Skip to content

Instantly share code, notes, and snippets.

@austinsonger
Last active January 23, 2020 00:59
Show Gist options
  • Save austinsonger/9ad0b5c878ae11b20e76c892f6032889 to your computer and use it in GitHub Desktop.
Save austinsonger/9ad0b5c878ae11b20e76c892f6032889 to your computer and use it in GitHub Desktop.
Install Penetration Testing Setup
#!/bin/bash
apt-get update -y
apt-get upgrade -y
apt-get dist-upgrade -y
apt-get remove -y --purge rhythmbox ekiga totem transmission-gtk thunderbird apport
export DEBIAN_FRONTEND=noninteractive
apt-get install -yq aptitude vlan reaver pyrit thc-ipv6 netwox nmap phantomjs nbtscan wireshark-qt tshark vlan dsniff tcpdump openjdk-8-jre p7zip openvpn libwebkitgtk-1.0-0 libssl-dev libmysqlclient-dev libjpeg-dev libnetfilter-queue-dev ettercap-text-only ghex pidgin pidgin-otr traceroute lft gparted autopsy subversion git gnupg htop ssh libpcap0.8-dev libimage-exiftool-perl aptitude p7zip-full proxychains curl terminator hydra hydra-gtk medusa irssi gnome-tweak-tool libtool build-essential rdesktop sshfs bzip2 extundelete rpcbind nfs-common gimp iw ldap-utils ntfs-3g samba-common samba-common-bin steghide whois aircrack-ng gnome-screenshot eog laptop-mode-tools openconnect gengetopt byacc flex cmake ophcrack gdb stunnel4 socat chromium-browser swftools hping3 tcpreplay tcpick gufw xtightvncviewer scalpel foremost unrar rar secure-delete yersinia vmfs-tools net-tools gstreamer1.0-plugins-bad freerdp-x11 libxfreerdp-client1.1 qemu-kvm qemu-utils binwalk qemu-system-x86 gvfs-fuse xdg-user-dirs gnome-applets-data gnome-applets git-core autoconf postgresql pgadmin3 screen keepass2
apt-get install -y python-yara python-paramiko python-distorm3 python-beautifulsoup python-pygresql python-pil python-pycurl python-magic python-pyinotify python-configobj python-pexpect python-msgpack python-requests python-pefile python-ipy python-openssl python-pypcap python-dns python-dnspython python-crypto python-cryptography python-dev python-twisted python-nfqueue python-scapy python-capstone python-setuptools python-urllib3 python3-pip python-pip ruby ruby-dev ruby-bundler php7.2-cli php7.2-curl python-notify python-impacket golang-go
apt-get install -y libappindicator1 libreadline-dev libcapstone3 libcapstone-dev libssl-dev zlib1g-dev libxml2-dev libxslt1-dev libyaml-dev libffi-dev libssh-dev libpq-dev libsqlite-dev libsqlite3-dev libpcap-dev libgmp3-dev libpcap-dev libpcre3-dev libidn11-dev libcurl4-openssl-dev libpq5 libreadline5 libappindicator1 libindicator7 libnss3 libxss1 libssl1.0.0 libncurses5-dev libncurses5
wget -nc https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
dpkg -i google-chrome-stable_current_amd64.deb
rm google-chrome-stable_current_amd64.deb
apt-get install rubygems
#install of gems (should work on both systems)
gem install snmp
gem install pcaprub
gem install rake
mkdir /opt/pentest
cd /opt/pentest/
mkdir /opt/pentest/cheatsheets
mkdir /opt/pentest/network
mkdir /opt/pentest/webapps
mkdir /opt/pentest/exploits
mkdir /opt/pentest/mobile
mkdir /opt/pentest/wordlists
mkdir /opt/pentest/escalation
