pwn 0.4.333

data/packer/provisioners/install_vagrant_ssh_key.sh

@@ -0,0 +1,15 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+for user in pwnadmin admin; do
+  if [[ ! -d "/home/${user}/.ssh" ]]; then
+    sudo mkdir -p /home/$user/.ssh
+    sudo chmod 0700 /home/$user/.ssh
+    sudo touch /home/$user/.ssh/authorized_keys
+    sudo chmod 0600 /home/$user/.ssh/authorized_keys
+    sudo chown -R $user:$user /home/$user/.ssh
+  fi
+
+  $screen_cmd "wget --no-check-certificate https://raw.githubusercontent.com/hashicorp/vagrant/master/keys/vagrant.pub -O ->> /home/${user}/.ssh/authorized_keys ${assess_update_errors}"
+  grok_error
+done

data/packer/provisioners/jenkins.sh

@@ -0,0 +1,62 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+pwn_provider=`echo $PWN_PROVIDER`
+
+# Make sure the pwn gemset has been loaded
+source /etc/profile.d/rvm.sh
+ruby_version=$(cat ${pwn_root}/.ruby-version)
+rvm use ruby-$ruby_version@pwn
+
+printf "Installing Jenkins ********************************************************************"
+domain_name=`hostname -d`
+wget -q -O - https://pkg.jenkins.io/debian-stable/jenkins.io.key | sudo apt-key add -
+
+# Get back to a Java version Jenkins supports
+sudo ln -sf /usr/lib/jvm/java-11-openjdk-amd64/bin/java /etc/alternatives/java
+sudo sh -c 'echo deb https://pkg.jenkins.io/debian-stable binary/ > /etc/apt/sources.list.d/jenkins.list'
+
+$screen_cmd "${apt} update"
+grok_error
+
+$screen_cmd "${apt} install -yq openjdk-11-jdk"
+grok_error
+
+$screen_cmd "${apt} install -yq jenkins"
+grok_error
+
+sleep 9
+sudo /bin/bash --login -c "cp ${pwn_root}/etc/userland/$pwn_provider/jenkins/jenkins /etc/default/jenkins"
+sudo /bin/bash --login -c "sed -i \"s/DOMAIN/${domain_name}/g\" /etc/default/jenkins" 
+sudo usermod -a -G sudo jenkins
+sudo /bin/bash --login -c 'echo "jenkins ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/jenkins'
+sudo systemctl enable jenkins
+sudo systemctl restart jenkins
+
+printf "Sleeping 540s While Jenkins Daemon Wakes Up ********************************************"
+ruby -e "(0..540).each { print '.'; sleep 1 }"
+
+initial_admin_pwd=`sudo cat /var/lib/jenkins/secrets/initialAdminPassword`
+echo "JENKINS Initial Admin: ${initial_admin_pwd}"
+
+# TODO: Get this working
+# printf "Updating Pre-Installed Jenkins Plugins ************************************************"
+# pwn_jenkins_update_plugins --jenkins_ip 127.0.0.1 -U admin -P $initial_admin_pwd --no-restart-jenkins
+
+printf "Installing Necessary Jenkins Plugins **************************************************"
+pwn_jenkins_install_plugin --jenkins_ip 127.0.0.1 \
+  -d 8888 \
+  -U admin \
+  -P $initial_admin_pwd \
+  --no-restart-jenkins \
+  -p "ace-editor, analysis-core, ansicolor, ant, antisamy-markup-formatter, apache-httpcomponents-client-4-api, bouncycastle-api, build-pipeline-plugin, bulk-builder, command-launcher, conditional-buildstep, credentials, dashboard-view, dependency-check-jenkins-plugin, dependency-track, display-url-api, external-monitor-job, git, git-client, handlebars, htmlpublisher, jackson2-api, javadoc, jdk-tool, jquery, jquery-detached, jquery-ui, jsch, junit, ldap, log-parser, mailer, matrix-auth, matrix-project, maven-plugin, momentjs, nested-view, pam-auth, parameterized-trigger, pipeline-build-step, pipeline-graph-analysis, pipeline-input-step, pipeline-rest-api, pipeline-stage-step, pipeline-stage-view, plain-credentials, purge-build-queue-plugin, role-strategy, run-condition, scm-api, script-security, slack, ssh-agent, ssh-credentials, ssh-slaves, structs, token-macro, windows-slaves, workflow-api, workflow-cps, workflow-job, workflow-scm-step, workflow-step-api, workflow-support"

