Jump to content
Fi8sVrs

pentest.sh

Recommended Posts

  • Active Members
Posted

So I’ve been using my bt5-nmap.sh script for a few years to quickly gather data whilst on a pentest. The main issue with the way this script worked was it was not easy to continue a session half way through or to modify the number of running threads.

This new script uses dialog which comes as standard in bt5.

Options:

  • arpscan “run arp-scan to create targets.txt”
  • nmap “nmap targets”
  • amap “amap ports found using nmap”
  • sslscan “sslscan targets”
  • gwp “Take photo of web pages found?”
  • snmpscans “Check for default SNMP community strings”
  • snmpget “Get data from SNMP services using known strings”
  • enum4linux “Run enum4linux against targets”
  • smtp “connect to SMTP to check if they allow relaying of mail”
  • uniscan “run uniscan against HTTP(s) ports”
  • nfsscan “connect to nfs services and list contents”

You can checkout the code using the following svn command:

svn checkout phillips321 - Revision 24: /trunk phillips321

or view the code on the googlecode page.

Here are a few photo’s followed by a quick demo video…

1_scan_options.png

2_output_dir.png

3_number_of_threads.png

4_nmap_scan_types.png

5_custom_nmap_port_secletion.png

6_progress_display.png

7_individual_scan_status.png

8_listing_of_weak_ssl_ciphers_and_protocols.png

9_open_ports_summary.png

https://www.phillips321.co.uk/pentest-sh/

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...