Pentesting Cheat Sheet

Recon and Enumeration

--[ links ]

DIY Web Pentesting Tools on Ubuntu
Arachni on Ubuntu 14.04 LTS
BeEF on Ubuntu 14.04 LTS
Burp Suite on Ubuntu 14.04 LTS
CMSMap on Ubuntu 14.04 LTS
Commix on Ubuntu 14.04 LTS
HconSTF on Ubuntu 14.04 LTS
John on Ubuntu 14.04 LTS
Masscan on Ubuntu 14.04 LTS
Metasploit Framework on Ubuntu 14.04 LTS
NMap on Ubuntu 14.04 LTS
NetCat on Ubuntu 14.04 LTS
NoSQLMap on Ubuntu 14.04 LTS
Recon-ng on Ubuntu 14.04 LTS
SET on Ubuntu 14.04 LTS
SQLMap on Ubuntu 14.04 LTS

--[ Recover your wifi password on windows]

C:\Users\jpdltd>netsh wlan show profile
Profiles on interface Wi-Fi:
Group policy profiles (read only)
---------------------------------
 
User profiles
-------------
    All User Profile     : Anothernetwork
    Current User Profile : myhomenetwork
C:\Users\jpdltd>netsh wlan show profile myhomenetwork key=clear
Profile myhomenetwork on interface Wi-Fi:
=======================================================================
Applied: Current User Profile
Profile information
-------------------
    Version                : 1
    Type                   : Wireless LAN
    Name                   : myhomenetwork
    Control options        :
        Connection mode    : Connect automatically
        Network broadcast  : Connect only if this network is broadcasting
        AutoSwitch         : Switch to more preferred network if possible
        MAC Randomization  : Disabled
Connectivity settings
---------------------
    Number of SSIDs        : 1
    SSID name              : "myhomenetwork"
    Network type           : Infrastructure
    Radio type             : [ Any Radio Type ]
    Vendor extension          : Not present
Security settings
-----------------
    Authentication         : WPA2-Personal
    Cipher                 : CCMP
    Authentication         : WPA2-Personal
    Cipher                 : Unknown
    Security key           : Present
    Key Content            : MyS3cr3tPassW0RD!
Cost settings
-------------
    Cost                   : Unrestricted
    Congested              : No
    Approaching Data Limit : No
    Over Data Limit        : No
    Roaming                : No
    Cost Source            : Default

Bash Commands

a
  alias    Create an alias •
  apropos  Search Help manual pages (man -k)
  apt-get  Search for and install software packages (Debian/Ubuntu)
  aptitude Search for and install software packages (Debian/Ubuntu)
  aspell   Spell Checker
  awk      Find and Replace text, database sort/validate/index
b

--[ ls directory sizes ]

ls -1d */ | sudo xargs -I{} du {} -sh && sudo du -sh

--[ KALI 2.0 iso of doom ]

Setting up the OpenVPN Server

We will first set up our OpenVPN server on a Kali Linux box with an external IP address (a.b.c.d). Once that’s done, we’ll build The Kali Linux ISO of Doom on the same machine and make it available for download through HTTP

echo "1" > /proc/sys/net/ipv4/ip_forward

--[ WiFi Pumpkin ]

WiFi-Pumpkin
Framework for Rogue Wi-Fi Access Point Attack

Description
WiFi-Pumpkin is a security tool that provides the Rogue access point to Man-In-The-Middle and network attacks.

Installation
Kali 2.0/WifiSlax 4.11.1/Parrot 2.0.5

Python 2.7

# git clone https://github.com/P0cL4bs/WiFi-Pumpkin.git
# cd WiFi-Pumpkin
# chmod +x installer.sh
# ./installer.sh --install

refer to the wiki for Installation

https://github.com/P0cL4bs/WiFi-Pumpkin