Comando VM 2.0

Fala galera beleza?

Hoje vou falar um pouquinho sobre a VM Commando, na verdade se trata de um projeto da FireEye que visa trazer uma serie de ferramentas de intrusão, pen-test e security para os sistemas operacionais Windows (isso mesmo kkk dificil de encontrar) tendo versões para Windows 7 e 10.

O projeto a princípio era destinado as equipes Red team (ofensores ou responsáveis pelo ataque no pentest) para SOs Windowns, porém com a compatibilidade do Kali linux e a Docker que foi anunciada agora na Black Hat deste ano, o projeto pode atender todos os tipos de analistas e metódos de pentest.

Algumas telas da VM rodando:

Segue algumas das ferramentas que já vem inclusas na instalação defautl:

Active Directory Tools
Remote Server Administration Tools (RSAT)
SQL Server Command Line Utilities
Sysinternals

Command & Control
Covenant
PoshC2
WMImplant
WMIOps

Docker
Amass
SpiderFoot

Evasion
CheckPlease
Demiguise
DefenderCheck
DotNetToJScript
Invoke-CradleCrafter
Invoke-DOSfuscation
Invoke-Obfuscation
Invoke-Phant0m
Not PowerShell (nps)
PS>Attack
PSAmsi
Pafishmacro
PowerLessShell
PowerShdll
StarFighters

Exploitation
ADAPE-Script
API Monitor
CrackMapExec
CrackMapExecWin
DAMP
EvilClippy
Exchange-AD-Privesc
FuzzySec's PowerShell-Suite
FuzzySec's Sharp-Suite
Generate-Macro
GhostPack
Rubeus
SafetyKatz
Seatbelt
SharpDPAPI
SharpDump
SharpRoast
SharpUp
SharpWMI
GoFetch
Impacket
Invoke-ACLPwn
Invoke-DCOM
Invoke-PSImage
Invoke-PowerThIEf
Juicy Potato
Kali Binaries for Windows
LuckyStrike
MetaTwin
Metasploit
Mr. Unikod3r's RedTeamPowershellScripts
NetshHelperBeacon
Nishang
Orca
PSReflect
PowerLurk
PowerPriv
PowerSploit
PowerUpSQL
PrivExchange
RottenPotatoNG
Ruler
SharpClipHistory
SharpExchangePriv
SharpExec
SpoolSample
SharpSploit
UACME
impacket-examples-windows
vssown
Vulcan

Information Gathering
ADACLScanner
ADExplorer
ADOffline
ADRecon
BloodHound
dnsrecon
FOCA
Get-ReconInfo
GoBuster
GoWitness
NetRipper
Nmap
PowerView
Dev branch included
SharpHound
SharpView
SpoolerScanner
Watson

Kali Linux
kali-linux-default
kali-linux-xfce
VcXsrv

Password Attacks
ASREPRoast
CredNinja
DomainPasswordSpray
DSInternals
Get-LAPSPasswords
Hashcat
Internal-Monologue
Inveigh
Invoke-TheHash
KeeFarce
KeeThief
LAPSToolkit
MailSniper
Mimikatz
Mimikittenz
RiskySPN
SessionGopher
Reverse Engineering
DNSpy
Flare-Floss
ILSpy
PEview
Windbg
x64dbg

Vulnerability Analysis
AD Control Paths
Egress-Assess
Grouper2
NtdsAudit
PwndPasswordsNTLM
zBang

Web Applications
Burp Suite
Fiddler
Firefox
OWASP Zap
Subdomain-Bruteforce
Wfuzz

Wordlists
FuzzDB
PayloadsAllTheThings
SecLists
Probable-Wordlists
RobotsDisallowed

Link para o GitHub do projeto:
https://github.com/fireeye/commando-vm

Link do blog do projeto:
https://www.fireeye.com/blog/threat-research/2019/08/commando-vm-customization-containers-kali.html

Vale a pena testar e brincar um pouco com a ferramenta, ainda mais pra galera que tem preguiça de usar as distros mais comuns (baseadas em linux).

Abraços