sim4n6/pntsh

PNT.sh provides documented pentest cmds right from the CLI using cURL.

PNT.sh

Usage

• access the welcome page : curl pnt.sh

• list all documented commands :curl pnt.sh/list

• show the documentation of the command smbclient : curl pnt.sh/smbclient

MESSAGE to the public !

The app is no more hosted on pnt.sh domain, due to lack of ressources ! It is now on https://pntsh.herokuapp.com/ free tiers.

pntsh's Issues

add doc nslookup.txt and dig.txt

• add nslookup documentation.
• add dig documentation.

Presentation article

Idea

• write an article on medium

Reference

• medium.com

Add logging support

Idea

• add logging support

Reference

• https://realpython.com/python-logging/
• https://github.com/Delgan/loguru

Setup the right repository

Work on setting the right repository on Github, with :

• Kanban board
• Issue initial template
• gitignore
• Readme
• and more.

References:

• https://gist.github.com/PurpleBooth/6f1ba788bf70fb501439
• https://opensource.guide/

Contributing guidelines

write about contributing guidelines ... to help new comers 👍

Review docs

Idea

• review the docs available on cmds folder.

Reference

• https://github.com/Sim4n6/pntsh/tree/master/app/cmds

Write an adapted lexer

Idea

• Write a specific and adapted and custom lexer for pntsh
• Use styling.

Reference

• https://pygments.org/docs/lexerdevelopment/

PNT.sh domain

list all documented cmds

make a route to /list to list all documented cmds in pntsh.

Add this repository list to the cmds doc

Idea

• add those cheat sheets to the repository

Reference

• https://github.com/ivan-sincek/penetration-testing-cheat-sheet

Make tests and automation possible

Travis testing of the flask app.

Reference
https://github.com/gothinkster/flask-realworld-example-app/blob/master/.travis.yml

Record an usage demo in Gif

Idea

• record a demo in Gif using for instance: ttyrec or ttygif

Reference

• https://github.com/sugyan/ttygif

Update SMBmap.txt

Idea

• Add common commands to use smbmap with a single line comment before.

Reference

• https://tools.kali.org/information-gathering/smbmap
• https://github.com/ShawnDEvans/smbmap

colorize randomly the cmds in /list

Idea

• colorize randomly the cmds in /list using colorama

Reference

• https://pypi.org/project/colorama/

Testing for prod mode

Idea

• made a unit test for production mode, not debug mode nor testing mode.
• need to set those flags in config correctly.
• set also a secret key in the appropriate location 👍
• check deployment checklist

Reference

• https://devcenter.heroku.com/articles/getting-started-with-python
• https://blog.miguelgrinberg.com/post/the-flask-mega-tutorial-part-xviii-deployment-on-heroku
• https://flask.palletsprojects.com/en/1.1.x/config/

Decide the User Agent requesting the cmd doc

Idea

• Decide whether the requester of the cmd documentation is a browser or from cmdline.
• based on Flask -> Request -> User_Agent object.
• HTML_needed or not.

Reference

• https://flask.palletsprojects.com/en/1.1.x/api/#flask.Request.user_agent
• https://stackoverflow.com/questions/9878020/how-do-i-get-the-user-agent-with-flask
• https://tedboy.github.io/flask/generated/generated/werkzeug.UserAgent.html

Handle calls from wget

See what make curl different from wget, and try use wget instead.