ilightthings/poor-mans-pentest

This a collection of the code that I have written for the Poor Man's Pentest presentation.

Poor Man Pentest

Changes:

added the reset command for stabilize_shell.sh to fix the terminal.

Installation

#Requirements
apt install guake
apt install xautomation
#Open Guake and change the toggle Guake Visibility hotkey to shift+enter

git clone https://github.com/JohnHammond/poor-mans-pentest.git
mv ./poor-mans-pentest /opt/
mv /opt/poor-mans-pentest pmp

Usage

open a reverse shell on a victims machine

└─# nc -nlvp 8888                              
listening on [any] 8888 ...
connect to [10.2.15.2] from (UNKNOWN) [10.10.49.51] 54798
Linux ip-10-10-49-51 3.13.0-158-generic #208-Ubuntu SMP Fri Aug 24 17:07:38 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
 12:51:34 up 49 min,  0 users,  load average: 0.00, 0.01, 0.05
USER     TTY      FROM             LOGIN@   IDLE   JCPU   PCPU WHAT
uid=33(www-data) gid=33(www-data) groups=33(www-data)
/bin/sh: 0: can't access tty; job control turned off
$ 

background the process.

Open up guake and run your target command.

Notes: Getting this to work with zsh: https://stackoverflow.com/questions/51187275/make-stty-raw-echo-works-with-zsh-or-fish