My magical subsystem for linux
09/12/2017
Last year Microsoft published a new function in Windows 10th Anniversary Summer Anniversary Edition, that is Subsystem for Linux which has an alias name Bash on Windows.
After updating to the edition, I am always attracted by the embedded Linux. It is almost a marvelous tool because I don't need to open the virtual machine like Kali Linux in my vmware. And during this year I have honed the tool into an integrated penetration platform.
After considering twice I decided to publish my guide of constructing the platform in the subsystem of Windows 10 and make more people discover the magic in it.
Initialize Bash
The core of the bash is actually Ubuntu. So, we use the old resorts to initialize a normal account like we do that in Ubuntu. sudo passwd root.
Alter the update resource and I recommend the 163 ubuntu releases site.
And then we need to apt-get update, etc.
Hone the Weapon Tools
#The basic install guide is sudo apt-get install {name}
Environment
- pip sudo apt-get install python-pip
- git
- ipython
Weapons
Information
- whois
- whatweb
- shodan
- sudo pip install shodan
- shodan init {your_shodan_api}
- wydomain
- git clone https://github.com/ring04h/wydomain.git
- pip install -r requirements
- weakfilescan
- git clone https://github.com/ring04h/weakfilescan.git
- pip install -r requirements
Penetration
- metasploit
- curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > msfinstall
- chmod 755 msfinstall
- ./msfinstall
- rm -rf msfinstall
- sqlmap
- git clone https://github.com/sqlmapproject/sqlmap.git
- alias sqlmap='python /mnt/c/Users/houkc/sqlmap/sqlmap.py'
- Social-Engineer Toolkit
- git clone https://github.com/trustedsec/social-engineer-toolkit.git
- cd social-engineer-toolkit/
- chmod 777 setup.py
- sudo ./setup.py install
- alias setoolkit='sudo setoolkit'
- MobSF
- git clone https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
- cd Mobile-Security-Framework-MobSF
- python -m pip install -r requirements.txt
- python manage.py runserver
- xunfeng
- wget -qO- https://raw.githubusercontent.com/ysrc/xunfeng/master/install/install.sh | sh OR curl -sSL https://raw.githubusercontent.com/ysrc/xunfeng/master/install/install.sh | sh
- /etc/init.d/xunfeng start | stop | restart | status
- slowhttptest
- testssl
- git clone https://github.com/drwetter/testssl.sh.git
- alias testssl='./mnt/c/Users/bc7/testssl/testssl.sh'
- redis-tools
- hydra
- LFI Suite
- git clone https://github.com/D35m0nd142/LFISuite.git
- alias lfi='python /mnt/c/Users/bc7/LFISuite/lfisuite.py'
Code Review
- cobra
- git clone https://github.com/wufeifei/cobra.git
- cd cobra
- pip install -r requirements.txt
Forensics
- volatity
- foremost
Binary
- binwalk
- sudo apt-get install python-lzma
- git clone https://github.com/devttys0/binwalk.git
- cd binwalk
- sudo python setup.py install
Wallpaper
- cmatrix
- : )
Others
- nmap
#What deserves to be mentioned is that use command apt-get cannot install a practical nmap tool. It always comes up so much exceptions. So I recommend you to choose nmap run under windows.
Make it magic!
Actually I will not use all of these above frequently so that I will then forget the lengthy file name. And I use alias command to solve this problem.
cd ~
vim .bashrc
HAVE FUN : )