data/packer/provisioners/metasploit.rb

@@ -0,0 +1,59 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'yaml'
+
+# Install Metasploit from Source
+printf 'Installing Metasploit *****************************************************************'
+if ENV['PWN_ROOT']
+  pwn_root = ENV['PWN_ROOT']
+elsif Dir.exist?('/pwn')
+  pwn_root = '/pwn'
+else
+  pwn_root = Dir.pwd
+end
+
+pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+
+metasploit_root = '/opt/metasploit-framework-dev'
+`sudo git clone https://github.com/rapid7/metasploit-framework.git #{metasploit_root}`
+`sudo apt install -y libpq-dev postgresql-server-dev-all`
+metasploit_ruby_version = File.readlines("#{metasploit_root}/.ruby-version")[0].to_s.scrub.strip.chomp
+metasploit_gemset = File.readlines("#{metasploit_root}/.ruby-gemset")[0].to_s.scrub.strip.chomp
+`
+  sudo bash \
+    --login \
+    -c "\
+      rvm install ruby-#{metasploit_ruby_version} && \
+      rvm use ruby-#{metasploit_ruby_version} && \
+      rvm gemset create #{metasploit_gemset} && \
+      cd #{metasploit_root} && \
+      gem install bundler && \
+      bundle install
+    "
+`
+
+printf 'Starting up MSFRPCD *******************************************************************'
+vagrant_example = "#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml.EXAMPLE"
+vagrant_yaml = "#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml"
+
+system(
+  "
+    sudo bash \
+      --login \
+      -c 'cp #{vagrant_example} #{vagrant_yaml}'
+  "
+)
+
+system(
+  "
+    sudo bash \
+      --login \
+      -c \"\
+        rvm use ruby-#{metasploit_ruby_version}@#{metasploit_gemset} && \
+        cp #{pwn_root}/etc/systemd/msfrpcd.service /etc/systemd/system/ && \
+        systemctl enable msfrpcd.service && \
+        systemctl start msfrpcd.service
+      \"
+  "
+)

data/packer/provisioners/nmap_all_live_hosts.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y nmap ncat ${assess_update_errors}"
+grok_error
+
+$screen_cmd "cd /opt && git clone https://github.com/ninp0/nmap_all_live_hosts.git && ln -sf /opt/nmap_all_live_hosts/nmap_all_live_hosts.sh /usr/local/bin/ ${assess_update_errors}"
+grok_error

data/packer/provisioners/openvas.sh

@@ -0,0 +1,23 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+$screen_cmd "${apt} install -y rpm alien nsis gvmd redis-server greenbone-security-assistant ${assess_update_errors}"
+grok_error
+
+sudo systemctl enable redis-server
+sudo systemctl start redis-server
+sudo gvm-setup
+sudo gvm-check-setup
+
+# Add a working systemd daemon
+sudo gvm-start

data/packer/provisioners/openvas_wrappers.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "cd /opt && git clone https://github.com/ninp0/openvas_wrappers.git && ln -sf /opt/openvas_wrappers/continuous_openvas_scan_task.sh /usr/local/bin/ && ln -sf /opt/openvas_wrappers/continuous_openvas_scan_task_cert_authn.sh /usr/local/bin/ ${assess_update_errors}"

data/packer/provisioners/openvpn.sh

@@ -0,0 +1,7 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y openvpn resolvconf ${assess_update_errors}"
+grok_error
+sudo systemctl enable resolvconf
+sudo systemctl start resolvconf

data/packer/provisioners/peda.sh

@@ -0,0 +1,4 @@
+#!/bin/bash --login
+# PEDA - Python Exploit Development Assistance for GDB to be used w/ AFL
+sudo /bin/bash --login -c 'cd /opt && git clone https://github.com/longld/peda.git peda-dev && echo "source /opt/peda-dev/peda.py" >> /root/.gdbinit'
+sudo -H -u admin /bin/bash --login -c 'echo "source /opt/peda-dev/peda.py" >> /home/admin/.gdbinit'

