Automating Common Tasks
Often with pen testing, and many other things, there are certain tasks that we repeat over and over. I like to automate the tasks that I perform often and depending on the task, I may use a different scripting language. I decided to script some common tasks I perform every pen test to give me more time to focus on the fun exploitation.
You can find the tool at my github page:
https://github.com/l0gan/PenTestScripts/blob/master/engagementStarter.sh.
To run the script, use the following syntax:
./engagementStarter.sh <target IP/range/subnet> <customer name>
This script will do the following:
- run a nmap discovery scan
- run a full TCP scan against all live hosts found during the discovery scan
- run a top 20 UDP port scan against live hosts
- import scan results to metasploit
- run sslscan against hosts with SSL enabled ports
- run snmpcheck against host with SNMP open
- run eyewitness against hosts with http/https services open to grab screenshots of pages
I plan on adding to the script other tools/tasks run often. If you have a tool/technique you think would be beneficial in the script, leave a comment.