pwn 0.5.509 → 0.5.510

data/packer/kali_rolling_vmware.json

@@ -0,0 +1,167 @@
+{
+  "variables": {
+    "vagrant_cloud_token": "{{ env `VAGRANT_CLOUD_TOKEN` }}",
+    "box_version": "{{ env `BOX_VERSION` }}",
+    "pwn_root": "{{ env `PWN_ROOT` }}",
+    "pwn_provider": "{{ env `PWN_PROVIDER` }}"
+  },
+  "builders": [{
+    "type": "vmware-iso",
+    "guest_os_type": "debian7-64",
+    "vmx_data": {
+      "memsize": "4096",
+      "numvcpus": "1",
+      "cpuid.coresPerSocket": "1"
+    },
+    "disk_size": 36864,
+    "http_directory": "http",
+    "iso_url": "https://cdimage.kali.org/kali-2020.2/kali-linux-2020.2-installer-amd64.iso",
+    "iso_checksum": "ae9a3b6a1e016cd464ca31ef5055506cecfc55a10f61bf1acb8313eddbe12ad7",
+    "iso_checksum_type": "sha256",
+    "headless": false,
+    "boot_command": [
+      "<esc><wait>",
+      "install <wait>",
+      "debug <wait>",
+      "dbg/flags=all-x <wait>",
+      "debconf/priority=high <wait>",
+      "DEBCONF_DEBUG=5 <wait>",
+      "auto=true <wait>",
+      "url=http://{{ .HTTPIP }}:{{ .HTTPPort }}/kali_rolling_preseed.cfg <wait>",
+      "locale=en_US.UTF-8 <wait>",
+      "hostname=kali <wait>",
+      "domain=rolling.local <wait>",
+      "<enter><wait>"
+    ],
+    "boot_wait": "9s",
+    "communicator": "ssh",
+    "ssh_username": "pwnadmin",
+    "ssh_password": "changeme",
+    "ssh_port": 22,
+    "ssh_timeout": "9999s",
+    "shutdown_command": "sudo /sbin/shutdown -P now"
+  }],
+  "provisioners": [
+    {
+      "type": "shell",
+      "environment_vars": [
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
+      ],
+      "scripts": [
+        "provisioners/upload_globals.sh",
+        "provisioners/init_image.sh"
+      ]
+    },
+
+    {
+      "type": "shell",
+      "scripts": [
+        "provisioners/reboot_os.sh"
+      ]
+    },
+
+    {
+      "pause_before": "180s",
+      "type": "shell",
+      "environment_vars": [
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
+      ],
+      "scripts": [
+        "provisioners/install_vagrant_ssh_key.sh",
+        "provisioners/update_os.sh"
+       ]
+    },
+
+    {
+      "type": "shell",
+      "scripts": [
+        "provisioners/reboot_os.sh"
+      ]
+    },
+
+    {
+      "pause_before": "180s",
+      "type": "shell",
+      "environment_vars": [
+        "PWN_ROOT={{user `pwn_root` }}",
+        "PWN_PROVIDER={{user `pwn_provider` }}"
+      ],
+      "scripts": [
+        "provisioners/coreutils.sh",
+        "provisioners/git.sh",
+        "provisioners/curl.sh",
+        "provisioners/rvm.sh",
+        "provisioners/bashrc.sh",
+        "provisioners/ruby.sh",
+        "provisioners/aliases.rb",
+        "provisioners/pwn.sh",
+        "provisioners/beef.rb",
+        "provisioners/burpsuite.sh",
+        "provisioners/irc.sh",
+        "provisioners/jenkins.sh",
+        "provisioners/android.sh",
+        "provisioners/sox.sh",
+        "provisioners/phantomjs_wrapper.sh",
+        "provisioners/geckodriver.sh",
+        "provisioners/chrome.sh",
+        "provisioners/ansible.sh",
+        "provisioners/openvas.sh",
+        "provisioners/openvas_wrappers.sh",
+        "provisioners/metasploit.rb",
+        "provisioners/wpscan.rb",
+        "provisioners/ssllabs-scan.sh",
+        "provisioners/sublist3r.sh",
+        "provisioners/scapy.sh",
+        "provisioners/terminator.sh",
+        "provisioners/apache2.sh",
+        "provisioners/tor.sh",
+        "provisioners/toggle_tor.sh",
+        "provisioners/nmap.sh",
+        "provisioners/arachni.sh",
+        "provisioners/eyewitness.sh",
+        "provisioners/afl.sh",
+        "provisioners/peda.sh",
+        "provisioners/preeny.sh",
+        "provisioners/pwntools.sh",
+        "provisioners/radare2.sh",
+        "provisioners/scout2.sh",
+        "provisioners/strace.sh",
+        "provisioners/awscli.sh",
+        "provisioners/openvpn.sh",
+        "provisioners/fuzzdb.sh",
+        "provisioners/SecLists.sh",
+        "provisioners/PayloadsAllTheThings.sh",
+        "provisioners/rc.local.sh",
+        "provisioners/vim.sh",
+        "provisioners/firefox.sh",
+        "provisioners/ffmpeg.sh",
+        "provisioners/docker.sh",
+        "provisioners/twinkle.sh",
+        "provisioners/ghidra.sh",
+        "provisioners/zzuf.sh",
+        "provisioners/radamsa.sh",
+        "provisioners/gdb.sh",
+        "provisioners/post_install.sh"
+      ]
+    }
+  ],
+  "post-processors": [
+    [
+      {
+        "type": "vagrant",
+        "compression_level": "9",
+        "output": "kali_rolling_vmware.box"
+      },
+      
+      {
+        "type": "vagrant-cloud",
+        "box_tag": "pwn/kali_rolling",
+        "access_token": "{{user `vagrant_cloud_token`}}",
+        "version": "{{user `box_version`}}",
+        "version_description": "Continuous Security Integration framework built on top of Kali Rolling.  For information around this security framework, visit the project on GitHub: https://github.com/0dayinc/pwn"
+      }
+    ]
+  ]
+}

