HOTWAX

Hotwax is a script to provision a set of extra pentesting tools onto a Kali Linux machine in a consistent manner.

Getting Started

These instructions will get you a copy of the project up and running on your local machine for deployment AND development purposes.

Prerequisites

• Kali Linux 2019.4 or older. (Presently, will not work on Kali LInux 2020.1 or newer, due to change from default root account configuration to non-root user account configuration. To be fixed in near future.)

• Git

• Ansible

apt update -y
apt install -y git ansible

Installing

Clone the HOTWAX repository.

cd ~
git clone https://github.com/BrashEndeavours/hotwax

Run the playbook

cd hotwax
ansible-playbook playbook.yml

Tools updated:

• Samba 4.10.8 (smbclient,rpcclient,nmblookup - Patched to fix issues with polenum, enum4linux, and restoring smbclient connection output.
• enum4linux - Fix minor parsing issues. Updates temporarily included by BrashEndeavours fork, until PR is merged.

Tools installed:

• Arjun - Arjun is an HTTP parameter discovery suite.
• AutoRecon - AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.
• BloodHound - Six Degrees of Domain Admin.
• chisel - A fast TCP tunnel over HTTP
• evil-winrm - The ultimate WinRM shell for hacking/pentesting.
• gobuster - Directory/File, DNS and VHost busting tool written in Go
• LinEnum - Local Linux Enumeration & Privilege Escalation Script
• nishang - Framework and collection of scripts and payloads which enables usage of PowerShell for penetration testing.
• One-Lin3r - On demand one-liners that aid in penetration testing operations, privilege escalation and more
• OSCP Exam Report Template - Modified template for the OSCP Exam
• Powerless - A Windows privilege escalation (enumeration) script designed with OSCP labs (i.e. legacy Windows machines without Powershell) in mind.
• PowerSploit - Collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment.
• proxychains-ng - proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project.
• pspy - Monitor linux processes without root permissions.
• SecLists - Collection of usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and more.
• sherlock - Find usernames across social networks.
• sshuttle - Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.
• webshell - This is a webshell open source project.
• Windows PHP Reverse Shell - Simple php reverse shell implemented using bina- https://github.com/ucki/zauberfeder, based on an webshell.
• XSStrike - Advanced XSS scanner
• zauberfeder - A LaTex reporting template.
• crackmapexec - A swiss army knife for pentesting networks.
• windows-kernel-exploits - Precompiled Windows Exploits.
• exiftool - ExifTool meta information reader/writer. Great for viewing and manipulating exif-data.
• html2text - Convert HTML to clean, easy-to-read plain ASCII text.
• mingw-w64 - GCC for Windows 64 & 32 bits.
• msfpc - MSFvenom Payload Creator (MSFPC)
• wce - A security tool to list logon sessions and add, change, list and delete associated credentials.
• Windows-Exploit-Suggester - This tool compares a targets patch levels against the Microsoft vulnerability database in order to detect potential missing patches on the target.
• pyftpdlib - Extremely fast and scalable Python FTP server library. Spin up FTP Server with a one-liner.
• ssh-os - Nmap Script that identifies Debian, Ubuntu, FreeBSD version based on default SSH banner response.
• empire - Empire is a post-exploitation framework that includes a pure-PowerShell2.0 Windows agent, and a pure Python 2.6/2.7 Linux/OS X agent.
• medusa - Medusa is a speedy, parallel, modular login brute-forcer. Similar to ncrack and Hydra.

Contributing

Please read CONTRIBUTING.md for details on the code of conduct, and the process for submitting pull requests.

Authors

• Blake Mackey (@BrashEndeavours) - Initial work - BrashEndeavours

Contributors

• Want your name here? See CONTRIBUTING.md for details.

• Alec Mather-Shapiro (whoisflynn) - Added AutoRecon, Windows PHP Reverse Shell, and OSCP Exam Template - whoisflynn

• Richard Lam (richlamdev) - Added crackmapexec, windows-kernel-exploits, exiftool, html2text, mingw-w64, msfpc, wce, windows-exploit-suggester, pyftpdlib, ssh-os.nse, medusa - richhlamdev

Acknowledgements

• Rebootuser (@rebootuser) - LinEnum
• D4Vinci (@Seekurity) - One-Lin3r
• PowerShellMafia - PowerSploit
• Daniel Miessler - SecLists
• Nikhil "SamratAshok" Mittal - nishang
• Dominic Breuker - pspy
• sherlock-project - sherlock
• Tib3rius - AutoRecon
• Dhayalanb - Windows PHP Reverse Shell
• whoisflynn - OSCP Exam Report Template
• jpillora - chisel
• OJ Reeves - gobuster
• rofl0r - proxychains-ng
• Brian May - sshuttle
• tennc - webshell
• PortcullisLabs - enum4linux
• M4ximuss - Powerless
• Somdev Sangwan - Arjun
• ucki - zauberfeder
• BloodHoundAD - BloodHound
• byt3bl33d3r - crackmapexec
• abatchy17 - WindowsExploits
• exiftol - exiftool
• Alir3z4 - html2text
• mingw-w64 - mingw-w64
• g0tmi1k - msfpc
• ampliasecurity.com - wce
• AonCyberLabs - Windows-Exploit-Suggester
• giampaolo - pyftpdlib
• richlamdev - ssh-os
• harmj0y - empire
• foofus - foofus.net

License

This project is licensed under the MIT License - see the LICENSE.md file for details