rtexit-method 0.1.19 → 0.1.21

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (16) hide show
  1. package/package.json +1 -1
  2. package/packaged-assets/docker/Dockerfile +245 -0
  3. package/packaged-assets/docker/verify/lib.sh +109 -0
  4. package/packaged-assets/docker/verify/phase1-scanning.sh +57 -0
  5. package/packaged-assets/docker/verify/phase10-network.sh +62 -0
  6. package/packaged-assets/docker/verify/phase11-specialist.sh +56 -0
  7. package/packaged-assets/docker/verify/phase2-web.sh +78 -0
  8. package/packaged-assets/docker/verify/phase3-ad.sh +86 -0
  9. package/packaged-assets/docker/verify/phase4-cloud.sh +60 -0
  10. package/packaged-assets/docker/verify/phase5-mobile.sh +58 -0
  11. package/packaged-assets/docker/verify/phase6-c2.sh +62 -0
  12. package/packaged-assets/docker/verify/phase7-osint.sh +48 -0
  13. package/packaged-assets/docker/verify/phase8-creds.sh +53 -0
  14. package/packaged-assets/docker/verify/phase9-binary.sh +67 -0
  15. package/packaged-assets/docker/verify/rt-verify-all.sh +175 -0
  16. package/packaged-assets/scripts/rt-native-install.sh +507 -305
package/packaged-assets/scripts/rt-native-install.sh CHANGED
@@ -1,438 +1,640 @@
1
1
  #!/bin/bash
2
- # RTExit Native Kali Linux Installer
3
- # Installs all 300+ tools directly on your Kali Linux system
4
- # No Docker overhead — full GPU, WiFi, USB, Bluetooth access
2
+ # RTExit Native Kali Linux Installer v4.0
3
+ # Installs all 300+ tools directly on Kali Linux
4
+ # ✅ All install methods verified in live container testing
5
+ # ✅ Uses correct binary/apt/pip methods discovered during gap analysis
5
6
  #
6
7
  # Usage:
7
8
  # chmod +x rt-native-install.sh
8
9
  # sudo bash rt-native-install.sh
9
- #
10
- # Recommended: Run on fresh Kali Linux 2024.x or later
11
10
 
12
11
  set -e
13
12
 
14
13
  RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'
15
- BLUE='\033[0;34m'; CYAN='\033[0;36m'; NC='\033[0m'
14
+ BLUE='\033[0;34m'; CYAN='\033[0;36m'; NC='\033[0m'; BOLD='\033[1m'
16
15
 
17
- # ── Root check ────────────────────────────────────────────────────────────────
18
- if [ "$EUID" -ne 0 ]; then
19
- echo -e "${RED}[!] Run as root: sudo bash rt-native-install.sh${NC}"
20
- exit 1
21
- fi
16
+ [ "$EUID" -ne 0 ] && echo -e "${RED}[!] Run as root: sudo bash rt-native-install.sh${NC}" && exit 1
22
17
 
23
18
  echo -e "${RED}"
24
- echo " ██████╗ ████████╗███████╗██╗ ██╗██╗████████╗"
25
- echo " ██╔══██╗╚══██╔══╝██╔════╝╚██╗██╔╝██║╚══██╔══╝"
26
- echo " ██████╔╝ ██║ █████╗ ╚███╔╝ ██║ ██║ "
27
- echo " ██╔══██╗ ██║ ██╔══╝ ██╔██╗ ██║ ██║ "
28
- echo " ██║ ██║ ██║ ███████╗██╔╝ ██╗██║ ██║ "
29
- echo " ╚═╝ ╚═╝ ╚═╝ ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝ "
30
- echo -e "${NC} Native Kali Installer v3.0 — 300+ Tools"
19
+ cat << 'EOF'
20
+ ██████╗ ████████╗███████╗██╗ ██╗██╗████████╗
21
+ ██╔══██╗╚══██╔══╝██╔════╝╚██╗██╔╝██║╚══██╔══╝
22
+ ██████╔╝ ██║ █████╗ ╚███╔╝ ██║ ██║
23
+ ██╔══██╗ ██║ ██╔══╝ ██╔██╗ ██║ ██║
24
+ ██║ ██║ ██║ ███████╗██╔╝ ██╗██║ ██║
25
+ ╚═╝ ╚═╝ ╚═╝ ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝
26
+ EOF
27
+ echo -e "${NC}${BOLD} Native Kali Installer v4.0 — 300+ Tools (Verified)${NC}"
28
+ echo -e " ${CYAN}All methods tested in live environment${NC}"
31
29
  echo ""
32
30
 
33
- # ── Helper functions ──────────────────────────────────────────────────────────
34
- install_apt() {
35
- echo -e "${BLUE}[APT]${NC} $*"
36
- apt-get install -y --no-install-recommends "$@" 2>/dev/null || true
31
+ # ── Helpers ───────────────────────────────────────────────────────────────────
32
+ OK=0; FAIL=0
33
+
34
+ apt_install() {
35
+ echo -e " ${BLUE}[APT]${NC} $*"
36
+ apt-get install -y --no-install-recommends "$@" 2>/dev/null && OK=$((OK+1)) || FAIL=$((FAIL+1))
37
+ }
38
+
39
+ pip_install() {
40
+ echo -e " ${BLUE}[PIP]${NC} $*"
41
+ pip3 install --no-cache-dir --break-system-packages "$@" 2>/dev/null && OK=$((OK+1)) || FAIL=$((FAIL+1))
37
42
  }
38
43
 
39
- install_pip() {
40
- echo -e "${BLUE}[PIP]${NC} $*"
41
- pip3 install --no-cache-dir --break-system-packages "$@" 2>/dev/null || true
44
+ # NOTE: checkov requires --ignore-installed (system packaging conflict)
45
+ pip_force() {
46
+ echo -e " ${BLUE}[PIP+]${NC} $*"
47
+ pip3 install --no-cache-dir --break-system-packages --ignore-installed "$@" 2>/dev/null && OK=$((OK+1)) || FAIL=$((FAIL+1))
42
48
  }
43
49
 
44
- install_go() {
45
- echo -e "${BLUE}[GO ]${NC} $1"
46
- go install "$1" 2>/dev/null || true
50
+ go_install() {
51
+ echo -e " ${BLUE}[GO ]${NC} $1"
52
+ export PATH="$PATH:/root/go/bin"; export GOPATH=/root/go
53
+ go install "$1" 2>/dev/null && OK=$((OK+1)) || FAIL=$((FAIL+1))
54
+ # Always copy to system PATH so it's accessible without GOPATH
55
+ local bin_name; bin_name=$(basename "${1%@*}" | cut -d/ -f1)
56
+ [ -f "/root/go/bin/$bin_name" ] && cp "/root/go/bin/$bin_name" /usr/local/bin/ 2>/dev/null || true
47
57
  }
48
58
 
49
- install_npm() {
50
- echo -e "${BLUE}[NPM]${NC} $*"
51
- npm install -g "$@" 2>/dev/null || true
59
+ gem_install() {
60
+ echo -e " ${BLUE}[GEM]${NC} $*"
61
+ gem install "$@" 2>/dev/null && OK=$((OK+1)) || FAIL=$((FAIL+1))
52
62
  }
53
63
 
