Pentesting Machine

Operating System

I either use Kali Linux or ParrotOS. Usually cloning the seclists in the home directory and installing any tool I feel needed.

Tools

The following list is a list of must-have tools I add on top of the already available ones in the distros.

This list will be expanded with time

• exploitdb

• Oracle-Tools-setup.sh

• Impacket MSSQL client and tools

• Nuclei

Folder structure

Projects/
└── Acme Company
    ├── EPT
    │   ├── evidence
    │   │   ├── credentials
    │   │   ├── data
    │   │   └── screenshots
    │   ├── logs
    │   ├── scans
    │   ├── scope
    │   └── tools
    └── IPT
        ├── evidence
        │   ├── credentials
        │   ├── data
        │   └── screenshots
        ├── logs
        ├── scans
        ├── scope
        └── tools

EPT and IPT stand for External/Internal Penetration Testing

Note taking app

There are multiple available. I will note here which one I'll stick to using after I have a definitive answer

Possibilities include

Cherrytree	Visual Studio Code	Evernote
Notion	GitBook	Sublime Text
Notepad++	LogSeq

Oracle-Tools-setup.sh

#!/bin/bash

sudo apt-get install libaio1 python3-dev alien -y
git clone https://github.com/quentinhardy/odat.git
cd odat/
git submodule init
git submodule update
wget https://download.oracle.com/otn_software/linux/instantclient/2112000/instantclient-basic-linux.x64-21.12.0.0.0dbru.zip
unzip instantclient-basic-linux.x64-21.12.0.0.0dbru.zip
wget https://download.oracle.com/otn_software/linux/instantclient/2112000/instantclient-sqlplus-linux.x64-21.12.0.0.0dbru.zip
unzip instantclient-sqlplus-linux.x64-21.12.0.0.0dbru.zip
export LD_LIBRARY_PATH=instantclient_21_12:$LD_LIBRARY_PATH
export PATH=$LD_LIBRARY_PATH:$PATH
pip3 install cx_Oracle
sudo apt-get install python3-scapy -y
sudo pip3 install colorlog termcolor passlib python-libnmap
sudo apt-get install build-essential libgmp-dev -y
pip3 install pycryptodome

Test with ./odat.py -h