pentester Cookbook |

Pentester Chef cookbook - Install & configures some cool stuff for pentesting

Requirements

cookbooks

git - https://supermarket.chef.io/cookbooks/git
database - https://supermarket.chef.io/cookbooks/database
postgresql - https://supermarket.chef.io/cookbooks/postgresql
spython - https://supermarket.chef.io/cookbooks/spython
dnsmasq - https://supermarket.chef.io/cookbooks/dnsmasq

services

postgresql

platforms

Debian 9
Debian 10

Usage

Following recipes are available for your run_list:

pentester::automacchanger - Automatically change MAC addresses with GNU MAC Changer service.
pentester::autopwn - Checkout autowpn, install dependencies and configures targets.
pentester::sn1per - Checkout Sn1per
pentester::fuzzdb - Checkout fuzzdb
pentester::gitrob_install - Installs gitrob
pentester::gitrob_config - Configures gitrob
pentester::gitrob_db - Configures the Gitrob database
pentester::webshell - Checkouts webshell
pentester::itib - Checkouts isthisipbad
pentester::nullsec - Checkouts null-security tools
pentester::veil - Checkouts Veil Framework
pentester::spf - Checkouts Smartphone Pentest Framework
pentester::ptf - Checkouts and configures The PenTesters Framework
pentester::mitmproxy - Installs mitmproxy and its dependencies
pentester::msf_pkg - Installs The Metasploit Framework from package
pentester::msf_src - Installs The Metasploit Framework from sources
pentester::msf_db - Setup metasploit database.
pentester::msf_config - Configures metasploit
pentester::msf_user_config - Metasploit user's configuration
pentester::msf_resources - Deploy extra metasploit resources from attributes
pentester::w3af_pkg - Installs W3AF from package
pentester::w3af_src - Installs W3AF from sources
pentester::w3af_profiles - Deploy W3AF profiles from attributes
pentester::armitage - Installs Armitage
pentester::teamserver - Configures Teamserver
pentester::pwndbg - Install pwndbg
pentester::radare2 - Install radare2
pentester::jackit - Install jackit
pentester::kippo - Install/configures the SSH Honeypot Kippo
pentester::bleah - Install bleah Bleah
pentester::rogue-ap - Install and configure a rogue AP
pentester::peda - Install and configure PEDA
pentester::gdb_dashboard - Install and configure GDB dashboard
pentester::discover - Install and configure discover
pentester::cobaltstrike - Configure Aggressor properties
pentester::crackmapexec - Installs CrackMapExec

Some recipes installs packages that are only available in Kali linux APT repositories. I recommend to use the kali cookbook to setup your debian as a kali linux.

Attributes

pentester::default

Key	Type	Description
`[pentester][user]`	String	Pentester user (default: `root`)
`[pentester][group]`	String	Pentester group (default: `root`)
`[pentester][home]`	String	Pentester home directory (default: `/root`)
`[pentester][databag_name]`	String	Pentester databag name (default: `pentester`)
`[pentester][databag_items][gitrob]`	String	Databag item for gitrob config (default: `gitrob`)
`[pentester][databag_items][msf]`	String	Databag item for msf config (default: `msf`)

pentester::db

Key	Type	Description
`[pentester][db][host]`	String	Postgresql server host (default: `localhost`)
`[pentester][db][port]`	Integer	Postgresql server port (default: `5432`)
`[pentester][db][username]`	String	Postgresql server username (default: `postgres`)
`[pentester][db][password]`	String	Postgresql server password (default from postgresql attributes)

pentester::automacchanger

Key	Type	Description
`[pentester][automacchanger][ifaces]`	Array	Interfaces for MAC Changer service (default: `[]`)

pentester::autopwn

Key	Type	Description
`[pentester][autopwn][git_repository]`	String	Git repository (default: `https://github.com/nccgroup/autopwn`)
`[pentester][autopwn][git_reference]`	String	Git reference (default: `master`)
`[pentester][autopwn][install_dir]`	String	Install directory (default: `/opt/autopwn`)
`[pentester][autopwn][targets]`	Hash	Targets to configure. See `attributes/autopwn.rb`

pentester::sn1per

Key	Type	Description
`[pentester][sn1per][git_repository]`	String	Git repository (default: `https://github.com/1N3/Sn1per`)
`[pentester][sn1per][git_reference]`	String	Git reference (default: `master`)
`[pentester][sn1per][install_dir]`	String	Install directory (default: `/opt/sn1per`)
`[pentester][sn1per][additional_repos]`	Hash	Additional repositories. See `attributes/sn1per.rb`
`[pentester][sn1per][packages]`	Array	Packages to install. See `attributes/sn1per.rb` for defaults

