Penetration Testing Toolkit

A web interface to automate Scanning, Generating metasploit payload, Network Testing,Exploring CMS,Information Gathering,DNS Queries,IP Tools,Domain tools and much more

Developed by Rakesh Pandey,rakeshpandey@karunya.edu.in

https://github.com/veerupandey/Penetration-Testing-Toolkit

Released under GPL see LICENSE for more information

Installing

git clone https://github.com/veerupandey/Penetration-Testing-Toolkit.git

Option 1(install.sh):

cd Penetration-Testing-Toolkit-master

chmod +x install.sh

./install.sh .

most of the dependencies will be installed but to use some modules(URL FUZZER and to Check if domain uses load balancing) you may need to install 'lbd' and 'uniscan' manually.

If you want you can add kali linux official repos (/etc/sources.list) in your Ubuntu (/etc/sources.list) just to install all the dependencies

Option 2(Manually):

1.Unzip the downloaded zip file

2.Go to the the directory where you extracted your file

cd Penetration-Testing-Toolkit-master

3.Add user 'www-data' into /etc/sudoers file

echo "www-data ALL=(ALL:ALL) NOPASSWD:ALL">>/etc/sudoers

4a.Add the Backbox and Backtrack repositories if you are running Ubuntu

4b.If you are running kali linux,You don't need to add any repositories,but if you want you can add backbox linux repos

Install automater in kali :

wget https://launchpad.net/~backbox/+archive/three/+files/automater_1.2.1-0backbox1_all.deb

dpkg -i automater_1.2.1-0backbox1_all.deb

5.Install apache2 and php

apt-get install apache2 php5 libapache2-mod-php5

6.Copy 'lab' folder to your web root (/var/www)

cp -r lab /var/www

7.Install the dependencies listed below by using apt-get or manually

Dependencies

nmap, mingw32,siege, metasploit(msf), nikto, whatweb, sslyze, wapiti, amap, xprobe, dmitry, blindelephant, dnstracer, curl, lynx, mtr, fping, urlcrazy, automater, shellinabox, nbtscan,uniscan,lbd,weevely,amap

How To Use

open http://yourip/lab in your web browser

Features

• Includes web interface for different tools for web scanning like nmap,uniscan,lbd,wapiti,nikto,whatweb,sslyze etc
• Generates metasploit payload for almost all operating systems (windows,linux,Apple osx,Android)
• Generate backdoors for debian packages,exe files and pdf
• Includes web interface for theharvester
• Google hacking
• Collect various types of datas from a URL
• Includes cms-explorer i.e..scan wordpress,joomla,drpal,blindelephant scan etc
• Includes DNS-related tools,IP tools,ping test,link extractor and checker,traceroute etc
• Domain tools such as domain availability checker,page rank checker,domain age checker,alexa rank,whois lookup etc
• Includes web interface for urlcrazy to generate and test domain typos
• And much more.....