nccgroup / autopwn Goto Github PK

Specify targets and run sets of tools against them

License: GNU Affero General Public License v3.0

Python 100.00%

autopwn's Introduction

autopwn

Specify targets and run sets of tools against them

autopwn is designed to make a pentester's life easier and more consistent by allowing them to specify tools they would like to run against targets, without having to type them in a shell or write a script. This tool will probably be useful during certain exams as well..

Installation

It is recommended that you use the docker image while exposing TCP 5000 for autopwn clients to connect to. This is because the autopwn docker image is already setup (tools are installed and in the right place).

Only allow this package to listen on a loopback IP address. If you have this package listen on a public IP, you're allowing arbitrary users to execute commands as root on your server. Eventually, HTTPS and credentials will be required, but for now, don't be a moron.

From Docker

1. Execute ``docker pull rascal999/autopwn`` 2. Run ``docker run -i -t -p 127.0.0.1:5000:5000 rascal999/autopwn /usr/sbin/autopwn`` 3. Run autopwn client (you can get the Java application at https://github.com/rascal999/autopwn-gui)

From the Python Package Index (for development)

Execute pip install autopwn

From this repository

Clone the Git repository
Change into the newly created directory
Execute pip install .

Usage

Running autopwn will start the web server.

Sample output

 * Running on http://127.0.0.1:5000/ (Press CTRL+C to quit)
 * Restarting with stat
127.0.0.1 - - [15/Nov/2015 11:04:41] "GET /ping HTTP/1.1" 200 -
127.0.0.1 - - [15/Nov/2015 11:04:41] "GET /favicon.ico HTTP/1.1" 404 -

Contributing

Fork it!
Create your feature branch: git checkout -b my-new-feature
Commit your changes: git commit -am 'Add some feature'
Push to the branch: git push origin my-new-feature
Submit a pull request :D

Credits

Developed by Aidan Marlin (aidan [dot] marlin [at] nccgroup [dot] com) while working at NCC Group. Second release by Steven van der Baan.

I'd like to thank the following contributors for their work on previous autopwn versions:

Selfegris
0xsauby
berdario
rascal999

autopwn's People

Stargazers

Watchers

Forkers

selfegris vzp cy70sin3 wyzeman capibara- ksmaheshkumar crudbug shalekesan 0xsauby berdario atimorin johnjohnsp1 nolteg sh1nu11bi dwaddle leveryd twb725 dipsec rubicondimitri carnal0wnage team-firebugs rascal999 lucabongiorni rajivraj bushalo antonini olivierh59500 n4yk unix1010 lakshmidm bemonolit mgcfish ch4p34un0ir houcy h0k5 jsmit260 trap1001 seabreg subzeroking ericbaranowski paran0ids0ul buglessdr hrk31c hybridious susantaroy2002 requeijaum threezerobravoteam cloudxtreme projecthaidar tnexperts vdbaan ma3k4h3d dongwgnod ntgitdude23 badbiddy w3llr00t3d modulexcite khsammy prodject skilincer helloexp mlynchcogent hellmandan coredamage 1amunvalid dynamicdesignz chaos-monkey-island michpice geek-batman 5l1v3r1 ikv163 arukaminado kimmi11 an0nym0u5101 etmea hartl3y94 nosorry auto-hack-repos fdlucifer f1r4s ghost1141 jrsk23 tommalvoriddle bilna781 deviantops ajikmadnoh cloudsecdb

Traceback (most recent call last):                                                                                                                                                                                                            
  File "/usr/bin/autopwn", line 11, in <module>                                                                                                                                                                                               
    load_entry_point('autopwn==2.0.0', 'console_scripts', 'autopwn')()                                                                                                                                                                        
  File "/usr/lib/python3.8/site-packages/pkg_resources/__init__.py", line 490, in load_entry_point                                                                                                                                            
    return get_distribution(dist).load_entry_point(group, name)                                                                                                                                                                               
  File "/usr/lib/python3.8/site-packages/pkg_resources/__init__.py", line 2859, in load_entry_point                                                                                                                                           
    return ep.load()                                                                                                                                                                                                                          
  File "/usr/lib/python3.8/site-packages/pkg_resources/__init__.py", line 2450, in load                                                                                                                                                       
    return self.resolve()                                                                                                                                                                                                                     
  File "/usr/lib/python3.8/site-packages/pkg_resources/__init__.py", line 2456, in resolve                                                                                                                                                    
    module = __import__(self.module_name, fromlist=['__name__'], level=0)                                                                                                                                                                     
  File "/usr/lib/python3.8/site-packages/autopwn2/app.py", line 7, in <module>                                                                                                                                                                
    from autopwn2.api import api                                                                                                                                                                                                              
  File "/usr/lib/python3.8/site-packages/autopwn2/api/__init__.py", line 4, in <module>                                                                                                                                                       
    from flask_restplus import Api                                                                                                                                                                                                            
  File "/usr/lib/python3.8/site-packages/flask_restplus/__init__.py", line 4, in <module>                                                                                                                                                     
    from . import fields, reqparse, apidoc, inputs, cors                                                                                                                                                                                      
  File "/usr/lib/python3.8/site-packages/flask_restplus/fields.py", line 17, in <module>
    from werkzeug import cached_property
ImportError: cannot import name 'cached_property' from 'werkzeug' (/usr/lib/python3.8/site-packages/werkzeug/__init__.py)

Because of noirbizarre/flask-restplus#777, but if you look at noirbizarre/flask-restplus#778 (comment) and noirbizarre/flask-restplus#777 (comment) it says:

flask-restplus work has been discontinued due to maintainers not having pypi keys. See the drop in replacement, flask-restx. It's an official fork by the maintainer team. We have already fixed the issue there

No. Flask-restplus is no longer maintained. The former maintainers do not have privileges to push to pypi, and after many months of trying, we forked the project. Check out flask-restx. It's a drop in replacement and we are roadmapping, designing, and making fixes...for instance, we already patched for Werkzeug

So I think a move from flask-restplus to flask-restx is required