kali-setup.sh

#!/usr/bin/env bash

################################################
# Kali Linux Red Team Setup Automation Script
# Last Updated 08/27/2024, minor evil updates
# Tested on Kali 2024.3 Gnome/XFCE
# Usage: cd /opt/ && sudo git clone https://github.com/aryanguenthner/365
# cd 365 && sudo chmod a+x *.sh
# chmod -R 777 /home/kali/
# sudo ./kali-setup.sh | tee kali.log
################################################

# Setting Variables
YELLOW=033m
BLUE=034m
KALI=$(hostname -I)
CITY=$(curl -s http://ip-api.com/line?fields=timezone | cut -d "/" -f 2)
EXT=$(curl -s api.ipify.org) 
SUBNET=`ip r | awk 'NR==2' | awk '{print $1}'`
PWD=$(pwd)

# Today's Date
timedatectl set-timezone America/Los_Angeles
echo -e "\e[034mToday is\e[0m"
date '+%Y-%m-%d %r' | tee kali-setup-date.txt
echo

echo "Getting BIOS Info"
sudo dmidecode -s bios-version | tee /home/kali/Desktop/bios-information.txt

# Networking, Modified for IPv4
echo -e "\e[033mNetwork Information\e[0m"
echo
echo -e "\e[033mPublic IP\e[0m"
echo $CITY
echo $EXT
echo
echo

# Internal IP Address
echo -e "\e[033mKali IP\e[0m"
echo $KALI | awk '{print $1}'
echo

# Subnet
echo -e "\e[033mCurrent Subnet\e[0m"
echo $SUBNET
echo
sleep 2

# Hackers like SSH
echo "Enabling SSH"
sed -i '40s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g' /etc/ssh/sshd_config > /dev/null 2>&1
sudo systemctl enable ssh && sudo service ssh restart
echo

# Kali Updates
echo "It's a good idea to update and upgrade Kali first before running kali-setup.sh"
echo
echo "Be Patient, Installing Kali Dependencies"
echo

# Prepare Kali installs
apt-get update && apt-get -y full-upgrade && apt -y autoremove && updatedb
echo
sudo apt-get install -y osrframework libxcb-cursor0 libxcb-xtest0 docker.io docker-compose freefilesync libfuse2 libkrb5-dev pipx metagoofil pandoc python3-docxtpl cmseek neo4j libu2f-udev freefilesync hcxdumptool hcxtools assetfinder colorized-logs xfce4-weather-plugin npm ncat shotwell obfs4proxy libc++1 sendmail ibus feroxbuster virtualenv mailutils mpack ndiff python3-pyinstaller python3-notify2 python3-dev python3-pip python3-bottle python3-cryptography python3-dbus python3-matplotlib python3-mysqldb python3-openssl python3-pil python3-psycopg2 python3-pymongo python3-sqlalchemy python3-tinydb python3-py2neo at bloodhound ipcalc nload crackmapexec hostapd dnsmasq gedit cupp nautilus dsniff build-essential cifs-utils cmake curl ffmpeg gimp git graphviz imagemagick libapache2-mod-php php-xml libmbim-utils nfs-common openssl tesseract-ocr vlc wkhtmltopdf xsltproc xutils-dev driftnet websploit apt-transport-https openresolv screenfetch baobab speedtest-cli libffi-dev libssl-dev libxml2-dev libxslt1-dev zlib1g-dev awscli sublist3r w3m jq cups system-config-printer gobuster tcpxtract libreoffice
echo

# Variables
CHROME_DEB_URL="https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb"
DEB_FILE="google-chrome-stable_current_amd64.deb"

# Download the latest Google Chrome Debian package
echo "Downloading Google Chrome..."
wget -O "$DEB_FILE" "$CHROME_DEB_URL"

# Install the downloaded package
echo "Installing Google Chrome..."
sudo dpkg -i "$DEB_FILE"

# Fix any dependency issues
echo "Fixing dependencies..."
sudo apt-get install -f -y

# Clean up
echo "Cleaning up..."
rm "$DEB_FILE"

echo "Google Chrome installation complete!"
echo

echo "Downloading and installing Shodan Nrich"
# Get your Shodan API Key
wget https://gitlab.com/api/v4/projects/33695681/packages/generic/nrich/latest/nrich_latest_x86_64.deb
sudo dpkg -i nrich_latest_x86_64.deb

# Create the docker plugins directory
mkdir -p ~/.docker/cli-plugins
# Download the CLI into the plugins directory
curl -sSL https://github.com/docker/compose/releases/download/v2.0.1/docker-compose-linux-x86_64 -o ~/.docker/cli-plugins/docker-compose
# Make the CLI executable
chmod +x ~/.docker/cli-plugins/docker-compose