data/packer/provisioners/phantomjs.rb

@@ -0,0 +1,28 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'rest-client'
+require 'nokogiri'
+
+printf 'Installing phantomjs ******************************************************************'
+phantomjs_tar_bz2 = ''
+phantomjs_tar_extraction_path = '/opt/phantomjs-releases'
+phantomjs_linux_download = ''
+url = 'http://phantomjs.org/download.html'
+# Look for specific links w/ pattern matching 64 bit linux tar.gz
+phantomjs_resp = RestClient.get(url)
+links = Nokogiri::HTML(phantomjs_resp).xpath('//a/@href')
+links.each do |link|
+  if link.value.match?(/linux-x86_64\.tar\.bz2/)
+    phantomjs_tar_bz2 = "/opt/#{File.basename(link.value)}"
+    phantomjs_linux_download = link.value
+  end
+end
+
+puts `sudo wget -O #{phantomjs_tar_bz2} #{phantomjs_linux_download}` unless File.exist?(phantomjs_tar_bz2)
+
+puts `sudo mkdir -p #{phantomjs_tar_extraction_path}` unless Dir.exist?(phantomjs_tar_extraction_path)
+puts `sudo tar -xjvf #{phantomjs_tar_bz2} -C #{phantomjs_tar_extraction_path}`
+phantomjs_tar_extracted_root = "#{phantomjs_tar_extraction_path}/#{File.basename(phantomjs_tar_bz2, '.tar.bz2')}"
+puts `sudo cp "#{phantomjs_tar_extracted_root}/bin/phantomjs" "/usr/local/bin/phantomjs"`
+puts `sudo rm #{phantomjs_tar_bz2}`

data/packer/provisioners/phantomjs_wrapper.sh

@@ -0,0 +1,22 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+source /etc/profile.d/rvm.sh
+ruby_version=`cat ${pwn_root}/.ruby-version`
+rvm use ruby-$ruby_version@pwn
+
+# This is needed to ensure other ruby installations aren't picked up
+# by #!/usr/bin/env ruby inside of the script below
+# /pwn/packer/provisioners/phantomjs.rb
+$screen_cmd "${apt} install phantomjs ${assess_update_errors}"
+grok_error

data/packer/provisioners/post_install.sh

@@ -0,0 +1,41 @@
+#!/bin/bash --login
+pwn_provider=`echo $PWN_PROVIDER`
+
+# Clenup History
+sudo /bin/bash --login -c 'find /home -type f -name ".*history" -exec shred -u {} \;'
+sudo /bin/bash --login -c 'find /root -type f -name ".*history" -exec shred -u {} \;'
+
+# Cleanup Logs
+sudo /bin/bash --login -c 'find /var/log -type f -name "*.log" | while read log; do > $log; done'
+sudo /bin/bash --login -c 'find /var/log -type f -name "dmesg.*" -exec rm {} \;'
+sudo /bin/bash --login -c '> /var/log/debug'
+sudo /bin/bash --login -c '> /var/log/dmesg'
+sudo /bin/bash --login -c '> /var/log/lastlog'
+sudo /bin/bash --login -c '> /var/log/messages'
+sudo /bin/bash --login -c '> /var/log/syslog'
+sudo /bin/bash --login -c '> /var/log/wtmp'
+
+# Disable Local Root Access
+sudo passwd -l root
+
+if [[ $pwn_provider == 'aws' ]]; then
+  sudo /bin/bash --login -c 'find /etc/ssh -type f -name "*_key*" -exec shred -u {} \;'
+  sudo /bin/bash --login -c 'find /home -type f -name "authorized_keys" -exec shred -u {} \;'
+  sudo /bin/bash --login -c 'apt autoremove -y --purge'
+  # This allows for PacketFu::Utils.whoami? to properly fuction (Used in PWN::Plugins::Packet)
+  # Socket.getifaddrs.each {|ifaddr| puts ifaddr.addr.inspect}; << return nil when teredo interface exists
+  # this breaks https://github.com/packetfu/packetfu/blob/master/lib/packetfu/utils.rb#L196
+  # which tries to call ifaddr.addr.ip? when ifaddr.addr == Nil
+  sudo systemctl stop miredo
+  sudo systemctl disable miredo
+fi
+
+# Clear Bash History
+history -c
+
+if [[ $pwn_provider != 'aws' ]]; then
+  # Create lame password for admin user & reset during deployment via Vagrant
+  echo -e "changeme\nchangeme" | sudo passwd admin
+
+  sudo passwd --expire pwnadmin
+fi

