└── offensive_script.sh /offensive_script.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | mkdir /root/gist 4 | wget https://gist.githubusercontent.com/nullenc0de/96fb9e934fc16415fbda2f83f08b28e7/raw/146f367110973250785ced348455dc5173842ee4/content_discovery_nullenc0de.txt -O /root/gist/content_discovery_nullenc0de.txt 5 | wget https://gist.githubusercontent.com/nullenc0de/538bc891f44b6e8734ddc6e151390015/raw/a6cb6c7f4fcb4b70ee8f27977886586190bfba3d/passwords.txt -O /root/gist/passwords.txt 6 | wget https://gist.githubusercontent.com/jhaddix/86a06c5dc309d08580a018c66354a056/raw/96f4e51d96b2203f19f6381c8c545b278eaa0837/all.txt -O /root/gist/all.txt 7 | wget https://gist.githubusercontent.com/nullenc0de/9cb36260207924f8e1787279a05eb773/raw/0197d33c073a04933c5c1e2c41f447d74d2e435b/params.txt -O /root/gist/params.txt 8 | wget https://gist.githubusercontent.com/nullenc0de/5dbc5a9c653a03fccfcea4f030a47442/raw/21cac60c3a781b694a37009c89ebd7930aaa061a/altdns.txt -O /root/gist/altdns.txt 9 | 10 | #update 11 | apt update 12 | apt install python3-pip -y 13 | apt-get install python3-venv libxml2 libxml2-dev libz-dev libxslt1-dev python3-dev -y 14 | apt-get install libcurl4-openssl-dev libpcre3-dev libssh-dev -y 15 | apt-get install libpcap-dev 16 | 17 | # FINDOMAIN 18 | wget https://github.com/Edu4rdSHL/findomain/releases/latest/download/findomain-linux 19 | chmod +x findomain-linux 20 | mv findomain-linux findomain 21 | sudo mv findomain /usr/bin/ 22 | 23 | # DNSGEN 24 | pip3 install dnsgen 25 | 26 | #screen 27 | sudo apt-get install screen -y 28 | 29 | Empire 30 | apt install powershell-empire 31 | 32 | #Brutespray 33 | apt-get install brutespray -y 34 | 35 | #commix 36 | sudo apt-get install commix -y 37 | 38 | #sqlmap 39 | sudo apt-get install sqlmap -y 40 | 41 | # Gobuster 42 | apt-get install -y gobuster 43 | 44 | # Nmap 45 | apt-get install -y nmap 46 | 47 | # Amass 48 | apt-get install -y amass 49 | 50 | # Masscan 51 | apt-get install -y masscan 52 | 53 | #Kadimus 54 | git clone https://github.com/P0cL4bs/Kadimus.git /opt/Kadimus || git -C /opt/kadimus pull 55 | cd /opt/Kadimus 56 | make 57 | cd .. 58 | 59 | # Arjun 60 | git clone https://github.com/s0md3v/Arjun.git /opt/Arjun || git -C /opt/parameth pull 61 | ln -s /opt/Arjun/arjun.py /usr/local/bin/arjun 62 | chmod +x /usr/local/bin/arjun 63 | 64 | # Linkfinder 65 | git clone https://github.com/GerbenJavado/LinkFinder.git || git -C /opt/LinkFinder pull 66 | cd /opt/LinkFinder 67 | python3 setup.py install 68 | cd .. 69 | 70 | GO111MODULE=on go get -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei 71 | ln -s /root/go/bin/nuclei /usr/local/bin/nuclei 72 | 73 | apt install -y npm 74 | npm install -g source-map-unpack 75 | 76 | #cme 77 | #apt-get install python3-venv 78 | #python3 -m pip install pipx 79 | #pipx ensurepath 80 | #pipx install crackmapexec 81 | apt install crackmapexec 82 | 83 | #tehbucketeer 84 | sudo git clone https://github.com/abhaybhargav/bucketeer.git /opt/bucketeer || git -C /opt/bucketeer pull 85 | 86 | export GOPATH=/opt/jaeles-project 87 | go get github.com/jaeles-project/jaeles 88 | ln -s /opt/jaeles-project/bin/jaeles /usr/local/bin/jaeles 89 | jaeles config init 90 | 91 | export GOPATH=/opt/pentest-tools 92 | git clone https://github.com/gwen001/pentest-tools.git /opt/pentest-tools 93 | ln -s /opt/pentest-tools/domain-finder.py /usr/local/bin/domain-finder 94 | pip3 install -r /opt/pentest-tools/requirements2.txt 95 | pip3 install -r /opt/pentest-tools/requirements3.txt 96 | 97 | export GOPATH=/opt/bbscope 98 | go get -u github.com/sw33tLie/bbscope 99 | ln -s /opt/bbscope/bin/bbscope /usr/local/bin/bbscope 100 | 101 | export GOPATH=/opt/ssrf-finder 102 | go get -u github.com/random-robbie/ssrf-finder 103 | ln -s /opt/ssrf-finder/bin/ssrf-finder /usr/local/bin/ssrf-finder 104 | 105 | export GOPATH=/opt/httpx 106 | go get -v github.com/projectdiscovery/httpx/cmd/httpx 107 | ln -s /opt/httpx/bin/httpx /usr/local/bin/httpx 108 | 109 | export GOPATH=/opt/wildcheck 110 | go get -u github.com/theblackturtle/wildcheck 111 | ln -s /opt/wildcheck/bin/wildcheck /usr/local/bin/wildcheck 112 | 113 | export GOPATH=/opt/dnsx 114 | go get -v github.com/projectdiscovery/dnsx/cmd/dnsx 115 | ln -s /opt/dnsx/bin/dnsx /usr/local/bin/dnsx 116 | 117 | export GOPATH=/opt/mapcidr 118 | go get -v github.com/projectdiscovery/mapcidr/cmd/mapcidr 119 | ln -s /opt/mapcidr/bin/mapcidr /usr/local/bin/mapcidr 120 | 121 | export GOPATH=/opt/subjs 122 | go get -u -v github.com/lc/subjs 123 | ln -s /opt/subjs/bin/subjs /usr/local/bin/subjs 124 | 125 | export GOPATH=/opt/kxss 126 | go get -u github.com/tomnomnom/hacks/kxss 127 | ln -s /opt/kxss/bin/kxss /usr/local/bin/kxss 128 | 129 | export GOPATH=/opt/cswsh-scanner 130 | go get -v -u github.com/ambalabanov/cswsh-scanner/... 131 | ln -s /opt/cswsh-scanner/bin/cswsh-scanner /usr/local/bin/cswsh-scanner 132 | 133 | export GOPATH=/opt/naabu 134 | go get -v github.com/projectdiscovery/naabu/v2/cmd/naabu 135 | ln -s /opt/naabu/bin/naabu /usr/local/bin/naabu 136 | 137 | export GOPATH=/opt/gospider 138 | go get -u github.com/jaeles-project/gospider 139 | ln -s /opt/gospider/bin/gospider /usr/local/bin/gospider 140 | wget https://github.com/jaeles-project/gospider/releases/download/1.1.5/gospider_1.1.5_linux_x86_64.zip 141 | unzip gospider_1.1.5_linux_x86_64.zip 142 | rm gospider_1.1.5_linux_x86_64.zip 143 | mv gospider_1.1.5_linux_x86_64/gospider /opt/gospider/bin/gospider 144 | rm -rf gospider_1.1.5_linux_x86_64 145 | 146 | export GOPATH=/opt/filter-resolved 147 | go get -u github.com/tomnomnom/hacks/filter-resolved 148 | ln -s /opt/filter-resolved/bin/filter-resolved /usr/local/bin/filter-resolved 149 | 150 | export GOPATH=/opt/dalfox 151 | GO111MODULE=on go get -v github.com/hahwul/dalfox/v2 152 | ln -s /opt/dalfox/bin/dalfox /usr/local/bin/dalfox 153 | 154 | export GOPATH=/opt/unfurl 155 | go get -u github.com/tomnomnom/hacks/unfurl 156 | ln -s /opt/unfurl/bin/unfurl /usr/local/bin/unfurl 157 | 158 | export GOPATH=/opt/puredns 159 | go get -u github.com/d3mondev/puredns/v2 160 | ln -s /opt/puredns/bin/puredns /usr/local/bin/puredns 161 | 162 | export GOPATH=/opt/cidr2ip 163 | go get -u github.com/codeexpress/cidr2ip 164 | ln -s /opt/cidr2ip/bin/cidr2ip /usr/local/bin/cidr2ip 165 | 166 | export GOPATH=/opt/anti-burl 