aholicknight/psak

The Pentester's Swiss Army Knife

psak

Project Objectives

1. The primary objective of psak is to make learning pentesting simpler. The second objective is support automated pentesting.
2. This project can be expanded by writing modules and submitting pull requests

Limitations

• In general, attacks using psak are only effective if the attacker is on the same network as the victim

PSAK Framework

PSAK is simple to intergrate with, provided a intermediate understanding of software develpment and Python 3. Just fork the project, add you module and then submit a pull request

PSAK Package	Description
psak_src	holds the psak project
exploit_modules	holds each psak exploit module package
setup.py	psak installation file

1. All code must closely follow the Google Python style at guide https://google.github.io/styleguide/pyguide.html
2. Add a init.py file to python packages or they will not be added to the project installation package list
3. Specify a class for your exploit. This allows for a more dynamic system and adheres to the psak framework
4. Place your module in psak_src.exploit_modules
5. Do not add if __name__ == '__main__': main() to your module. That is solely for the main module located in psak_src.psak.py
6. In psak_src.psak add the following in terms of sudo code to append to psak's arguments python3 if sys.argv[1] == '--your-module' from exploit_modules.your_packages.your_core.your_module import YourClass yourObject = yourObject() yourObject.main_function()
7. Use parser.add_argument('--your-module', help='help message') to add a quick help message for your module

Installation Instructions

Copy and paste the following into your terminal as user root to install psak:

apt-get update
apt-get upgrade
apt-get install python3
apt-get install python3-pip
apt-get install pip
apt-get install pip3
pip3 install --upgrade pip
pip3 install setuptools
pip3 install ipython
pip3 install graphviz
pip3 install cryptography
pip3 install scapy-python3
pip3 install matplotlib
pip3 install networkx
pip3 install pyx
pip3 install latex
pip3 install docopt
pip3 install netaddr
apt-get install tcpdump python3-crypto ipython3
apt-get install python3-tk
#Basic penetration utils
apt-get install airodump-ng
apt-get install aireplay-ng
apt-get install ip
apt-get install arping
# Finish up
pip3 install psak
apt autoremove

Networking Research

• Scapy-Attacks: scapy based attack research (Intergration in progress)
• Ddos database: Ddos knowledge database ((Intergration in progress))
• James' Security Blog: A small comprehensive list of attacks and their implementation
• Wifi ID's: Understanding the network terms SSID, BSSID, and ESSID
• Deauthentication Attack: how to create and send wireless deauthentication packets using python and scapy

Intergrations

Attack types

Sync flood/ARP attack/Stealth Finish/ ICMP Ping flood/ UDP flood/ UDP Scan/ TCP Scan/Ping of Death/ Smurf attack/ TCP land/ UDP land/ ICMP land/ IP spoof/ Sync with Data/ SRC Sync flood/ SRC Stealth Finish/ SRC ICMP flood/ SRC UDP flood/ Echo char gen/ Port scan/ SRC TCP connection overflow/ SRC UDP connection overflow/ TCPUDP connection overflow/ TCP connection overflow/ UDP connection overflow/ TCP UDP connection overflow/Ping sweep/ Deauthentication attack

TODO Tool intergration list

Some of the tools that PSAK will implement will come from broken repositories. Before each tool is added, a stable fork of each individual tool will be required. The majority of revisions will involve simple code such as updating shebangs and octal notation (Python).

• DHCPTakeover: a python module that sets up a dhcp server using Scapy
• MitmAP: a python program to create a fake AP and sniff data
• SSH-mitm SSH man-in-the-middle tool
• TLS Prober: a toolfor identifying the implementation in use by SSL/TLS servers
• Tplmap: exploit Code Injection and Server-Side Template Injection vulnerabilities
• WAFW00F: identifies and fingerprints Web Application Firewall (WAF) products.
• Finmap: find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs within webapps in python
• NoSQLMap: audit as well as automate injection attacks while exploiting default configuration weaknesses in NoSQL databases and web applications using NoSQL
• Webscreenshot: A simple script to screenshot a list of websites, based on the url-to-image phantomjs script.
• Slowloris: an HTTP Denial of Service attack that affects threaded servers (Completed)
• DHCP-Starvation: DHCP starvation attack

Project payload list

A list of frameworks to use to design deliverable payloads for penetration testers.

• PowerSploit: PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment.
• Offensive-Security Exploit database: an official repository of The Exploit Database, a project sponsored by Offensive Security
• DHCPig: initiates an advanced DHCP exhaustion attack