54
- install_gem() {
55
- echo -e "${BLUE}[GEM]${NC} $*"
56
- gem install "$@" 2>/dev/null || true
64
+ npm_install() {
65
+ echo -e " ${BLUE}[NPM]${NC} $*"
66
+ npm install -g "$@" 2>/dev/null && OK=$((OK+1)) || FAIL=$((FAIL+1))
57
67
  }
58
68
 
59
69
  clone() {
60
70
  local repo="$1" dest="$2"
71
+ echo -e " ${BLUE}[GIT]${NC} $dest"
61
72
  if [ ! -d "$dest" ]; then
62
- echo -e "${BLUE}[GIT]${NC} $dest"
63
- git clone "$repo" "$dest" 2>/dev/null || true
73
+ git clone --depth 1 "$repo" "$dest" -q 2>/dev/null && OK=$((OK+1)) || FAIL=$((FAIL+1))
64
74
  else
65
- echo -e "${YELLOW}[SKP]${NC} $dest (exists)"
75
+ echo -e " ${YELLOW}[SKP]${NC} $dest (already exists)"
76
+ OK=$((OK+1))
66
77
  fi
67
78
  }
68
79
 
69
- log_section() {
80
+ binary_download() {
81
+ local name="$1" url="$2" dest="${3:-/usr/local/bin/$1}"
82
+ echo -e " ${BLUE}[BIN]${NC} $name"
83
+ curl -sL "$url" -o "/tmp/${name}_dl" 2>/dev/null && mv "/tmp/${name}_dl" "$dest" && chmod +x "$dest" && OK=$((OK+1)) || FAIL=$((FAIL+1))
84
+ }
85
+
86
+ section() {
70
87
  echo ""
71
- echo -e "${CYAN}══════════════════════════════════════════${NC}"
72
- echo -e "${CYAN} $1${NC}"
73
- echo -e "${CYAN}══════════════════════════════════════════${NC}"
88
+ echo -e "${CYAN}${BOLD}══ $1 ══${NC}"
74
89
  }
75
90
 
76
- # ── System ────────────────────────────────────────────────────────────────────
77
- log_section "System Update"
78
- apt-get update && apt-get upgrade -y
91
+ # ── System Update ─────────────────────────────────────────────────────────────
92
+ section "System Update"
93
+ apt-get update -qq && apt-get upgrade -y -qq
79
94
 
80
- # ── Core dependencies ─────────────────────────────────────────────────────────
81
- log_section "Core Dependencies"
82
- install_apt curl wget git vim nano tmux screen \
95
+ # ── Core Dependencies ─────────────────────────────────────────────────────────
96
+ section "Core Dependencies"
97
+ apt_install curl wget git vim nano tmux screen \
83
98
  file xxd hexedit zip unzip p7zip-full tar jq \
84
99
  build-essential python3 python3-pip python3-venv \
85
100
  libssl-dev libffi-dev libpcap-dev \
86
- golang-go nodejs npm default-jdk ruby ruby-dev
101
+ golang-go nodejs npm default-jdk ruby ruby-dev \
102
+ libgmp-dev libmpfr-dev libmpc-dev
87
103
 
88
- # ── Alias setup ───────────────────────────────────────────────────────────────
89
- log_section "Installing rt-* Aliases"
104
+ export PATH="$PATH:/root/go/bin"
105
+ export GOPATH=/root/go
106
+
107
+ # ── Aliases (rt-* shortcuts) ──────────────────────────────────────────────────
108
+ section "RTExit Aliases"
90
109
  SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
91
110
  ALIASES_SRC="$SCRIPT_DIR/../docker/aliases.sh"
92
-
93
111
  if [ -f "$ALIASES_SRC" ]; then
94
112
  cp "$ALIASES_SRC" /etc/profile.d/rtexit-aliases.sh
95
113
  chmod +x /etc/profile.d/rtexit-aliases.sh
96
- echo -e "${GREEN}[✓]${NC} rt-* aliases installed → /etc/profile.d/rtexit-aliases.sh"
97
- echo -e "${YELLOW}[!]${NC} Run: source /etc/profile.d/rtexit-aliases.sh"
98
- else
99
- echo -e "${YELLOW}[!]${NC} aliases.sh not found — install from: docker/aliases.sh"
114
+ echo -e " ${GREEN}✅${NC} rt-* aliases installed"
100
115
  fi
101
116
 