# Just Go for it!
wget --no-check-certificate https://go.dev/dl/go1.20.5.linux-amd64.tar.gz
tar -xvzf go1.20.5.linux-amd64.tar.gz
sudo mv go /usr/local
go version

echo "Installing NetExec"
# TODO: Add NetExec Examples, add automation script
# Enhanced CME
pipx install git+https://github.com/Pennyw0rth/NetExec
#pipx ensurepath
echo

# Get Pippy wit it
python3 -m pip install --upgrade pip
pip3 install --upgrade setuptools

echo "Installing psycopg"
pip3 install psycopg
echo
pip install updog
echo

: '
'
: ' echo "Are you installing a Kali Virtual Machine? "
sudo dmidecode -t system | tee /opt/365/kali-system-info.log
VM="$(grep 'Product Name: Virtual Machine\|Product Name: VMware Virtual Platform' kali-system-info.log)"
VM1="Product Name: Virtual Machine"
VM2="Product Name: VMware Virtual Platform"

if [ $VM "Product Name: Virtual Machine" -o $VM "Product Name: VMware Virtual Platform" ]
then

    echo "Virtualization Detected - Skipping"

else

    echo "Bare Metal installing Vbox"

# Add VBox Repo
sudo echo "deb [arch=amd64] https://download.virtualbox.org/virtualbox/debian bookworm contrib" | sudo tee /etc/apt/sources.list.d/virtualbox.list
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys A2F683C52980AECF
sudo apt-key export 2980AECF | sudo gpg --dearmour -o /etc/apt/trusted.gpg.d/virtualbox.gpg
sudo apt-get update

# Install dkms
sudo apt-get install -y dkms

# Install
sudo apt-get -y install linux-headers-`uname -r` build-essential virtualbox-ext-pack virtualbox-guest-utils
echo

# VirtualBox Hack for USB Devices
sudo usermod -a -G vboxusers $USER

echo

fi
echo
'
# TODO
# # https://github.com/balena-io/etcher
#echo "Downloading Etcher USB Media Creator"
#mkdir -p /opt/balena-etcher-electron/chrome-sandbox
#curl -lsLf \
#   'https://dl.cloudsmith.io/public/balena/etcher/setup.deb.sh' \
#   | sudo -E bash
# Install Etcher
#sudo apt-get update && apt-get -y install balena-etcher-electron
#echo

# TODO: Check this out
# text in your terminal > ansi2html > nmap-report.html
# ssmtp <--works good, just doesnt play with sendmail.
# did not install > openjdk-13-jdk libc++1-13 libc++abi1-13 libindicator3-7 libunwind-13 python3.8-venv libappindicator3-1 

echo
# Keep Nmap scans Organized
mkdir -p /home/kali/Desktop/testing/nmapscans/

# Upgrade Nmap User agent
echo "Current Nmap User Agent"
sed -n '160p' /usr/share/nmap/nselib/http.lua
echo
echo "Upgraded Nmap User Agent"
sed -i '160c\local USER_AGENT = stdnse.get_script_args('\''http.useragent'\'') or "Mozilla\/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit\/601.3.9 (KHTML, like Gecko)"' /usr/share/nmap/nselib/http.lua
sed -n '160p' /usr/share/nmap/nselib/http.lua

# Nmap bootstrap file checker, creates beautiful nmap reports
NB=/opt/365/nmap-bootstrap.xsl
if [ -f $NB ]
then

    echo "Found nmap-bootstrap.xsl"

else

    echo -e "\e[034mFetching Missing $BOOTSTRAP File\e[0m"
wget --no-check-certificate -O /home/kali/Desktop/testing/nmapscans/nmap-bootstrap.xsl https://raw.githubusercontent.com/aryanguenthner/nmap-bootstrap-xsl/stable/nmap-bootstrap.xsl > /dev/null 2>&1

fi
echo

# Did you say Cloudflare Tunnel?
# qterminal -e python3 -m http.server 80
# qterminal -e cloudflared tunnel -url localhost:80
dpkg -i /opt/365/cloudflared-linux-amd64.deb

# Project Discovery Nuclei
cd /opt
go install -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei@latest
echo

# Project Discovery httpx
cd /opt
go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
echo

# Install Katana - Web Crawler
cd /opt
go install -v github.com/projectdiscovery/katana/cmd/katana@latest
echo

# Install Project Discovery - Uncover
cd /opt
go install -v github.com/projectdiscovery/uncover/cmd/uncover@latest
echo

# Install gospider - Web Crawler
# https://github.com/jaeles-project/gospider
cd /opt
go install github.com/jaeles-project/gospider@latest

