Skip to content

Instantly share code, notes, and snippets.

@ResistanceIsUseless
Forked from jhaddix/bountyscan_setup.sh
Last active March 8, 2023 12:44
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
  • Save ResistanceIsUseless/474c31c4d2afe8c397cc69812fc252d1 to your computer and use it in GitHub Desktop.
Save ResistanceIsUseless/474c31c4d2afe8c397cc69812fc252d1 to your computer and use it in GitHub Desktop.
Bug bounty environment setup with some additional tools
#!/bin/bash
#note: This is a pretty sloppy script in someplaces so use at your own risk.
########################################
# Configuration
########################################
InstallPath=/home/static/Tools
########################################
mkdir -p $InstallPath/{temp,Scripts/Recon}
echo -e "\e[92m[*] Starting Install... [*]"
echo -e "\e[92m[*] Upgrade installed packages to latest [*]"
echo -e "\e[92m\nRunning a package upgrade...\n"
#sudo apt-get -qq update && apt-get -qq dist-upgrade -y
#sudo apt full-upgrade -y
#Packages from standard repos
echo -e "\e[92m[*] Install Packages From Repo [*]"
echo -e "\e[92m\nInstalling default packages...\n"
sudo apt-get install -y build-essential checkinstall fail2ban gcc golang git sqlite3 ruby-full ruby-dev unzip jruby nodejs clang snapd
sudo apt-get install -y python-dev python-pip python3-pip python-numpy python-scipy python3-dnspython python-setuptools python3-qtpy
sudo apt-get install -y libbz2-dev libc6-dev libgdbm-dev libncursesw5-dev libreadline-gplv2-dev libsqlite3-dev libffi-dev libssl-dev tk-dev libldns-dev xvfb x11-xkb-utils xfonts-100dpi xfonts-75dpi xfonts-scalable xfonts-cyrillic x11-apps libdbus-1-dev libgtk2.0-dev libnotify-dev libgconf2-dev libasound2-dev libcap-dev libcups2-dev libxtst-dev libxss1 libnss3-dev gcc-multilib g++-multilib
sudo apt-get install -y fish zsh xonsh alien terminator nikto nmap wget curl awscli whatweb fonts-powerline pipenv bloodhound firefox-esr eye dnsutils psmisc jq rename xargs snapd
#Ruby RVM
echo -e "\e[92m[*] Install Ruby Version Manager[*]"
#sudo apt-get -qq install gnupg2 -y
curl -sSL https://rvm.io/mpapis.asc | gpg --import -
curl -L https://get.rvm.io | bash -s stable --ruby
echo -e "source /usr/local/rvm/scripts/rvm" >> ~/.bashrc
#npm packages
echo -e "\e[92m[*] NPM Packages"
echo -e "\e[92m[*] Installing Node Red"
npm install -g --unsafe-perm node-red
npm install wkhtmltoimage
npm install -g pown@latest
#npm install phantomjs -g
#npm install casperjs -g
#gem and pip packages
echo -e "\e[92m[*] GEM Packages"
echo -e "\e[92m[*] install wpscan [*]"
sudo gem install wpscan
echo -e "\e[92m[*] install evil-winrm [*]"
sudo gem install evil-winrm
echo -e "\e[92m[*] PIP Packages"
echo -e "\e[92m[*] install snallygaster[*]"
pip3 install snallygaster
echo -e "\e[92m[*] install dnsgen[*]"
pip3 install dnsgen
echo -e "\e[92m[*] install angularjs-csti-scanner (acstis)[*]"
pip3 install https://github.com/tijme/angularjs-csti-scanner/archive/master.zip
echo -e "\e[92m[*] install truffleHog[*]"
pip3 install truffleHog
echo -e "\e[92m[*] install ivre[*]"
pip3 install ivre
echo -e "\e[92m[*] install RDPY[*]"
pip3 install rdpy
echo -e "\e[92m[*] install ldapdomaindump[*]"
sudo pip3 install ldap3 dnspython ldapdomaindump impacket
#sudo pip3 install crackmapexec
echo -e "\e[92m[*] install python-bloodhound[*]"
pip install bloohound
echo -e "\e[92m[*] install pwntools[*]"