102
- # ── Network & Scanning ────────────────────────────────────────────────────────
103
- log_section "Network & Scanning"
104
- install_apt nmap ncat netcat-openbsd tcpdump tshark \
105
- net-tools iproute2 iputils-ping bind9-dnsutils \
106
- socat proxychains4 openvpn masscan \
107
- iodine hping3 dsniff macchanger zmap \
108
- bettercap ettercap-text-only sslstrip arpwatch netsniff-ng \
109
- suricata ncrack
110
-
111
- # ── Wireless ─────────────────────────────────────────────────────────────────
112
- log_section "Wireless & Bluetooth"
113
- install_apt aircrack-ng wireless-tools rfkill \
114
- hostapd-wpe ubertooth
115
- install_pip wifite2
116
- # hcxdumptool
117
- clone https://github.com/ZerBea/hcxdumptool /opt/hcxdumptool
118
- [ -d /opt/hcxdumptool ] && cd /opt/hcxdumptool && make && make install 2>/dev/null || true
119
- install_apt hcxtools 2>/dev/null || true
120
-
121
- # ── Recon & OSINT ─────────────────────────────────────────────────────────────
122
- log_section "Recon & OSINT"
123
- install_apt amass subfinder fierce dnsrecon dnsenum \
124
- nbtscan smbmap enum4linux
125
- install_pip theHarvester shodan censys trufflehog \
126
- sherlock-project h8mail maigret holehe socialscan \
127
- enum4linux-ng ipinfo duckduckgo-search PyGithub git-dumper
128
- clone https://github.com/lanmaster53/recon-ng /opt/recon-ng
129
- install_pip -r /opt/recon-ng/REQUIREMENTS 2>/dev/null || true
130
- ln -sf /opt/recon-ng/recon-ng /usr/local/bin/recon-ng 2>/dev/null || true
131
- # Go recon tools
132
- install_go github.com/projectdiscovery/httpx/cmd/httpx@latest
133
- install_go github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
134
- install_go github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
135
- install_go github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
136
- install_go github.com/projectdiscovery/katana/cmd/katana@latest
137
- install_go github.com/projectdiscovery/dnsx/cmd/dnsx@latest
138
- install_go github.com/hakluke/hakrawler@latest
139
- install_go github.com/tomnomnom/waybackurls@latest
140
- install_go github.com/lc/gau/v2/cmd/gau@latest
141
- install_go github.com/ffuf/ffuf/v2@latest
142
- install_go github.com/OJ/gobuster/v3@latest
143
- install_go github.com/LukaSikic/subzy@latest
144
- install_go github.com/hahwul/dalfox/v2@latest
145
- install_go github.com/gwen001/github-subdomains@latest
146
- # gitleaks
147
- curl -sSfL https://github.com/gitleaks/gitleaks/releases/latest/download/gitleaks_linux_x64.tar.gz | \
148
- tar xz -C /usr/local/bin 2>/dev/null || true
117
+ # ════════════════════════════════════════════════════════════
118
+ # PHASE 1 — Scanning & Recon
119
+ # ════════════════════════════════════════════════════════════
120
+ section "Phase 1 — Scanning & Recon"
121
+
122
+ # Verified via apt (reliable)
123
+ apt_install nmap masscan zmap naabu \
124
+ dnsrecon dnsenum fierce \
125
+ dirb nikto whatweb wafw00f testssl.sh
126
+
127
+ # rustscan — MUST use deb package (not cargo, too slow)
128
+ echo -e " ${BLUE}[DEB]${NC} rustscan"
129
+ curl -sL "https://github.com/RustScan/RustScan/releases/download/2.3.0/rustscan_2.3.0_amd64.deb" \
130
+ -o /tmp/rustscan.deb 2>/dev/null && dpkg -i /tmp/rustscan.deb 2>/dev/null && rm /tmp/rustscan.deb || true
131
+
132
+ # feroxbuster — binary download (go install is slow, binary is instant)
133
+ echo -e " ${BLUE}[BIN]${NC} feroxbuster"
134
+ curl -sL "https://github.com/epi052/feroxbuster/releases/latest/download/x86_64-linux-feroxbuster.zip" \
135
+ -o /tmp/ferox.zip 2>/dev/null && unzip -qo /tmp/ferox.zip -d /usr/local/bin/ feroxbuster && rm /tmp/ferox.zip || true
136
+
137
+ # x8 — MUST use binary (.gz), NOT go install (module path is broken in go install)
138
+ echo -e " ${BLUE}[BIN]${NC} x8"
139
+ curl -sL "https://github.com/Sh1Yo/x8/releases/download/v4.3.0/x86_64-linux-x8.gz" \
140
+ -o /tmp/x8.gz 2>/dev/null && gunzip /tmp/x8.gz && mv /tmp/x8 /usr/local/bin/x8 && chmod +x /usr/local/bin/x8 || true
141
+
142
+ # pip scanning tools
143
+ pip_install dirsearch wfuzz
144
+
145
+ # Go tools (all copy to /usr/local/bin automatically)
146
+ go_install github.com/projectdiscovery/httpx/cmd/httpx@latest
147
+ go_install github.com/projectdiscovery/nuclei/v3/cmd/nuclei@latest
148
+ go_install github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest
149
+ go_install github.com/projectdiscovery/naabu/v2/cmd/naabu@latest
150
+ go_install github.com/projectdiscovery/katana/cmd/katana@latest
151
+ go_install github.com/projectdiscovery/dnsx/cmd/dnsx@latest
152
+ go_install github.com/hakluke/hakrawler@latest
153
+ go_install github.com/tomnomnom/waybackurls@latest
154
+ go_install github.com/lc/gau/v2/cmd/gau@latest
155
+ go_install github.com/ffuf/ffuf/v2@latest
156
+ go_install github.com/OJ/gobuster/v3@latest
157
+ go_install github.com/LukaSikic/subzy@latest
158
+ go_install github.com/PentestPad/subzy@latest # fallback — use PentestPad fork
159
+ go_install github.com/hahwul/dalfox/v2@latest
160
+ go_install github.com/tomnomnom/httprobe@latest
161
+ go_install github.com/d3mondev/puredns/v2@latest
162
+ go_install github.com/sensepost/gowitness@latest
163
+ go_install github.com/LukaSikic/subzy@latest
164
+ go_install github.com/projectdiscovery/interactsh/cmd/interactsh-client@latest
165
+ go_install github.com/tomnomnom/qsreplace@latest
166
+ go_install github.com/Emoe/kxss@latest
167
+
168
+ # gitleaks — binary download (not pip — pip version is outdated)
169
+ echo -e " ${BLUE}[BIN]${NC} gitleaks"
170
+ curl -sSL "https://github.com/gitleaks/gitleaks/releases/download/v8.18.2/gitleaks_8.18.2_linux_x64.tar.gz" \
171
+ -o /tmp/gl.tar.gz 2>/dev/null && tar xf /tmp/gl.tar.gz -C /usr/local/bin gitleaks && rm /tmp/gl.tar.gz || true
172
+
173
+ # wappalyzer — wrapper script (npm installs to non-standard path, needs wrapper)
174
+ npm_install wappalyzer-cli
175
+ printf '#!/bin/bash\nnode /usr/local/lib/node_modules/wappalyzer-cli/bin/wappalyzer "$@"\n' \
176
+ > /usr/local/bin/wappalyzer && chmod +x /usr/local/bin/wappalyzer
177
+
178
+ # LinkFinder
179
+ clone https://github.com/GerbenJavado/LinkFinder /opt/LinkFinder
180
+ pip_install -r /opt/LinkFinder/requirements.txt
181
+ ln -sf /opt/LinkFinder/linkfinder.py /usr/local/bin/linkfinder
182
+ chmod +x /opt/LinkFinder/linkfinder.py 2>/dev/null || true
183
+
149
184
  # SecLists
150
185
  clone https://github.com/danielmiessler/SecLists /opt/SecLists
151
186
 
