mirror of
https://github.com/QubesOS/qubes-doc.git
synced 2024-10-01 01:25:40 -04:00
127 lines
2.6 KiB
Markdown
127 lines
2.6 KiB
Markdown
|
---
|
||
|
|
layout: doc
|
||
|
|
title: How to create Penetration Testers Framework (PTF) VM
|
||
|
|
permalink: /doc/ptf/
|
||
|
|
---
|
||
|
|
|
||
|
|
How to create Penetration Testers Framework (PTF) VM
|
||
|
|
====================================================
|
||
|
|
|
||
|
|
"The PenTesters Framework (PTF) is a Python script designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing.
|
||
|
|
|
||
|
|
PTF attempts to install all of your penetration testing tools (latest and greatest), compile them, build them, and make it so that you can install/update your distribution on any machine." (source [PTF Readme](https://github.com/trustedsec/ptf/blob/master/README.md))
|
||
|
|
|
||
|
|
1 - Create PTF template
|
||
|
|
|
||
|
|
1. Follow the [Create Debian Based Kali Template](/doc/kali/) till step 7.
|
||
|
|
2. (Optional) Rename the cloned template to `ptf`
|
||
|
|
|
||
|
|
2 - Download PTF
|
||
|
|
|
||
|
|
~~~
|
||
|
|
sudo apt-get install git
|
||
|
|
cd /opt
|
||
|
|
sudo git clone https://github.com/trustedsec/ptf.git
|
||
|
|
~~~
|
||
|
|
|
||
|
|
- (Optional) Configure PTF
|
||
|
|
|
||
|
|
1. Go to configuration directory
|
||
|
|
|
||
|
|
~~~
|
||
|
|
cd /opt/ptf/config
|
||
|
|
~~~
|
||
|
|
|
||
|
|
2. Edit the configuration file
|
||
|
|
|
||
|
|
for example by using vim:
|
||
|
|
|
||
|
|
~~~
|
||
|
|
sudo vim ptf.config
|
||
|
|
~~~
|
||
|
|
|
||
|
|
The configuration options are described in the `ptf.config` file
|
||
|
|
|
||
|
|
4 - Install PTF
|
||
|
|
|
||
|
|
~~~
|
||
|
|
cd /opt/ptf
|
||
|
|
sudo ./ptf
|
||
|
|
~~~
|
||
|
|
|
||
|
|
**Note:** the config file has to be in the same directory as the executable. It is not
|
||
|
|
possible to do sudo ptf/ptf
|
||
|
|
|
||
|
|
PTF will put itself into `/usr/local/bin/ptf`. You can use `ptf` from now on.
|
||
|
|
|
||
|
|
5 - Install/Update modules (tools)
|
||
|
|
|
||
|
|
1. Start PTF
|
||
|
|
|
||
|
|
~~~
|
||
|
|
sudo ptf
|
||
|
|
~~~
|
||
|
|
|
||
|
|
2. Show available modules (tools)
|
||
|
|
|
||
|
|
~~~
|
||
|
|
ptf> show modules
|
||
|
|
~~~
|
||
|
|
|
||
|
|
3. Install/Update modules (all/)
|
||
|
|
|
||
|
|
- Install/Update all tools
|
||
|
|
|
||
|
|
~~~
|
||
|
|
ptf> use modules/install_update_all
|
||
|
|
~~~
|
||
|
|
|
||
|
|
- or by category Install/Update
|
||
|
|
|
||
|
|
~~~
|
||
|
|
ptf> use modules/code-audit/install_update_all
|
||
|
|
~~~
|
||
|
|
|
||
|
|
- or individually (example Metasploit)
|
||
|
|
|
||
|
|
1. Search for module
|
||
|
|
|
||
|
|
~~~
|
||
|
|
ptf> search metasploit
|
||
|
|
[*] Search results below:
|
||
|
|
modules/exploitation/metasploit
|
||
|
|
~~~
|
||
|
|
|
||
|
|
2. Use module
|
||
|
|
|
||
|
|
~~~
|
||
|
|
ptf> use modules/exploitation/metasploit
|
||
|
|
ptf:(modules/exploitation/metasploit)>
|
||
|
|
~~~
|
||
|
|
|
||
|
|
3. Install module
|
||
|
|
|
||
|
|
~~~
|
||
|
|
ptf:(modules/exploitation/metasploit)>install
|
||
|
|
~~~
|
||
|
|
|
||
|
|
4. Run Metasploit
|
||
|
|
|
||
|
|
~~~
|
||
|
|
ptf:(modules/exploitation/metasploit)>exit
|
||
|
|
ptf> quit
|
||
|
|
[*] Exiting PTF - the easy pentest platform creation framework.
|
||
|
|
~$ sudo msfconsole
|
||
|
|
~~~
|
||
|
|
|
||
|
|
6 - Create a AppVMs based on the `ptf` template
|
||
|
|
|
||
|
|
- (Optional) Attach necessary devices
|
||
|
|
|
||
|
|
|
||
|
|
Alternative Options to PTF
|
||
|
|
--------------------------
|
||
|
|
|
||
|
|
- [BlackArch](/doc/blackarch/)
|
||
|
|
- [Kali](/doc/kali/)
|