Magictree Use of Penetration testing tutorial

Magictree Introduction

Magictree is a Java program developed by Gremwell that supports the tools for proactively collecting data and generating reports. He manages data through tree-structured nodes, which are particularly effective for managing host and network data. Its ability to analyze data is particularly powerful.
Magictree can create actionable reports based on the selected priority, which is fully customizable and can even import data into OpenOffice.
Note:
OpenOffice word processing software, similar to Microsoft Office. You can use the apt-get install openoffice.org command to install.

Magictree allows XML data to be imported, and XSLT transformations can be performed on common formats, such as: Nessus,nikto,nmap,burp,openvas, and so on.

Magictree use 1. Start Magictree

Magictree has been pre-installed on Kali Linux and can be started directly in the terminal by entering commands.

magictree

2. Adding nodes

Using CTRL + N shortcut, pop Up an input dialog box and enter the IP address. This will use two additional nodes to populate the tree, one for testdata, and the other for host hosts.

Magictree has several nodes to store data.

• Branch node: Used to create a tree structure, use this type of node to not include spaces.
• Simple node: Store simple data such as an IP address or a fully canonical domain name.
• Text node: Stores text data that appears in the report.
• Data node: Stores non-picture files and non-XML file attachments in the project folder.
• XML data node: stores XML data.
• Picture node: You can store similar screenshots or other important picture evidence.
• Cross-Reference: a connection between nodes to avoid duplication of information.
• Summarize nodes: Used to enter test results and recommended mitigation policies that can be connected to the affected host.

3. Data collection

Collect data for the target host, in addition to selecting tools other than Magictree, you can use bright to select the target host and scope in Magictree.
Select the host node in the tree View menu, the stand-alone q* button (representing all content), and enter the following command in the command text area:

-vv-o-sS  -A-p--oX$out.xml$host

This initializes an NMAP scan for the specified host and outputs the results to a $out.xml XML file.

Select the $out.xml file, click the Import button, and let Magictree automatically generate the node schema based on the scan results.

You can see how many open ports are open on this machine, what services are allowed, and what software is used.

4. Generate reports

There are several templates configured in OpenOffice to choose from, report--generate the report option at the top of the Magictree menu bar, browse to select a template, To Open-ports-and-summary-of-findings-by-hosts.odt, then click Generate Report, and after a while OpenOffice will automatically open the generated reports.

Magictree Use of Penetration testing tutorial