data/packer/provisioners/postgresql.sh

@@ -0,0 +1,49 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+pwn_provider=`echo $PWN_PROVIDER`
+
+pdb='pwn'
+
+$screen_cmd "${apt} install -y postgresql ${assess_update_errors}"
+grok_error
+
+if [[ $pwn_provider == 'docker' ]]; then
+  $screen_cmd "/etc/init.d/postgresql start ${assess_update_errors}"
+  grok_error
+else
+  $screen_cmd "sudo systemctl enable postgresql ${assess_update_errors}"
+  grok_error
+  $screen_cmd "sudo systemctl restart postgresql ${assess_update_errors}"
+  grok_error
+fi
+
+
+$screen_cmd "sudo -iu postgres createdb ${pdb} ${assess_update_errors}"
+grok_error
+
+function create_table() {
+  current_table="${1}"
+  pwn_table_def=$(cat <<EOF
+    create table ${current_table} (
+      id SERIAL PRIMARY KEY,
+      row_result varchar(33000) NOT NULL
+    );
+EOF
+  )
+  echo $pwn_table_def | sudo -iu postgres psql -X -d $pdb
+  grok_error
+}
+
+create_table 'sast'
+create_table 'fuzz_net_app_proto'

data/packer/provisioners/preeny.sh

@@ -0,0 +1,8 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# PEDA - Python Exploit Development Assistance for GDB to be used w/ AFL
+$screen_cmd "${apt} install -y libini-config-dev libseccomp-dev"
+grok_error
+
+sudo /bin/bash --login -c 'cd /opt && git clone https://github.com/zardus/preeny preeny-dev && cd /opt/preeny-dev && make'

data/packer/provisioners/pwn.sh

@@ -0,0 +1,89 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+pwn_provider=`echo $PWN_PROVIDER`
+os=$(uname -s)
+
+case $os in
+  "Darwin")
+    echo 'Installing wget to retrieve tesseract trained data...'
+    sudo port -N install wget
+
+    echo "Installing fontconfig..."
+    sudo port -N install fontconfig
+
+    echo 'Installing Postgres Libraries for pg gem...'
+    sudo port -N install postgresql96-server
+
+    echo 'Installing libpcap Libraries...'
+    sudo port -N install libpcap
+
+    echo "Installing libsndfile1 & libsndfile1-dev Libraries..."
+    sudo port -N install libsndfile
+
+    echo 'Installing ImageMagick...'
+    sudo port -N install imagemagick
+
+    echo 'Installing Tesseract OCR...'
+    sudo port -N install tesseract
+    sudo /bin/bash --login -c 'cd /opt/local/share/tessdata && wget https://raw.githubusercontent.com/tesseract-ocr/tessdata/master/eng.traineddata'
+    ;;
+  "Linux")
+    apt --version > /dev/null 2>&1
+    if [[ $? == 0 ]]; then
+      echo "Installing wget to retrieve tesseract trained data..."
+      $screen_cmd "${apt} install -y wget ${assess_update_errors}"
+      grok_error
+
+      echo "Installing fontconfig..."
+      $screen_cmd "${apt} install -y fontconfig ${assess_update_errors}"
+      grok_error
+
+      echo "Installing Postgres Libraries for pg gem..."
+      $screen_cmd "${apt} install -y postgresql-server-dev-all ${assess_update_errors}"
+      grok_error
+
+      echo "Installing libpcap Libraries..."
+      $screen_cmd "${apt} install -y libpcap-dev ${assess_update_errors}"
+      grok_error
+
+      echo "Installing libsndfile1 & libsndfile1-dev Libraries..."
+      $screen_cmd "${apt} install -y libsndfile1 ${assess_update_errors}"
+      grok_error
+
+      $screen_cmd "${apt} install -y libsndfile1-dev ${assess_update_errors}"
+      grok_error
+
+      echo "Installing imagemagick & libmagickwand-dev Libraries..."
+      $screen_cmd "${apt} install -y imagemagick ${assess_update_errors}"
+      grok_error
+
+      $screen_cmd "${apt} install -y libmagickwand-dev ${assess_update_errors}"
+      grok_error
+
+      echo "Installing tesseract-ocr-all & trainers..."
+      $screen_cmd "${apt} install -y tesseract-ocr-all ${assess_update_errors}"
+      grok_error
+
+      $screen_cmd "cd /usr/share/tesseract-ocr && wget https://raw.githubusercontent.com/tesseract-ocr/tessdata/master/eng.traineddata ${assess_update_errors}"
+      grok_error
+    else
+      echo "A Linux Distro was Detected, however, ${0} currently only supports Kali Rolling, Ubuntu, & OSX for now...feel free to install manually."
+    fi
+    ;;
+  *)
+    echo "${os} not currently supported."
+    exit 1
+esac
+
+sudo /bin/bash --login -c "cd ${pwn_root} && cp etc/userland/${pwn_provider}/metasploit/vagrant.yaml.EXAMPLE etc/userland/${pwn_provider}/metasploit/vagrant.yaml && sudo ./reinstall_pwn_gemset.sh && ./build_pwn_gem.sh && rubocop"