mkdir /opt/pentest/pwcracking
mkdir /opt/pentest/reverse
mkdir /opt/pentest/recon
mkdir /opt/pentest/wireless
mkdir /opt/pentest/windows
mkdir /opt/pentest/linux
mkdir /opt/pentest/postexploitation
mkdir /opt/pentest/social_engineering
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall && \
chmod 755 msfinstall && \
./msfinstall
cd /opt/pentest/exploits
git clone https://github.com/longld/peda.git
git clone https://github.com/govolution/avet
git clone https://github.com/g0tmi1k/exe2hex.git
git clone https://github.com/huntergregal/mimipenguin
git clone https://github.com/lockfale/meterpreterjank.git
git clone https://github.com/PenturaLabs/Linux_Exploit_Suggester.git
git clone https://github.com/vulnersCom/getsploit
git clone https://github.com/trustedsec/unicorn
cd /opt/pentest
cd /opt/pentest/wordlists
git clone https://github.com/danielmiessler/SecLists.git
wget -nc http://downloads.skullsecurity.org/passwords/rockyou.txt.bz2
wget -nc http://www.tekdefense.com/downloads/wordlists/1aNormusWL.zip
wget -nc http://www.tekdefense.com/downloads/wordlists/KippoWordlist.txt
git clone https://github.com/digininja/CeWL.git
cd /opt/pentest
cd /opt/pentest/webapps
mkdir /opt/pentest/webapps/burp_proxy
cd /opt/pentest/webapps/burp_proxy
curl https://portswigger.net/DownloadUpdate.ashx?Product=Free -o burpsuite_free.jar
cd /opt/pentest
cd /opt/pentest
mkdir /opt/pentest/misc
cd /opt/pentest/misc
git clone https://github.com/ChrisTruncer/PenTestScripts.git
cd /opt/pentest
mkdir /opt/pentest/network/torbrowser
cd /opt/pentest/network/torbrowser
wget -nc https://github.com/TheTorProject/gettorbrowser/releases/download/v7.5.3/tor-browser-linux64-7.5.3_en-US.tar.xz
tar -xf tor-browser-linux64-7.5.3_en-US.tar.xz
rm -rf tor-browser-linux64-7.5.3_en-US.tar.xz
cd /opt/pentest
mkdir /opt/pentest/network/reverse_shells
cd /opt/pentest/network/reverse_shells
wget -nc http://pentestmonkey.net/tools/php-reverse-shell/php-reverse-shell-1.0.tar.gz
tar -xf /opt/pentest/network/reverse_shells/php-reverse-shell-1.0.tar.gz
cd /opt/pentest
cd /opt/pentest/escalation
git clone https://github.com/mattifestation/PowerSploit.git
git clone https://github.com/putterpanda/mimikittenz.git
git clone https://github.com/PowerShellEmpire/PowerTools.git
git clone https://github.com/Kevin-Robertson/Inveigh.git
git clone https://github.com/xan7r/kerberoast.git
git clone https://github.com/breenmachine/RottenPotatoNG
cd /opt/pentest
cd /opt/pentest/postexploitation
git clone https://github.com/AlessandroZ/LaZagne.git
git clone https://github.com/CoreSecurity/impacket.git
pip install ldap3
git clone https://github.com/EmpireProject/Empire.git
cd /opt/pentest
mkdir /opt/pentest/forensics
cd /opt/pentest/forensics
git clone https://github.com/volatilityfoundation/volatility.git
cd /opt/pentest
cd /opt/pentest/recon
git clone https://github.com/EnableSecurity/wafw00f
git clone https://github.com/guelfoweb/knock.git
git clone https://github.com/laramies/theHarvester.git
git clone https://github.com/eth0izzle/bucket-stream
git clone https://github.com/dmuhs/pastebin-scraper.git
