P.A.K.U.R.I AVTOKYO HIVE

Penetration test Achieve Knowledge Unite Rapid Interface
- Operation with Ten-key -

Transcript

1. 1",63* Penetration test Achieve Knowledge Unite Rapid Interface Operation with Ten-key 2019/11/2 AVTOKYO HIVE @01ra66it
2. Background
3. Are you feeling stronger just by installing Kali linux? There are so many tools in kali linux that you can't take advantage of them. Beginners are often happy with the results of the installation. I used to think so...
4. As beginner pentester Beginners do not know how to work. Scan and enumerate command options are difficult.
5. As senior pentester I want beginners to learn work quickly. Systematic human resource development is difficult with Pentest. I want to have a successful experience with beginners. I don't want to be the only person who knows how work works through my (long) experience.
6. As manager It is very difficult to read the engineer's work status from the console screen. Similarly, it is difficult to evaluate the work of engineers. Accurate management is impossible unless people of any skill level can understand it.
7. I want to solve the problems of each position.
8. What is PAKURI ? Penetration test Achieve Knowledge Unite Rapid Interface
9. What is PAKURI ? Automate work with OSS obtained from Github. Reduce manual mistakes. Visualize work progress with OSS obtained from Github. Front-end operation is only possible with the numeric keypad. C2 Server (Communication & Collaboration)
10. Why PAKURI ? This tool uses a good part of many OSS. In short, copycat. If you say copycat in Japanese slang, it is “Pakuru”.
11. Why raven? Raven is a symbol of knowledge. Raven uses anything when building a nest.
12. Concept I chose the tools installed on Kali Linux and the OSS released on Git as an active pen tester. PAKURI is a virtual environment built on the concept of “Everyone can do it easily”.
13. Features Scan nmapAutomator (https://github.com/21y4d/ nmapAutomator.git) AutoRecon (https://github.com/Tib3rius/ AutoRecon.git) OpenVAS Visualize Faraday (https://github.com/infobyte/faraday.git)
14. Features C2 Server Communication Mattermost (https://github.com/mattermost/ mattermost-docker.git) Collaboration CodiMD (https://github.com/hackmdio/docker- hackmd.git)
15. Features Front-end operation PAKURI Other oh-my-tmux (https://github.com/gpakosz/.tmux.git) oh-my-zsh (https://github.com/robbyrussell/oh-my- zsh.git) htop CUI-GUI switching
16. Overview
17. Main Scanning Targets Exploit Mode Config Docker Control Project Management
18. Scanning Targets
19. Exploit Mode
20. Config
21. Docker Control
22. Project Management
23. System overview Main Scanning Exploit Config Docker Project nmapAutomator AutoRecon Faraday Metasploit .xml CodiMD Mattarmost PostgreSQL
24. Flow Service scan Visualize Port scan Exploit Scan ports and services, visualize results. To this point, I want to support with PAKURI.
25. Flow Port scan with nmapAutomator There are many tools for port scanning. Use the most convenient nmapAutomator.
26. Flow Service scan with AutoRecon Service scans are more complex and more diverse than port scans. Scan support using AutoRecon.
27. Flow Visualize with Faraday Only the resulting text-based data can miss important points.
28. Flow (extra) Exploit with Metasploit Visualization makes it easier to find prominent vulnerabilities. This makes it easy to exploit.
29. Summary Beginner You should do your best without fear. Senior Leave tasks that can be automated to beginners. Manager Use visualization to make accurate decisions.
30. Thank you! Please give me advice and feedback. pakuri.pentest@gmail.com @PAKURI9 @01ra66it