pip3 install --upgrade pwntools
#Snap packages
echo -e "\e[92m[*] Snap Packages"
echo -e "\e[92m[*] install amass[*]"
sudo snap install amass
#echo -e "\e[92m[*] Making Bounty Scan Area.. [*]"
#mkdir -p $InstallPath/mass-bounty/
#mkdir -p $InstallPath/mass-bounty/angular-results/
#mkdir -p $InstallPath/mass-bounty/crlf-results/
#mkdir -p $InstallPath/mass-bounty/dirsearch-results/
#mkdir -p $InstallPath/mass-bounty/jexboss-results/
#mkdir -p $InstallPath/mass-bounty/tko-results/
#mkdir -p $InstallPath/mass-bounty/s3-results/
#Bug Bounty tools
#HTTP Parameter Discovery Suite
cd $InstallPath
git clone https://github.com/s0md3v/Arjun
cd $InstallPath/Arjun
#web parameter brute force
echo -e "\e[92m[*] Install parameth[*]"
cd $InstallPath
git clone https://github.com/maK-/parameth.git
cd $InstallPath/parameth
#All-in-One OS command injection and exploitation tool
echo -e "\e[92m[*] Install commix[*]"
cd $InstallPath
git clone https://github.com/commixproject/commix.git
cd $InstallPath/commix
#DNS enumeration across all target DNS servers
echo -e "\e[92m[*] Install bass[*]"
cd $InstallPath
git clone https://github.com/Abss0x7tbh/bass.git
cd $InstallPath/bass
python3 -m pip install -r requirements.txt
#Create multiple intances of a single program
echo -e "\e[92m[*] Install Interlace[*]"
cd $InstallPath
git clone https://github.com/codingo/Interlace
cd $InstallPath/Interlace
cd $InstallPath
echo -e "\e[92m[*] Install JSParser[*]"
git clone https://github.com/nahamsec/JSParser.git
cd $InstallPath/JSParser
sudo python setup.py install
cd $InstallPath
echo -e "\e[92m[*] Install degoogle[*]"
git clone https://github.com/deepseagirl/degoogle.git
cd $InstallPath/degoogle
sudo python setup.py install
cd $InstallPath
echo -e "\e[92m[*] Install BFAC (Backup File Artifacts Checker)[*]"
git clone https://github.com/mazen160/bfac.git
cd $InstallPath/bfac*
sudo pip3 install -r requirements.txt
cd $InstallPath
echo -e "\e[92m[*] Install Sublist3r[*]"
git clone https://github.com/Plazmaz/Sublist3r.git
cd $InstallPath/Sublist3r
sudo pip3 install -r requirements.txt
cd $InstallPath
echo -e "\e[92m[*] Install SSRFmap[*]"
git clone https://github.com/swisskyrepo/SSRFmap.git
cd $InstallPath/SSRFmap
sudo pip3 install -r requirements.txt
cd $InstallPath
echo -e "\e[92m[*] Installing teh_s3_bucketeers.. [*]"
git clone https://github.com/tomdev/teh_s3_bucketeers.git
cd $InstallPath
echo -e "\e[92m[*] Installing S3Scanner.. [*]"
git clone https://github.com/sa7mon/S3Scanner.git
cd $InstallPath/S3Scanner
sudo pip3 install -r requirements.txt
cd $InstallPath
echo -e "\e[92m[*] Install crlf injection[*]"
git clone https://github.com/random-robbie/CRLF-Injection-Scanner.git
cd $InstallPath/CRLF-Injection-Scanner
sudo pip3 install -r requirments.txt
cd $InstallPath
echo -e "\e[92m[*] Installing CORS Scan[*]"
git clone https://github.com/chenjj/CORScanner.git
cd $InstallPath/CORScanner
sudo pip3 install -r requirements.txt
cd $InstallPath
echo -e "\e[92m[*] See SURF[*]"
git clone https://github.com/In3tinct/See-SURF.git
cd $InstallPath
echo -e "\e[92m[*] See Knockpy[*]"
git clone https://github.com/guelfoweb/knock.git
cd $InstallPath/knock
sudo python setup.py install
cd $InstallPath
echo -e "\e[92m[*] Installing dirsearch [*]"
git clone https://github.com/maurosoria/dirsearch.git
cd $InstallPath
echo -e "\e[92m[*] Installing serializekiller [*]"