# Install gobuster - Directory Buster
cd /opt
go install github.com/OJ/gobuster/v3@latest

# How to Update Python Alternatives
: ' # kali python Config
ls -l /usr/bin/python*
sudo update-alternatives --list python
sudo update-alternatives --config python
sudo update-alternatives --install /usr/bin/python python /usr/bin/python2.7 1
sudo update-alternatives --install /usr/bin/python python /usr/bin/python3.9 3
sudo update-alternatives --set python /usr/bin/python3.9
# update-alternatives --remove-all python

#kali python3 Config
ls -l /usr/bin/python*
sudo update-alternatives --list python3
sudo update-alternatives --config python3
sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.9 1
sudo update-alternatives --install /usr/bin/python3 python3 /usr/bin/python3.10 2
sudo update-alternatives --set python3 /usr/bin/python3.9
# update-alternatives --remove-all python
'
echo

# NOTE: These instructions only work for 64-bit Debian-based
# Linux distributions such as Ubuntu, Mint etc.

# 1. Install our official public software signing key:
wget -O- https://updates.signal.org/desktop/apt/keys.asc | gpg --dearmor > signal-desktop-keyring.gpg
cat signal-desktop-keyring.gpg | sudo tee /usr/share/keyrings/signal-desktop-keyring.gpg > /dev/null

# 2. Add our repository to your list of repositories:
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/signal-desktop-keyring.gpg] https://updates.signal.org/desktop/apt xenial main' |\
  sudo tee /etc/apt/sources.list.d/signal-xenial.list

# 3. Update your package database and install Signal:
sudo apt update && sudo apt install signal-desktop

# TODO: Yeet
#echo "Kingfisher"
#echo
#cd /opt
# git clone https://github.com/onevcat/Kingfisher.git
echo

echo "PWN AD"
cd /opt
git clone https://github.com/Wh04m1001/DFSCoerce
echo
echo "Malicious Macro Builder"
cd /opt
git clone https://github.com/infosecn1nja/MaliciousMacroMSBuild.git
echo
echo "metagoofil"
sudo apt-get -y install metagoofil
echo
echo "Subbrute"
echo
cd /opt
git clone https://github.com/TheRook/subbrute.git
echo

echo "Cewl Password Lists"
# cewl -m 9 https://www.example.com -c -e --with-numbers -w example-cewl.txt

cd /opt
git clone https://github.com/digininja/CeWL.git
gem install mime-types
gem install mini_exiftool
gem install rubyzip
gem install spider
echo
echo "This is going to take a minute hold my root-beer"
echo
echo "BridgeKeeper - Employee OSINT"
cd /opt
git clone https://github.com/aryanguenthner/BridgeKeeper.git
echo

echo "AD Recon - My Fav"
cd /opt
git clone https://github.com/sense-of-security/ADRecon.git
echo

echo "enum4linux-ng"
cd /opt
git clone https://github.com/cddmp/enum4linux-ng.git
echo

echo "Daniel Miessler Security List Collection"
cd /opt
git clone https://github.com/danielmiessler/SecLists.git
echo

echo "Awesome Incident Response"
cd /opt
git clone https://github.com/meirwah/awesome-incident-response.git
echo

echo "Fuzzdb"
cd /opt
git clone https://github.com/fuzzdb-project/fuzzdb.git
echo

echo "Payloads All The Things"
cd /opt
git clone https://github.com/swisskyrepo/PayloadsAllTheThings.git
echo

# TODO: echo "OneListForAll"
# cd /opt
# git clone https://github.com/six2dez/OneListForAll.git
# cd OneListForAll
# 7z x onelistforall.7z.001
# wget https://raw.githubusercontent.com/NotSoSecure/password_cracking_rules/master/OneRuleToRuleThemAll.rule
# wget https://github.com/NotSoSecure/password_cracking_rules/blob/master/OneRuleToRuleThemAll.rule
# wget -O rules.txt https://contest-2010.korelogic.com/rules.txt
# cat rules.txt >> /etc/john/john.conf
# echo

