pentester Cookbook |

Pentester Chef cookbook - Install & configures some cool stuff for pentesting

Requirements

cookbooks

• git - https://supermarket.chef.io/cookbooks/git
• python - https://supermarket.chef.io/cookbooks/python
• database - https://supermarket.chef.io/cookbooks/database
• postgresql - https://supermarket.chef.io/cookbooks/postgresql
• poise-python - https://supermarket.chef.io/cookbooks/poise-python

services

• postgresql

platforms

• Debian 7
• Debian 8

Usage

Following recipes are available for your run_list:

• pentester::autopwn - Checkout autowpn, install dependencies and configures targets.
• pentester::sn1per - Checkout Sn1per
• pentester::fuzzdb - Checkout fuzzdb
• pentester::gitrob_install - Installs gitrob
• pentester::gitrob_config - Configures gitrob
• pentester::gitrob_db - Configures the Gitrob database
• pentester::webshell - Checkouts webshell
• pentester::itib - Checkouts isthisipbad
• pentester::nullsec - Checkouts null-security tools
• pentester::veil - Checkouts Veil Framework
• pentester::spf - Checkouts Smartphone Pentest Framework
• pentester::ptf - Checkouts and configures The PenTesters Framework
• pentester::mitmproxy - Installs mitmproxy and its dependencies
• pentester::msf_pkg - Installs The Metasploit Framework from package
• pentester::msf_src - Installs The Metasploit Framework from sources
• pentester::msf_db - Setup metasploit database.
• pentester::msf_config - Configures metasploit
• pentester::msf_user_config - Metasploit user's configuration
• pentester::w3af_pkg - Installs W3AF from package
• pentester::w3af_src - Installs W3AF from sources
• pentester::w3af_profiles - Deploy W3AF profiles from attributes

Some recipes installs packages that are only available in Kali linux APT repositories.
I recommend to use the kali cookbook to setup your debian as a kali linux.

Attributes

pentester::default

pentester::db

pentester::autopwn

pentester::sn1per

pentester::fuzzdb

pentester::gitrob

pentester::gitrob_db

pentester::webshell

pentester::itib

pentester::nullsec

pentester::veil

pentester::spf

pentester::ptf

pentester::msf

pentester::msf_db

pentester::w3af

pentester::mitmproxy

Data bags

You can use data bags to configure some tools, here are some data bag examples:

pentester/gitrob.json

{
  "id": "gitrob",
  "gh_auth_token": "your-token",
  "db": {
    "user": "gitrob_user",
    "pass": "gitrob_pass",
    "db": "gitrob_db"
  }
}

pentester/msf.json

{
  "id": "msf",
  "db": {
    "user": "msf_user",
    "pass": "msf_pass",
    "db": "msf_db"
  }
}

Contributing

1. Fork the repository on Github
2. Create a named feature branch (like add_component_x)
3. Write your change
4. Write tests for your change (if applicable)
5. Run the tests, ensuring they all pass
6. Submit a Pull Request using Github

License and Authors

Authors: Sliim sliim@mailoo.org

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.