data/packer/provisioners/pwntools.sh

@@ -0,0 +1,13 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# Quick Prototyping of Exploits
+# $ ipython
+# in [1]: from pwn import *
+# More information available here: https://docs.pwntools.com/en/stable/
+#sudo /bin/bash --login -c "apt update && apt install -y python2.7 python-pip python-dev git libssl-dev libffi-dev build-essential && pip install --upgrade pip && pip install --upgrade pwntools"
+$screen_cmd "${apt} update ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y python2.7 python-pip python-dev git libssl-dev libffi-dev build-essential && pip install pwntools ${assess_update_errors}"
+grok_error

data/packer/provisioners/radamsa.sh

@@ -0,0 +1,7 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y gcc make git wget ${assess_update_errors}"
+grok_error
+
+sudo /bin/bash --login -c 'cd /opt && git clone https://gitlab.com/akihe/radamsa.git && cd radamsa && make && make install'

data/packer/provisioners/rc.local.sh

@@ -0,0 +1,16 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# Configure simple tasks to run @ boot
+sudo tee -a '/etc/rc.local' << 'EOF'
+#!/bin/sh -e
+ifconfig lo:0 127.0.0.2 netmask 255.0.0.0 up
+ifconfig lo:1 127.0.0.3 netmask 255.0.0.0 up
+ifconfig lo:2 127.0.0.4 netmask 255.0.0.0 up
+#sudo -H -u admin /usr/local/bin/toggle_tor.sh
+
+exit 0
+EOF
+
+$screen_cmd "chmod 755 /etc/rc.local ${assess_update_errors}"
+grok_error

data/packer/provisioners/reboot_os.sh

@@ -0,0 +1,7 @@
+#!/bin/bash --login
+# nohup prevents freezes in Packer due to execution moving to the next
+# script while a reboot is in progress. This should be coupled with a
+# "pause_before" stanza for the next provisioner in the Packer
+# to guarantee the required behaviour.
+nohup sudo shutdown --reboot now </dev/null >/dev/null 2>&1 &
+exit 0