git clone https://github.com/johndekroon/serializekiller.git
cd $InstallPath
echo -e "\e[92m[*] Installing asnlookup [*]"
git clone https://github.com/yassineaboukir/asnlookup.git
cd $InstallPath/asnlookup
sudo pip3 install -r requirements.txt
cd $InstallPath
echo -e "\e[92m[*] Installing VHostScan [*]"
git clone https://github.com/codingo/VHostScan.git
cd $InstallPath/VHostScan
sudo python3 setup.py install
cd $InstallPath
echo -e "\e[92m[*] Installing virtual-host-discovery [*]"
git clone https://github.com/jobertabma/virtual-host-discovery.git
cd $InstallPath
echo -e "\e[92m[*] Installing findomain [*]"
git clone https://github.com/Edu4rdSHL/findomain.git
cd $InstallPath
echo -e "\e[92m[*] Installing Smuggler [*]"
mkdir Smuggler
cd Smuggler
wget https://raw.githubusercontent.com/gwen001/pentest-tools/master/smuggler.py
cd $InstallPath
echo -e "\e[92m[*] Installing LinkFinder [*]"
git clone https://github.com/GerbenJavado/LinkFinder.git
cd LinkFinder
pip3 install -r requirements.txt
python setup.py install
#cd $InstallPath
#echo -e "\e[92m[*] Installing CloudStorageFinder [*]"
#git clone https://github.com/digininja/CloudStorageFinder.git
#cd $InstallPath
#echo -e "\e[92m[*] Installing Eyeballer Screenshot ML Review [*]"
#git clone https://github.com/BishopFox/eyeballer.git
#cd $InstallPath/eyeballer
#pip install -r requirements.txt
#sudo pip3 install -r requirements-gpu.txt
cd $InstallPath
echo -e "\e[92m[*] Installing archaeologit [*]"
git clone https://github.com/peterjaric/archaeologit.git
cd $InstallPath
echo -e "\e[92m[*]Installing secretfinder [*]"
git clone https://github.com/m4ll0k/SecretFinder.git
cd $InstallPath
echo -e "\e[92m[*] Installing Mass DNS [*]"
git clone https://github.com/blechschmidt/massdns.git
cd massdns
sudo make
sudo make install
cd ..
#cd $InstallPath
#echo -e "\e[92m[*] Installing Sub Brute [*]"
#git clone https://github.com/TheRook/subbrute.git
#cd..
#cd $InstallPath
#echo -e "\e[92m[*] Installing ActiveDirectory LdapDomainDump [*]"
#git clone https://github.com/dirkjanm/ldapdomaindump.git
#cd $InstallPath/ldapdomaindump
#python setup.py install
cd $InstallPath
echo -e "\e[92m[*] Installing Expired Domain Take Overs [*]"
git clone https://github.com/JordyZomer/autoSubTakeover.git
cd $InstallPath/autoSubTakeover
sudo pip3 install -r requirements.txt
cd $InstallPath
echo -e "\e[92m[*] Installing Striker [*]"
git clone https://github.com/UltimateHackers/Striker.git
cd $InstallPath/Striker
sudo pip3 install -r requirements.txt
cd $InstallPath
echo -e "\e[92m[*] Installing Spiderfoot [*]"
git clone https://github.com/smicallef/spiderfoot.git
cd $InstallPath/spiderfoot
sudo pip3 install -r requirements.txt
#Network Pentesting Tools
cd $InstallPath
echo -e "\e[92m[*] Installing NullLinux [*]"
git clone https://github.com/m8r0wn/nullinux
cd nullinux
sudo bash setup.sh
echo -e "\e[92m[*] Install pwndrop [y]es, [n]o:[*]"
read answer
if [ $answer == y ]; then
echo -e "\e[92m[*] Installing pwndrop[*]"
cd $InstallPath/temp
curl https://raw.githubusercontent.com/kgretzky/pwndrop/master/install_linux.sh | sudo bash
else
echo -e "\e[92m[*] Skipping pwndrop[*]"
fi
#Still tricky to get the shell env right during install every time
#echo -e "\e[92m[*] Install CrackMapExec? [y]es, [n]o:[*]"
#read cme
#if [ $cme == y ]; then
