Commit ff93050
2017-03-15 17:32:42
Changed files (5)
files/OS-27706-PWK.ovpn
@@ -0,0 +1,127 @@
+dev tap
+persist-tun
+persist-key
+cipher AES-128-CBC
+auth SHA1
+tls-client
+client
+resolv-retry infinite
+remote pwkvpn16.offseclabs.com 1194 udp
+lport 0
+auth-user-pass oscp.passwd
+ns-cert-type server
+
+<ca>
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+</ca>
+<cert>
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+</cert>
+<key>
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
+</key>
+<tls-auth>
+#
+# 2048 bit OpenVPN static key
+#
+-----BEGIN OpenVPN Static key V1-----
+7af112a9ad39a604b3c4d90c707888e7
+5ec31351ba8545dd4b5b5b3e9fa3325c
+0aebcc043a7d7706f5bd5424dc41858a
+031f775010c5956c1b969e50fcbd6e03
+ad1c34e2899b1c8a2be4b90174c65693
+08b61dc09cd5feb6c81de0ab1a25f82c
+5b0935878ad5d506cf95c017b485d0ab
+058430add44098d4d69ed124f9de63cb
+389d749d1e5b3c711b6fff117ad60029
+f45819b219fa4f0b60b464edf705acd7
+f73df904255569e5b8bdb4f98efaac69
+d4c76a7c0b8e6e8baee7690234709e85
+e6f55d90b69b0420d40d02617942f7f6
+d19da89c940096f30d0252fd6d6660c0
+c033500ce15a9a4422b27d119b4254a2
+15ebbca8529991a6351192f558d24c2f
+-----END OpenVPN Static key V1-----
+</tls-auth>
+ key-direction 1
files/oscp.passwd
@@ -0,0 +1,2 @@
+OS-27706
+LcOghGbQW3Z
.gitignore
@@ -0,0 +1,2 @@
+*.swp
+*.retry
hosts
@@ -0,0 +1,3 @@
+tmc
+oscp
+oscp2
main.yml
@@ -0,0 +1,153 @@
+---
+- hosts: oscp2
+ gather_facts: False
+ tasks:
+ - raw: sudo apt install -y python aptitude
+
+- hosts: oscp2
+ tasks:
+
+ - name: create openvpn folder
+ file:
+ path: ~/vpn/
+ state: directory
+
+ - name: deploy openvpn files
+ copy:
+ src: "{{ item }}"
+ dest: ~/vpn
+ mode: 0400
+ with_items:
+ - OS-27706-PWK.ovpn
+ - oscp.passwd
+
+ - name: apt ppa repos
+ apt_repository:
+ repo: "{{ item }}"
+ state: present
+ become: True
+ with_items:
+ - deb http://downloads.metasploit.com/data/releases/metasploit-framework/apt lucid main
+ - ppa:mrazavi/openvas
+ - ppa:ricotz/unstable
+
+ - name: add i386 arch (for wine)
+ command:
+ dpkg --add-architecture i386
+ become: True
+
+ - name: apt upgrade
+ apt:
+ update_cache: True
+ cache_valid_time: 3600
+ upgrade: safe
+ become: True
+
+ - name: apt packages
+ apt:
+ name: "{{ item }}"
+ state: latest
+ update_cache: True
+ cache_valid_time: 3600
+ autoremove: True
+ allow_unauthenticated: True # msf framework ಠ_ಠ
+ become: True
+ with_items:
+ # personal
+ - htop
+ - vim
+ # oscp requirements
+ - openvpn
+ - mtr
+ - netcat-traditional
+ - nmap # and ncat
+ - onesixtyone
+ - nbtscan
+ - snmp # and snmpcheck
+ - whois
+ - gdb
+ - build-essential
+ - mingw-w64
+ - wine2.0
+ - openjdk-9-jre-headless
+ - openjdk-9-jdk-headless
+ # documentation
+ - pandoc
+ - texlive-xetex
+ # openvas
+ - sqlite3
+ - openvas
+ # metasploit
+ - metasploit-framework
+ # pwntools
+ - python2.7
+ - python-pip
+ - python-dev
+ - git
+ - libssl-dev
+ - libffi-dev
+
+ - name: pip packages
+ pip:
+ name: "{{ item }}"
+ state: latest
+ become: yes
+ with_items:
+ - pip
+ - pwntools
+ - pyinstaller
+
+
+
+ - name: update alternatives
+ alternatives:
+ name: nc
+ path: /bin/nc.traditional
+ become: True
+
+ - name: create windows binaries folder
+ file:
+ path: /usr/share/windows-biniaries/
+ state: directory
+ mode: 0755
+ become: True
+ - name: deploy windows binaries
+ unarchive:
+ src: http://git.kali.org/gitweb/?p=packages/windows-binaries.git;a=snapshot;h=refs/heads/master;sf=tgz
+ dest: /usr/share/windows-biniaries
+ extra_opts: ['--strip-components=1', '--show-stored-names'] # magic fu to make it deploy to the dir we want
+ remote_src: True
+ become: True
+
+ - name: systemd openvas services
+ systemd:
+ name: "{{ item }}"
+ state: started
+ with_items:
+ - openvas-scanner
+ - openvas-manager
+ - openvas-gsa
+
+ # - name: openvas startup commands
+ # command: "{{ item }}"
+ # become: True
+ # with_items:
+ # - openvas-nvt-sync
+ # - openvasmd --rebuild
+
+ - name: vim setup
+ git:
+ repo: "{{ item.repo }}"
+ dest: "{{ item.dest }}"
+ with_items:
+ - {"repo": "https://github.com/VundleVim/Vundle.vim.git",
+ "dest": "~/.vim/bundle/Vundle.vim"}
+ - {"repo": "https://github.com/bryfry/home.git",
+ "dest": "~/.home"}
+
+ - name: vimrc symlink
+ file:
+ src: ~/.home/vimrc
+ dest: ~/.vimrc
+ state: link
+