README.md

pentest_scripts

Deployment, enumeration, and other offensive security scripts.

Usage:

git clone https://github.com/jeremylaratro/pentest_scripts.git

cd pentest_scripts && chmod +x *.sh

Add scripts to path for easy access:

echo 'alias enum="sh [INSERT PATH]/pentest_scripts/enum.sh"' | tee -a ~/.zshrc 

Deployment Script

./deploy.sh [OPTIONS]

• The primary purpose of this script is to easily bring environment to operational readiness across various categories of security. Secondary purpose is to convert any Debian-based distribution into an offensive-ready state.

$ ./deploy -h
  -------------------------------------------------
  --------------------Switches---------------------
  -------------------------------------------------
  all: -a
  web tools: -i 
  network tools: -n 
  windows tools: -w  
  post-exploitation tools: -p 
  wordlists: -l 
  reverse engineering tools: -r
  cloud: -c
  rf-sdr: -s
  -------------------------------------------------
  -----------------Function Calls------------------
  -------------------------------------------------
  --------------------Required---------------------
  -------------------------------------------------
  -- setup
  -- file_struct
  -- environment
  -- general_tools
  -------------------------------------------------
  --------------------Optional---------------------
  -------------------------------------------------
  -- web_tools
  -- windows_tools
  -- wordlists
  -- reverse_engineering_tools
  -- post_exploitation_tools
  -- cloud
  -- rf_sdr_tools
  -------------------------------------------------

Enumeration Script

./enum.sh -i <ip_addr>  [OPTIONS]
./enum.sh -d <domain> [OPTIONS]
./enum.sh -i <ip_addr> -d <domain> -a 

  -------------------------------------------------
  --------------------Switches---------------------
  -------------------------------------------------
  --------------------Required---------------------
  ---------------------Inputs----------------------
  -- -i [IP]
  --  &&/or
  -- -d [domain]
  -------------------------------------------------
  --------------------Functions-------------------- 
  -------------------------------------------------
  -- All: -a
  -- Network enum: -n         
  -- DNS enum: -s
  -- HTB / CTF mode: -c
  -- Web enum: -w                                 
  -- Help: -h
  -------------------------------------------------
  -------------------------------------------------

Required Packages	all downloaded in deployment script
nmap	searchsploit	gospider
dirsearch	rpcclient	dig
smbclient	whatweb	enum4linux
curl	rustscan	wfuzz
gowitness	nikto	crackmapexec

TO DO:
- Add long names for deployment script switches
- Refactor enumeration script:
  - fix LFI/SMB functions
  - fix hostname discovery and directory bruteforce/enumeration domain/IP conflict when provided with both or just domain