# cd $InstallPath
# echo "\e[92m[*] Installing CrackMapExec [*]"
# sudo apt-get install -y libssl-dev libffi-dev python-dev build-essential
# sudo pip3 install --user pipenv
# PATH=$PATH:/$USER/.local/bin
# cd $InstallPath
# git clone --recursive https://github.com/byt3bl33d3r/CrackMapExec
# cd CrackMapExec && pipenv install
# pipenv shell
# python setup.py install
# exit
#else
# echo -e "\e[92m[*] Skipping CrackMapExec[*]"
#fi
echo -e "\e[92m[*] Install gef [y]es, [n]o:[*]"
read answer
if [ $answer == y ]; then
echo -e "\e[92m[*] Installing gef[*]"
cd $InstallPath/temp
wget -q -O- https://github.com/hugsy/gef/raw/master/scripts/gef.sh | sh
else
echo -e "\e[92m[*] Skipping gef[*]"
fi
echo -e "\e[92m[*] Install Wordlists & Payloads? [y]es, [n]o:[*]"
read answer
if [ $answer == y ]; then
echo -e "\e[92m[*] Installing Wordlists & Payloads in /usr/share/wordlists/[*]"
cd /usr/share/wordlists/
sh -c "$(curl -fsSL https://raw.githubusercontent.com/foospidy/payloads/master/get.sh)"
else
echo -e "\e[92m[*] Skipping Wordlists & Payloads[*]"
fi
#wget https://gist.github.com/jhaddix/86a06c5dc309d08580a018c66354a056/raw/all.txt
wget https://raw.githubusercontent.com/ResistanceIsUseless/recon/master/apiwords.txt
wget https://raw.githubusercontent.com/ResistanceIsUseless/recon/master/dirhidden.txt
wget https://raw.githubusercontent.com/ResistanceIsUseless/recon/master/patterns.txt
echo -e "\e[92m[*] Installing Recon Automation"
echo -e "\e[92m[*] Install Recon-Pipeline? [y]es, [n]o:[*]"
read answer
if [ $answer == y ]; then
echo -e "\e[92m[*] Installing Recon-Pipeline[*]"
cd $InstallPath/Scripts/Recon
git clone https://github.com/epi052/recon-pipeline
cd $InstallPath/Scripts/Recon/recon-pipeline
pipenv install cmd2
exit
else
echo -e "\e[92m[*] Skipping Recon-Pipeline[*]"
fi
echo -e "\e[92m[*] Install AutoRecon? [y]es, [n]o:[*]"
read answer
if [ $answer == y ]; then
echo -e "\e[92m[*] Installing AutoRecon[*]"
cd $InstallPath/Scripts/Recon
git clone https://github.com/Tib3rius/AutoRecon.git
cd $InstallPath/Scripts/Recon/AutoRecon
sudo pip3 install -r requirements.txt
else
echo -e "\e[92m[*] Skipping AutoRecon[*]"
fi
echo -e "\e[92m[*] Install Silver [y]es, [n]o:[*]"
read answer
if [ $answer == y ]; then
echo -e "\e[92m[*] Installing Silver[*]"
cd $InstallPath/Scripts/Recon
git clone https://github.com/s0md3v/Silver.git
cd $InstallPath/Scripts/Recon/Silver
sudo pip3 install -r requirements.txt
else
echo -e "\e[92m[*] Skipping Silver[*]"
fi
#https://cobbr.io/Covenant.html
echo -e "\e[92m[*] Install Covenant [y]es, [n]o:[*]"
read answer
if [ $answer == y ]; then
echo -e "\e[92m[*] Installing Covenant[*]"
cd $InstallPath/
git clone –recurse-submodules https://github.com/cobbr/Covenant
wget -q https://packages.microsoft.com/config/ubuntu/19.04/packages-microsoft-prod.deb -O $InstallPath/Covenant/packages-microsoft-prod.deb
cd $InstallPath/Covenant/
sudo dpkg -i packages-microsoft-prod.deb
sudo apt-get install apt-transport-https
sudo apt-get install dotnet-sdk-2.2
cd $InstallPath/Covenant/Covenant
dotnet build
else
echo -e "\e[92m[*] Skipping Covenant[*]"
fi
#Remaining User Setup Script
cd /$InstallPath/temp
wget -q https://gist.githubusercontent.com/ResistanceIsUseless/2a0622f45f8c9badc5275400c4d9c4fd/raw/b44727133b8cf2e04e3af6be8f2ebca126be91d3/user_setup.sh | su -u $SUDO_USER -c sh
echo -e "\e[1;5;92m[*]Finished Installing....[*]"
exit 1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment