qubes-doc/external/os-guides/pentesting/blackarch.md

97 lines
2.4 KiB
Markdown
Raw Normal View History

2016-06-13 20:24:23 -04:00
---
layout: doc
title: How to Create a BlackArch VM
2016-06-27 14:57:40 -04:00
permalink: /doc/pentesting/blackarch/
redirect_from:
- /doc/blackarch/
2016-06-13 20:24:23 -04:00
---
2018-02-19 05:40:39 -05:00
**General reminder:**
2016-06-17 12:19:35 -04:00
- The installation scripts and provided tools may have bugs, be vulnerable to Man in the Middle (MitM) attacks or other vulnerabilities.
- Adding additional repositories or tools for installing software extends your trust to those tool providers.
2016-06-17 12:19:35 -04:00
Please keep in mind that using such a VM or VMs based on the template for security and privacy critical tasks is not recommended.
2016-06-17 12:19:35 -04:00
2016-06-13 20:24:23 -04:00
How to Create a BlackArch VM
============================
2017-05-03 05:50:45 -04:00
[BlackArch](https://www.blackarch.org) Linux is an [Arch Linux](https://www.archlinux.org)-based distribution for penetration testers and security researchers. The repository contains [1434](https://www.blackarch.org/tools.html) tools.
2016-06-13 20:24:23 -04:00
2017-05-03 05:50:45 -04:00
- List of [tools](https://www.blackarch.org/tools.html)
- [Installation Instructions](https://www.blackarch.org/downloads.html)
2016-06-13 20:24:23 -04:00
Create ArchLinux Based BlackArch Template
-----------------------------------------
1. Create ArchlLinux Template
2016-06-13 20:24:23 -04:00
- Follow the [Archlinux Template instructions](/doc/building-archlinux-template/)
2016-06-13 20:24:23 -04:00
2. Update Template
2016-06-13 20:24:23 -04:00
sudo pacman -Syyu
2016-06-13 20:24:23 -04:00
3. Clone template
2016-06-13 20:24:23 -04:00
1. Via Qubes VM Manager
2016-06-13 20:24:23 -04:00
2. Via command line
2016-06-13 20:24:23 -04:00
qvm-clone archlinux blackarch
2016-06-13 20:24:23 -04:00
4. Install BlackArch repository
2016-06-13 20:24:23 -04:00
$ curl -O https://blackarch.org/strap.sh
2016-06-13 20:24:23 -04:00
2017-02-18 22:48:00 -05:00
# The SHA1 sum should match: 34b1a3698a4c971807fb1fe41463b9d25e1a4a09
$ sha1sum strap.sh
2016-06-13 20:24:23 -04:00
# Set execute bit
$ chmod +x strap.sh
2016-06-13 20:24:23 -04:00
# Run strap.sh
$ sudo ./strap.sh
2016-06-13 20:24:23 -04:00
5. Install tools
2016-06-13 20:24:23 -04:00
- install all tools
2016-06-13 20:24:23 -04:00
sudo pacman -S blackarch
2016-06-13 20:24:23 -04:00
- or by category:
2016-06-13 20:24:23 -04:00
# list available categories
pacman -Sg | grep blackarch
2016-06-13 20:24:23 -04:00
# install category
sudo pacman -S blackarch-<category>
2016-06-13 20:24:23 -04:00
# example
sudo pacman -S blackarch-forensic
2016-06-13 20:24:23 -04:00
- or specific tool
2016-06-13 20:24:23 -04:00
# Search for tool
pacman -Ss <tool-name>
2016-06-13 20:24:23 -04:00
# Install tool
sudo pacman -S <tool-name>
2016-06-13 20:24:23 -04:00
# Example
pacman -Ss burpsuite
sudo pacman -S burpsuite
2016-06-13 20:24:23 -04:00
6. Create a AppVMs based on the `blackarch` template
- (Optional) Attach necessary devices
2016-06-13 20:24:23 -04:00
Alternative Options to BlackArch
--------------------------------
- [Kali](/doc/pentesting/kali/)
- [PenTester Framework (PTF)](/doc/pentesting/ptf/)
- [Pentesting](/doc/pentesting/)