git clone https://github.com/breenmachine/httpscreenshot
git clone https://github.com/mschwager/gitem
git clone https://github.com/hardikvasa/google-images-download.git
git clone https://github.com/m0rtem/CloudFail
git clone https://github.com/laramies/metagoofil
git clone https://github.com/TheRook/subbrute.git
git clone https://github.com/ejcx/subdomainer.git
git clone https://github.com/aboul3la/Sublist3r.git
git clone https://github.com/ChrisTruncer/EyeWitness.git
git clone https://github.com/hatRiot/clusterd.git
git clone https://github.com/dmuhs/pastebin-scraper
git clone https://github.com/nyxgeek/o365recon
git clone https://github.com/darkoperator/dnsrecon.git
git clone https://github.com/urbanadventurer/WhatWeb.git
git clone https://github.com/leebaird/discover.git
git clone https://github.com/Mr-Un1k0d3r/RedTeamPowershellScripts.git
git clone https://github.com/makefu/dnsmap.git
cd /opt/pentest/recon/dnsmap
make
cd /opt/pentest
cd
cd /opt/pentest/pwcracking/
git clone https://github.com/lanjelot/patator.git
git clone https://github.com/mikesiegel/ews-crack
git clone https://github.com/galkan/crowbar
git clone https://github.com/magnumripper/JohnTheRipper.git
cd /opt/pentest/pwcracking/JohnTheRipper/src
./configure
make
cd /opt/pentest
mkdir /opt/pentest/pwcracking/hashcat
cd /opt/pentest/pwcracking/hashcat
wget https://hashcat.net/files/hashcat-4.0.1.7z
7z x hashcat-4.0.1.7z
mkdir /opt/pentest/pwcracking/crunch
cd /opt/pentest/pwcracking/crunch
wget -nc "http://downloads.sourceforge.net/project/crunch-wordlist/crunch-wordlist/crunch-3.6.tgz?r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fcrunch-wordlist%2F&ts=1473785126&use_mirror=pilotfiber" -O crunch-3.6.tgz
cd /opt/pentest
cd /opt/pentest/webapps
wget http://testssl.sh/testssl.sh
mkdir /opt/pentest/webapps/arachni
cd /opt/pentest/webapps/arachni
wget -nc https://github.com/Arachni/arachni/releases/download/v1.5.1/arachni-1.5.1-0.5.12-linux-x86_64.tar.gz
tar -xf arachni-1.5.1-0.5.12-linux-x86_64.tar.gz
rm arachni-1.5.1-0.5.12-linux-x86_64.tar.gz
cd /opt/pentest/webapps
git clone https://github.com/XiphosResearch/exploits.git
git clone https://github.com/UltimateHackers/XSStrike
git clone https://github.com/nahamsec/JSParser.git
git clone https://github.com/wpscanteam/wpscan.git
git clone https://github.com/spinkham/skipfish.git
git clone https://github.com/joaomatosf/jexboss.git
git clone https://github.com/internetwache/GitTools.git
git clone https://github.com/OsandaMalith/LFiFreak
git clone https://github.com/maurosoria/dirsearch.git
git clone https://github.com/D35m0nd142/LFISuite.git
git clone https://github.com/P0cL4bs/Kadimus
git clone https://github.com/stasinopoulos/commix.git
git clone https://github.com/kost/dvcs-ripper
git clone https://github.com/mandatoryprogrammer/xssless.git
git clone https://github.com/tennc/fuzzdb.git
git clone https://github.com/tennc/webshell
git clone https://github.com/swisskyrepo/PayloadsAllTheThings
git clone https://github.com/CaledoniaProject/AxisInvoker.git
git clone https://github.com/vs4vijay/heartbleed.git
git clone https://github.com/beefproject/beef
