jfrantz1-r7

1) Unlock the database

Linux:
Change all the ‘md5’ entries to ‘trust’ in the /opt/rapid7/nexpose/nsc/nxpgsql/nxpdata/pg_hba.conf file.
example: nano /opt/rapid7/nexpose/nsc/nxpgsql/nxpdata/pg_hba.conf
ctrl + w to find all instances of md5

Windows:

jfrantz1-r7

{
  "Version": "2012-10-17",
  "Statement": {
    "Effect": "Allow",
    "Action": "sts:AssumeRole",
    "Resource": "arn:aws:iam::ACCOUNT-ID-WITHOUT-HYPHENS:role/Test*"
  }
}

jfrantz1-r7

cask_args appdir: '/Applications'

tap 'homebrew/bundle'
tap 'caskroom/cask'
tap 'homebrew/services'
tap 'atlassian/tap'

brew 'vim'
brew 'git'
brew 'go'

jfrantz1-r7

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Action": [
      "cloudtrail:LookupEvents",
      "cloudtrail:DescribeTrails"
     ],
     "Resource": "*"
   },

jfrantz1-r7

$url = "https://s3.amazonaws.com/com.rapid7.razor.public/endpoint/agent/latest/windows/x86_64/PyForensicsAgent-x64.msi"
$output = "$PSScriptRoot\agentInstaller-x86_64.msi"

Invoke-WebRequest -Uri $url -OutFile $output

msiexec /i $output CUSTOM_TOKEN=<REPLACE ME> /qn

rm $output, cafile.pem, client.crt, client.key, client.pem, config.json

jfrantz1-r7

curl -o agent_installer.sh https://s3.amazonaws.com/com.rapid7.razor.public/endpoint/agent/latest/linux/x86_64/agent_control_latest.sh
chmod u+x agent_installer.sh
./agent_installer.sh install_start --token <REPLACE ME>
rm agent_installer.sh

jfrantz1-r7

#!/bin/bash -e

#######################################################################
#
# Metasploit Segmentation and Firewall Testing Target
#
# The Segmentation and Firewall Testing MetaModule uses a server hosted
# by Rapid7 to determine what ports allow egress traffic out of a
# network.  In some scenarios, you may want to set up your own egress
# testing server.  This is useful when you want to test egress between

jfrantz1-r7

{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Action": [
      "cloudtrail:LookupEvents",
      "cloudtrail:DescribeTrails"
     ],
     "Resource": "*"
   },

jfrantz1-r7

{
    "eventVersion": "1.05",
    "userIdentity": {
        "type": "IAMUser",
        "principalId": "PRINCIPALIDHAHA",
        "arn": "arn:aws:iam::123456789101:user/user1",
        "accountId": "123456789101",
        "accessKeyId": "ACCESSKEYIDHAHA",
        "userName": "user1",
        "sessionContext": {

jfrantz1-r7

cd /tmp/
wget http://download2.rapid7.com/download/InsightVM/Rapid7Setup-Linux64.bin
chmod +x Rapid7Setup-Linux64.bin

opt_custname="Test"
opt_custlastname="Last Name"
opt_custcpny="Company Name"
typ=true #false
eng=true #true