[ZanGetsu]

ortia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised

• Privilege escalation
  
• Lateral movement
  
• Convenience modules
  

Portia is a genus of jumping spider that feeds on other spiders - known for their intelligent hunting behaviour and problem solving capabilities usually only found in larger animals

A new functionality has been added. The new script is 'hopandhack.py'.
The new script ‘hopandhack‘ can be used by attackers to automatic find and hunt hosts that are not directly accessible from the attacker’s machine. In some organizations, IT administrators have to use something called a ‘jump box’ or VPN to access the secure data centre or PCI network where sensitive data are stored.

The ‘hopandhack’ script automates the process of finding hosts with the necessary routes to these secure network and compromises them. The functionality of hopandhack will be incorporated into Portia in the next week or so.

Dependencies

Code:

apt-get update apt-get install -y autoconf automake autopoint libtool pkg-config freetds-dev pip install pysmb tabulate termcolor xmltodict pyasn1 pycrypto pyOpenSSL dnspython netaddr python-nmap cd /opt git clone https://github.com/CoreSecurity/impacket python setup.py install cd /opt git clone https://github.com/libyal/libesedb.git && cd libesedb ./synclibs.sh ./autogen.sh cd /opt git clone https://github.com/csababarta/ntdsxtract && cd ntdsxtract python setup.py install pip install git+https://github.com/pymssql/pymssql.git cd /opt git clone https://github.com/volatilityfoundation/volatility && cd volatility python setup.py install cd /opt git clone https://github.com/SpiderLabs/portia

Download

[mothered]

In my views, I believe hopandhack's functionality and objective Is an excellent addition In automating the search for hosts on a local network.

Yet another fine contribution.