data/packer/packer_secrets.json.EXAMPLE

@@ -0,0 +1,9 @@
+{
+  "vagrant_cloud_token": "VAGRANT CLOUD API TOKEN FOR ARTIFACT UPLOAD",
+  "aws_access_key": "AWS ACCESS KEY ID FOR AMI GENERATION",
+  "aws_secret_access_key": "AWS SECRET ACCESS KEY FOR AMI GENERATION",
+  "aws_ssh_keypair_name": "AWS EC2 SSH KEYPAIR NAME",
+  "aws_ssh_private_key_file": "AWS EC2 SSH PRIVATE KEY FILEPATH",
+  "docker_hub_user": "DOCKER HUB USERNAME",
+  "docker_hub_pass": "DOCKER HUB ACCESS TOKEN"
+}

data/packer/provisioners/PayloadsAllTheThings.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "cd /opt && git clone https://github.com/swisskyrepo/PayloadsAllTheThings PayloadsAllTheThings-dev ${assess_update_errors}"
+grok_error

data/packer/provisioners/SecLists.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "cd /opt && git clone https://github.com/danielmiessler/SecLists SecLists-dev ${assess_update_errors}"
+grok_error

data/packer/provisioners/afl.sh

@@ -0,0 +1,28 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+aflplusplus_repo='/opt/AFLplusplus'
+
+# Build from source in order to support Qemu Instrumentation:
+# Found in https://github.com/mirrorer/afl/README.md => "4) Instrumenting binary-only apps"
+# No need to apt install qemu as it's included in:
+# /opt/afl-dev/qemu_mode/qemu-2.10.0.tar.xz
+$screen_cmd "wget -O - https://apt.llvm.org/llvm-snapshot.gpg.key|sudo apt-key add -"
+grok_error
+
+$screen_cmd "${apt} update"
+grok_error
+
+$screen_cmd "${apt} install -y clang-format clang-tidy clang-tools clang clangd libc++-dev libc++1 libc++abi-dev libc++abi1 libclang-dev libclang1 liblldb-dev libllvm-ocaml-dev libomp-dev libomp5 lld lldb llvm-dev llvm-runtime llvm python-clang ninja-build libtool libtool-bin automake bison libglib2.0-dev ${assess_update_errors}"
+grok_error
+
+$screen_cmd "cd /opt && git clone https://github.com/AFLplusplus/AFLplusplus && cd ${aflplusplus_repo} && make distrib ${assess_update_errors}"
+grok_error
+
+#$screen_cmd "cd /opt && git clone https://github.com/AFLplusplus/AFLplusplus && cd ${aflplusplus_repo} && make && cd ${aflplusplus_repo}/qemu_mode && ./build_qemu_support.sh && cd ${aflplusplus_repo}/unicorn_mode && ./build_unicorn_support.sh && cd ${aflplusplus_repo}/llvm_mode && LLVM_CONFIG=llvm-config-11 make ${assess_update_errors}"
+#grok_error
+
+
+ls -l /opt/AFLplusplus | grep '^-rwx' | awk '{print $9}' | while read afl_bin; do 
+  sudo ln -sf /opt/afl-dev/$afl_bin /usr/local/bin/
+done