167 | go get -u github.com/tomnomnom/hacks/anti-burl 168 | ln -s /opt/anti-burl/bin/anti-burl /usr/local/bin/anti-burl 169 | 170 | export GOPATH=/opt/interactsh 171 | go get -u github.com/projectdiscovery/interactsh/cmd/interactsh-client 172 | ln -s /opt/interactsh/bin/interactsh-client /usr/local/bin/interactsh-client 173 | 174 | export GOPATH=/opt/goverview 175 | go get github.com/j3ssie/goverview 176 | ln -s /opt/goverview/bin/goverview /usr/local/bin/goverview 177 | 178 | export GOPATH=/opt/ffuf 179 | go get -u github.com/ffuf/ffuf 180 | ln -s /opt/ffuf/bin/ffuf /usr/local/bin/ffuf 181 | 182 | export GOPATH=/opt/get-title 183 | go get -u github.com/tomnomnom/hacks/get-title 184 | ln -s /opt/get-title/bin/get-title /usr/local/bin/get-title 185 | 186 | export GOPATH=/opt/gau 187 | go get -u github.com/lc/gau 188 | ln -s /opt/gau/bin/gau /usr/local/bin/gau 189 | 190 | export GOPATH=/opt/tko-subs 191 | go get github.com/anshumanbh/tko-subs 192 | ln -s /opt/tko-subs/bin/tko-subs /usr/local/bin/tko-subs 193 | 194 | export GOPATH=/opt/webanalyze 195 | go get -u github.com/rverton/webanalyze/... 196 | ln -s /opt/webanalyze/bin/webanalyze /usr/local/bin/webanalyze 197 | 198 | export GOPATH=/opt/otxurls 199 | go get -u github.com/lc/otxurls 200 | ln -s /opt/otxurls/bin/otxurls /usr/local/bin/otxurls 201 | 202 | export GOPATH=/opt/hakrawler 203 | go get github.com/hakluke/hakrawler 204 | ln -s /opt/hakrawler/bin/hakrawler /usr/local/bin/hakrawler 205 | 206 | export GOPATH=/opt/qsreplace 207 | go get -u github.com/tomnomnom/qsreplace 208 | ln -s /opt/qsreplace/bin/qsreplace /usr/local/bin/qsreplace 209 | 210 | #subjack 211 | export GOPATH=/opt/subjack 212 | go get github.com/haccer/subjack 213 | ln -s /opt/subjack/bin/subjack /usr/local/bin/subjack 214 | 215 | #gwdomains 216 | export GOPATH=/opt/gwdomains 217 | go get -u github.com/fuzzerk/gwdomains 218 | ln -s /opt/gwdomains/bin/gwdomains /usr/local/bin/gwdomains 219 | 220 | #tok 221 | export GOPATH=/opt/tok 222 | go get -u github.com/tomnomnom/hacks/tok 223 | ln -s /opt/tok/bin/tok /usr/local/bin/tok 224 | 225 | #fff 226 | export GOPATH=/opt/fff 227 | go get -u github.com/tomnomnom/hacks/fff 228 | ln -s /opt/fff/bin/fff /usr/local/bin/fff 229 | 230 | # HTTProbe 231 | export GOPATH=/opt/httprobe 232 | go get -u github.com/tomnomnom/httprobe 233 | ln -s /opt/httprobe/bin/httprobe /usr/local/bin/httprobe 234 | 235 | # FProbe 236 | export GOPATH=/opt/fprobe 237 | go get -u github.com/theblackturtle/fprobe 238 | ln -s /opt/fprobe/bin/fprobe /usr/local/bin/fprobe 239 | 240 | # Waybackurls 241 | export GOPATH=/opt/waybackurls 242 | go get -u github.com/tomnomnom/waybackurls 243 | ln -s /opt/waybackurls/bin/waybackurls /usr/local/bin/waybackurls 244 | 245 | #goaltdns 246 | export GOPATH=/opt/goaltdns 247 | go get -u github.com/subfinder/goaltdns 248 | ln -s /opt/goaltdns/bin/goaltdns /usr/local/bin/goaltdns 249 | 250 | export GOPATH=/opt/httpx2bbrf 251 | go get -v -u github.com/z0mb13s3c/httpx2bbrf 252 | ln -s /opt/httpx2bbrf/bin/httpx2bbrf /usr/local/bin/httpx2bbrf 253 | 254 | # Gf 255 | export GOPATH=/opt/gf 256 | go get -u github.com/tomnomnom/gf 257 | ln -s /opt/gf/bin/gf /usr/local/bin/gf 258 | git clone https://github.com/1ndianl33t/Gf-Patterns /opt/Gf-Patterns || git -C /opt/Gf-Patterns pull 259 | mkdir ~/.gf 260 | mv /opt/Gf-Patterns/*.json ~/.gf 261 | 262 | # Assetfinder 263 | export GOPATH=/opt/assetfinder 264 | go get -u github.com/tomnomnom/assetfinder 265 | ln -s /opt/assetfinder/bin/assetfinder /usr/local/bin/assetfinder 266 | 267 | # Anew 268 | export GOPATH=/opt/anew 269 | go get -u github.com/tomnomnom/anew 270 | ln -s /opt/anew/bin/anew /usr/local/bin/anew 271 | 272 | # Html-tool 273 | export GOPATH=/opt/html-tool 274 | go get -u github.com/tomnomnom/hacks/html-tool 275 | ln -s /opt/html-tool/bin/html-tool /usr/local/bin/html-tool 276 | 277 | # Gowitness 278 | export GOPATH=/opt/gowitness 279 | go get -u github.com/sensepost/gowitness 280 | ln -s /opt/gowitness/bin/gowitness /usr/local/bin/gowitness 281 | 282 | # Dirsearch 283 | git clone https://github.com/maurosoria/dirsearch.git /opt/dirsearch || git -C /opt/dirsearch pull 284 | ln -s /opt/dirsearch/dirsearch.py /usr/local/bin/dirsearch 285 | chmod +x /usr/local/bin/dirsearch 286 | 287 | # Seclist 288 | git clone https://github.com/danielmiessler/SecLists.git /opt/SecLists || git -C /opt/SecLists pull 289 | 290 | #dnsvalidator 291 | git clone https://github.com/vortexau/dnsvalidator.git || git -C /opt/dnsvalidator pull 292 | cd dnsvalidator 293 | pip3 install -r requirements.txt 294 | python3 setup.py install 295 | cd .. 296 | 297 | # SubBrute 298 | git clone https://github.com/TheRook/subbrute.git /opt/subbrute || git -C /opt/subbrute pull 299 | ln -s /opt/subbrute/subbrute.py /usr/local/bin/subbrute 300 | chmod +x /usr/local/bin/subbrute 301 | 302 | # Massdns 303 | git clone https://github.com/blechschmidt/massdns.git /opt/massdns || git -C /opt/massdns pull 304 | cd massdns 305 | make 306 | make install 307 | cd .. 308 | 309 | # Striker 310 | git clone https://github.com/s0md3v/Striker.git /opt/striker || git -C /opt/striker pull 311 | pip3 install -r /opt/striker/requirements.txt 312 | ln -s /opt/striker/striker.py /usr/local/bin/striker 313 | chmod +x /usr/local/bin/striker 314 | 315 | #github search 316 | git clone https://github.com/gwen001/github-search.git || git -C /opt/github-search pull 317 | pip3 install -r /opt/github-search/requirements2.txt 318 | pip3 install -r /opt/github-search/requirements3.txt 319 | 320 | # XSStrike 321 | git clone https://github.com/s0md3v/XSStrike.git /opt/xsstrike || git -C /opt/xsstrike pull 322 | pip3 install -r /opt/xsstrike/requirements.txt 323 | ln -s /opt/xsstrike/xsstrike.py /usr/local/bin/xsstrike 324 | chmod +x /usr/local/bin/xsstrike 325 | 326 | #slackcat 327 | wget https://github.com/bcicen/slackcat/releases/download/1.7.1/slackcat-1.7.1-linux-amd64 328 | mv slackcat-1.7.1-linux-amd64 /usr/local/bin/slackcat 329 | chmod +x /usr/local/bin/slackcat 330 | 331 | #Configure MSF 332 | sudo service postgresql start 333 | msfdb init 334 | 335 | #Snp13r 336 | git clone https://github.com/1N3/Sn1per.git /opt/Sn1per || git -C /opt/Sn1per pull 337 | bash /opt/Sn1per/install.sh 338 | --------------------------------------------------------------------------------