pentester::fuzzdb

Key	Type	Description
`[pentester][fuzzdb][git_repository]`	String	Git repository (default: `https://github.com/fuzzdb-project/fuzzdb`)
`[pentester][fuzzdb][git_reference]`	String	Git reference (default: `master`)
`[pentester][fuzzdb][install_dir]`	String	Install directory (default: `/opt/fuzzdb`)

pentester::gitrob

Key	Type	Description
`[pentester][gitrob][use_db]`	Boolean	Use gitrob databag for configuration (default: `false`)
`[pentester][gitrob][signatures]`	Array	Gitrob custom signatures (default: `[]`)
`[pentester][gitrob][gh_auth_token]`	String	Github auth token (default: `aabbccddeeff00112233445566778899`)
`[pentester][gitrob][packages]`	Array	List of packages to install. See `attributes/gitrob.rb`
`[pentester][gitrob][gem_binary]`	String	Binary use to install gem package

pentester::gitrob_db

Key	Type	Description
`[pentester][gitrob][db][db]`	String	Postgresql database name (default: `gitrob`)
`[pentester][gitrob][db][user]`	String	Postgresql user name (default: `gitrob`)
`[pentester][gitrob][db][pass]`	String	postgresql user password (default: `gitrob`)

pentester::webshell

Key	Type	Description
`[pentester][webshell][git_repository]`	String	Git repository (default: `https://github.com/tennc/webshell`)
`[pentester][webshell][git_reference]`	String	Git reference (default: `master`)
`[pentester][webshell][install_dir]`	String	Install directory (default: `/opt/webshell`)

pentester::itib

Key	Type	Description
`[pentester][itib][git_repository]`	String	Git repository (default: `https://github.com/jgamblin/isthisipbad`)
`[pentester][itib][git_reference]`	String	Git reference (default: `master`)
`[pentester][itib][install_dir]`	String	Install directory (default: `/opt/isthisipbad`)
`[pentester][itib][python_runtime]`	Integer	Python runtime to use (default: `2`)

pentester::nullsec

Key	Type	Description
`[pentester][nullsec][git_repository]`	String	Git repository (default: `https://github.com/nullsecuritynet/tools`)
`[pentester][nullsec][git_reference]`	String	Git reference (default: `master`)
`[pentester][nullsec][install_path]`	String	Install directory (default: `/opt/nullsecurity`)

pentester::veil

Key	Type	Description
`[pentester][veil][install_path]`	String	Install directory (default: `/opt/veil`)
`[pentester][veil][evasion_repository]`	String	Veil-Evasion repository (default: `'https://github.com/Veil-Framework/Veil-Evasion`)
`[pentester][veil][catapult_repository]`	String	Veil-Catapult repository (default: `'https://github.com/Veil-Framework/Veil-Catapult`)
`[pentester][veil][pillage_repository]`	String	Veil-Pillage repository (default: `'https://github.com/Veil-Framework/Veil-Pillage`)
`[pentester][veil][ordnance_repository]`	String	Veil-Ordnance repository (default: `'https://github.com/Veil-Framework/Veil-Ordnance`)

pentester::spf

Key	Type	Description
`[pentester][spf][git_repository]`	String	Git repository (default: `https://github.com/georgiaw/Smartphone-Pentest-Framework`)
`[pentester][spf][git_reference]`	String	Git reference (default: `master`)
`[pentester][spf][install_path]`	String	Install directory (default: `/opt/spf`)

pentester::ptf

Key	Type	Description
`[pentester][ptf][git_repository]`	String	Git repository (default: `https://github.com/trustedsec/ptf`)
`[pentester][ptf][git_reference]`	String	Git reference (default: `master`)
`[pentester][ptf][install_path]`	String	Install directory (default: `/opt/ptf`)
`[pentester][ptf][config]`	Hash	Hash of PTF configuration. See `attributes/ptf.rb`

