- environment
-- general_tools
-------------------------------------------------
--------------------Optional---------------------
-------------------------------------------------
-- web_tools
-- windows_tools
-- wordlists
-- reverse_engineering_tools
-- post_exploitation_tools
-- cloud
-- rf_sdr_tools
-------------------------------------------------
```
## Enumeration Script
```
./enum.sh -i [OPTIONS]
./enum.sh -d [OPTIONS]
./enum.sh -i -d -a
```
```
-------------------------------------------------
--------------------Switches---------------------
-------------------------------------------------
--------------------Required---------------------
---------------------Inputs----------------------
-- -i [IP]
-- &&/or
-- -d [domain]
-------------------------------------------------
--------------------Functions--------------------
-------------------------------------------------
-- All: -a
-- Network enum: -n
-- DNS enum: -s
-- HTB / CTF mode: -c
-- Web enum: -w
-- Help: -h
-------------------------------------------------
-------------------------------------------------
```
| **Required Packages**| all downloaded in deployment script | |
|-------------------|--------------|------------|
| nmap | searchsploit | gospider |
| dirsearch | rpcclient | dig |
| smbclient | whatweb | enum4linux |
| curl | rustscan | wfuzz |
| gowitness | nikto | crackmapexec |
```
TO DO:
- Add long names for deployment script switches
- Refactor enumeration script:
- fix LFI/SMB functions
- fix hostname discovery and directory bruteforce/enumeration domain/IP conflict when provided with both or just domain