152
- # ── Web Application ───────────────────────────────────────────────────────────
153
- log_section "Web Application Testing"
154
- install_apt sqlmap nikto wfuzz dirb whatweb wafw00f testssl.sh
155
- install_pip mitmproxy impacket requests pwntools \
156
- PyJWT python-jose grpcio grpcio-tools websocket-client scapy \
157
- arjun padding-oracle-attacker jsbeautifier semgrep graphql-cop inql
158
- clone https://github.com/defparam/smuggler /opt/smuggler
159
- ln -sf /opt/smuggler/smuggler.py /usr/local/bin/smuggler
160
- chmod +x /opt/smuggler/smuggler.py 2>/dev/null || true
187
+ # ════════════════════════════════════════════════════════════
188
+ # PHASE 2 — Web Application Testing
189
+ # ════════════════════════════════════════════════════════════
190
+ section "Phase 2 — Web Application Testing"
191
+
192
+ apt_install sqlmap
193
+
194
+ # semgrep — pip3 ONLY (apt python3-semgrep does NOT create the semgrep binary)
195
+ pip_install semgrep
196
+
197
+ pip_install mitmproxy arjun jsbeautifier graphql-cop graphw00f inql
198
+
199
+ # graphql-cop wrapper (pip installs module only, binary needs wrapper)
200
+ printf '#!/bin/bash\npython3 -m graphql_cop "$@"\n' > /usr/local/bin/graphql-cop && chmod +x /usr/local/bin/graphql-cop
201
+ printf '#!/bin/bash\npython3 -m graphw00f "$@"\n' > /usr/local/bin/graphw00f && chmod +x /usr/local/bin/graphw00f
202
+ pip_install PyJWT python-jose grpcio grpcio-tools websocket-client
203
+ pip_install blackboxprotobuf padding-oracle-attacker
204
+
205
+ # checkov — MUST use --ignore-installed (packaging conflict)
206
+ pip_force checkov
207
+
208
+ # git-dumper
209
+ pip_install git-dumper
210
+
211
+ # jwt_tool
161
212
  clone https://github.com/ticarpi/jwt_tool /opt/jwt_tool
162
- install_pip -r /opt/jwt_tool/requirements.txt 2>/dev/null || true
213
+ pip_install -r /opt/jwt_tool/requirements.txt
163
214
  ln -sf /opt/jwt_tool/jwt_tool.py /usr/local/bin/jwt_tool
164
- chmod +x /opt/jwt_tool/jwt_tool.py 2>/dev/null || true
165
- clone https://github.com/GerbenJavado/LinkFinder /opt/LinkFinder
166
- install_pip -r /opt/LinkFinder/requirements.txt 2>/dev/null || true
167
- ln -sf /opt/LinkFinder/linkfinder.py /usr/local/bin/linkfinder
168
- clone https://github.com/enjoiz/XXEinjector /opt/XXEinjector
215
+ chmod +x /opt/jwt_tool/jwt_tool.py
216
+
217
+ # smuggler (HTTP Request Smuggling)
218
+ clone https://github.com/defparam/smuggler /opt/smuggler
219
+ ln -sf /opt/smuggler/smuggler.py /usr/local/bin/smuggler
220
+ chmod +x /opt/smuggler/smuggler.py
221
+
222
+ # tplmap (SSTI)
169
223
  clone https://github.com/epinna/tplmap /opt/tplmap
170
- install_pip -r /opt/tplmap/requirements.txt 2>/dev/null || true
224
+ pip_install -r /opt/tplmap/requirements.txt
171
225
  ln -sf /opt/tplmap/tplmap.py /usr/local/bin/tplmap
172
- chmod +x /opt/tplmap/tplmap.py 2>/dev/null || true
173
- # GraphQL tools
174
- install_pip graphw00f clairvoyance
175
- # Go web tools
176
- install_go github.com/fullstorydev/grpcurl/cmd/grpcurl@latest
177
- install_go github.com/projectdiscovery/interactsh/cmd/interactsh-client@latest
178
- install_go github.com/Sh1Yo/x8@latest
179
- install_go github.com/tomnomnom/qsreplace@latest
180
- install_go github.com/Emoe/kxss@latest
181
- # ghauri
182
- install_pip ghauri 2>/dev/null || true
183
- clone https://github.com/r0oth3x49/ghauri /opt/ghauri
184
- install_pip -r /opt/ghauri/requirements.txt 2>/dev/null || true
185
- ln -sf /opt/ghauri/ghauri.py /usr/local/bin/ghauri
226
+ chmod +x /opt/tplmap/tplmap.py
227
+
228
+ # wpscan via gem (NOT apt — apt version is outdated/broken on new Kali)
229
+ gem_install wpscan
230
+
231
+ # XXEinjector
232
+ clone https://github.com/enjoiz/XXEinjector /opt/XXEinjector
233
+
186
234
  # CORScanner
187
235
  clone https://github.com/chenjj/CORScanner /opt/CORScanner
188
- install_pip -r /opt/CORScanner/requirements.txt 2>/dev/null || true
189
- # npm web tools
190
- install_npm wappalyzer-cli js-beautify
191
-
192
- # ── Password & Credentials ────────────────────────────────────────────────────
193
- log_section "Password Attacks & Credentials"
194
- install_apt hashcat john hydra medusa cewl crunch
195
- install_pip pypykatz patator
196
- install_go github.com/ropnop/kerbrute@latest
197
- clone https://github.com/Mebus/cupp /opt/cupp
198
- ln -sf /opt/cupp/cupp.py /usr/local/bin/cupp
199
- chmod +x /opt/cupp/cupp.py
236
+ pip_install -r /opt/CORScanner/requirements.txt
237
+
238
+ # ghauri (advanced SQLi)
239
+ pip_install ghauri
240
+ clone https://github.com/r0oth3x49/ghauri /opt/ghauri
241
+ pip_install -r /opt/ghauri/requirements.txt
242
+ ln -sf /opt/ghauri/ghauri.py /usr/local/bin/ghauri
243
+
244
+ # ysoserial + phpggc (deserialization)
245
+ mkdir -p /opt/ysoserial
246
+ curl -sL "https://github.com/frohoff/ysoserial/releases/latest/download/ysoserial-all.jar" \
247
+ -o /opt/ysoserial/ysoserial.jar 2>/dev/null || true
248
+ clone https://github.com/ambionics/phpggc /opt/phpggc
249
+ ln -sf /opt/phpggc/phpggc /usr/local/bin/phpggc
250
+ chmod +x /opt/phpggc/phpggc
251
+
252
+ # graphw00f, clairvoyance
253
+ pip_install graphw00f clairvoyance
254
+
255
+ # grpcurl
256
+ go_install github.com/fullstorydev/grpcurl/cmd/grpcurl@latest
257
+
258
+ # syft, grype (supply chain)
259
+ curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin 2>/dev/null || true
260
+ curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin 2>/dev/null || true
261
+
262
+ # ════════════════════════════════════════════════════════════
263
+ # PHASE 3 — Active Directory & Windows
264
+ # ════════════════════════════════════════════════════════════
265
+ section "Phase 3 — Active Directory & Windows"
266
+
267
+ pip_install impacket certipy-ad pywhisker netexec bloodyAD ldeep pyrdp bloodhound
268
+
269
+ # theHarvester — MUST use apt (pip version is broken on newer Kali)
270
+ apt_install theharvester
271
+
272
+ # netexec + wifite — apt is correct (confirmed working)
273
+ apt_install netexec wifite
274
+
275
+ # crackmapexec → symlink to netexec (same tool, renamed in 2024)
276
+ ln -sf /usr/bin/netexec /usr/local/bin/crackmapexec 2>/dev/null || true
277
+
278
+ gem_install evil-winrm
279
+
280
+ # Impacket symlinks — CRITICAL: scripts are .py files, need impacket- prefix
281
+ for script in psexec smbexec wmiexec secretsdump GetUserSPNs GetNPUsers \
282
+ ntlmrelayx lookupsid ticketer ticketConverter getST addcomputer \
283
+ atexec dcomexec dpapi esentutl findDelegation goldenPac karmaSMB \
284
+ netview nmapAnswerMachine ping6 raiseChild rpcdump sambaPipe \
285
+ samrdump services sniffer sniff tstool; do
286
+ if [ -f /usr/local/bin/${script}.py ]; then
287
+ ln -sf /usr/local/bin/${script}.py /usr/local/bin/impacket-${script}
288
+ chmod +x /usr/local/bin/${script}.py
289
+ fi
290
+ done
200
291
 
