CIP Cyber

Log In
Menu
Log In
  • Opinion
  • Product Reviews
  • Industrial Cybersecurity
  • Videos

APT2: Automated Penetration Toolkit

Table of Contents

Automated Penetration Toolkit can perform an NMap scan and import the scan results from Nexpose, Nessus and other scanning tools. The results are further used to launch exploit and enumeration modules.

All the results are stored to knowledge base of APT2 on localhost machine. The KB is accessible from within the application and allows the user to view the harvested results of an exploit module.

Setup:

On kali Linux install Python-Nmap library: pip installpython-nmap

Configuration:

To configure APT2 to run as you desire, edit the default.cfg file in root directory.

Current options include:
• metasploit
• nmap
• threading

Metasploit RPC API: 

APT2 can utuilize your host’s Metasploit RPC interface

NMAP:

Configure NMAP scan settings to include the target, scan type, scan port range, and scan flags. These settings can be configured while the program is running.

Threading:

Configure the number of the threads APT2 will use.

Run:

No Options:

python apt2 or ./apt2
With Configuration File
python apt2 -C <config.txt>
Import Nexpose, Nessus, or NMap XML
python apt2 -f <nmap.xml>
Specify Target Range to Start
python apt2 -f 192.168.1.0/24

Safe Level:

Safe levels indicate how safe a module is to run againsts a target. The scale runs from 1 to 5 with 5 being the safest. The default configuration uses a Safe Level of 4 but can be set with the -s or –safelevel command line flags.

Usage:

apt2.py [-h] [-C <config.txt>] [-f [<input file> [<input file> …]]]

               [–target] [–ip <local IP>] [-v] [-s SAFE_LEVEL] [-b]
               [–listmodules]
optional arguments:
  -h, –help            show this help message and exit
  -v, –verbosity       increase output verbosity
  -s SAFE_LEVEL, –safelevel SAFE_LEVEL
                        set min safe level for modules
  -b, –bypassmenu      bypass menu and run from command line arguments
inputs:
  -C <config.txt>       config file
  -f [<input file> [<input file> …]]
                        one of more input files seperated by spaces
  –target              initial scan target(s)
advanced:
  –ip <local IP>       defaults to ip of interface
misc:
  –listmodules         list out all current modules

Modules

———————–
LIST OF CURRENT MODULES
———————–
nmaploadxml               Load NMap XML File
hydrasmbpassword          Attempt to bruteforce SMB passwords
nullsessionrpcclient      Test for NULL Session
msf_snmpenumshares        Enumerate SMB Shares via LanManager OID Values
nmapbasescan              Standard NMap Scan
impacketsecretsdump       Test for NULL Session
msf_dumphashes            Gather hashes from MSF Sessions
msf_smbuserenum           Get List of Users From SMB
anonftp                   Test for Anonymous FTP
searchnfsshare            Search files on NFS Shares
crackPasswordHashJohnTR   Attempt to crack any password hashes
msf_vncnoneauth           Detect VNC Services with the None authentication type
nmapsslscan               NMap SSL Scan
nmapsmbsigning            NMap SMB-Signing Scan
responder                 Run Responder and watch for hashes
msf_openx11               Attempt Login To Open X11 Service
nmapvncbrute              NMap VNC Brute Scan
msf_gathersessioninfo     Get Info about any new sessions
nmapsmbshares             NMap SMB Share Scan
userenumrpcclient         Get List of Users From SMB
httpscreenshot            Get Screen Shot of Web Pages
httpserverversion         Get HTTP Server Version
nullsessionsmbclient      Test for NULL Session
openx11                   Attempt Login To Open X11 Servicei and Get Screenshot
msf_snmplogin             Attempt Login Using Common Community Strings
msf_snmpenumusers         Enumerate Local User Accounts Using LanManager/psProcessUsername OID Values
httpoptions               Get HTTP Options
nmapnfsshares             NMap NFS Share Scan
msf_javarmi               Attempt to Exploit A Java RMI Service
anonldap                  Test for Anonymous LDAP Searches
ssltestsslserver          Determine SSL protocols and ciphers
gethostname               Determine the hostname for each IP
sslsslscan                Determine SSL protocols and ciphers
nmapms08067scan           NMap MS08-067 Scan
msf_ms08_067              Attempt to exploit MS08-067
CIP Cyber Staff

CIP Cyber Staff

CIP Cyber Staff comprises CIP cybersecurity experts committed to delivering comprehensive information on critical infrastructure protection. The content covers diverse topics, equipping professionals to defend organizations and communities in an ever-evolving cyber landscape.

Most popular

Opinion

Password Cyberattack: Everything You Need to Know

November 7, 2023

Industrial Cybersecurity

Cybersecurity Awareness Month: Spotlight on ICS/OT Security

September 28, 2023

Opinion

How to Protect IoT Devices in Critical Infrastructure Networks

September 15, 2023

Want always be up to date?

Don't miss the latest news

By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.

CIP Training & Certifications

Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings

Choose Training

Related Articles

Do Hackers Really use Metasploit? NO!

Undoubtedly, Metasploit is one of the most organized, well-developed tools in the pen-testers toolbox. But, do hackers use it? Some of them, but not the

December 20, 2020

Want always be up to date?

Don't miss the latest news

By subscribing to our mailing list, you will be enrolled to receive our new trainings, latest blog posts, product news, and more.

CIP Training & Certifications

Transform your cybersecurity skills with CIP Cyber’s comprehensive training & course offerings

Choose Training