自動化安裝一些滲透工具的指令碼

標籤：success   ring   slider   editor   org   .com   trunk   release   frame   

原文

 http://oleaass.com/kali-linux-additional-tools-setup/

#!/bin/bashecho ""echo "=========================================================================="echo "= Pentest Attack Machine Setup                                           ="echo "= Based on the setup from The Hacker Playbook                            ="echo "=========================================================================="echo ""# Prepare tools folderecho "[+] Creating tools folder in /opt"mkdir /opt/tools/echo ""# Setting up metasploit with postgresqlecho "[+] Setting up metasploit with postgresql"service postgresql startservice metasploit startecho ""# Discover Scripts - Passive reconnaissanceecho "[+] Installing Discover Scripts"cd /opt/tools/git clone https://github.com/leebaird/discover.gitcd /opt/tools/discover//opt/tools/discover/setup.shecho ""# SMBexec - Grab hashes out of the Domain Controller and reverse shells# Step 1: Select option 1# Step 2: Select option 4# Step 3: Select option 5echo "[+] Installing SMBexec"cd /tmp/git clone https://github.com/brav0hax/smbexec.gitcd /tmp/smbexec/echo "[+] Select option 1"/tmp/smbexec/install.shecho "[*] Where did you install SMBexec?: "read smbexecpath$smbexecpath/smbexec/install.shecho ""# Veil - Create Python based Meterpreter executableecho "[+] Installing Veil Framework"cd /opt/tools/git clone https://github.com/Veil-Framework/Veil-Evasion.git Veilcd /opt/tools/Veil/setup/opt/tools/Veil/setup/setup.shecho ""# WCE (Windows Credential Editor) - Pulls passwords from memoryecho "[+] Downloading and installing WCE (Windows Credential Editor)"mkdir /opt/tools/wce/cd /tmp/wget http://www.ampliasecurity.com/research/wce_v1_41beta_universal.zipunzip -d /opt/tools/wce/ wce_v1_41beta_universal.ziprm -f wce_v1_41beta_universal.zipecho ""# Mimikatz - Pulls passwords from memoryecho "[+] Installing Mimikatz"mkdir /opt/tools/mimikatz/cd /tmp/wget https://github.com/gentilkiwi/mimikatz/releases/download/2.0.0-alpha-20150122/mimikatz_trunk.zipunzip -d /opt/tools/mimikatz/ mimikatz_trunk.ziprm -f mimikatz_trunk.zipecho ""# PeepingTom - Website snapshotsecho "[+] Installing PeepingTom"cd /opt/tools/git clone https://bitbucket.org/LaNMaSteR53/peepingtom.gitcd /opt/tools/peepingtom/wget https://gist.githubusercontent.com/nopslider/5984316/raw/423b02c53d225fe8dfb4e2df9a20bc800cc78e2c/gnmap.plecho ""# Download appropriate PhantomJS packageif $(uname -m | grep ‘64‘); then    wget http://phantomjs.googlecode.com/files/phantomjs-1.9.2-linux-x86_64.tar.bz2    tar xf phantomjs-1.9.2-linux-x86_64.tar.bz2    cp /opt/tools/peepingtom/phantomjs-1.9.2-linux-x86_64/bin/phantomjs .else    wget http://phantomjs.googlecode.com/files/phantomjs-1.9.2-linux-i686.tar.bz2    tar xf phantomjs-1.9.2-linux-i686.tar.bz2    cp /opt/tools/peepingtom/phantomjs-1.9.2-linux-i686/bin/phantomjs .fiecho ""# Nmap script - Quicker scanning and smarter identificationecho "[+] Installing nmap scripts"cd /usr/share/nmap/scripts/wget https://raw.githubusercontent.com/hdm/scan-tools/master/nse/banner-plus.nseecho ""# PowerSploit - Scripts for post exploitationecho "[+] Installing PowerSploit"cd /opt/tools/git clone https://github.com/mattifestation/PowerSploit.gitcd /opt/tools/PowerSploit/wget https://raw.githubusercontent.com/obscuresec/random/master/StartListener.pywget https://raw.githubusercontent.com/darkoperator/powershell_scripts/master/ps_encoder.pyecho ""# Responder - Used to gain NTLM challenge/responseecho "[+] Installing Responder"cd /opt/tools/git clone https://github.com/SpiderLabs/Responder.gitecho ""# SET (Social Engineering Toolkit) - Pre-installed on Kali Linuxecho "[+] Installing SET (Social Engineering Toolkit)"cd /opt/tools/git clone https://github.com/trustedsec/social-engineer-toolkit.git setcd /opt/tools/set//opt/tools/set/setup.py installecho ""# Bypassuac - Used to bypass UAC in post exploitation# → https://www.trustedsec.com/downloads/echo "[+] Installing Bypass UAC"cd /tmp/wget https://www.trustedsec.com/files/bypassuac.zipunzip bypassuac.zipcp bypassuac/bypassuac.rb /opt/metasploit/apps/pro/msf3/scripts/meterpreter/mv bypassuac/uac/ /opt/metasploit/apps/pro/msf3/data/exploits/rm -Rf bypassuacecho ""# BeEF - cross-site scripting framework# → http://beefproject.com/echo "[+] Installing BeEF"apt-get install beef-xssecho ""# PEDA - Python Exploit Development Assistance for GDB# → Repository: https://github.com/longld/pedaecho "[+] Installing PEDA"git clone https://github.com/longld/peda.git /opt/pedaecho "source /opt/peda/peda.py" >> ~/.gdbinitecho ""# The Endecho "[+] All tools installed successfully!"echo "[+] ~~~ Happy Hacking! ~~~"echo ""

 

自動化安裝一些滲透工具的指令碼