201
- # ── Active Directory ──────────────────────────────────────────────────────────
202
- log_section "Active Directory & Windows"
203
- install_pip impacket bloodhound certipy-ad pywhisker netexec mitm6 coercer \
204
- bloodyAD ldeep pyrdp
205
- install_gem evil-winrm
292
+ # AD tools
206
293
  clone https://github.com/dirkjanm/PKINITtools /opt/PKINITtools
207
- install_pip -r /opt/PKINITtools/requirements.txt 2>/dev/null || true
294
+ pip_install -r /opt/PKINITtools/requirements.txt
208
295
  clone https://github.com/topotam/PetitPotam /opt/PetitPotam
209
296
  clone https://github.com/login-securite/DonPAPI /opt/DonPAPI
210
- install_pip -r /opt/DonPAPI/requirements.txt 2>/dev/null || true
297
+ pip_install -r /opt/DonPAPI/requirements.txt
211
298
  clone https://github.com/Ridter/noPac /opt/noPac
212
299
  clone https://github.com/Dec0ne/KrbRelayUp /opt/KrbRelayUp
213
300
  clone https://github.com/dirkjanm/CVE-2020-1472 /opt/CVE-2020-1472
214
301
  clone https://github.com/cube0x0/CVE-2021-1675 /opt/PrintNightmare
215
302
  clone https://github.com/dirkjanm/krbrelayx /opt/krbrelayx
216
- install_pip dnspython ldap3 pyOpenSSL 2>/dev/null || true
303
+ pip_install dnspython ldap3 pyOpenSSL
217
304
  clone https://github.com/fireeye/ADFSpoof /opt/ADFSpoof
218
- install_pip -r /opt/ADFSpoof/requirements.txt 2>/dev/null || true
305
+ pip_install -r /opt/ADFSpoof/requirements.txt
219
306
  clone https://github.com/klezVirus/SysWhispers3 /opt/SysWhispers3
220
307
  clone https://github.com/Hackndo/pyGPOAbuse /opt/pyGPOAbuse
221
- install_pip -r /opt/pyGPOAbuse/requirements.txt 2>/dev/null || true
222
- install_pip roadtools roadrecon bloodyAD
223
- # windapsearch
224
- install_go github.com/ropnop/windapsearch@latest 2>/dev/null || true
225
-
226
- # ── C2 & Post-Exploitation ────────────────────────────────────────────────────
227
- log_section "C2 & Post-Exploitation"
228
- install_apt metasploit-framework
229
- curl https://sliver.sh/install | bash 2>/dev/null || true
230
- install_go github.com/jpillora/chisel@latest
231
- install_go github.com/nicocha30/ligolo-ng/cmd/proxy@latest
232
- install_go github.com/nicocha30/ligolo-ng/cmd/agent@latest
233
- install_go github.com/Ne0nd0g/merlin-agent/cmd/merlinagent@latest
234
- clone https://github.com/BC-SECURITY/Empire /opt/Empire
235
- install_pip -r /opt/Empire/requirements.txt 2>/dev/null || true
236
- ln -sf /opt/Empire/empire /usr/local/bin/empire 2>/dev/null || true
237
- clone https://github.com/nettitude/PoshC2 /opt/PoshC2
238
- install_pip -r /opt/PoshC2/requirements.txt 2>/dev/null || true
239
- clone https://github.com/t3l3machus/Villain /opt/Villain
240
- install_pip -r /opt/Villain/requirements.txt 2>/dev/null || true
241
- install_pip deathstar 2>/dev/null || true
308
+ pip_install -r /opt/pyGPOAbuse/requirements.txt
242
309
  clone https://github.com/byt3bl33d3r/DeathStar /opt/DeathStar
243
- install_pip -r /opt/DeathStar/requirements.txt 2>/dev/null || true
244
- install_apt iodine
245
- clone https://github.com/iagox86/dnscat2 /opt/dnscat2
246
- cd /opt/dnscat2/client && make 2>/dev/null || true
247
-
248
- # ── Cloud ─────────────────────────────────────────────────────────────────────
249
- log_section "Cloud Platforms"
250
- install_pip awscli boto3 azure-cli google-cloud-storage google-auth \
251
- scoutsuite prowler pacu kube-hunter principalmapper \
252
- checkov s3scanner gcp-scanner
253
- install_go github.com/BishopFox/cloudfox@latest
254
- install_go github.com/DataDog/stratus-red-team/v2/cmd/stratus@latest
255
- install_go github.com/liamg/awswhoami@latest
256
- curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" 2>/dev/null && \
257
- install -m 0755 kubectl /usr/local/bin/kubectl && rm kubectl 2>/dev/null || true
310
+ pip_install -r /opt/DeathStar/requirements.txt
311
+ pip_install roadtools roadrecon
312
+ go_install github.com/ropnop/kerbrute@latest
313
+ go_install github.com/ropnop/windapsearch@latest
314
+
315
+ # LDAP/SMB enum
316
+ apt_install enum4linux nbtscan smbmap smbclient ldap-utils
317
+ pip_install enum4linux-ng
318
+
319
+ # Responder, Coercer, Mitm6
320
+ apt_install responder
321
+ pip_install mitm6 coercer bloodyAD ldeep
322
+
323
+ # pyrdp
324
+ pip_install pyrdp
325
+
326
+ # ════════════════════════════════════════════════════════════
327
+ # PHASE 4 — Cloud
328
+ # ════════════════════════════════════════════════════════════
329
+ section "Phase 4 — Cloud"
330
+
331
+ pip_install awscli boto3 google-cloud-storage google-auth \
332
+ scoutsuite prowler kube-hunter principalmapper \
333
+ checkov s3scanner
334
+
335
+ # azure-cli
336
+ pip_install azure-cli 2>/dev/null || \
337
+ curl -sL https://aka.ms/InstallAzureCLIDeb | bash 2>/dev/null || true
338
+
339
+ # enumerate-iam (AWS)
258
340
  clone https://github.com/andresriancho/enumerate-iam /opt/enumerate-iam
259
- install_pip -r /opt/enumerate-iam/requirements.txt 2>/dev/null || true
341
+ pip_install -r /opt/enumerate-iam/requirements.txt
260
342
  ln -sf /opt/enumerate-iam/enumerate-iam.py /usr/local/bin/enumerate-iam
261
- chmod +x /opt/enumerate-iam/enumerate-iam.py 2>/dev/null || true
343
+ chmod +x /opt/enumerate-iam/enumerate-iam.py
344
+
345
+ # azcopy
346
+ curl -sSL "https://aka.ms/downloadazcopy-v10-linux" | tar xz --strip-components=1 -C /usr/local/bin/ 2>/dev/null || true
347
+
348
+ # kubectl
349
+ curl -LO "https://dl.k8s.io/release/$(curl -L -s https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl" 2>/dev/null \
350
+ && install -m 0755 kubectl /usr/local/bin/kubectl && rm kubectl || true
351
+
262
352
  # kubectx + kubens
263
353
  clone https://github.com/ahmetb/kubectx /opt/kubectx
264
354
  ln -sf /opt/kubectx/kubectx /usr/local/bin/kubectx
265
- ln -sf /opt/kubectx/kubens /usr/local/bin/kubens 2>/dev/null || true
266
- install_go github.com/aquasecurity/kube-bench@latest
355
+ ln -sf /opt/kubectx/kubens /usr/local/bin/kubens
356
+
357
+ # kube-bench, helm
358
+ go_install github.com/aquasecurity/kube-bench@latest
267
359
  curl https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3 | bash 2>/dev/null || true
268
- # azcopy
269
- curl -sSL "https://aka.ms/downloadazcopy-v10-linux" | tar xz --strip-components=1 -C /usr/local/bin/ 2>/dev/null || true
270
- # cloud_enum
360
+
361
+ # Go cloud tools
362
+ go_install github.com/BishopFox/cloudfox@latest
363
+ go_install github.com/DataDog/stratus-red-team/v2/cmd/stratus@latest
364
+ go_install github.com/liamg/awswhoami@latest
365
+ go_install github.com/projectdiscovery/cloudlist/cmd/cloudlist@latest
366
+
367
+ # Container tools
368
+ go_install github.com/cdk-team/CDK/cmd/cdk@latest
369
+ go_install github.com/brompwnie/botb@latest
370
+ curl -sSL https://github.com/stealthcopter/deepce/releases/latest/download/deepce \
371
+ -o /usr/local/bin/deepce && chmod +x /usr/local/bin/deepce 2>/dev/null || true
372
+ curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin 2>/dev/null || true
373
+ curl -sSfL https://raw.githubusercontent.com/wagoodman/dive/main/get-dive.sh | sh 2>/dev/null || true
374
+
375
+ # cloud_enum, Pacu
271
376
  clone https://github.com/initstring/cloud_enum /opt/cloud_enum
272
- install_pip -r /opt/cloud_enum/requirements.txt 2>/dev/null || true
377
+ pip_install -r /opt/cloud_enum/requirements.txt
378
+ pip_install pacu
379
+
380
+ # ════════════════════════════════════════════════════════════
381
+ # PHASE 5 — Mobile Testing
382
+ # ════════════════════════════════════════════════════════════
383
+ section "Phase 5 — Mobile Testing"
273
384
 
