Home

WYWM Pentesting Toolbox: Autorecon Setup

Adam - February 15, 2021

This is a little snippet of some of the content our team has been working on for our upcoming PWK cohort! Keep in mind the documentation is not fully ready yet, so ignore when I say "refer to your documentation".

Autorecon is a great tool, even if you are new to pentesting, that can give you plenty of information to learn from!

Author: Sam Smith

Video Creator: Adam Stretch

Overview 

Having an effective (both in data enumerated and efficiency in the time spent) approach to enumeration is a high priority for any penetration tester. While there are many approaches to enumeration, any task that you need to do more than once should be automated. Autorecon allows you to automate the enumeration phase of your penetration test, without compromising on detailed results.

SETUP

INSTALL PACKAGE DEPENDENCIES

sudo apt install seclists curl enum4linux gobuster nbtscan nikto nmap onesixtyone oscanner smbclient smbmap smtp-user-enum snmp sslscan sipvicious tnscmd10g whatweb wkhtmltopdf python3-venv python3 python3-pip

PIPX

Don't use sudo or install as root for this part.

python3 -m pip install --user pipx 

python3 -m pipx ensurepath 

If you are on version 0.12.x.x , run sudo apt remove pipx and remove the package manager version.

Also, to upgrade it if it is <0.16.0.0 , run python3 -m pip install --user -U pipx

Join our community

We have a Discord server where you’ll be able to chat with your instructors and cohort. Stay active in your learning!
Join discord