qubes-doc/managing-os/pentesting/ptf.md
2016-06-13 19:24:23 -05:00

2.6 KiB

layout title permalink
doc How to create Penetration Testers Framework (PTF) VM /doc/ptf/

How to create Penetration Testers Framework (PTF) VM

"The PenTesters Framework (PTF) is a Python script designed for Debian/Ubuntu/ArchLinux based distributions to create a similar and familiar distribution for Penetration Testing.

PTF attempts to install all of your penetration testing tools (latest and greatest), compile them, build them, and make it so that you can install/update your distribution on any machine." (source PTF Readme)

1 - Create PTF template

  1. Follow the Create Debian Based Kali Template till step 7.
  2. (Optional) Rename the cloned template to ptf

2 - Download PTF

sudo apt-get install git
cd /opt
sudo git clone https://github.com/trustedsec/ptf.git
  • (Optional) Configure PTF
  1. Go to configuration directory
cd /opt/ptf/config
  1. Edit the configuration file

for example by using vim:

sudo vim ptf.config

The configuration options are described in the ptf.config file

4 - Install PTF

cd /opt/ptf
sudo ./ptf

Note: the config file has to be in the same directory as the executable. It is not possible to do sudo ptf/ptf

PTF will put itself into /usr/local/bin/ptf. You can use ptf from now on.

5 - Install/Update modules (tools)

  1. Start PTF
sudo ptf
  1. Show available modules (tools)
ptf> show modules
  1. Install/Update modules (all/)
- Install/Update all tools

  ~~~
  ptf> use modules/install_update_all
  ~~~

- or by category Install/Update

  ~~~
  ptf> use modules/code-audit/install_update_all
  ~~~

- or individually (example Metasploit)

  1. Search for module

    ~~~
    ptf> search metasploit
    [*] Search results below:
    modules/exploitation/metasploit
    ~~~

  2. Use module

    ~~~
    ptf> use modules/exploitation/metasploit
    ptf:(modules/exploitation/metasploit)>
    ~~~

 3. Install module

   ~~~
   ptf:(modules/exploitation/metasploit)>install
   ~~~

4. Run Metasploit

  ~~~
  ptf:(modules/exploitation/metasploit)>exit
  ptf> quit
  [*] Exiting PTF - the easy pentest platform creation framework.
  ~$ sudo msfconsole
  ~~~

6 - Create a AppVMs based on the ptf template

  • (Optional) Attach necessary devices

Alternative Options to PTF