274
- # ── Mobile ────────────────────────────────────────────────────────────────────
275
- log_section "Mobile Testing"
276
- install_apt apktool dex2jar android-tools-adb
277
- clone https://github.com/skylot/jadx /opt/jadx_src 2>/dev/null || true
385
+ apt_install apktool dex2jar android-tools-adb mono-complete mono-utils
386
+
387
+ # jadx — download zip (NOT apt — apt version is old)
278
388
  mkdir -p /opt/jadx
279
- curl -sSL "https://github.com/skylot/jadx/releases/latest/download/jadx-1.5.0.zip" \
280
- -o /tmp/jadx.zip 2>/dev/null && \
281
- unzip -q /tmp/jadx.zip -d /opt/jadx && \
389
+ curl -sSL "https://github.com/skylot/jadx/releases/download/v1.5.0/jadx-1.5.0.zip" \
390
+ -o /tmp/jadx.zip 2>/dev/null && unzip -qo /tmp/jadx.zip -d /opt/jadx && \
282
391
  ln -sf /opt/jadx/bin/jadx /usr/local/bin/jadx && \
283
- ln -sf /opt/jadx/bin/jadx-gui /usr/local/bin/jadx-gui && \
284
- rm /tmp/jadx.zip 2>/dev/null || true
285
- install_pip frida-tools objection apkleaks drozer \
286
- reFlutter hermes-dec hbctool doldrums androguard \
287
- "qrcode[pil]" Pillow lz4
288
- install_npm apk-mitm js-beautify
289
- install_apt mono-complete mono-utils 2>/dev/null || true
392
+ ln -sf /opt/jadx/bin/jadx-gui /usr/local/bin/jadx-gui && rm /tmp/jadx.zip || true
393
+
290
394
  # uber-apk-signer
291
395
  mkdir -p /opt/uber-apk-signer
292
396
  curl -sSL "https://github.com/patrickfav/uber-apk-signer/releases/download/v1.3.0/uber-apk-signer-1.3.0.jar" \
293
397
  -o /opt/uber-apk-signer/uber-apk-signer.jar 2>/dev/null || true
294
- echo '#!/bin/bash\nexec java -jar /opt/uber-apk-signer/uber-apk-signer.jar "$@"' \
398
+ printf '#!/bin/bash\nexec java -jar /opt/uber-apk-signer/uber-apk-signer.jar "$@"\n' \
295
399
  > /usr/local/bin/uber-apk-signer && chmod +x /usr/local/bin/uber-apk-signer
296
- # frida-server setup script
297
- cat > /usr/local/bin/setup-frida-server << 'SCRIPT'
400
+
401
+ # Frida tools
402
+ pip_install frida-tools objection apkleaks drozer
403
+
404
+ # reFlutter, hermes, cross-platform
405
+ pip_install reFlutter hermes-dec hbctool doldrums androguard "qrcode[pil]" Pillow lz4
406
+
407
+ # apk-mitm
408
+ npm_install apk-mitm js-beautify
409
+
410
+ # setup-frida-server script
411
+ cat > /usr/local/bin/setup-frida-server << 'FSCRIPT'
298
412
  #!/bin/bash
299
413
  FRIDA_VER=$(python3 -c "import frida; print(frida.__version__)" 2>/dev/null || pip3 show frida | grep Version | awk '{print $2}')
300
414
  ARCH=$(adb shell getprop ro.product.cpu.abi 2>/dev/null | tr -d '\r')
301
415
  case $ARCH in
302
416
  arm64-v8a) A="arm64" ;; armeabi-v7a) A="arm" ;;
303
- x86_64) A="x86_64" ;; x86) A="x86" ;; *) echo "Unknown arch: $ARCH"; exit 1 ;;
417
+ x86_64) A="x86_64" ;; x86) A="x86" ;; *) echo "Unknown: $ARCH"; exit 1 ;;
304
418
  esac
305
- echo "[*] Frida $FRIDA_VER | arch: $A"
306
419
  wget -q "https://github.com/frida/frida/releases/download/${FRIDA_VER}/frida-server-${FRIDA_VER}-android-${A}.xz" -O /tmp/frida-server.xz
307
420
  unxz /tmp/frida-server.xz && mv /tmp/frida-server "/tmp/frida-server-${A}"
308
421
  adb push "/tmp/frida-server-${A}" /data/local/tmp/frida-server
309
422
  adb shell chmod 755 /data/local/tmp/frida-server
310
- echo "[+] Done. Start: adb shell /data/local/tmp/frida-server &"
311
- SCRIPT
423
+ echo "[+] Start: adb shell /data/local/tmp/frida-server &"
424
+ FSCRIPT
312
425
  chmod +x /usr/local/bin/setup-frida-server
313
426
 
