n0mad1k
110 lines
3.3 KiB
YAML
110 lines
3.3 KiB
YAML
---
|
|
# Common task for installing offensive security tools
|
|
# Shared across all providers
|
|
|
|
- name: Create Tools directory
|
|
file:
|
|
path: /home/{{ ansible_user }}/Tools
|
|
state: directory
|
|
owner: "{{ ansible_user }}"
|
|
group: "{{ ansible_user }}"
|
|
mode: '0755'
|
|
|
|
- name: Ensure pipx path is configured
|
|
shell: |
|
|
pipx ensurepath
|
|
become: true
|
|
args:
|
|
executable: /bin/bash
|
|
|
|
- name: Install tools via pipx
|
|
shell: |
|
|
export PATH=$PATH:/root/.local/bin
|
|
pipx ensurepath
|
|
pipx install git+https://github.com/Pennyw0rth/NetExec
|
|
pipx install git+https://github.com/blacklanternsecurity/TREVORspray
|
|
pipx install impacket
|
|
become: true
|
|
args:
|
|
executable: /bin/bash
|
|
|
|
- name: Download Kerbrute
|
|
shell: |
|
|
mkdir -p /home/{{ ansible_user }}/Tools/Kerbrute
|
|
wget https://github.com/ropnop/kerbrute/releases/latest/download/kerbrute_linux_amd64 -O /home/{{ ansible_user }}/Tools/Kerbrute/kerbrute
|
|
chmod +x /home/{{ ansible_user }}/Tools/Kerbrute/kerbrute
|
|
become: true
|
|
args:
|
|
executable: /bin/bash
|
|
creates: /home/{{ ansible_user }}/Tools/Kerbrute/kerbrute
|
|
|
|
- name: Clone SharpCollection nightly builds
|
|
git:
|
|
repo: https://github.com/Flangvik/SharpCollection.git
|
|
dest: /home/{{ ansible_user }}/Tools/SharpCollection
|
|
version: master
|
|
ignore_errors: yes
|
|
|
|
- name: Clone PEASS-ng
|
|
git:
|
|
repo: https://github.com/carlospolop/PEASS-ng.git
|
|
dest: /home/{{ ansible_user }}/Tools/PEASS-ng
|
|
ignore_errors: yes
|
|
|
|
- name: Clone MailSniper
|
|
git:
|
|
repo: https://github.com/dafthack/MailSniper.git
|
|
dest: /home/{{ ansible_user }}/Tools/MailSniper
|
|
ignore_errors: yes
|
|
|
|
- name: Clone Inveigh
|
|
git:
|
|
repo: https://github.com/Kevin-Robertson/Inveigh.git
|
|
dest: /home/{{ ansible_user }}/Tools/Inveigh
|
|
ignore_errors: yes
|
|
|
|
- name: Install Sliver C2 server
|
|
shell: |
|
|
curl https://sliver.sh/install | bash
|
|
systemctl enable sliver
|
|
systemctl start sliver
|
|
become: true
|
|
|
|
- name: Install Metasploit Framework (Nightly Build)
|
|
shell: |
|
|
curl https://raw.githubusercontent.com/rapid7/metasploit-omnibus/master/config/templates/metasploit-framework-wrappers/msfupdate.erb > /tmp/msfinstall
|
|
chmod 755 /tmp/msfinstall
|
|
/tmp/msfinstall
|
|
rm -f /tmp/msfinstall
|
|
become: true
|
|
args:
|
|
executable: /bin/bash
|
|
creates: /usr/bin/msfconsole
|
|
|
|
- name: Grab GoPhish
|
|
shell: |
|
|
curl -L "$(curl -s https://api.github.com/repos/gophish/gophish/releases/latest | jq -r '.assets[] | select(.browser_download_url | contains("linux-64bit.zip")) | .browser_download_url')" -o /home/{{ ansible_user }}/Tools/gophish.zip
|
|
unzip /home/{{ ansible_user }}/Tools/gophish.zip -d /home/{{ ansible_user }}/Tools/gophish
|
|
rm -rf /home/{{ ansible_user }}/Tools/gophish.zip
|
|
chmod +x /home/{{ ansible_user }}/Tools/gophish/gophish
|
|
args:
|
|
creates: /home/{{ ansible_user }}/Tools/gophish/gophish
|
|
|
|
- name: Deploy Gophish config.json with custom admin port
|
|
template:
|
|
src: gophish-config.j2
|
|
dest: /home/{{ ansible_user }}/Tools/gophish/config.json
|
|
owner: "{{ ansible_user }}"
|
|
group: "{{ ansible_user }}"
|
|
mode: '0644'
|
|
vars:
|
|
gophish_admin_port: "{{ gophish_admin_port }}"
|
|
domain: "{{ domain }}"
|
|
|
|
- name: Set proper ownership for Tools directory
|
|
file:
|
|
path: /home/{{ ansible_user }}/Tools
|
|
owner: "{{ ansible_user }}"
|
|
group: "{{ ansible_user }}"
|
|
recurse: true
|
|
mode: '0755' |