+- Sinisterly (https://sinister.li)
+-- Forum: General (https://sinister.li/Forum-General)
+--- Forum: The Lounge (https://sinister.li/Forum-The-Lounge)
+--- Thread: Building my own pentest distro (/Thread-Building-my-own-pentest-distro)
RE: Building my own pentest distro - RogueCoder - 06-10-2013
(06-10-2013, 11:01 PM)noize Wrote:(06-10-2013, 07:17 PM)shp0ngl3 Wrote:(06-10-2013, 06:45 PM)Roxy_30 Wrote: Most distros are based off linux. Programs can be easily found for linux, id deffinately suggest building off that. Good luck on building your own distro
Thanks for your input, and obviously I'm building on Linux. Like I mentioned in a reply here I'm using Sabayon SpinBase with awesome wm as the DE
1. I actually believe "distro" is a term for defining Linux-based distributions.
2. I think AwesomeWM is a WM and not a DE.
Just saying.
You are absolutely correct on both points
My retardedness got the best of me 
RE: Building my own pentest distro - noize - 06-10-2013
(06-10-2013, 11:20 PM)shp0ngl3 Wrote:(06-10-2013, 11:01 PM)noize Wrote:(06-10-2013, 07:17 PM)shp0ngl3 Wrote:(06-10-2013, 06:45 PM)Roxy_30 Wrote: Most distros are based off linux. Programs can be easily found for linux, id deffinately suggest building off that. Good luck on building your own distro
Thanks for your input, and obviously I'm building on Linux. Like I mentioned in a reply here I'm using Sabayon SpinBase with awesome wm as the DE
1. I actually believe "distro" is a term for defining Linux-based distributions.
2. I think AwesomeWM is a WM and not a DE.
Just saying.
You are absolutely correct on both points
Everyone mistakes.
RE: Building my own pentest distro - RogueCoder - 06-20-2013
-- Update --
So, after a break I finally had time to get started on this project again. I had to start from scratch, and here's the current status of it
#######################
# INSTALLED
#######################
=== Window Manager ===
- Awesome WM (x11-wm/awesome)
=== Editors ===
- Leafpad (app-editors/leafpad)
- SciTE (app-editors/scite)
=== Tools ===
- hping (net-analyzer/hping)
- nmap (net-analyzer/nmap)
- hydra (net-analyzer/hydra)
- macchanger (net-analyzer/macchanger)
- metasploit (net-analyzer/metasploit)
- wireshark (net-analyzer/wireshark)
- aircrack-ng (net-wireless/aircrack-ng)
- john (app-crypt/johntheripper)
- hashcat (app-crypt/hashcat-bin)
- sqlmap (from github)
- wpscan (from github)
- recon-ng (from bitbucket)
- dirbuster (from website)
- spiderfoot (from github)
- fern wifi cracker (from google code)
- social engineering toolkit (from github)
- burp suite (from website)
- owasp zed attack proxy (from website)
=== Browsers ===
- Firefox (https everywhere + anonymouse search engines) (www-client/firefox)
- Tor Browser (website)
=== Anonymity ===
- tor (net-misc/tor)
- proxychains (net-misc/proxychains)
=== Misc ===
- apache (www-servers/apache)
- mysql (dev-db/mysql)
- postgresql (dev-db/postgresql-server)
- sqlite3 (dev-ruby/sqlite3)
- git (dev-vcs/git)
- ruby (dev-lang/ruby)
- php (dev-lang/php)
- truecrypt (from website)
#######################
# PENDING / DOWNLOADED
#######################
- maltego (from website - not functional yet)
- joomscan (downloaded - not installed)
- ripe
- xhydra
- netcat
It's really starting to take shape now
Haven't completely ditched Kali yet, but I'm moving more and more over to this Got some minor cosmetic improvements and a few tools pending..If you have a suggestion about a tool that you think I should check out, feel free to let me know
RE: Building my own pentest distro - noize - 06-20-2013
How could I miss suggesting OWASP's HTTP DoS tool? Just came to mind seeing "owasp zen attack proxy". Also, I would pre-install uTorrent, Flash Player and Java, just something to start off with.
Why did you mention John the Ripper as "net-crypt"?
P.S: it'd be nice to see a tutorial on how to make your own pentest distro once you're done with this.
RE: Building my own pentest distro - RogueCoder - 06-20-2013
(06-20-2013, 04:57 PM)noize Wrote: How could I miss suggesting OWASP's HTTP DoS tool? Just came to mind seeing "owasp zen attack proxy". Also, I would pre-install uTorrent, Flash Player and Java, just something to start off with.
Why did you mention John the Ripper as "net-crypt"?
P.S: it'd be nice to see a tutorial on how to make your own pentest distro once you're done with this.
I'll check that out
I'm not installing uTorrent. Don't really see the need for it on a pentest distro. Java is obviously installed since several of the tools requires it. Same with Flash Player
So it does play YouTube videos if that's what you were thinking about Regarding JTR, net-crypt is where it's found in the repository
Yeah, I've started a series on my blog, so far only got the introduction published. I will convert it over here as well when everything is set up properly
RE: Building my own pentest distro - noize - 06-20-2013
(06-20-2013, 05:10 PM)shp0ngl3 Wrote:(06-20-2013, 04:57 PM)noize Wrote: How could I miss suggesting OWASP's HTTP DoS tool? Just came to mind seeing "owasp zen attack proxy". Also, I would pre-install uTorrent, Flash Player and Java, just something to start off with.
Why did you mention John the Ripper as "net-crypt"?
P.S: it'd be nice to see a tutorial on how to make your own pentest distro once you're done with this.
I'll check that out
I'm not installing uTorrent. Don't really see the need for it on a pentest distro. Java is obviously installed since several of the tools requires it. Same with Flash Player
Regarding JTR, net-crypt is where it's found in the repository
Yeah, I've started a series on my blog, so far only got the introduction published. I will convert it over here as well when everything is set up properly
That'll be cool to see.
Regarding uTorrent, yes, you might be right, it's just that it looks like a mostly useful tool to me.
And for net-crypt, well, ok, didn't know about it.