data/packer/provisioners/aliases.rb

@@ -0,0 +1,23 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+alias_file = '/etc/profile.d/aliases.sh'
+r2_prompt = "Transform the output of pdga in r2.  The output is a two column disasm and decompilation pipe-delimited output using the Ghidra decompiler).  Your job is to respond ONLY with actual code (NO explanations, comments or markdown), Change 'goto' into if/else/for/while, Simplify as much as possible, use better variable names, take function arguments and strings from comments like 'string:', Reduce lines of code and fit everything in a single function, removing all dead code.  Most important, determine if the actual code is vulnerable to exploitation."
+
+system("sudo touch #{alias_file}")
+system("sudo chmod 777 #{alias_file}")
+File.open(alias_file, 'w') do |f|
+  f.puts '#!/bin/bash'
+  f.puts "alias file='file --keep-going --raw'"
+  f.puts "alias grep='grep --color=auto'"
+  f.puts "alias kpid='kill -15'"
+  f.puts "alias ls='ls --color=auto'"
+  f.puts "alias phantomjs='export QT_QPA_PLATFORM=offscreen; phantomjs'"
+  f.puts "alias prep='ps -ef | grep'"
+  f.puts "alias r2='setarch $(uname -m) -R /usr/local/bin/r2 -c \"v r2-pwn-layout\" -c \"decai -e model=Radare2:latest\" -c \"decai -e cmds=pdga\" -c \"decai -e prompt=#{r2_prompt}\"'"
+  f.puts "alias sup='sudo -i'"
+  f.puts "alias vi='vim -i NONE -b'"
+  f.puts "alias vim='vim -i NONE -b'"
+  f.puts "alias tmux='TERM=screen-256color tmux'"
+end
+system("sudo chmod 755 #{alias_file}")

data/packer/provisioners/amass.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y amass ${assess_update_errors}"
+grok_error

data/packer/provisioners/android.sh

@@ -0,0 +1,18 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y android-sdk ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y adb ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y apktool ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y fastboot ${assess_update_errors}"
+grok_error
+
+# Bypass Certificate Pinning in Android Applications
+$screen_cmd "pip3 install objection ${assess_update_errors}"
+grok_error

data/packer/provisioners/ansible.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y ansible ${assess_update_errors}"
+grok_error

data/packer/provisioners/apache2.sh

@@ -0,0 +1,24 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+pwn_provider=`echo $PWN_PROVIDER`
+
+$screen_cmd "${apt} install -y apache2 ${assess_update_errors}"
+$screen_cmd "a2enmod proxy ${assess_update_errors}"
+$screen_cmd "a2enmod proxy_http ${assess_update_errors}"
+$screen_cmd "a2enmod rewrite ${assess_update_errors}"
+$screen_cmd "a2enmod ssl ${assess_update_errors}"
+$screen_cmd "a2enmod headers ${assess_update_errors}"
+# Disable Version Headers
+$screen_cmd "echo -e \"ServerSignature Off\nServerTokens Prod\n\" >> /etc/apache2/apache2.conf ${assess_update_errors}"
+$screen_cmd "cp ${pwn_root}/etc/userland/${pwn_provider}/apache2/*.conf /etc/apache2/sites-available/ ${assess_update_errors}"

data/packer/provisioners/arachni.sh

@@ -0,0 +1,28 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# TODO: Always grab latest release
+arachni_root='/opt/arachni'
+arachni_build_path="${arachni_root}/arachni-1.5.1-0.5.12"
+arachni_pkg='arachni-1.5.1-0.5.12-linux-x86_64.tar.gz'
+arachni_url="https://github.com/Arachni/arachni/releases/download/v1.5.1/${arachni_pkg}"
+arachni_ca_root='/usr/local/share/ca-certificates/arachni'
+
+sudo mkdir $arachni_root 
+$screen_cmd "cd ${arachni_root} && wget ${arachni_url} && tar -xzvf arachni-1.5.1-0.5.12-linux-x86_64.tar.gz && rm ${arachni_pkg} ${assess_update_errors}"
+grok_error
+
+ls $arachni_build_path/bin/* | while read arachni_bin; do 
+  sudo ln -sf $arachni_bin /usr/local/bin/
+done
+
+if [[ -f /usr/bin/phantomjs ]]; then
+  cp $arachni_build_path/system/usr/bin/phantomjs $arachni_build_path/system/usr/bin/phantomjs.BAK
+  cp /usr/bin/phantomjs $arachni_build_path/system/usr/bin/phantomjs
+fi
+
+# Add CA cert for testing
+# Comment out for now - rely upon drivers to reference CA instead
+# sudo mkdir $arachni_ca_root
+# sudo cp $arachni_build_path/system/gems/gems/arachni-1.5.1/lib/arachni/http/proxy_server/ssl-interceptor-ca-cert.pem $arachni_ca_root
+# sudo update-ca-certificates --fresh

