🛠️ Tools DB

SSH Access Setup Explained

In order to perform actions with you public/private key pair (git, ssh access), you’ll need to configure it first. I found it quite hard to grasp at first with all the nuances, although it’s pretty straitforward if you just copy/paste the commands.

Let’s take GitHub and its manual in order to understand what we are doing and why. This will help in thoubleshooting later if we need it.

In order to use private/public keys, you will need to generate a pair first. All these keys on macOS and Linux machines are stored at ~/.ssh by default (hidden folder). Public keys have pub at the end, private have the same name but no pub extension. For example, a public key file would be named something like id_rsa.pub, unless you give it a different name and its corresponding private key would be called just id_rsa.

🧰 Mac Setup Script

🗒 TODO: Create a repo for this script!

# oh my zsh bash themes
sh -c "$(curl -fsSL https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
# sh -c "$(fetch -o - https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"
# sh -c "$(wget -O- https://raw.githubusercontent.com/ohmyzsh/ohmyzsh/master/tools/install.sh)"

# install pyenv
brew install readline xz openssl zlib
brew install pyenv
brew install pyenv-virtualenv
# configure pyenv for zsh
echo 'export PYENV_ROOT="$HOME/.pyenv"' >> ~/.zshrc
echo 'export PATH="$PYENV_ROOT/bin:$PATH"' >> ~/.zshrc
echo -e 'if command -v pyenv 1>/dev/null 2>&1; then\n  eval "$(pyenv init -)"\nfi' >> ~/.zshrc

pyenv install 3.8.5
pyenv install 2.7.18
pyenv global 3.8.5
pyenv virtualenv 2.7.18 python2 
pyenv virtualenv 3.8.5 python3

# radare2
git clone https://github.com/radare/radare2.git
cd radare2
./sys/install.sh

Mobile Pentest

# Mobile tools
pyenv activate python2
pip install git+https://github.com/iSECPartners/Introspy-Analyzer.git

git clone https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
cd Mobile-Security-Framework-MobSF
./setup.sh

pyenv activate python3
cd Mobile-Security-Framework-MobSF
./setup.sh

pyenv activate python3
pip install frida
pip install frida-tools
pip install objection

brew install npm
npm install -g passionfruit
npm install -g itms-services

pyenv activate python2
pip install drozer

# bug fix
# cd /Users/[User_name]/.pyenv/versions/2.7.18/envs/python2/lib/python2.7/site-packages/pydiesel/reflection/utils/class_loader.py
# change elif relative_to.find(".py") >= 0 or relative_to.find(".pyc") >= 0:
# to elif (relative_to.find(".py") >= 0 or relative_to.find(".pyc") >= 0) and not ".pyenv" in relative_to:

iOS

# for idevice system info
brew install libimobiledevice
brew install ideviceinstaller

Introspy

With iOS device connected. Two args: IP and password needed for the script.