Skip to content

Latest commit

 

History

145 Commits

Folders and files

NameName
Last commit message
Last commit date
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

General Informations

The project

PenEnv is a suite of scripts to be used for pentesting
It has a goal to provide tools for installing environement, osint, enumeration, exploitation and post-exploitation, and to automize their utilisation.

Installation

Count around 40 to 45 minutes for the forced installation using the default 20 threads and a decent internet connection The time is mainly due to apt and pip upgrade, don't hesitate using --no-update (or -nc) to gain time if that does not seem usefull to you

Main installation

curl -L -s https://raw.githubusercontent.com/lLouu/penenv/main/0%20-%20install.sh | bash

Dev installation

curl -L -s https://raw.githubusercontent.com/lLouu/penenv/main/0%20-%20install.sh | bash -s -- -b dev

Correct wrong installation

curl -L -s https://raw.githubusercontent.com/lLouu/penenv/main/0%20-%20install.sh | bash -s -- -f

Misc script installation

script=<script-you-want> && wget https://raw.githubusercontent.com/lLouu/penenv/main/misc/$script && chmod +x $script

Components

install.sh

install.sh is the script that manage penenv installation.

start.sh

start.sh launches usefull services for your pentesting. It uses some ports

  • 21 for providing hotscripts with ftp server and allowing uploads
  • 53 for dnscat server
  • 80 for providing hotscripts with http server
  • 445 for smb share
  • 7474 for neo4j
  • 8834 for nessus
  • 11601 for ligolo proxy

Detailed Content

Install (112)

Penenv (3)

  • install_penenv
  • start
  • get-session

Lang & downloaders (21)

  • apt upgrade
  • python 3
    • 2to3
    • pip & pip upgrade
    • poetry
  • go
  • ruby
  • java
    • maven
  • nodejs
    • npm
    • yarn
  • rust
  • C
    • make
    • mono
    • dotnet
    • gradle
  • shc
  • git
  • krb5-user
  • 7z
  • winrar

Commands (5)

  • pyftpdlib
  • dnsutils
  • google-chrome
  • jq
  • expect

Tools (61)

Web Scan (26)

Subdomains & paths (15)
  • sublist3r
  • assetfinder
  • amass
  • gowitness
  • subjack
  • certspotter
  • dnsrecon
  • dnsenum
  • waybackurls
  • arjun
  • brokenlinkchecker
  • dirscapper
  • haktrails
  • hakrawler
  • linkfinder
Fuzzers (4)
  • gobuster
  • whatweb
  • ffuf
  • x8
Others (7)
  • wappalyzer
  • testssl
  • nikto
  • wafw00f
  • httprobe
  • secretfinder
  • wpscan

Bruteforce (3)

  • hashcat
  • hydra
  • john

Network (5)

  • nmap
  • onesixtyone
  • rpcbind
  • snmpcheck
  • snmpwalk

Exploits (8)

  • Metasploit & Armitage & Upgrade
  • searchsploit
  • sqlmap
  • commix
  • pixload
  • ghidra
  • gdb
  • Shocker

Other (19)

  • impacket
  • fierce
  • oscanner
  • odat
  • crackmapexec
  • cewl
  • cupp
  • DDexec payloader & script
  • openvpn
  • mitm6
  • proxychain
  • responder
  • Evil winrm
  • BloodyAD
  • smbmap
  • Certipy
  • pydictor
  • rdesktop
  • xfreerdp

Scripts (22)

  • dnscat (server & client)
  • Chisel
  • frp
  • LinPEAS
  • WinPEAS
  • miranda
  • pspy
  • rubeus
  • mimikatz
  • mimipenguin
  • linux-exploit-suggester-2
  • wesng
  • watson
  • powersploit
  • netcat Windows
  • ligolo-ng
  • FullPowers
  • GodPotato
  • ddenum
  • ddsheller
  • filestream
  • shscanner

Services (3)

  • neo4j
  • bloodhound
  • nessus

start

Services

  • neo4j
  • nessus

Servers

  • dnscat
  • openvpn
  • ligolo proxy

File transfer servers

  • http server
  • ftp server
  • smb server

Other servers

  • Hashcat
  • responder

Compatibilities

Tested environnement

  • Parrot
    • hack the box
    • pentesting
    • architect
  • Kali
    • 2023 64 bits
  • Debian
    • 11
  • Ubuntu Desktop
    • 20
    • 22
  • Alpine
    • Standard
    • Extended
    • Raspery
    • VM

Known issue

I001 - Mate compromission

An unidentified process can compromize somehow mate menu and seems to remove parts of mate-desktop-environment package
This can be solved with 'apt install mate-desktop-environment' again and rebooting

Journey map

Public notion page is currently in bulding

OSINT

Name Tools
asn Amass
cdir Amass
domain Amass, assetfinder, haktrails, waybackurl
IRL haktrails
pwd cewl, cupp

Enumeration

Name Tools
network nmap
banner nmap, telnet
fuzz ffuf, gobuster
web arjun, brokenlinkchecker, linkfinder, gowitness, hakrawler, nikto, secretfinder, testssl, wappalyzer, whatweb
upnp miranda

Authentication

Creds

Bruteforce

  • nmap
  • hydra
  • crackmapexec
  • hashcat
  • john

Remote access

  • impacket
  • evil winrm

Vulnerabilities

Scan

  • nmap
  • nessus
  • nikto
  • searchsploit
  • metasploit
  • google

Exploit

  • nmap
  • metasploit
  • sqlmap
  • commix

Binary manipulation

  • ghidra
  • gdb

Backdoor

  • reverse shells
  • add a user
  • metasploit
  • dnscat
  • impacket

Infiltration

Priviledge escalation

  • LinPEAS
  • WinPEAS
  • pspy
  • linux-exploit-suggestor-2
  • watson
  • FullPowers
  • GodPotato
  • rubeus / mimikatz

Dumping

  • impacket
  • bloodhound
  • BloodyAD
  • Certipy
  • crackmapexec
  • rubeus
  • mimikatz
  • mimipenguin

Spying

  • responder
  • mitm6
  • impacket

Pivoting

  • proxychains
  • logolo-ng
  • frp
  • chisel

About

No description, website, or topics provided.

Resources

Stars

0 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors

Languages