pentester::msf

Key	Type	Description
`[pentester][msf][use_db]`	Boolean	Use gitrob msf for configuration (default: `false`)
`[pentester][msf][git_repository]`	String	Git repository (source install only) (default: `https://github.com/rapid7/metasploit-framework`)
`[pentester][msf][git_reference]`	String	Git reference (source install only) (default: `master`)
`[pentester][msf][install_dir]`	String	Install directory (source install only) (default: `/opt/metasploit-framework`)
`[pentester][msf][package]`	String	Package name (package install only) (default: `metasploit-framework`)
`[pentester][msf][additional_packages]`	String	Install additional packages when installing from source (default: `[libpcap-dev]`)
`[pentester][msf][user_dirname]`	String	Metasploit user's directory name (default: `.msf4`)
`[pentester][msf][config]`	Hash	Metasploit configuration Hash (default: `{}`)
`[pentester][msf][msfconsole.rc]`	Array	Array of lines for the msfconsole.rc file (default: `[]`)
`[pentester][msf][resources]`	Hash	Hash of extra msf resources to deploy (default: `{}`)

pentester::msf_db

Key	Type	Description
`[pentester][msf][db][db]`	String	Postgresql database name (default: `msf`)
`[pentester][msf][db][user]`	String	Postgresql user name (default: `msf`)
`[pentester][msf][db][pass]`	String	postgresql user password (default: `msf`)

pentester::w3af

Key	Type	Description
`[pentester][w3af][git_repository]`	String	Git repository (source install only) (default: `https://github.com/andresriancho/w3af.git`)
`[pentester][w3af][git_reference]`	String	Git reference (source install only) (default: `master`)
`[pentester][w3af][install_dir]`	String	Install directory (source install only) (default: `/opt/w3af`)
`[pentester][w3af][package]`	String	Package name (package install only) (default: `w3af`)
`[pentester][w3af][python_runtime`	Integer	Python runtime to use (source install only) (default: `2`)
`[pentester][w3af][profiles]`	Hash	W3AF Profiles (default: `{}`)
`[pentester][w3af][profiles_path]`	String	W3AF Profiles path (default: `/opt/w3af/profiles`)
`[pentester][w3af][apt_deps]`	Array	Apt dependencies (default: `[libxml2-dev libxslt1-dev python-dev]`)
`[pentester][w3af][pip_deps]`	Hash	Pip dependencies with version. See (attributes)[attributes/w3af.rb] file for complete list

pentester::mitmproxy

Key	Type	Description
`[pentester][mitmproxy][packages]`	Array	Array of dependencies for mitmproxy
`[pentester][mitmproxy][package]`	String	mitmproxy package name (default: `mitmproxy`)

pentester::armitage

Key	Type	Description
`[pentester][armitage][props]`	Hash	Armitage properties to configure (default: `{}`)

pentester::cobaltstrike

Key	Type	Description
`[pentester][cobaltstrike][props]`	Hash	Aggressor properties for CobaltStrike (default: `{}`)

pentester::teamserver

Key	Type	Description
`[pentester][teamserver][bind_addr]`	String	Teamserver bind address (default: `localhost`)
`[pentester][teamserver][password]`	String	Teamserver password (default: `msf`)

pentester::pwndbg

Key	Type	Description
`[pentester][pwndbg][git_repository]`	String	Git repository (default: `https://github.com/pwndbg/pwndbg`)
`[pentester][pwndbg][git_reference]`	String	Git reference (default: `dev`)
`[pentester][pwndbg][install_dir]`	String	Install directory (default: `/opt/pwndbg`)
`[pentester][pwndbg][run_installer]`	Boolean	Run installer script after synced repo (default: `false`)

pentester::radare2

Key	Type	Description
`[pentester][radare2][git_repository]`	String	Git repository (default: `https://github.com/radare/radare2`)
`[pentester][radare2][git_reference]`	String	Git reference (default: `master`)
`[pentester][radare2][install_dir]`	String	Install directory (default: `/opt/radare2`)
`[pentester][radare2][run_installer]`	Boolean	Run installer script after synced repo (default: `false`)

pentester::jackit

Key	Type	Description
`[pentester][jackit][git_repository]`	String	Git repository (default: `https://github.com/insecurityofthings/jackit`)
`[pentester][jackit][git_reference]`	String	Git reference (default: `master`)
`[pentester][jackit][install_dir]`	String	Install directory (default: `/opt/jackit`)
`[pentester][jackit][python_runtime]`	Integer	Python runtime to use (default: `2`)