data/packer/provisioners/awscli.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y awscli ${assess_update_errors}"
+grok_error

data/packer/provisioners/bashrc.sh

@@ -0,0 +1,13 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+# Initializes RVM for Normal Users
+$screen_cmd "echo 'source /etc/profile.d/rvm.sh' >> /etc/bash.bashrc ${assess_update_errors}"
+grok_error
+
+$screen_cmd "echo 'source /etc/profile.d/aliases.sh' >> /etc/bash.bashrc ${assess_update_errors}"
+grok_error
+
+$screen_cmd "echo 'source /etc/profile.d/pwn_envs.sh' >> /etc/bash.bashrc ${assess_update_errors}"
+grok_error
+

data/packer/provisioners/beef.rb

@@ -0,0 +1,23 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+# Install BeEF from Source
+printf 'Installing BeEF ***********************************************************************'
+Dir.chdir('/opt')
+beef_root = '/opt/beef-dev/'
+`sudo git clone https://github.com/beefproject/beef.git beef-dev`
+beef_ruby_version = File.readlines("#{beef_root}/.ruby-version")[0].to_s.scrub.strip.chomp
+beef_gemset = File.readlines("#{beef_root}/.ruby-gemset")[0].to_s.scrub.strip.chomp
+`
+  sudo bash \
+    --login \
+    -c "\
+      source /etc/profile.d/rvm.sh && \
+      rvm install ruby-#{beef_ruby_version} && \
+      rvm use ruby-#{beef_ruby_version} && \
+      rvm gemset create #{beef_gemset} && \
+      cd #{beef_root} && \
+      gem install bundler && \
+      bundle install
+    "
+`

data/packer/provisioners/burpsuite.sh

@@ -0,0 +1,24 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+printf "Installing BurpBuddy API for Burpsuite *****************************************"
+$screen_cmd "${apt} install -y openjdk-8-jdk ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y libgconf-2-4 ${assess_update_errors}"
+grok_error
+
+# curl --silent 'https://api.github.com/repos/tomsteele/burpbuddy/releases/latest' > /tmp/latest_burpbuddy.json
+# latest_burpbuddy_jar=$(ruby -e "require 'json'; pp JSON.parse(File.read('/tmp/latest_burpbuddy.json'), symbolize_names: true)[:assets][0][:browser_download_url]")
+# burpbuddy_jar_url=`echo ${latest_burpbuddy_jar} | sed 's/"//g'`
+# wget $burpbuddy_jar_url -P /tmp/
+burp_root="/opt/burpsuite"
+# sudo /bin/bash --login -c "mkdir ${burp_root} && cp /tmp/burpbuddy*.jar ${burp_root} && rm /tmp/latest_burpbuddy.json && rm /tmp/burpbuddy*.jar"
+sudo cp /opt/pwn/third-party/burpbuddy-3.1.1-SNAPSHOT.jar $burp_root/burpbuddy-3.1.1-SNAPSHOT.jar
+
+ls $burp_root/burpbuddy*.jar | while read bb_latest; do 
+  sudo ln -s $bb_latest $burp_root/burpbuddy.jar 
+done
+
+# Config Free Version by Default...Burpsuite Pro Handled by Vagrant Provisioner & Userland Config
+sudo cp /usr/bin/burpsuite /opt/burpsuite/burpsuite-kali-native.jar

data/packer/provisioners/chrome.sh

@@ -0,0 +1,11 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} remove -y chrome-gnome-shell ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y chromium ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y chromium-driver ${assess_update_errors}"
+grok_error

data/packer/provisioners/coreutils.sh

@@ -0,0 +1,6 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+printf "Installing Curl ********************************************************************"
+$screen_cmd "${apt} install -y coreutils ${assess_update_errors}"
+grok_error

data/packer/provisioners/curl.sh

@@ -0,0 +1,6 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+printf "Installing Curl ********************************************************************"
+$screen_cmd "${apt} install -y curl ${assess_update_errors}"
+grok_error

