#!/bin/bash # # pimpmykali.sh Author: Dewalt # git clone https://github.com/Dewalt-arch/pimpmykali # Usage: sudo ./pimpmykali.sh ( defaults to the menu system ) # command line arguments are valid, only catching 1 arguement # # Full Revision history can be found in README.md # Standard Disclaimer: Author assumes no liability for any damage # revision var revision="1.1.5" # unicorn puke: red=$'\e[1;31m' green=$'\e[1;32m' blue=$'\e[1;34m' magenta=$'\e[1;35m' cyan=$'\e[1;36m' yellow=$'\e[1;93m' white=$'\e[0m' bold=$'\e[1m' norm=$'\e[21m' # launch_codes - for a little fun in the --borked scripts # (disabled) launch_codes_alpha=$(echo $((1 + RANDOM % 9999))) # (disabled) launch_codes_beta=$(echo $((1 + RANDOM % 9999))) # (disabled) launch_codes_charlie=$(echo $((1 + RANDOM % 9999))) # (disabled) # status indicators greenplus='\e[1;33m[++]\e[0m' greenminus='\e[1;33m[--]\e[0m' redminus='\e[1;31m[--]\e[0m' redexclaim='\e[1;31m[!!]\e[0m' redstar='\e[1;31m[**]\e[0m' blinkexclaim='\e[1;31m[\e[5;31m!!\e[0m\e[1;31m]\e[0m' fourblinkexclaim='\e[1;31m[\e[5;31m!!!!\e[0m\e[1;31m]\e[0m' # variables needed in the script # wait_time=10 # 2nd warning screen wait time (disabled) force=0 check="" section="" type="" # variables moved from local to global finduser=$(logname) # for vbox_fix_shared_folder_permission_denied findgroup=$(groups $finduser | grep -i -c "vboxsf") # silent mode silent='' # uncomment to see all output # silent='>/dev/null 2>&1' # uncomment to hide all output check_distro() { distro=$(uname -a | grep -i -c "kali") # distro check if [ $distro -ne 1 ] then echo -e "\n $blinkexclaim Sorry I only work on Kali Linux $blinkexclaim \n"; exit # false fi } check_for_root () { if [ "$EUID" -ne 0 ] then echo -e "\n\n Script must be run with sudo ./pimpmykali.sh or as root \n" exit fi } fix_section () { if [ $check -ne 1 ] then # sanity check : force=0 check=0 or force=1 check=0 echo -e "\n $greenplus install : $section" eval apt -y install $section $silent elif [ $force = 1 ] then # sanity check : force=1 check=1 echo -e "\n $redstar reinstall : $section" eval apt -y reinstall $section $silent else # sanity check : force=0 check=1 echo -e "\n $greenminus $section already installed" echo -e " use --force to reinstall" fi check="" type="" section="" } fix_missing () { fix_sources eval apt -y update $silent && eval apt -y autoremove $silent eval apt -y remove kali-undercover $silent echo -e "\n $greenplus apt updated " eval apt -y install dkms build-essential autogen automake python3-setuptools python3-distutils python3.9-dev $silent python-pip-curl python3_pip $force fix_gedit $force # restored to its former glory fix_htop $force fix_golang $force fix_nmap fix_rockyou fix_python_requests fix_pipxlrd # xlrd added 12.29.2020 fix_spike } fix_all () { fix_missing $force seclists $force install_atom fix_flameshot $force fix_grub fix_smbconf fix_impacket make_rootgreatagain $force fix_upgrade # ID10T REMINDER: DONT CALL THESE HERE THEY ARE IN FIX_MISSING! # python-pip-curl python3_pip fix_golang fix_nmap # fix_upgrade is not a part of fix_missing and only # called as sub-function call of fix_all or fix_upgrade itself } fix_pipxlrd () { eval pip install xlrd==1.2.0 --upgrade # eval pip3 install xlrd --upgrade echo -e "\n $greenplus python module : xlrd installed \n" } python-pip-curl () { check_pip=$(pip --version | grep -i -c "/usr/local/lib/python2.7/dist-packages/pip") if [ $check_pip -ne 1 ] then echo -e "\n $greenplus installing pip" eval curl https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py $silent eval python /tmp/get-pip.py $silent rm -f /tmp/get-pip.py eval pip install setuptools echo -e "\n $greenplus python-pip installed" else echo -e "\n $greenminus python-pip already installed" fi } # section= must be exact name of package in kali repo # check= custom check for that particular item # type= set in fix_section based on eval of $check and $force # force= to override force / set force var # fix_section $section $check $force fix_spike () { # Added 01-26-2021 Current version of spike throws error, revert to old version echo -e "\n $greenplus Fix SPIKE " echo -e "\n $greenplus removing SPIKE...\n" eval apt -y --allow-change-held-packages remove spike wget http://old.kali.org/kali/pool/main/s/spike/spike_2.9-1kali6_amd64.deb -O /tmp/spike_2.9-1kali6_amd64.deb echo -e "\n $greenplus installing spike 2.9... \n" eval dpkg -i /tmp/spike_2.9-1kali6_amd64.deb echo -e "\n $greenplus spike 2.9 installed \n" echo -e "\n $greenplus setting apt hold on spike package" eval apt-mark hold spike echo -e "\n $greenplus apt hold placed on spike package" } fix_gedit () { section="gedit" check=$(whereis gedit | grep -i -c "gedit: /usr/bin/gedit") fix_section $section $check $force } fix_rockyou () { cd /usr/share/wordlists gzip -dq /usr/share/wordlists/rockyou.txt.gz echo -e "\n $greenplus gunzip /usr/share/wordlists/rockyou.txt.gz\n" } locate () { section="locate" check=$(whereis locate | grep -i -c "locate: /usr/bin/locate") fix_section $section $check $force } fix_htop () { section="htop" check=$(whereis htop | grep -i -c "htop: /usr/bin/htop") fix_section $section $check $force } python3_pip () { section="python3-pip" check=$(python3 -m pip --version | grep -i -c "/usr/lib/python3/dist-packages/pip") fix_section $section $check $force } seclists () { section="seclists" check=$(whereis seclists | grep -i -c "seclists: /usr/bin/seclists /usr/share/seclists") fix_section $section $check $force } fix_nmap () { rm -f /usr/share/nmap/scripts/clamav-exec.nse echo -e "\n $redminus /usr/share/nmap/scripts/clamav-exec.nse removed " eval wget https://raw.githubusercontent.com/nmap/nmap/master/scripts/clamav-exec.nse -O /usr/share/nmap/scripts/clamav-exec.nse $silent eval wget https://raw.githubusercontent.com/onomastus/pentest-tools/master/fixed-http-shellshock.nse -O /usr/share/nmap/scripts/http-shellshock.nse $silent echo -e "\n $greenplus /usr/share/nmap/scripts/clamav-exec.nse replaced with working version " } fix_flameshot () { section="flameshot" check=$(whereis flameshot | grep -i -c "/usr/bin/flameshot") fix_section $section $check $force } fix_golang () { section="golang" check=$(whereis go | grep -i -c "/usr/bin/go") fix_section $section $check $force fix_go_path } fix_go_path() { findrealuser=$(who | awk '{print $1}') if [ $findrealuser == "root" ] then check_root_zshrc=$(cat /root/.zshrc | grep -c GOPATH) if [ $check_root_zshrc -ne 0 ] then echo -e "\n $redminus GOPATH Variables for $findrealuser already exist in /root/.zshrc - Not changing" else echo -e "\n $greenplus Adding GOPATH Variables to /root/.zshrc" eval echo -e 'export GOPATH=\$HOME/go' >> /root/.zshrc eval echo -e 'export PATH=\$PATH:\$GOPATH/bin' >> /root/.zshrc fi check_root_bashrc=$(cat /root/.bashrc | grep -c GOPATH) if [ $check_root_bashrc -ne 0 ] then echo -e "\n $redminus GOPATH Variables for $findrealuser already exist in /root/.bashrc - Not changing" else echo -e "\n $greenplus Adding GOPATH Variables to /root/.bashrc" eval echo -e 'export GOPATH=\$HOME/go' >> /root/.bashrc eval echo -e 'export PATH=\$PATH:\$GOPATH/bin' >> /root/.bashrc fi else check_user_zshrc=$(cat /home/$findrealuser/.zshrc | grep -c GOPATH) if [ $check_user_zshrc -ne 0 ] then echo -e "\n $redminus GOPATH Variables for user $findrealuser already exist in /home/$findrealuser/.zshrc - Not Changing" else echo -e "\n $greenplus Adding GOPATH Variables to /home/$findrealuser/.zshrc" eval echo -e 'export GOPATH=\$HOME/go' >> /home/$findrealuser/.zshrc eval echo -e 'export PATH=\$PATH:\$GOPATH/bin' >> /home/$findrealuser/.zshrc fi check_user_bashrc=$(cat /home/$findrealuser/.bashrc | grep -c GOPATH) if [ $check_user_bashrc -ne 0 ] then echo -e "\n $redminus GOPATH Variables for user $findrealuser already exist in /home/$findrealuser/.bashrc - Not Changing" else echo -e "\n $greenplus Adding GOPATH Variables to /home/$findrealuser/.bashrc" eval echo -e 'export GOPATH=\$HOME/go' >> /home/$findrealuser/.bashrc eval echo -e 'export PATH=\$PATH:\$GOPATH/bin' >> /home/$findrealuser/.bashrc fi fi } fix_smbconf () { check_min=$(cat /etc/samba/smb.conf | grep -c -i "client min protocol") check_max=$(cat /etc/samba/smb.conf | grep -c -i "client max protocol") if [ $check_min -ne 0 ] || [ $check_max -ne 0 ] then echo -e "\n $green /etc/samba/smb.conf " echo -e "\n $redminus client min protocol is already set not changing\n $redminus client max protocol is already set not changing" else cat /etc/samba/smb.conf | sed 's/\[global\]/\[global\]\n client min protocol = CORE\n client max protocol = SMB3\n''/' > /tmp/fix_smbconf.tmp cat /tmp/fix_smbconf.tmp > /etc/samba/smb.conf rm -f /tmp/fix_smbconf.tmp echo -e "\n $greenplus /etc/samba/smb.conf updated" echo -e "\n $greenplus added : client min protocol = CORE\n $greenplus added : client max protocol = SMB3" fi } fix_grub () { check_grub=$(cat /etc/default/grub | grep -i -c "GRUB_CMDLINE_LINUX_DEFAULT=\"quiet\"" ) if [ $check_grub -ne 1 ] then echo -e "\n $redexclaim Error: /etc/default/grub is not the default config - not changing" else cat /etc/default/grub | sed 's/GRUB_CMDLINE_LINUX_DEFAULT="quiet"/GRUB_CMDLINE_LINUX_DEFAULT="quiet mitigations=off"/' > /tmp/fix_grub.tmp cat /tmp/fix_grub.tmp > /etc/default/grub rm -f /tmp/fix_grub.tmp update-grub echo -e "\n $greenplus Added mitigations=off to GRUB_CMDLINE_LINUX_DEFAULT" echo -e "\n $redexclaim Reboot for changes to take effect \n" fi } fix_python_requests (){ # requires python pip to be installed via curl # already installed by fix_missing or fix_all by the time this is called # eval curl https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py $silent # eval python /tmp/get-pip.py $silent # rm -f /tmp/get-pip.py eval git clone https://github.com/psf/requests /opt/requests cd /opt/requests eval pip install colorama eval pip install . echo -e "\n $greenplus installed python2 module : requests" echo -e "\n $greenplus installed python2 module : colorama" } fix_bad_apt_hash (){ mkdir -p /etc/gcrypt echo "all" > /etc/gcrypt/hwf.deny } install_atom () { eval apt -y update eval wget -qO- https://atom.io/download/deb -O /tmp/atom.deb >/dev/null 2>&1 eval dpkg -i /tmp/atom.deb >/dev/null 2>&1 eval rm -f /tmp/atom.deb eval apt -y --fix-broken install >/dev/null 2>&1 } install_sublime () { echo -e "\n $greenplus installing sublime text editor" eval wget -qO - https://download.sublimetext.com/sublimehq-pub.gpg | sudo apt-key add - eval apt-get install apt-transport-https eval echo "deb https://download.sublimetext.com/ apt/stable/" > /etc/apt/sources.list.d/sublime-text.list eval apt update eval apt -y install sublime-text } install_vscode () { echo -e "\n $greenplus installing vscode" eval curl https://packages.microsoft.com/keys/microsoft.asc | gpg --dearmor > microsoft.gpg eval mv microsoft.gpg /etc/apt/trusted.gpg.d/microsoft.gpg eval echo "deb [arch=amd64] https://packages.microsoft.com/repos/vscode stable main" > /etc/apt/sources.list eval apt update && apt install code } fix_sources () { # Think about doing something different here... fix_bad_apt_hash echo "deb http://http.kali.org/kali kali-rolling main contrib non-free" > /etc/apt/sources.list echo "deb-src http://http.kali.org/kali kali-rolling main contrib non-free" >>/etc/apt/sources.list echo -e "\n $greenplus fixed sources /etc/apt/sources.list" } run_update () { fix_sources echo -e "\n $greenplus starting pimpmyupgrade \n" eval apt -y update $silent # COMMENTED OUT DUE TO MSF6 RELEASED && apt -y upgrade $silent kernel_check=$(ls /lib/modules | sort -n | tail -n 1) echo -e "\n $greenplus installing dkms build-essential linux-headers-$kernel_check \n" eval apt -y install dkms build-essential linux-headers-amd64 $silent } make_rootgreatagain () { echo -e "\n\n KALI-ROOT-LOGIN INSTALLATION: - PAGE 1 "$red"*** READ CAREFULLY! ***"$white" \n" echo -e " On Kali 2019.x and prior the default user was root" echo -e " On Kali 2020.1 and newer this was changed, the default user was changed to be " echo -e " an" $yellow$bold"actual user"$norm$white" on the system and not "$red$bold"root"$norm$white", this user is : kali (by default) " echo -e "\n Press Y - If you wish to re-enable the ability to login as root and be root all the time" echo -e " If you choose Yes - a second screen will prompt you to copy all of /home/kali to /root" echo -e " as there is nothing in the /root directory by default" echo -e "\n Press N - The script will skip this section, and not re-enable the login as root function" echo -e "\n "$bold$red"If you are confused or dont understand what"$norm$white echo -e " "$bold$red"this part of the script is doing, press N"$norm$white echo -e "\n Do you want to re-enable the ability to login as root in kali?" read -n1 -p " Please type Y or N : " userinput case $userinput in y|Y) enable_rootlogin $force;; n|N) echo -e "\n\n $redexclaim skipping root login setup" ;; *) echo -e "\n invalid key try again Y or N"; make_rootgreatagain;; esac } enable_rootlogin () { section="kali-root-login" check=$(whereis kali-root-login | grep -i -c "kali-root-login: /usr/share/kali-root-login") fix_section $section $check $force echo -e "\n\nEnabling Root Login Give root a password" passwd root echo -e "\n $greenplus root login enabled \n" ask_homekali_to_root } # 01.02.2021 rev 1.1.2 --- begin : new screens for copying from /home/kali to /root, no detection, all based on used input ask_homekali_to_root () { echo -e "\n\n KALI-ROOT-LOGIN INSTALLATION: - PAGE 2 "$red"*** READ CAREFULLY! ***"$white" \n" echo -e " This section of the script is only executed if Yes was selected at the enable root login prompt\n" echo -e " If you are planning on operating your kali install as root instead of the user kali, " echo -e " by default there is nothing in /root, This script has the ability to copy everything" echo -e " from /home/kali to /root for you. \n" echo -e " $red Warning:$white This copy function $red will overwrite $white anything in /root with the entire contents of /home/kali" echo -e " The copy statement that is going to be performed if you select Y is:\n " echo -e " cp -Rvf /home/kali/* /home/kali/.* /root" echo -e "\n Would you like to copy everything from /home/kali to /root ?" echo -e " Press Y - to copy everything from /home/kali to /root" echo -e " Press N - do not copy anything to /root and skip this function\n" read -n1 -p " Please type Y or N : " userinput case $userinput in y|Y) ask_are_you_sure;; n|N) echo -e "\n\n $redexclaim skipping copy of /home/kali to /root" ;; *) echo -e "\n\n $redexclaim Invalid key try again, Y or N keys only $redexclaim"; ask_homekali_to_root;; esac } # 01.03.2021 rev 1.1.3 --- begin : added are you sure prompt ask_are_you_sure () { echo -e "\n\n Are you sure you want to copy all of /home/kali to /root ?" read -n1 -p " Please type Y or N : " userinput case $userinput in y|Y) perform_copy_to_root;; n|N) echo -e "\n\n $redexclaim skipping copy fo /home/kali to /root - not copying ";; *) echo -e "\n\n $redexclaim Invalid key try again, Y or N keys only $redexclaim"; ask_are_you_sure;; esac } # 01.03.2021 rev 1.1.3 --- end : added are you sure prompt perform_copy_to_root () { echo -e "\n\n $greenplus Copying everything from /home/kali to /root... Please wait..." eval cp -Rvf /home/kali/.* /home/kali/* /root >/dev/null 2>&1 eval chown -R root:root /root echo -e "\n $greenplus Everything from /home/kali has been copied to /root" } # 01.02.2021 rev 1.1.2 --- end : copy to /root warning screens and functions fix_sead_warning () { clear # fugly - really need to clean this up, it works but its just a nightmare to look at echo -e " "$bold$redexclaim$red" WARNING "$redexclaim$bold$red" PIMPMYKALI IMPACKET REMOVAL FUNCTION "$redexclaim$bold$red" WARNING "$redexclaim$white$norm" *** READ FULLY BEFORE PRESSING ANY KEY *** "$red"DISCLAIMER:"$white" This is a last resort effort to remove impacket from the system and install a clean working install of impacket-0.9.19 and should be only used as such. This is for only if you screwed up your impacket as bad as Bobloblaw (Blob) did!! (thank you blob! you are the wind beneath my impacket removal scripts!) This function of pimpmykali is reserved for the most severe cases of broken impacket installs, multiple impacket installs, etc, and will attempt to clean the system of impacket and any related files that may be preventing a clean and working install of impacket-0.9.19 It is not possible to forsee every possible scenario but this makes a best attempt of the most common dirs and files to clean your system to remove anything impacket related only from the areas listed below. This WILL RECURSIVLY DELETE ANY DIR NAMED impacket* from the following: /opt /usr/bin /usr/local/lib /usr/lib /home/$finduser/.local/bin /home/$finduser/.local/lib /root/.local/lib /root/.local/bin AND ANY related .py and .pyc files from impacket in the following: /usr/bin /local/local/bin /root/.local/bin /home/$finduser/.local/bin After this function completes the following will be run automatically sudo ./pimpmykali.sh --impacket Answering only Y to the following prompt will preform the above actions, pressing ANY OTHER KEY WILL EXIT " read -n1 -p " Press Y to execute or any other key to exit: " fixsead_userinput case $fixsead_userinput in y|Y) fix_sead_run ;; *) exit ;; esac } fix_sead_run () { eval apt update $silent python-pip-curl python3_pip eval pip uninstall impacket -y $silent eval pip3 uninstall impacket -y $silent SEAD=$(find /opt /usr/bin /usr/local/lib /usr/lib /home/$finduser/.local/bin /home/$finduser/.local/lib ~/.local/lib ~/.local/bin -name impacket* 2> /dev/null) # Last Chance Launch Sequence ** WARNING SCREEN ** and 10 second time out # may consider removing this.... 2nd warning screen # clear # echo -e " If you've made it this far you're having a really bad day with impacket... " echo -e " Enjoy the last chance launch sequence!\n" echo -e " Preparing to nuke Impacket...\n" echo -e " $green[....]$white acquiring targets\n" echo -e " $green[$red+$green..$red+$green]$white targets selected\n$SEAD\n" echo -e " $green[-$red++$green-]$white targets locked\n" echo -e " $green[++++]$white systems ready\n" echo -e " $green[<$red@@$green>]$white taking aim\n" echo -e " $green[$red####$green]$white requesting launch code\n" echo -e " $green[$red$launch_codes_alpha-$launch_codes_beta-$launch_codes_charlie$green]$white launch code confirmed" # echo -e " Are you sure you meant to run this script?\n" # temp_cnt=${wait_time} # while [[ ${temp_cnt} -gt 0 ]]; # do # printf "\r You have %2d second(s) remaining to hit Ctrl+C to cancel this operation!" ${temp_cnt} # sleep 1 # ((temp_cnt--)) # done # echo -e "\n\n No user input detected... Executing!!" echo -e "\n $fourblinkexclaim *** FIRE!! *** $fourblinkexclaim\n" echo -e " $redstar function running removing :\n$SEAD\n" rm -rf $SEAD fix_impacket_array fix_impacket exit_screen } fix_impacket_array () { arr=('addcomputer.py' 'atexec.py' 'dcomexec.py' 'dpapi.py' 'esentutl.py' 'findDelegation.py' 'GetADUsers.py' 'getArch.py' 'GetNPUsers.py' 'getPac.py' 'getST.py' 'getTGT.py' 'GetUserSPNs.py' 'goldenPac.py' 'karmaSMB.py' 'kintercept.py' 'lookupsid.py' 'mimikatz.py' 'mqtt_check.py' 'mssqlclient.py' 'mssqlinstance.py' 'netview.py' 'nmapAnswerMachine.py' 'ntfs-read.py' 'ntlmrelayx.py' 'ping6.py' 'ping.py' 'psexec.py' 'raiseChild.py' 'rdp_check.py' 'registry-read.py' 'reg.py' 'rpcdump.py' 'rpcmap.py' 'sambaPipe.py' 'samrdump.py' 'secretsdump.py' 'services.py' 'smbclient.py' 'smbexec.py' 'smbrelayx.py' 'smbserver.py' 'sniffer.py' 'sniff.py' 'split.py' 'ticketConverter.py' 'ticketer.py' 'wmiexec.py' 'wmipersist.py' 'wmiquery.py' 'addcomputer.pyc' 'atexec.pyc' 'dcomexec.pyc' 'dpapi.pyc' 'esentutl.pyc' 'findDelegation.pyc' 'GetADUsers.pyc' 'getArch.pyc' 'GetNPUsers.pyc' 'getPac.pyc' 'getST.pyc' 'getTGT.pyc' 'GetUserSPNs.pyc' 'goldenPac.pyc' 'karmaSMB.pyc' 'kintercept.pyc' 'lookupsid.pyc' 'mimikatz.pyc' 'mqtt_check.pyc' 'mssqlclient.pyc' 'mssqlinstance.pyc' 'netview.pyc' 'nmapAnswerMachine.pyc' 'ntfs-read.pyc' 'ntlmrelayx.pyc' 'ping6.pyc' 'ping.pyc' 'psexec.pyc' 'raiseChild.pyc' 'rdp_check.pyc' 'registry-read.pyc' 'reg.pyc' 'rpcdump.pyc' 'rpcmap.pyc' 'sambaPipe.pyc' 'samrdump.pyc' 'secretsdump.pyc' 'services.pyc' 'smbclient.pyc' 'smbexec.pyc' 'smbrelayx.pyc' 'smbserver.pyc' 'sniffer.pyc' 'sniff.pyc' 'split.pyc' 'ticketConverter.pyc' 'ticketer.pyc' 'wmiexec.pyc' 'wmipersist.pyc' 'wmiquery.pyc' ) for impacket_file in ${arr[@]}; do rm -f /usr/bin/$impacket_file /usr/local/bin/$impacket_file ~/.local/bin/$impacket_file /home/$finduser/.local/bin/$impacket_file # echo -e "\n $greenplus $impacket_file removed" done } fix_impacket () { eval apt -y remove impacket $silent ## do not remove : python3-impacket impacket-scripts python-pip-curl python3_pip eval pip uninstall impacket -y $silent eval pip3 uninstall impacket -y $silent fix_impacket_array eval wget https://github.com/SecureAuthCorp/impacket/releases/download/impacket_0_9_19/impacket-0.9.19.tar.gz -O /tmp/impacket-0.9.19.tar.gz $silent eval tar xfz /tmp/impacket-0.9.19.tar.gz -C /opt $silent cd /opt chown -R root:root impacket-0.9.19 chmod -R 755 impacket-0.9.19 cd /opt/impacket-0.9.19 eval pip3 install lsassy $silent eval pip install flask $silent eval pip install pyasn1 $silent eval pip install pycryptodomex $silent eval pip install pyOpenSSL $silent eval pip install ldap3 $silent eval pip install ldapdomaindump $silent eval pip install wheel $silent eval pip install . $silent rm -f /tmp/impacket-0.9.19.tar.gz eval apt -y reinstall python3-impacket impacket-scripts $silent echo -e "\n $greenplus installed: impacket-0.9.19 python-pip wheel impacket flask pyasn1" echo -e "\n $greenplus installed: lsassy pycryptodomes pyOpenSSL ldap3 ldapdomaindump" echo -e "\n $greenplus installed: python3-pip python3-impacket impacket-scripts" } fix_broken_xfce() { echo -e "\n $greenplus Applying broken XFCE Fix \n " eval apt -y reinstall xfce4-settings echo -e "\n $greenplus Broken XFCE Fix applied: xfce4-settings reinstalled \n" } only_upgrade () { virt_what fix_sources echo -e "\n $greenplus starting pimpmyupgrade \n" echo -e "\n $greenplus holding back package: metasploit-framework" eval apt-mark hold metasploit-framework eval apt -y update $silent && apt -y upgrade $silent kernel_check=$(ls /lib/modules | sort -n | tail -n 1) echo -e "\n $greenplus installing dkms build-essential linux-headers-$kernel_check \n" eval apt -y install dkms build-essential linux-headers-amd64 $silent check_vm echo -e "\n $greenplus releasing hold on package: metasploit-framework" eval apt-mark unhold metasploit-framework # add fix for broken filemanager / terminal icon fix_broken_xfce } fix_upgrade () { virt_what fix_sources run_update check_vm } # Python 3.9.1rc1 has been released out of RC Status and appears stable Python 3.9.1 # 12.25.2020 theHarvester fix removed from pimpmykali.sh currently only commented out # if no further action is required on theHarvester code will be removed. # ----------------------------------------------------------------------------------- #fix_theharvester () { # # need to put a check in here for /bin/python3.9 # cd /bin # ln -sf python3.9 python3 # eval apt -y install autogen automake libtool libuv1 libuv1-dev python3-setuptools python3-distutils python3.9-dev # echo -e "\n $greenplus installed: autogen automake libtool libuv1 libuv1-dev python3-setuptools python3-distutils python3.9-dev" # eval pip3 install Cython Sphinx psutil pyOpenSSL flake8 # echo -e "\n $greenplus installed: Cython Sphinx psutil pyOpenSSL flake8" # cd /opt # eval rm -rf /opt/theHarvester /opt/uvloop # echo -e "\n $greenplus removed: /opt/theHarvester /opt/uvloop" # # ## fix_uvloop # eval git clone https://github.com/MagicStack/uvloop /opt/uvloop # echo -e "\n $greenplus cloned: uvloop" # cd /opt/uvloop # eval git submodule init # eval git submodule update # ## make change to the Makefile here change python to python3 # eval cat /opt/uvloop/Makefile | sed 's/PYTHON ?= python/PYTHON ?= python3/' > /tmp/newMakefile # cp -f /tmp/newMakefile Makefile # rm -f /tmp/newMakefile # eval make # eval python3 setup.py install # echo -e "\n $greenplus uvloop compiled and installed" # # ## theHarvester # eval git clone https://github.com/laramies/theHarvester /opt/theHarvester # echo -e "\n $greenplus cloned: theHarvester" # cd /opt/theHarvester # # remove remove : uvloop==0.14.0; platform_system != "Windows" from base.txt # eval head -n 16 /opt/theHarvester/requirements/base.txt > /tmp/newbase.txt # cp -f /tmp/newbase.txt /opt/theHarvester/requirements/base.txt # rm -f /tmp/newbase.txt # eval pip3 install . # echo -e "\n $greenplus theHarvester fixes applied and installed" # exit_screen # } bpt () { rm -rf /opt/the-essentials git clone https://github.com/blindpentester/the-essentials /opt/the-essentials cd /opt/the-essentials sh -c '/opt/the-essentials/the_essentials.sh --skip' exit_screen } downgrade_msf () { eval apt -y remove metasploit-framework wget https://archive.kali.org/kali/pool/main/m/metasploit-framework/metasploit-framework_5.0.101-0kali1%2Bb1_amd64.deb -O /tmp/metasploit-framework_5.deb eval dpkg -i /tmp/metasploit-framework_5.deb eval gem cleanup reline eval msfdb init rm -f /tmp/metasploit-framework_5.deb apt-mark hold metasploit-framework echo -e "\n $greenplus metasploit downgraded \n" echo -e "\n $greenplus hold placed on metasploit-framework \n" } pimpmywifi_main () { # Nothing to see here Netizen move along... # ---Under Construction--- # - RTL8188AU FIX LIBC6 BREAKS LIBGCC-9-DEV # -----begin fix----- # apt -y update # apt -y remove realtek-88xxau-dkms && apt -y purge realtek-88xxau-dkms # apt -y install gcc-9-base # libc6 breaks libgcc-9-dev fix # # what to do on this one? 2019.x upgraded to 2020 throws Error # apt -y install dkms build-essential linux-headers-amd64 # apt -y install realtek-88xxau-dkms # apt -y upgrade # reboot # iwconfig # -----end fix------ # detect wifi chipset # install proper dkms driver based upon detection # or just give a menu for a selection of drivers? # -- status: idea stage - pre-alpha development # realtek-rtl8188eus-dkms - Realtek RTL8188EUS driver in DKMS format # realtek-rtl88xxau-dkms - Realtek RTL88xxAU driver in DKMS format # add function to check for linux-headers in /lib/modules vs unname -r find_linux_headers=$(find /lib/modules -name $(uname -r) 2> /dev/null) running_kernel=$(uname -r) if [ $running_kenrel = $find_linux_headers ] then echo SAME else echo DIFFERENT fi } virt_what() { echo -e "\n $greenplus installing virt-what \n" eval apt -y update $silent && apt -y install virt-what $silent } vbox_fix_shared_folder_permission_denied () { if [ $findgroup = 1 ] then echo -e "\n $greenminus : user is already a member of vboxsf group\n" else eval adduser $finduser vboxsf echo -e "\n $greenplus fix applied : virtualbox permission denied on shared folder" echo -e " user added to vboxsf group " fi } fix_virtualbox() { ## added for revision 0.5i ## eval apt -y reinstall virtualbox-dkms virtualbox-guest-additions-iso virtualbox-guest-x11 $silent eval mkdir /tmp/vboxtmp eval mount /usr/share/virtualbox/VBoxGuestAdditions.iso /tmp/vboxtmp eval cp -f /tmp/vboxtmp/VBoxLinuxAdditions.run /tmp/VBoxLinuxAdditions.run eval umount /tmp/vboxtmp eval rmdir /tmp/vboxtmp eval chmod +x /tmp/VBoxLinuxAdditions.run eval /tmp/VBoxLinuxAdditions.run eval rm -f /tmp/VBoxLinuxAdditions.run eval /sbin/rcvboxadd quicksetup all echo -e "\n $redstar A reboot of your system is required" } check_vm() { echo -e "\n $greenplus detecting hypervisor type \n" vbox_check=$(virt-what | grep -i -c "virtualbox") # virtualbox check vmware_check=$(virt-what | grep -i -c "vmware") # vmware check - vmware check works on Mac VMWare Fusion qemu_check=$(virt-what | grep -i -c "kvm") # m4ul3r Qemu/libvirt check if [ $vbox_check = 1 ] then echo -e "\n $greenplus *** VIRTUALBOX DETECTED *** \n" echo -e "\n $greenplus installing virtualbox-dkms virtualbox-guest-additions-iso virtualbox-guest-x11" # call fix_virtualbox function # Additional Fixes for virtualbox #----------------------- additional virtualbox fixes fix_virtualbox vbox_fix_shared_folder_permission_denied #----------------------- end of virtualbox additional fixes # exit_screen elif [ $vmware_check = 1 ] then echo -e "\n $greenplus *** VMWARE DETECTED *** \n" echo -e "\n $greenplus installing open-vm-tools-desktop fuse" eval apt -y reinstall open-vm-tools-desktop fuse $silent echo -e "\n $greenplus restarting vmware tools" eval restart-vm-tools # Additional Fixes for Vmware #----------------------- additional vmware fixes # #----------------------- end of vmware additional fixes # exit_screen elif [ $qemu_check = 1 ] then echo -e "\n $greenplus *** QEMU/LIBVIRT DETECTED *** \n" eval apt -y reinstall xserver-xorg-video-qxl spice-vdagent echo -e "\n $greenplus installing xserver-xorg-video-qxl spice-vdagent" else echo -e "\n $redstar Hypervisor not detected, Possible bare-metal installation not updating" fi } # ascii art - DONT move asciiart=$(base64 -d <<< "H4sIAAAAAAAAA31QQQrCQAy89xVz9NR8QHoQH+BVCATBvQmC CEXI480kXdteTJfdzGQy2S3wi9EM/2MnSDm3oUoMuJlX3hmsMMSjA4uAtUTsSQ9NUkkKVgKKBX p1lEC0auURW3owsQlTZtf4QtGZgjXYKT4inPtI23oEK7wXlyPnd8arKdKE0EPdUnhIf0v+iE2o 7BgVFVyec3u1OxFw+uRxbvPt8R6+MOpGq5cBAAA=" | gunzip ) pimpmykali_menu () { clear echo -e "$asciiart" echo -e "\n Select a option from menu: Rev:$revision" echo -e "\n *** APT UPGRADE WILL ONLY BE CALLED FROM MENU OPTION 9 ***" echo -e "\n Menu Options:" # function call list echo -e "\n 1 - Fix Missing (pip pip3 golang gedit nmapfix build-essential)" # fix_missing echo -e " 2 - Fix /etc/samba/smb.conf (adds the 2 missing lines)" # fix_smbconf echo -e " 3 - Fix Golang (installs golang, adds GOPATH= to .zshrc and .bashrc)" # fix_golang echo -e " 4 - Fix Grub (adds mitigations=off)" # fix_grub echo -e " 5 - Fix Impacket (installs impacket)" # fix_impacket echo -e " 6 - Enable Root Login (installs kali-root-login)" # make_rootgreatagain echo -e " 7 - Install Atom (installs atom)" # install_atom echo -e " 8 - Fix nmap scripts (clamav-exec.nse and http-shellshock.nse)" # fix_nmap echo -e " 9 - Pimpmyupgrade (apt upgrade with vbox/vmware detection)" # only_upgrade echo -e " (sources.list, linux-headers, vm-video )" # - echo -e " (will not upgrade: metasploit-framework)" # - echo -e " 0 - Fix ALL (runs only 1 thru 8) \n" # fix_all echo -e " N - NEW VM SETUP - Run this option if this is the first time running pimpmykali" # menu item only no function echo -e " This will run Fix All (0), Metasploit Downgrade (D) and Pimpmyupgrade (9)\n" # echo -e " Additional Functions : " # optional line echo -e " F - Broken XFCE Icons fix (will be executed in menu N and 9 automatically)" # fix_broken_xfce echo -e " (fixes broken xfce icons TerminalEmulator Not Found)" # echo -e " S - Fix Spike (remove spike and install spike v2.9)" # fix_spike echo -e " ! - Nuke Impacket (Type the ! character for this menu item)" # fix_sead_warning echo -e " D - Downgrade Metasploit (Downgrade from MSF6 to MSF5)" # downgrade_msf echo -e " B - BlindPentesters 'The Essentials' tools & utilies collection\n" # bpt read -n1 -p " Enter 0 thru 9, N, B, D, or ! press X to exit: " menuinput case $menuinput in 1) fix_missing ;; 2) fix_smbconf ;; 3) fix_golang ;; 4) fix_grub ;; 5) fix_impacket ;; 6) make_rootgreatagain ;; 7) install_atom ;; 8) fix_nmap ;; 9) only_upgrade ;; 0) fix_all ;; !) forced=1; fix_sead_warning;; f|F) fix_broken_xfce ;; s|S) fix_spike ;; n|N) fix_all; downgrade_msf; only_upgrade;; d|D) downgrade_msf ;; b|B) bpt ;; # h|H) fix_theharvester ;; x|X) echo -e "\n\n Exiting pimpmykali.sh - Happy Hacking! \n" ;; *) pimpmykali_menu ;; esac } pimpmykali_help () { # do not edit this echo statement, spacing has been fixed and is correct for display in the terminal echo -e "\n valid command line arguements are : \n \n --all run all operations \n"\ "--smb only run smb.conf fix \n --go only fix/install golang"\ "\n --impacket only fix/install impacket \n --grub only add mitigations=off"\ "\n --root only enable root login \n --missing install all common missing packages" \ "\n --menu its the menu \n --atom only install atom\n --flameshot only fix/install flameshot" \ "\n --borked only to be used as last resort to remove-reinstall impacket" \ "\n --upgrade fix apt upgrade with detection for virtualbox or vmware\n --help your looking at it" exit } check_arg () { if [ "$1" == "" ] then pimpmykali_menu else case $1 in --menu) pimpmykali_menu ;; --all) fix_all ;; --smb) fix_smbconf ;; --go) fix_golang ;; --impacket) fix_impacket ;; --grub) fix_grub ;; --root) make_rootgreatagain ;; --missing) fix_missing ;; --help) pimpmykali_help ;; --flameshot) fix_flameshot ;; --force) force=1; fix_all $force ;; --borked) force=1; fix_sead_warning $force ;; --nmap) fix_nmap ;; --bpt) bpt ;; --vscode) install_vscode ;; # hidden switch --subl) install_sublime ;; # hidden switch --atom) install_atom ;; --upgrade) only_upgrade ;; # --harvester) fix_theharvester ;; *) pimpmykali_help ; exit 0 ;; esac fi } exit_screen () { eval apt -y --fix-broken install >/dev/null 2>&1 echo -e "$asciiart" echo -e "\n\n All Done! Happy Hacking! \n" exit } check_for_root check_distro check_arg "$1" exit_screen