mirror of
https://github.com/0xMarcio/PentestPilot.git
synced 2026-02-12 21:12:49 +00:00
461c14d676
Initial commit of PentestPilot — AI‑assisted pentest recon and orchestration toolkit.\n\nHighlights:\n- Resumeable pipelines (full_pipeline) with manifest state and elapsed timings\n- Rich dashboard (colors, severity bars, durations, compact/json modes)\n- Web helpers: httpx→nuclei auto, tech routing + quick scanners\n- Agents: multi‑task orchestrator (web/full/ad/notes/post) with resume\n- AD/SMB, password utils, shells, transfer, privesc, tunnels\n- QoL scripts: proxy toggle, cleanup, tmux init, URL extractor\n- Docs: README (Quick Start + Docs Index), HOWTO (deep guide), TOOLKIT (catalog with examples)\n\nStructure:\n- bin/automation: pipelines, dashboard, manifest, resume, tech_actions\n- bin/web: routing, scanners, helpers\n- bin/ai: orchestrators + robust AI utils\n- bin/ad, bin/passwords, bin/shells, bin/transfer, bin/privesc, bin/misc, bin/dns, bin/scan, bin/windows, bin/hashes\n- HOWTO.md and TOOLKIT.md cross‑linked with examples\n\nUse:\n- settarget <target>; agent full <domain|hosts.txt>; dashboard --compact\n- See HOWTO.md for setup, semantics, and examples.
41 lines
1.1 KiB
Bash
Executable File
41 lines
1.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
usage(){
|
|
cat >&2 <<USAGE
|
|
Usage: $(basename "$0") <ip> [user] [pass]
|
|
- Anonymous or credentialed SMB quick enumeration.
|
|
USAGE
|
|
exit 1
|
|
}
|
|
|
|
ip=${1:-${TARGET:-}}
|
|
user=${2:-}
|
|
pass=${3:-}
|
|
[[ -z "$ip" ]] && usage
|
|
|
|
outdir=${OUTDIR:-scans}
|
|
mkdir -p "$outdir"
|
|
ts=$(date +%Y%m%d_%H%M%S)
|
|
base="$outdir/${ip//\//_}_smb_${ts}"
|
|
|
|
echo "[+] SMB nmap scripts"
|
|
nmap -Pn -p 139,445 --script smb-protocols,smb2-security-mode,smb2-time,smb2-capabilities,smb-security-mode -oN "$base.nmap" "$ip" || true
|
|
|
|
if [[ -z "$user" ]]; then
|
|
echo "[+] smbclient -N -L //$ip"
|
|
(smbclient -N -L "//$ip" || true) | tee "$base.smbclient.list"
|
|
else
|
|
echo "[+] smbclient -L //$ip -U $user%<hidden>"
|
|
(smbclient -L "//$ip" -U "$user%$pass" || true) | tee "$base.smbclient.list"
|
|
fi
|
|
|
|
echo "[+] Attempting anonymous share listing"
|
|
awk '/Disk/{print $1}' "$base.smbclient.list" | grep -vE '^-|Printer|IPC\$' | while read -r share; do
|
|
echo "--- Listing //$ip/$share (anon) ---" | tee -a "$base.shares.txt"
|
|
(echo -e "recurse ON\nls\nexit\n" | smbclient -N "//$ip/$share" || true) | tee -a "$base.shares.txt"
|
|
done
|
|
|
|
echo "[+] Saved outputs under $base.*"
|
|
|