echo "SprayingToolKit"
cd /opt
git clone https://github.com/byt3bl33d3r/SprayingToolkit.git
: ' Nmap works dont forget --> nmap -iL smb-ips.txt --stats-every=1m -Pn -p 445 -script smb-brute --script-args='smbpassword=Summer2023,userdb=usernames.txt,smbdomain=xxx.com,smblockout=true' -oA nmap-smb-brute-2023-07-19
'
echo
: ' Hydra works dont forget --> hydra -p Summer2019 -l Administrator smb://192.168.1.23
Metasploit works dont forget --> 
set smbpass Summer2019
set smbuser Administrator
set rhosts 192.168.1.251
run '

echo "Awesome XSS"
cd /opt
git clone https://github.com/s0md3v/AwesomeXSS.git
echo

echo "XSS Payloads"
cd /opt
git clone https://github.com/payloadbox/xss-payload-list.git
echo

echo "Foospidy Payloads"
cd /opt
git clone https://github.com/foospidy/payloads.git
echo

echo "Java Deserialization Exploitation (jexboss)"
cd /opt
git clone https://github.com/joaomatosf/jexboss.git
echo

echo "theHarvester"
cd /opt
git clone https://github.com/laramies/theHarvester.git
echo

echo "OWASP Cheat Sheet"
cd /opt
git clone https://github.com/OWASP/CheatSheetSeries.git
echo

echo "Pulse VPN Exploit"
cd /opt
git clone https://github.com/projectzeroindia/CVE-2019-11510.git
echo

echo "hruffleHog - Git Enumeration"
cd /opt
git clone https://github.com/dxa4481/truffleHog.git
echo

echo "Git Secrets"
cd /opt
git clone https://github.com/awslabs/git-secrets.git
echo

echo "Git Leaks"
cd /opt
git clone https://github.com/zricethezav/gitleaks.git

echo "Discover Admin Login Pages - Breacher"
cd /opt
git clone https://github.com/s0md3v/Breacher.git
echo

: 'echo "Installing Impacket"
cd /opt
sudo pip3 install jinja2==2.10.1
git clone https://github.com/SecureAuthCorp/impacket.git
cd /opt
cd impacket
pip3 install -e .
echo
'
# TODO: Fix this
: 'echo "OSINT Phone Number Info Gathering Tool"
cd /opt
sudo git clone https://github.com/sundowndev/PhoneInfoga.git
cd PhoneInfoga
sudo curl -sSL https://raw.githubusercontent.com/sundowndev/PhoneInfoga/master/support/scripts/install | bash \n
sudo ./phoneinfoga version
echo
'
# Windows Exploit Suggester Next Gen
echo
cd /opt
sudo git clone https://github.com/bitsadmin/wesng.git
echo

: '# MongoDB Install
echo "Installing MongoDB 4.2 from Ubuntu Repo, Because It Works"
echo
cd /tmp
wget -qO - https://www.mongodb.org/static/pgp/server-4.2.asc | apt-key add -
echo "deb [ arch=amd64 ] https://repo.mongodb.org/apt/ubuntu bionic/mongodb-org/4.2 multiverse" | tee /etc/apt/sources.list.d/mongodb-org-4.2.list
apt-get update
sudo apt-get -y install mongodb-org
service mongod start
systemctl enable mongod.service
echo "Hopefully MongoDB Installed"
echo
'

: '
# Fix annoying apt-key
# If Needed
sudo apt-key del <KEY_ID>
      <B9F8 D658 297A F3EF C18D  5CDF A2F6 83C5 2980 AECF>
sudo apt-key export 058F8B6B | sudo gpg --dearmour -o /etc/apt/trusted.gpg.d/mongo.gpg
sudo apt-key export 2007B954 | sudo gpg --dearmour -o /etc/apt/trusted.gpg.d/msf.gpg
sudo apt-key export 038651BD | sudo gpg --dearmour -o /etc/apt/trusted.gpg.d/slack.gpg
'
## Ivre Dependencies
#sudo pip install tinydb
#sudo pip install py2neo
#echo

# Install Ivre.Rocks
#echo
#sudo apt-get -y install ivre
#echo

#Ivre Database init, data download & importation
#echo
#echo -e '\r'
#yes | ivre ipinfo --init
#yes | ivre scancli --init
#yes | ivre view --init
#yes | ivre flowcli --init
#yes | sudo ivre runscansagentdb --init
# 40 Min download --> sudo ivre ipdata --download
#echo -e '\r'
#echo

: '# Ivre Nmap Magic
#echo
echo "Copying IVRE Nmap Scripts to Nmap"
echo
cp /usr/share/ivre/patches/nmap/scripts/*.nse /usr/share/nmap/scripts/ /usr/local/bin/../share/nmap/scripts