314
- # ── Binary Analysis & RE ──────────────────────────────────────────────────────
315
- log_section "Binary Analysis & Reverse Engineering"
316
- install_apt gdb radare2 ltrace strace binutils patchelf nasm yara \
317
- binutils-multiarch sleuthkit
318
- install_pip pwntools floss capstone keystone-engine unicorn \
427
+ # drozer agent
428
+ mkdir -p /opt/drozer
429
+ curl -sSL "https://github.com/WithSecureLabs/drozer/releases/latest/download/drozer-agent.apk" \
430
+ -o /opt/drozer/drozer-agent.apk 2>/dev/null || true
431
+
432
+ # TheFatRat
433
+ clone https://github.com/Screetsec/TheFatRat /opt/TheFatRat
434
+ chmod +x /opt/TheFatRat/fatrat 2>/dev/null || true
435
+
436
+ # ════════════════════════════════════════════════════════════
437
+ # PHASE 6 — C2 & Post-Exploitation
438
+ # ════════════════════════════════════════════════════════════
439
+ section "Phase 6 — C2 & Post-Exploitation"
440
+
441
+ apt_install metasploit-framework iodine
442
+ curl https://sliver.sh/install | bash 2>/dev/null || true
443
+ go_install github.com/jpillora/chisel@latest
444
+ go_install github.com/nicocha30/ligolo-ng/cmd/proxy@latest
445
+ go_install github.com/nicocha30/ligolo-ng/cmd/agent@latest
446
+ go_install github.com/Ne0nd0g/merlin-agent/cmd/merlinagent@latest
447
+
448
+ clone https://github.com/BC-SECURITY/Empire /opt/Empire
449
+ pip_install -r /opt/Empire/requirements.txt
450
+ ln -sf /opt/Empire/empire /usr/local/bin/empire 2>/dev/null || true
451
+ clone https://github.com/nettitude/PoshC2 /opt/PoshC2
452
+ pip_install -r /opt/PoshC2/requirements.txt
453
+ clone https://github.com/t3l3machus/Villain /opt/Villain
454
+ pip_install -r /opt/Villain/requirements.txt
455
+ clone https://github.com/iagox86/dnscat2 /opt/dnscat2
456
+ cd /opt/dnscat2/client && make 2>/dev/null || true; cd /
457
+
458
+ # Payload generation
459
+ clone https://github.com/optiv/ScareCrow /opt/ScareCrow
460
+ cd /opt/ScareCrow && go build -o /usr/local/bin/ScareCrow . 2>/dev/null || true; cd /
461
+ clone https://github.com/sevagas/macro_pack /opt/macro_pack
462
+ pip_install donut-shellcode
463
+ go_install github.com/Binject/go-donut/cmd/godonuts@latest
464
+
465
+ # ════════════════════════════════════════════════════════════
466
+ # PHASE 7 — OSINT & Intelligence
467
+ # ════════════════════════════════════════════════════════════
468
+ section "Phase 7 — OSINT & Intelligence"
469
+
470
+ pip_install shodan censys h8mail holehe maigret socialscan \
471
+ spiderfoot ipinfo duckduckgo-search PyGithub
472
+
473
+ clone https://github.com/lanmaster53/recon-ng /opt/recon-ng
474
+ pip_install -r /opt/recon-ng/REQUIREMENTS
475
+ ln -sf /opt/recon-ng/recon-ng /usr/local/bin/recon-ng
476
+
477
+ clone https://github.com/m8sec/CrossLinked /opt/CrossLinked
478
+ pip_install -r /opt/CrossLinked/requirements.txt
479
+
480
+ pip_install sherlock-project
481
+
482
+ go_install github.com/gwen001/github-subdomains@latest
483
+
484
+ # ════════════════════════════════════════════════════════════
485
+ # PHASE 8 — Passwords & Credentials
486
+ # ════════════════════════════════════════════════════════════
487
+ section "Phase 8 — Passwords & Credentials"
488
+
489
+ apt_install hashcat john hydra medusa cewl crunch ncrack
490
+
491
+ clone https://github.com/Mebus/cupp /opt/cupp
492
+ ln -sf /opt/cupp/cupp.py /usr/local/bin/cupp
493
+ chmod +x /opt/cupp/cupp.py
494
+
495
+ pip_install pypykatz patator
496
+
497
+ # Crypto libraries
498
+ pip_install pycryptodome hashpumpy cryptography sympy gmpy2 ecdsa
499
+
500
+ # ════════════════════════════════════════════════════════════
501
+ # PHASE 9 — Binary Analysis & RE
502
+ # ════════════════════════════════════════════════════════════
503
+ section "Phase 9 — Binary Analysis & RE"
504
+
505
+ apt_install gdb radare2 ltrace strace binutils patchelf nasm \
506
+ yara binutils-multiarch sleuthkit
507
+
508
+ pip_install pwntools floss capstone keystone-engine unicorn \
319
509
  ropgadget ropper angr yara-python
510
+
511
+ # pwndbg
320
512
  clone https://github.com/pwndbg/pwndbg /opt/pwndbg
321
- cd /opt/pwndbg && ./setup.sh 2>/dev/null || true
513
+ cd /opt/pwndbg && ./setup.sh 2>/dev/null || true; cd /
514
+
515
+ # GEF
322
516
  bash -c "$(curl -sSL https://gef.blah.cat/sh)" 2>/dev/null || true
323
- clone https://github.com/Yara-Rules/rules /opt/yara-rules
517
+
324
518
  # Ghidra
325
519
  if ! command -v ghidra &>/dev/null; then
326
520
  curl -sSL "https://github.com/NationalSecurityAgency/ghidra/releases/latest/download/ghidra_11.1_PUBLIC_20240607.zip" \
327
521
  -o /tmp/ghidra.zip 2>/dev/null && \
328
522
  unzip -q /tmp/ghidra.zip -d /opt && \
329
- ln -sf /opt/ghidra_*/ghidraRun /usr/local/bin/ghidra && \
523
+ ln -s /opt/ghidra_*/ghidraRun /usr/local/bin/ghidra && \
330
524
  rm /tmp/ghidra.zip 2>/dev/null || true
331
525
  fi
332
526
 
333
- # ── Crypto ────────────────────────────────────────────────────────────────────
334
- log_section "Cryptography"
335
- install_apt libgmp-dev libmpfr-dev libmpc-dev
336
- install_pip pycryptodome hashpumpy cryptography sympy ecdsa gmpy2
527
+ # YARA rules
528
+ clone https://github.com/Yara-Rules/rules /opt/yara-rules
337
529
 
338
- # ── Fuzzing ───────────────────────────────────────────────────────────────────
339
- log_section "Fuzzing"
340
- install_apt afl++
341
- install_pip boofuzz
530
+ # Fuzzing
531
+ apt_install afl++
342
532
  clone https://gitlab.com/akihe/radamsa /opt/radamsa
343
- cd /opt/radamsa && make 2>/dev/null && ln -sf /opt/radamsa/bin/radamsa /usr/local/bin/radamsa 2>/dev/null || true
533
+ cd /opt/radamsa && make 2>/dev/null && ln -sf /opt/radamsa/bin/radamsa /usr/local/bin/radamsa || true; cd /
534
+ pip_install boofuzz
535
+
536
+ # Forensics
537
+ apt_install foremost dc3dd testdisk bulk-extractor exiftool
538
+ clone https://github.com/volatilityfoundation/volatility3 /opt/volatility3
539
+ pip_install -r /opt/volatility3/requirements.txt
540
+ ln -sf /opt/volatility3/vol.py /usr/local/bin/vol
541
+
542
+ # ════════════════════════════════════════════════════════════
543
+ # PHASE 10 — Network & WiFi
544
+ # ════════════════════════════════════════════════════════════
545
+ section "Phase 10 — Network & WiFi"
546
+
547
+ apt_install tcpdump tshark bettercap ettercap-text-only dsniff \
548
+ sslstrip hping3 proxychains4 macchanger socat \
549
+ responder aircrack-ng wireless-tools rfkill \
550
+ hostapd-wpe ubertooth ncrack \
551
+ sipvicious rtpbreak pjsua suricata \
552
+ arpwatch netsniff-ng
553
+
554
+ apt_install hcxtools 2>/dev/null || true
555
+
556
+ # hcxdumptool (compile from source — apt version may be outdated)
557
+ clone https://github.com/ZerBea/hcxdumptool /opt/hcxdumptool
558
+ cd /opt/hcxdumptool && make && make install 2>/dev/null || true; cd /
344
559
 
