Login Register






Building my own pentest distro filter_list
Author
Message
RE: Building my own pentest distro #21
-- Update --
Ok, so I made my decision on the window manager, and landed on AwesomeWM Smile Why? Well.. It's awesome Wink

Now I'm working on the tools I should install on it, and I've come up with this list so far

- Leafpap
- Truecrypt
- Tor & Tor Browser
- Firefox (with pentest tools)
- apache
- php
- mysql
- postgresql
- sqlmap
- metasploit
- wpcan
- joomscan
- ripe
- nmap
- hydra
- xhydra
- aircrack-ng
- recon-ng
- dirbuster
- wireshark
- spiderfoot
- fern wifi cracker
- set (social engineering toolkit)
- maltego
- netcat
- hashcat
- john
- owasp zed attack proxy (zap)
- subterfuge

I've got the tools I've used most so far. Any suggestions on missing tools? Smile
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog

Reply

RE: Building my own pentest distro #22
(05-31-2013, 08:28 AM)LukeMST Wrote: You can try openbox too Confusedmiling:

I believe that was one of quite a few already made mention of in several links I provided.:lol:

(05-31-2013, 12:18 PM)shp0ngl3 Wrote: -- Update --
Ok, so I made my decision on the window manager, and landed on AwesomeWM Smile Why? Well.. It's awesome Wink
Now I'm working on the tools I should install on it, and I've come up with this list so far
- Leafpap
- Truecrypt
- Tor & Tor Browser
- Firefox (with pentest tools)
- apache
- php
- mysql
- postgresql
- sqlmap
- metasploit
- wpcan
- joomscan
- ripe
- nmap
- hydra
- xhydra
- aircrack-ng
- recon-ng
- dirbuster
- wireshark
- spiderfoot
- fern wifi cracker
- set (social engineering toolkit)
- maltego
- netcat
- hashcat
- john
- owasp zed attack proxy (zap)
- subterfuge
I've got the tools I've used most so far. Any suggestions on missing tools? Smile

Looking good so far brother.
And I didn't know Firefox had pentesting tools worth mentioning.

Reply

RE: Building my own pentest distro #23
(05-31-2013, 05:49 PM)Linuxephus™ Wrote: Looking good so far brother.
And I didn't know Firefox had pentesting tools worth mentioning.

They have some very handy plugins for different tasks like Tamper Data, XSS me, SQLi me, and many more Smile

Here's a good collection of tools to choose from Smile
https://addons.mozilla.org/en-US/firefox...webappsec/

--- Edit ---
What I'm doing atm I think is the hardest part of this project actually Tongue Coming up with a name for the project Biggrin I hate naming stuff. I always get stuck on completely retarded stuff.. At one point I was actually thinking about naming it Hack Community OS Biggrin iSec, Forensec, HackIt and Ethack are also some I've been considering.. Guess I'll just go and play some Black Ops 2 for a while, see if something decent appears Biggrin
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog

Reply

RE: Building my own pentest distro #24
Those are what you're listing as "pentesting tools".
Understood.
I'm already quite familiar with those plugins.
My apologies accordingly.

Meanwhile, I must be off elsewhere for Moderating tasks and then the continuation of a good conversation with two of our other fellow Members.
Shalom.

Reply

RE: Building my own pentest distro #25
(05-31-2013, 06:10 PM)Linuxephus™ Wrote: Those are what you're listing as "pentesting tools".
Understood.
I'm already quite familiar with those plugins.
My apologies accordingly.

Yeah. They are good assets when performing penetration tests where a website is a part of the attack surface.. "pentesting plugins" might be more correct? Smile
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog

Reply

RE: Building my own pentest distro #26
I'd suggest for adding:
- hping;
- Python;
- Perl;
- SciTE.
My Bitcoin address: 1AtxVsSSG2Z8JfjNy9KNFDUN6haeKr7LiP
Give me money by visiting www.google.com here: http://coin-ads.com/6Ol83U

If you want a Bitcoin URL shortener/advertiser, please, use this referral: http://coin-ads.com/register.php?refid=noize

Reply

RE: Building my own pentest distro #27
I'd suggest for adding:
- hping;
- Python;
- Perl;
- SciTE.
My Bitcoin address: 1AtxVsSSG2Z8JfjNy9KNFDUN6haeKr7LiP
Give me money by visiting www.google.com here: http://coin-ads.com/6Ol83U

If you want a Bitcoin URL shortener/advertiser, please, use this referral: http://coin-ads.com/register.php?refid=noize

Reply

RE: Building my own pentest distro #28
(05-31-2013, 08:01 PM)noize Wrote: I'd suggest for adding:
- hping;
- Python;
- Perl;
- SciTE.

Nice! Never heard about hping and SciTE. Thanks for the heads up on those Smile Python and Perl is preinstalled in Sabayon SpinBase Smile
"SQL Injection-a-holic"

Twitter | Security Sucks | My Blog

Reply

RE: Building my own pentest distro #29
(05-31-2013, 08:32 PM)shp0ngl3 Wrote:
(05-31-2013, 08:01 PM)noize Wrote: I'd suggest for adding:
- hping;
- Python;
- Perl;
- SciTE.

Nice! Never heard about hping and SciTE. Thanks for the heads up on those Smile Python and Perl is preinstalled in Sabayon SpinBase Smile

Really? Then, how about Burp? I wouldn't preinstall that, but that's on the other side a nice and pretty popular tool. If you choose to take it in, maybe you should take away a couple of tools that Burp Suite can replace, but let me say again that I myself wouldn't add Burp.

Also, I'd take away a couple of scanners, ain't that a bit too much?

For the Firefox addons, consider Fireforce too.

P.S: then how about Lua? And is GIMP already installed?

S.P.S: xmonad is another great windows manager.
My Bitcoin address: 1AtxVsSSG2Z8JfjNy9KNFDUN6haeKr7LiP
Give me money by visiting www.google.com here: http://coin-ads.com/6Ol83U

If you want a Bitcoin URL shortener/advertiser, please, use this referral: http://coin-ads.com/register.php?refid=noize

Reply

RE: Building my own pentest distro #30
(05-31-2013, 06:14 PM)shp0ngl3 Wrote: Yeah. They are good assets when performing penetration tests where a website is a part of the attack surface.. "pentesting plugins" might be more correct? Smile

LOLing...negative, Pentesting Tools is more than adequate mate.:lol:

Reply