data/packer/provisioners/ruby.sh

@@ -0,0 +1,36 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+os=$(uname -s)
+
+case $os in
+  'Darwin')
+    sudo port -N install bison openssl curl git zlib libyaml libxml2 autoconf ncurses automake libtool libpcap
+    ;;
+  'Linux')
+    $screen_cmd "${apt} install -y build-essential bison openssl libreadline-dev curl git-core git zlib1g zlib1g-dev libssl-dev libyaml-dev libxml2-dev autoconf libc6-dev ncurses-dev automake libtool libpcap-dev libsqlite3-dev libgmp-dev ${assess_update_errors}"
+    grok_error
+    ;;
+  *)
+    echo "${os} not currently supported."
+    exit 1
+esac
+
+
+# We clone PWN here instead of pwn.sh so ruby knows what version of ruby to install
+# per the latest value of .ruby-version in the repo.
+sudo /bin/bash --login -c "git clone https://github.com/0dayinc/pwn.git ${pwn_root}"
+
+ruby_version=`cat ${pwn_root}/.ruby-version`
+ruby_gemset=`cat ${pwn_root}/.ruby-gemset`
+sudo /bin/bash --login -c "source /etc/profile.d/rvm.sh && rvm install ruby-${ruby_version}"

data/packer/provisioners/rvm.sh

@@ -0,0 +1,30 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+os=$(uname -s)
+
+case $os in
+  'Darwin')
+    sudo port -N install gnupg2
+    ;;
+  'Linux')
+    $screen_cmd "${apt} install -y gnupg2 ${assess_update_errors}"
+    grok_error
+    ;;
+  *)
+    echo "${os} not currently supported."
+    exit 1
+esac
+
+#curl -sSL https://rvm.io/mpapis.asc | sudo gpg2 --no-tty --import -
+key1='409B6B1796C275462A1703113804BB82D39DC0E3'
+key2='7D2BAF1CF37B13E2069D6956105BD0E739499BDB'
+
+# sudo /bin/bash --login -c "gpg2 --keyserver hkp://pool.sks-keyservers.net --recv-keys ${key1} ${key2}"
+sudo /bin/bash --login -c 'curl -sSL https://rvm.io/mpapis.asc | sudo gpg2 --import -'
+sudo /bin/bash --login -c 'curl -sSL https://rvm.io/pkuczynski.asc | sudo gpg2 --import -'
+sudo /bin/bash --login -c "echo -e \"trust\n5\ny\n\" | gpg2 --no-tty --command-fd 0 --edit-key ${key1}"
+sudo /bin/bash --login -c "echo -e \"trust\n5\ny\n\" | gpg2 --no-tty --command-fd 0 --edit-key ${key2}"
+
+# Multi-user install required due to the need to run MSFRPCD as root w/in metasploit gemset
+curl -sSL https://get.rvm.io | sudo bash -s latest

data/packer/provisioners/scapy.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y python-scapy ${assess_update_errors}"
+grok_error

data/packer/provisioners/scout2.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+# Security Auditing tool for AWS Environments
+# $ Scout2 -h
+# More information available here: https://github.com/nccgroup/Scout2
+sudo -H pip install awsscout2

data/packer/provisioners/sox.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y sox ${assess_update_errors}"
+grok_error

data/packer/provisioners/ssllabs-scan.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+ssllabs_root="/opt/ssllabs-scan"
+$screen_cmd "${apt} install -y golang ${assess_update_errors}"
+grok_error
+
+sudo /bin/bash --login -c "cd /opt && git clone https://github.com/ssllabs/ssllabs-scan.git"
+sudo /bin/bash --login -c "cd ${ssllabs_root} && make && ln -sf ${ssllabs_root}/ssllabs-scan-v3 /usr/local/bin/ssllabs-scan"

data/packer/provisioners/strace.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y strace ${assess_update_errors}"
+grok_error

data/packer/provisioners/sublist3r.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y sublist3r ${assess_update_errors}"
+grok_error

data/packer/provisioners/terminator.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y terminator ${assess_update_errors}"
+grok_error

data/packer/provisioners/toggle_tor.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+sudo /bin/bash --login -c 'cd /opt && git clone https://github.com/ninp0/toggle_tor.git && ln -sf /opt/toggle_tor/toggle_tor.sh /usr/local/bin/'

data/packer/provisioners/tor.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y tor tor-geoipdb torsocks ${assess_update_errors}"
+grok_error

data/packer/provisioners/twinkle.sh

@@ -0,0 +1,6 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# Install cmd-line-based SIP / VOIP client
+$screen_cmd "${apt} install -y twinkle-console ${assess_update_errors}"
+grok_error