345
- # ── Social Engineering & Phishing ────────────────────────────────────────────
346
- log_section "Social Engineering & Phishing"
347
- clone https://github.com/trustedsec/social-engineer-toolkit /opt/setoolkit
348
- install_pip -r /opt/setoolkit/requirements.txt 2>/dev/null || true
349
- install_pip o365spray
350
- clone https://github.com/ustayready/CredSniper /opt/CredSniper
351
- install_pip -r /opt/CredSniper/requirements.txt 2>/dev/null || true
352
- clone https://github.com/ryhanson/phishery /opt/phishery
353
- wget -q "https://github.com/gophish/gophish/releases/download/v0.12.1/gophish-v0.12.1-linux-64bit.zip" \
354
- -O /tmp/gophish.zip 2>/dev/null && \
560
+ # wifite via apt (confirmed working, pip version has issues)
561
+ apt_install wifite
562
+
563
+ pip_install mitm6 mitmproxy scapy bleak pyserial pyModbusTCP
564
+
565
+ clone https://github.com/lgandx/PCredz /opt/PCredz
566
+
567
+ # GoPhish
568
+ curl -sL "https://github.com/gophish/gophish/releases/download/v0.12.1/gophish-v0.12.1-linux-64bit.zip" \
569
+ -o /tmp/gophish.zip 2>/dev/null && \
355
570
  unzip -q /tmp/gophish.zip -d /opt/gophish && \
356
571
  chmod +x /opt/gophish/gophish && \
357
572
  ln -s /opt/gophish/gophish /usr/local/bin/gophish && \
358
573
  rm /tmp/gophish.zip 2>/dev/null || true
359
- install_go github.com/kgretzky/evilginx2@latest 2>/dev/null || true
360
-
361
- # ── Hardware & IoT ────────────────────────────────────────────────────────────
362
- log_section "Hardware & IoT"
363
- install_apt openocd flashrom avrdude minicom screen
364
- install_pip bleak pyserial pyModbusTCP
365
-
366
- # ── Steganography ─────────────────────────────────────────────────────────────
367
- log_section "Steganography"
368
- install_apt steghide sox binwalk exiftool
369
- install_pip stegoveritas
370
- install_gem zsteg
371
-
372
- # ── VoIP ─────────────────────────────────────────────────────────────────────
373
- log_section "VoIP"
374
- install_apt sipvicious rtpbreak pjsua 2>/dev/null || true
375
- install_pip sipvicious 2>/dev/null || true
376
-
377
- # ── Supply Chain & IaC ────────────────────────────────────────────────────────
378
- log_section "Supply Chain & IaC"
379
- install_pip checkov
380
- curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin 2>/dev/null || true
381
- curl -sSfL https://raw.githubusercontent.com/anchore/grype/main/install.sh | sh -s -- -b /usr/local/bin 2>/dev/null || true
382
- install_go github.com/aquasecurity/trivy@latest 2>/dev/null || true
383
- curl -sSfL https://raw.githubusercontent.com/wagoodman/dive/main/get-dive.sh | sh 2>/dev/null || true
384
574
 
385
- # ── Container & Kubernetes ────────────────────────────────────────────────────
386
- log_section "Container & Kubernetes"
387
- install_go github.com/cdk-team/CDK/cmd/cdk@latest
388
- curl -sSL https://github.com/stealthcopter/deepce/releases/latest/download/deepce \
389
- -o /usr/local/bin/deepce && chmod +x /usr/local/bin/deepce 2>/dev/null || true
390
- install_go github.com/brompwnie/botb@latest
391
- install_pip kube-hunter
575
+ go_install github.com/kgretzky/evilginx2@latest
392
576
 
393
- # ── OSINT Specialized ─────────────────────────────────────────────────────────
394
- log_section "OSINT Specialized"
395
- install_pip spiderfoot ghunt crosslinked
396
- clone https://github.com/m8sec/CrossLinked /opt/CrossLinked
397
- install_pip -r /opt/CrossLinked/requirements.txt 2>/dev/null || true
577
+ # ════════════════════════════════════════════════════════════
578
+ # PHASE 11 — Specialist
579
+ # ════════════════════════════════════════════════════════════
580
+ section "Phase 11 — Specialist"
581
+
582
+ # Social Engineering
583
+ clone https://github.com/trustedsec/social-engineer-toolkit /opt/setoolkit
584
+ pip_install -r /opt/setoolkit/requirements.txt
585
+ pip_install o365spray
586
+ clone https://github.com/ryhanson/phishery /opt/phishery
587
+ clone https://github.com/ustayready/CredSniper /opt/CredSniper
588
+ pip_install -r /opt/CredSniper/requirements.txt
589
+
590
+ # Hardware/IoT
591
+ apt_install openocd flashrom avrdude minicom screen steghide sox binwalk exiftool
592
+ gem_install zsteg
593
+ pip_install stegoveritas
398
594
 
399
- # ── AI/LLM Security ───────────────────────────────────────────────────────────
400
- log_section "AI/LLM Security"
401
- install_pip garak openai anthropic langchain transformers
402
- install_npm promptfoo
595
+ # AI/LLM
596
+ pip_install garak openai anthropic langchain transformers
597
+ npm_install promptfoo
403
598
 
404
- # ── Purple Team ───────────────────────────────────────────────────────────────
405
- log_section "Purple Team"
599
+ # OSINT specialized
600
+ pip_install ghunt
601
+
602
+ # Purple Team
406
603
  clone https://github.com/redcanaryco/atomic-red-team /opt/atomic-red-team
407
604
  clone https://github.com/mitre/caldera /opt/caldera
408
- install_pip -r /opt/caldera/requirements.txt 2>/dev/null || true
605
+ pip_install -r /opt/caldera/requirements.txt
409
606
 
410
- # ── Nuclei Templates ─────────────────────────────────────────────────────────
411
- log_section "Nuclei Templates"
607
+ # Nuclei templates
412
608
  nuclei -update-templates 2>/dev/null || true
413
609
 
414
- # ── PATH & Environment ────────────────────────────────────────────────────────
415
- log_section "Environment Setup"
416
- cat >> /etc/profile.d/rtexit-env.sh << 'EOF'
610
+ # ════════════════════════════════════════════════════════════
611
+ # FINAL — PATH & Environment
612
+ # ════════════════════════════════════════════════════════════
613
+ section "Final Setup"
614
+
615
+ # Copy ALL Go binaries to system PATH (ensures everything accessible)
616
+ cp /root/go/bin/* /usr/local/bin/ 2>/dev/null || true
617
+
618
+ # Environment variables
619
+ cat > /etc/profile.d/rtexit-env.sh << 'ENVEOF'
417
620
  export PATH="$PATH:/root/go/bin:/usr/local/bin:/opt/rtexit/scripts"
418
621
  export SECLISTS='/opt/SecLists'
419
622
  export GOPATH='/root/go'
420
- EOF
623
+ ENVEOF
421
624
  chmod +x /etc/profile.d/rtexit-env.sh
422
625
 
423
- # ── Summary ───────────────────────────────────────────────────────────────────
626
+ # Summary
424
627
  echo ""
425
- echo -e "${GREEN}════════════════════════════════════════════${NC}"
426
- echo -e "${GREEN} RTExit Native Install Complete!${NC}"
427
- echo -e "${GREEN}════════════════════════════════════════════${NC}"
628
+ echo -e "${GREEN}${BOLD}════════════════════════════════════════════${NC}"
629
+ echo -e "${GREEN}${BOLD} RTExit Native Install Complete!${NC}"
630
+ echo -e "${GREEN}${BOLD}════════════════════════════════════════════${NC}"
631
+ echo ""
632
+ echo -e " ${CYAN}Install results:${NC}"
633
+ echo -e " ${GREEN}✅ Successful: $OK${NC}"
634
+ echo -e " ${RED}❌ Failed: $FAIL${NC}"
428
635
  echo ""
429
636
  echo -e " ${CYAN}Next steps:${NC}"
430
637
  echo -e " 1. source /etc/profile.d/rtexit-aliases.sh"
431
638
  echo -e " 2. source /etc/profile.d/rtexit-env.sh"
432
- echo -e " 3. rt-verify ← check all tools"
433
- echo -e " 4. rt-help ← start your engagement"
434
- echo ""
435
- echo -e " ${YELLOW}GPU hashcat:${NC} hashcat with --opencl-device-types 1,2"
436
- echo -e " ${YELLOW}WiFi:${NC} airmon-ng start wlan0"
437
- echo -e " ${YELLOW}Bluetooth:${NC} hciconfig hci0 up"
639
+ echo -e " 3. bash \$(dirname \$0)/verify/rt-verify-all.sh --quick"
438
640
  echo ""