data/packer/provisioners/docker.sh

@@ -0,0 +1,43 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+printf "Installing Docker ********************************************************************"
+$screen_cmd "${apt} install -y docker.io ${assess_update_errors}"
+grok_error
+
+# docker_sources='/etc/apt/sources.list.d/docker.list'
+# $screen_cmd "${apt} remove -y docker docker-engine docker.io*"
+# grok_error
+
+# $screen_cmd "${apt} install -y apt-transport-https"
+# grok_error
+
+# $screen_cmd "${apt} install -y ca-certificates"
+# grok_error
+
+# $screen_cmd "${apt} install -y curl"
+# grok_error
+
+# $screen_cmd "${apt} install -y gnupg2"
+# grok_error
+
+# $screen_cmd "${apt} install -y software-properties-common"
+# grok_error
+
+# $screen_cmd "curl -fsSL https://download.docker.com/linux/debian/gpg | sudo apt-key add -"
+# grok_error
+
+# $screen_cmd "echo 'deb [arch=amd64] https://download.docker.com/linux/debian stretch stable' > ${docker_sources}"
+# grok_error
+
+# $screen_cmd "${apt} update"
+# grok_error
+
+# $screen_cmd "${apt} install -y docker-ce docker-compose"
+# grok_error
+
+# $screen_cmd "usermod -aG docker vagrant"
+# grok_error
+
+# $screen_cmd "systemctl enable docker"
+# grok_error

data/packer/provisioners/docker_bashrc.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+echo 'source /etc/profile.d/rvm.sh' >> ~/.bashrc

data/packer/provisioners/docker_rvm.sh

@@ -0,0 +1,22 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+key1='409B6B1796C275462A1703113804BB82D39DC0E3'
+key2='7D2BAF1CF37B13E2069D6956105BD0E739499BDB'
+
+# sudo /bin/bash --login -c "gpg2 --keyserver hkp://pool.sks-keyservers.net --recv-keys ${key1} ${key2}"
+$screen_cmd "curl -sSL https://rvm.io/mpapis.asc | sudo gpg2 --import - ${assess_update_errors}" 
+grok_error
+
+$screen_cmd "curl -sSL https://rvm.io/pkuczynski.asc | sudo gpg2 --import - ${assess_update_errors}"
+grok_error
+
+$screen_cmd "echo -e \"trust\n5\ny\n\" | gpg2 --no-tty --command-fd 0 --edit-key ${key1} ${assess_update_errors}"
+grok_error
+
+$screen_cmd "echo -e \"trust\n5\ny\n\" | gpg2 --no-tty --command-fd 0 --edit-key ${key2} ${assess_update_errors}"
+grok_error
+
+# Multi-user install required due to the need to run MSFRPCD as root w/in metasploit gemset
+$screen_cmd "curl -sSL https://get.rvm.io | sudo bash -s latest ${assess_update_errors}"
+grok_error

data/packer/provisioners/eyewitness.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y eyewitness ${assess_update_errors}"
+grok_error

data/packer/provisioners/ffmpeg.sh

@@ -0,0 +1,6 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+printf "Installing ffmpeg ********************************************************************"
+$screen_cmd "${apt} install -y ffmpeg ${assess_update_errors}"
+grok_error

data/packer/provisioners/firefox.sh

@@ -0,0 +1,7 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# NOTE: As soon as firefox esr supports the headless flag, this provisioner can be removed.
+printf "Installing Firefox ********************************************************************"
+$screen_cmd "${apt} install -y firefox-esr ${assess_update_errors}"
+grok_error

data/packer/provisioners/fuzzdb.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "cd /opt && git clone https://github.com/fuzzdb-project/fuzzdb.git fuzzdb-dev ${assess_update_errors}"
+grok_error

data/packer/provisioners/gdb.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y gdb gdbserver systemd-coredump ${assess_update_errors}"
+grok_error

data/packer/provisioners/geckodriver.sh

@@ -0,0 +1,9 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# Preferred way over to install geckodriver instead 
+# of attempting to grab latest gecko on our own 
+# geckodriver is implicitly installed as a dependency of 
+# eyewitness :)
+$screen_cmd "${apt} install -y eyewitness ${assess_update_errors}"
+grok_error

data/packer/provisioners/ghidra.sh

@@ -0,0 +1,5 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "cd /opt && git clone https://github.com/NationalSecurityAgency/ghidra ghidra-dev ${assess_update_errors}"
+grok_error

data/packer/provisioners/git.sh

@@ -0,0 +1,6 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+printf "Installing Git ********************************************************************"
+$screen_cmd "${apt} install -y git ${assess_update_errors}"
+grok_error