git clone https://github.com/Dionach/CMSmap.git
git clone https://github.com/droope/droopescan.git
git clone https://github.com/gfoss/attacking-drupal.git
git clone https://github.com/sullo/nikto.git
git clone https://github.com/gabtremblay/tachyon.git
git clone https://github.com/sqlmapproject/sqlmap.git
git clone https://github.com/WebBreacher/tilde_enum.git
git clone https://github.com/epinna/weevely3.git
git clone https://github.com/eschultze/URLextractor.git
git clone https://github.com/mazen160/struts-pwn_CVE-2017-9805
git clone https://github.com/leonjza/wordpress-shell
wget -nc "https://downloads.sourceforge.net/project/dirb/dirb/2.22/dirb222.tar.gz?r=https%3A%2F%2Fsourceforge.net%2Fprojects%2Fdirb%2Ffiles%2F&ts=1503500072&use_mirror=astuteinternet" -O dirb222.tar.gz
tar -xf dirb222.tar.gz
chmod -R 755 dirb222/
cd dirb222
./configure
make
cd /opt/pentest/webapps
wget -nc "http://downloads.sourceforge.net/project/dirbuster/DirBuster%20%28jar%20%2B%20lists%29/1.0-RC1/DirBuster-1.0-RC1.tar.bz2?r=http%3A%2F%2Fsourceforge.net%2Fprojects%2Fdirbuster%2Ffiles%2FDirBuster%2520%2528jar%2520%252B%2520lists%2529%2F1.0-RC1%2F&ts=1443459199&use_mirror=iweb" -O DirBuster-1.0-RC1.tar.bz2
bunzip2 DirBuster-1.0-RC1.tar.bz2
tar -xf DirBuster-1.0-RC1.tar
rm DirBuster-1.0-RC1.tar
cd /opt/pentest/webapps/weevely3
pip install -r requirements.txt
cd /opt/pentest
cd /opt/pentest/network/
wget https://raw.githubusercontent.com/vulnersCom/nmap-vulners/master/vulners.nse -O /usr/share/nmap/scripts/vulners.nse
git clone https://github.com/scadastrangelove/SCADAPASS.git
git clone https://github.com/SySS-Research/Seth
git clone https://github.com/DanMcInerney/icebreaker.git
git clone https://github.com/byt3bl33d3r/DeathStar.git
git clone https://github.com/DanMcInerney/creds.py.git
git clone https://github.com/inquisb/keimpx
git clone https://github.com/mlazarov/ddos-stress.git
git clone https://github.com/sensepost/DET.git
git clone https://github.com/DanMcInerney/LANs.py.git
git clone https://github.com/lgandx/Responder
git clone https://github.com/tintinweb/striptls
git clone https://github.com/arthepsy/ssh-audit.git
git clone https://github.com/DanMcInerney/net-creds.git
git clone https://github.com/covertcodes/multitun.git
git clone https://github.com/byt3bl33d3r/MITMf.git
git clone https://github.com/byt3bl33d3r/CrackMapExec.git
git clone https://github.com/nccgroup/redsnarf
git clone https://github.com/m57/ARDT.git
git clone https://github.com/vanhauser-thc/thc-ipv6.git
git clone https://github.com/nccgroup/vlan-hopping.git
git clone https://github.com/Hood3dRob1n/Reverser.git
git clone https://github.com/SpiderLabs/ikeforce.git
go get github.com/bettercap/bettercap
mv /home/root/go /opt/pentest/network/bettercap
git clone https://github.com/robertdavidgraham/masscan.git
cd /opt/pentest/network/masscan/bin
make
cd /opt/pentest/network/MITMf
pip install BeautifulSoup4
pip install -r requirements.txt
pip install mysql-python
cd /opt/pentest/network/MITMf/libs/bdfactory/
git clone https://github.com/secretsquirrel/the-backdoor-factory.git .