#nmap --script-updatedb > /dev/null
#echo

# http-screenshot Checker
N=/usr/share/nmap/scripts/http-screenshot.nse
if [ -f "$N" ]
then

    echo "Found http-screenshot.nse"

else

    echo -e "\e[034mDownloading missing file http-screenshot.nse\e[0m"
    wget --no-check-certificate -O /usr/share/nmap/scripts https://raw.githubusercontent.com/aryanguenthner/365/master/http-screenshot.nse
    nmap --script-updatedb > /dev/null 2>&1

fi
'

# PhantomJS Checker
P=/usr/local/bin/phantomjs
if [ -f $P ]
then

    echo "Found PhantomJS 1.9.8"

else

    echo -e "\e[034mDownloading Missing PhantomJS\e[0m"
    wget --no-check-certificate -O /opt/phantomjs-1.9.8-linux-x86_64.tar.bz2 https://bitbucket.org/ariya/phantomjs/downloads/phantomjs-1.9.8-linux-x86_64.tar.bz2
    tar xvjf phantomjs-1.9.8-linux-x86_64.tar.bz2 > /dev/null 2>&1
    rm phantomjs-1.9.8-linux-x86_64.tar.bz2

    echo "Extracting and Installing PhantomJS 1.9.8"
    cd /opt
    tar xvf phantomjs-1.9.8-linux-x86_64.tar.bz2
    mv phantomjs-1.9.8-linux-x86_64 phantomjs
    mv phantomjs /opt
    ln -s /opt/phantomjs/bin/phantomjs /usr/local/bin/phantomjs

    echo "Phantomjs Version"
    phantomjs -v

fi

# Can I get a Witness?
# Get Screenshots
# ./gowitness file -f url-results.txt
# "View Report http://localhost:7171"
# ./gowitness server report
# Can I get a gowitness?
GWIT=/home/kali/Desktop/testing/urlwitness/gowitness
if [ -f "$GWIT" ]
then
    echo "Found gowitness"

else
    echo -e "\e[034mDownloading Missing $GWIT\e[0m"
    wget --no-check-certificate 'https://drive.google.com/uc?export=download&id=1hXJAEQAFqFu5A4uR14dUWWdwWceLHz6D' -O /home/kali/Desktop/testing/urlwitness/gowitness
    chmod -R 777 /home/kali

fi

echo "The devils eye"
pip install thedevilseye==2022.1.4.0
# eye -q "hacker tools" | grep .onion > hackertoolse+onions.txt
echo

# Tor Web Browser Stuff
# sudo gpg --keyserver pool.sks-keyservers.net --recv-keys EB774491D9FF06E2 && 
sudo apt-get -y install torbrowser-launcher
cd /opt
sudo git clone https://github.com/aryanguenthner/TorGhost.git
cd TorGhost
sudo pip3 install . --ignore-installed stem
sudo ./build.sh > /dev/null 2>&1
echo

echo "Hack The Planet"
echo

# Insurance
# sudo apt-get --reinstall install python3-debian -y
# sudo apt --fix-broken install
# sudo apt autoremove -y
# systemctl restart ntp
echo

# Install Finish Time
date | tee kali-setup-finish-date.txt

# Stop Docker
# Remove Docker Interface until you need it
sudo systemctl stop docker && systemctl disable docker && ip link delete docker0

#
updatedb
# TODO: Add this to VLC https://broadcastify.cdnstream1.com/24051
# Enabling Kali Autologin
echo

# Customize Kali Paths
# Set HISTCONTROL separately
export HISTCONTROL="ignoredups"

# Update PATH variable with various directories
export PATH="$PATH:/usr/local/go/bin"
export PATH="$PATH:$HOME/go/bin"
export PATH="$PATH:/root/go"
export PATH="$PATH:/root/work"
export PATH="$PATH:/usr/local/bin:/usr/local/sbin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/games:/usr/games"
export PATH="$PATH:/usr/lib/jvm/java-11-openjdk-amd64/:/snap/bin"
export PATH="$PATH:/root/.local/bin"

# Abide by the Source
source ~/.zshrc
echo
echo

#echo "Enable Kali Autologin"
#sed -i '120s/#autologin-user=/autologin-user=kali/g' /etc/lightdm/lightdm.conf
#sed -i '121s/#autologin-user-timeout=0/autologin-user-timeout=0/g' /etc/lightdm/lightdm.conf
#echo
#echo "Kali Autologin Enabled"
#sudo service lightdm restart
chmod -R 777 /home/kali/
reboot
# Just in case DNS issues: nano -c /etc/resolvconf/resolv.conf.d/head
# Gucci Mang