pentester::bleah

Key	Type	Description
`[pentester][bleah][git_repository]`	String	Git repository (default: `https://github.com/evilsocket/bleah`)
`[pentester][bleah][git_reference]`	String	Git reference (default: `master`)
`[pentester][bleah][install_dir]`	String	Install directory (default: `/opt/bleah`)
`[pentester][bleah][python_runtime]`	Integer	Python runtime to use (default: `2`)
`[pentester][bleah][python_options]`	Hash	Python options to pass (default: `{}`)

pentester::rogue-ap

Key	Type	Description
`[pentester][rogue-ap][interface]`	String	Wireless interface (default: `wlan0`)
`[pentester][rogue-ap][out_interface]`	String	Output interface (default: `eth0`)
`[pentester][rogue-ap][script_path]`	String	Path for rogue-ap.sh (default: `/root/rogue-ap.sh`)
`[pentester][rogue-ap][packages]`	Array	List of packages to install. See attribute file for default
`[pentester][rogue-ap][hostapd]`	Hash	Hash of hostapd configuration. See attribute file for default

See [dnsmasq] attributes for dnsmasq configuration.

pentester::peda

Key	Type	Description
`[pentester][peda][repository]`	String	PEDA repository (default: `https://github.com/longld/peda`)
`[pentester][peda][reference]`	String	PEDA reference (default: `master`)
`[pentester][peda][gdbinit]`	Boolean	Override ~/.gdbinit fot PEDA (default: `false`)

pentester::gdb_dashboard

Key	Type	Description
`[pentester][gdb_dashboard][source]`	String	gbdinit remote source file (default to offical repo)

pentester::discover

Key	Type	Description
`[pentester][discover][git_repository]`	String	Git repository (default: `https://github.com/leebaird/discover`)
`[pentester][discover][git_reference]`	String	Git reference (default: `master`)
`[pentester][discover][install_dir]`	String	Install directory (default: `/opt/discover`)

pentester::crackmapexec

Key	Type	Description
`[pentester][crackmapexec][git_repository]`	String	Git repository (default: `https://github.com/byt3bl33d3r/CrackMapExec`)
`[pentester][crackmapexec][git_reference]`	String	Git reference (default: `master`)
`[pentester][crackmapexec][install_dir]`	String	Install directory (default: `/opt/crackmapexec`)
`[pentester][crackmapexec][python_runtime]`	Integer	Python runtime to use (default: `2`)

pentester::kippo

Key	Type	Description
`[pentester][kippo][git_repository]`	String	Git repository (default: `https://github.com/desaster/kippo`)
`[pentester][kippo][git_reference]`	String	Git reference (default: `master`)
`[pentester][kippo][install_dir]`	String	Install directory (default: `/opt/kippo`)
`[pentester][kippo][python_runtime]`	Integer	Python runtime to use (default: `2`)
`[pentester][kippo][txtcmds]`	Hash	Kippo txtcmds config (default: `{}`)
`[pentester][kippo][users]`	Array	Kippo users (default: `[root:0:123456]`)
`[pentester][kippo][config]`	Hash	Kippo txtcmds config (default: see attribute file)

Data bags

You can use data bags to configure some tools, here are some data bag examples:

`pentester/gitrob.json`

{
  "id": "gitrob",
  "gh_auth_token": "your-token",
  "db": {
    "user": "gitrob_user",
    "pass": "gitrob_pass",
    "db": "gitrob_db"
  }
}

`pentester/msf.json`

{
  "id": "msf",
  "db": {
    "user": "msf_user",
    "pass": "msf_pass",
    "db": "msf_db"
  }
}

Testing

See TESTING.md

Contributing

See CONTRIBUTING.md

License and Authors

Authors: Sliim [email protected]

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

Name		Name	Last commit message	Last commit date
Latest commit History 113 Commits
attributes		attributes
files/default		files/default
recipes		recipes
spec		spec
templates/default		templates/default
test/integration		test/integration
.chefignore		.chefignore
.gitignore		.gitignore
.kitchen.docker.yml		.kitchen.docker.yml
.kitchen.yml		.kitchen.yml
.rspec		.rspec
.rubocop.yml		.rubocop.yml
.travis.yml		.travis.yml
Berksfile		Berksfile
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
Gemfile		Gemfile
Guardfile		Guardfile
LICENSE		LICENSE
README.md		README.md
Rakefile		Rakefile
TESTING.md		TESTING.md
chefignore		chefignore
metadata.rb		metadata.rb

License

sliim-cookbooks/pentester

Folders and files

Latest commit

History

Repository files navigation