No discuss.
Very nice reporting web based tool for penetration testing exercises.
It's called bend test the W S. you just go there.
You can join for free or for paid account.
Create an account and sign an first of all you need to create a new engagement.
So here we will gather everything we have collected in this engagement.
All the scans.
So let's create this here.
So all created hubs work and test after we create the engagement.
We have couple of options actually we can import a scan that we have already conducted from map using
this browse here you can upload the exam file or you can add an individual host for the sake of this
demo here.
I have four machines on my subnet which is 1 9 2 1 6 8 6 2 1 that 130 to 140.
So here in this example here we want to scan the subnet from 130 to 140 we will scan around 10 eyepiece
so see help and test will automatically populate the script or the command.
So you just have to copy paste on this button and go to the terminal and Base the command just press
enter and wait for the results to complete.
Now that the scan is over just go again to my web control press or import.
Slide the file it will be under route and map subnet example and then press on.
Import as you can see it has automatically it will automatically populate the IP addresses for these
four hosts within the range 130 to 140 issued press on the first IP here.
You will be able to label it by selecting any label here for example.
This will be my calling.
You can put the hostname here.
You can add random notes or any notes you want pressing on the IP.
Others will reveal the list of open ports.
In this case we have the minus Creole open port 3 3 0 6.
If you press on that will go to the ports tab here with all the relevant information.
You can put your remarks here.
You can add any usernames credentials related to the Mayas scale scan and the page version and you will
be able to populate a checklist to perform for each of the scan ports for example ports or 80 you have
a set of standard checklists that you want to do.
You can get it from here.
If you post here on the 140 you will see it has a lot of exposed services.
This is my method splitter box.
You can as well see the services on their own.
If you double click here and go down and you wanted to see which other servers that have each GDP service
expose that you'll see that four of these servers here my ass kill two of these servers have my ass
kill exports so it kind of organizes your work for this computer he wants 50 it has detected that it
is a Linux machine as you can see this is the icon here for this machine.
Here my county you can just set the type of the operating system do the same here for this Windows machine
here.
The 1 3 9 1 market as a Windows machine and this is a server.
So this is a workstation
and this 130 is a workstation
and this server and so on and so forth for each of these machines you'll see the relevant set of open
ports there.
The other way to add hosts is to go down here and press on hosts
Copy that Here.
Put it down.
It will populate the relevant end maps can just you can copy that and paste it in your terminal.
The system has a couple of Shell commands.
Actually you just have to type in your IP here
and it will generate the relevant command on bash by Thorn net cat et cetera.
It has a cyber chef's module which connections form and coatings from one from one type to another.
Just feel free to explore this is a really a handful.
You can use it all here instead of searching on Google and the venom builder which is a very nice feature
here.
We used to write the mythos Floyd commands individually.
So here it will make it easy for you would just have to identify the local horse and a local port
the platform
and the architecture
and the MSM command and other commands will be populated for you automatically for each horse as well.
You have a free tax in order to help you write commands and populate.
You will report.