cd /opt/pentest/network/CrackMapExec
pip install -r requirements.txt
python setup.py install
cd /opt/pentest
cd /opt/pentest/social_engineering
git clone https://github.com/trustedsec/social-engineer-toolkit.git
git clone https://github.com/philwantsfish/shard
git clone https://github.com/mwrlabs/XRulez.git
git clone https://github.com/dafthack/MailSniper.git
git clone https://github.com/ustayready/CredSniper
wget -nc https://github.com/gophish/gophish/releases/download/v0.5.0/gophish-v0.5.0-linux-64bit.zip
cd /opt/pentest
cd /opt/pentest/reverse/
git clone https://github.com/Gallopsled/pwntools.git
git clone https://github.com/hasherezade/shellconv.git
git clone https://github.com/botherder/viper.git
wget -nc "https://github.com/java-decompiler/jd-gui/releases/download/v1.4.0/jd-gui-1.4.0.jar"
git clone https://github.com/mirror/firmware-mod-kit.git
cd /opt/pentest
cd /opt/pentest/exploits
git clone https://github.com/offensive-security/exploit-database
git clone https://github.com/toolswatch/vFeed.git
git clone https://github.com/secretsquirrel/the-backdoor-factory
git clone https://github.com/FuzzySecurity/PowerShell-Suite.git
git clone https://github.com/peewpw/Invoke-PSImage
git clone https://github.com/madmantm/powershell
wget --header="Accept: text/html" --user-agent="MOZILLA" https://www.shellterproject.com/Downloads/Shellter/Latest/shellter.zip
cd /opt/pentest
cd /opt/pentest/escalation
git clone https://github.com/samratashok/nishang.git
git clone https://github.com/rebootuser/LinEnum.git
git clone https://github.com/huntergregal/mimipenguin.git
mkdir /opt/pentest/escalation/mimikatz
cd /opt/pentest/escalation/mimikatz
wget -nc http://blog.gentilkiwi.com/downloads/mimikatz_trunk.zip
unzip -o mimikatz_trunk.zip
rm -rf mimikatz_trunk.zip
cd /opt/pentest
cd /opt/pentest/exploits
git clone https://github.com/Veil-Framework/Veil-Evasion.git
git clone https://github.com/Veil-Framework/Veil-PowerView.git
cd /opt/pentest/cheatsheets
git clone https://github.com/HarmJ0y/CheatSheets
git clone https://github.com/aramosf/sqlmap-cheatsheet.git
git clone https://github.com/wsargent/docker-cheat-sheet.git
git clone https://github.com/paragonie/awesome-appsec.git
git clone https://github.com/enaqx/awesome-pentest
git clone https://github.com/GrrrDog/Java-Deserialization-Cheat-Sheet
git clone https://github.com/bluscreenofjeff/Red-Team-Infrastructure-Wiki
cd /opt/pentest
mkdir /opt/pentest/crypto
cd /opt/pentest/crypto
git clone https://github.com/SmeegeSec/HashTag.git
git clone https://github.com/psypanda/hashID.git
cd /opt/pentest
cd /opt/pentest/wireless
git clone https://github.com/DanMcInerney/wifijammer.git
git clone https://github.com/derv82/wifite.git
git clone https://github.com/OpenSecurityResearch/hostapd-wpe.git
git clone https://github.com/sophron/wifiphisher.git
git clone https://github.com/s0lst1c3/eaphammer.git
git clone https://github.com/Tylous/SniffAir.git
git clone https://github.com/tehw0lf/airbash.git
cd /opt/pentest
cd /opt/pentest/webapps/wpscan
bundle install
cd /opt/pentest
mkdir /opt/pentest/webapps/zap_proxy
cd /opt/pentest/webapps/zap_proxy
wget -nc "https://github.com/zaproxy/zaproxy/releases/download/2.7.0/ZAP_2.7.0_Linux.tar.gz"
gunzip ZAP_2.7.0_Linux.tar.gz
tar -xf ZAP_2.7.0_Linux.tar
rm -rf ZAP_2.7.0_Linux.tar.gz
cd /opt/pentest
mkdir /opt/pentest/windows/win_tools
cd /opt/pentest/windows/win_tools
wget -nc "http://www.oxid.it/downloads/ca_setup.exe"
wget -nc "http://sniff.su/Intercepter-NG.v1.0.zip"
wget -nc "http://downloads.metasploit.com/data/releases/metasploit-latest-windows-installer.exe"
wget -nc "http://www.ollydbg.de/odbg200.zip"
wget -nc "http://www.ollydbg.de/odbg110.zip"
wget -nc "https://out7.hex-rays.com/files/idafree70_windows.exe"
wget -nc "https://download.sysinternals.com/files/SysinternalsSuite.zip"
wget -nc "https://download.sysinternals.com/files/PSTools.zip"
wget -nc "https://download.sysinternals.com/files/Procdump.zip"
mkdir /opt/pentest/linux/lin_tools
cd /opt/pentest/linux/lin_tools
wget -nc "http://downloads.metasploit.com/data/releases/metasploit-latest-linux-x64-installer.run"
wget -nc "https://out7.hex-rays.com/files/idafree70_linux.run"
echo "[*]correcting user-rights"
cd /
chown -R root:root /opt/pentest
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment