infosec-fortress - A python script to turn Ubuntu Desktop in a one st

项目说明

The Fortress

infosec-fortress

A python script to turn Ubuntu Desktop into a strong DFIR/RE System with some teeth (Purple Team Ops)! This is intended to create a single linux VM (or bare metal) very capable in Digital Forensics, Incident Response, Reverse Engineering and Penetration Testing. Daily drivers can be InfoSec War Machines as well! At a minimum it is working towards reducing the number of VM's needed for folks doing Forensics, Threat Hunting, Web App Assessments and Penetration testing along the way.

Requirements:

+ Written for Ubuntu 20.04. It should be easily modifiable for other and distributions.
+ python3
+ git
+ root pri
+ Approx. 22 Gigs of free space

sudo apt install python3 git

Steps to run

1. Review the script. No changes needed to get started.
2. (optional) Check list of packages, add, or take away etc.
3. Clone this repository git clone
4. Run the script as sudo/root. sudo python3 ./infosec-fortress/build-fortress.py
5. (semi-optional) Go make a sandwhich. It takes a long time.
6. Be Prepared to answer some prompts along the way (not many)

This script will make /opt/infosec-fortress. This directory will contain build logs and an update script.

What Goes into the Fortress?

1. REMnux Reverse Engineering platform
2. SIFT Incident Response Platform
3. Metasploit Framework
4. Kali's Wordlists plus more
5. Kali's Collection of Webshells
6. Kali's Windows Binaries/Resources
7. The latest bloodhound
8. Enum4Linux and Enum4linux-ng

Notable tools

DFIR Tools
* Log2Timeline (Plaso)
* RegRipper
* msg con

RE Tools
* Ghidra (Pronounced Ghee-druh (like geek wihtout the k + druh))
* radare2
* binwalk
* look and feel of REMnux (CLI Color Highlighting for filetype)

Network tools
* snort
* tcpdump
* wireshark
* tshark
* ngrep

Security Assessment (PenTest Tools)
* Metasploit Framework
* Burp Suite
* Zap
* nmap
* masscan
* Hashcat
* John
* Hydra
* Medusa
* smbclient /rpcclient
* sqlmap
* netcat-traditional
* air-crack-ng
* kismet

Other
* VS Code
* Powershell Core

And more...

To-Do's

* add Zeek
* add RITA
* add SiLK
* add a dir containing pre-made host enumeration scripts
* add DPAT (domain password auditing tool)?
* SRUM Dump.py (does it work on Ubuntu?)
* Responder symlink
* add secretsdump.py (might be there already)
* add bettercap
* add Empyre? or similar
* add spider foot community edition
* add Recon-NG
* add Maltego
* test Erik Zimmermans tools in wine
* add a folder in /usr/share/? packed with SANS Posters

项目信息

开发语言：Python

Star 数：53

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A python script to turn Ubuntu Desktop in a one stop security platform. The InfoSec Fortress installs the packages,tools, and resources to make Ubuntu 20.04 capable of both offensive and defensive security work.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。